This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft File: SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json) Hash identifier: FzOMeOl5HzVEjcYIQ9R+uBuVJNHZO2jJ05MAhmKEfOA= Subject key identifier: 21:B6:9E:A8:09:5B:B9:45:47:7E:DD:A4:15:E8:DA:A2:E6:BD:38:85 Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05 Certificate issuer: /CN=490db999ca4ce287c5c92ab167a500902259bb05 Certificate serial: 019B300C119E624A16EA3431E25C5B037614 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 06:00:55 +0000 Manifest this update: Thu 18 Dec 2025 06:00:55 +0000 Manifest next update: Fri 19 Dec 2025 06:00:55 +0000 Files and hashes: 1: CqiCeQuNX5qYQWUphyM9iUBKOh4.roa (hash: RxNADbHHkDaXqyxPAae3UN8wvqfkoDaWlyxd0mzE4zw=) 2: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: XRrBXiNPGYG/ohzxbtH9FWTN05o1r41K07VEpJSsvJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:11:9e:62:4a:16:ea:34:31:e2:5c:5b:03:76:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05 Validity Not Before: Dec 18 06:00:55 2025 GMT Not After : Dec 19 06:00:55 2025 GMT Subject: CN=21b69ea8095bb945477edda415e8daa2e6bd3885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a5:3f:06:41:25:0b:30:1c:7a:c7:a5:2d:1d: 2d:f3:2d:73:d0:bd:20:ca:59:06:b6:3d:e6:6b:07: f5:9f:8a:ff:6d:47:1f:3e:57:79:29:a2:6f:b9:6d: ae:b4:0e:83:53:ef:18:ac:d0:fc:f3:73:50:77:fc: 7f:d1:13:77:2a:bb:9c:c8:62:13:bd:9e:7f:04:12: bc:4e:06:65:fd:11:17:a8:01:84:44:f2:dd:cd:4f: 23:69:21:a7:8c:a1:86:37:5d:bb:94:96:8f:b0:fc: 1b:52:b1:7a:1e:bd:e3:20:53:99:55:d5:c6:38:53: f8:1c:ec:2d:7f:ca:fd:fd:1e:ca:99:ee:7a:58:8d: 61:53:e9:e4:9b:8d:85:cc:5b:26:47:f2:3a:3f:e7: f7:e8:91:a7:ac:28:9b:6c:b2:c2:4d:8b:a2:06:c8: 69:56:06:e0:0b:7d:84:b4:89:54:92:06:ff:d4:bc: da:8a:92:32:3f:b7:3f:71:45:22:32:1e:14:2a:ad: 02:33:b8:0e:44:ec:b3:b3:6e:08:be:ec:67:9d:63: 3e:3c:22:fa:d9:ae:28:76:1d:4e:87:ed:8a:d9:58: 2b:c7:45:37:1a:e8:5b:b1:e7:8d:8a:48:15:36:30: e0:69:08:25:80:ee:83:47:60:0b:81:31:15:3a:f8: 00:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B6:9E:A8:09:5B:B9:45:47:7E:DD:A4:15:E8:DA:A2:E6:BD:38:85 X509v3 Authority Key Identifier: keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a0:9d:8a:ca:a3:3d:2e:7b:16:49:f0:dd:4f:e4:e0:e8:f0: 3f:d7:c8:56:5e:58:a4:e1:29:1d:71:55:96:5e:76:ac:2c:4a: 28:67:49:7b:f8:87:ab:8f:9c:06:18:7a:cc:12:19:d6:29:b9: 47:24:b5:c8:00:69:7d:87:31:18:3e:fa:9c:15:d8:8b:00:0b: a5:7d:20:a8:dc:da:50:b0:7b:89:26:87:11:90:f9:f6:5b:df: 5e:2d:e7:08:75:73:bc:97:6b:b9:19:91:3f:b4:3a:cd:de:64: fc:7b:b6:a7:cb:30:f6:24:f2:e6:e0:03:76:be:3c:90:e3:26: 39:ce:e0:6c:0e:35:26:57:22:21:cb:bf:ef:c9:ba:70:58:90: e3:74:21:3d:f0:67:cf:63:33:21:72:dd:76:f6:f4:58:90:37: 91:d7:43:2b:f4:54:21:60:3e:b8:5a:ba:13:ac:38:87:08:0e: 63:17:a9:0d:e8:3a:f5:90:bb:ac:9e:e5:35:8e:f0:b0:14:73: 78:64:a1:ad:3e:9e:21:9e:80:55:21:2d:ac:0f:92:b2:02:93: 80:b7:55:87:d5:e8:38:f3:1a:52:5f:ea:1f:67:22:8e:87:7c: dd:0d:ba:4b:36:dc:9c:34:aa:f7:2e:67:05:a4:d8:72:8b:20: 8f:bb:fb:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDBGeYkoW6jQx4lxbA3YUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MGRiOTk5Y2E0Y2UyODdjNWM5MmFiMTY3YTUwMDkwMjI1 OWJiMDUwHhcNMjUxMjE4MDYwMDU1WhcNMjUxMjE5MDYwMDU1WjAzMTEwLwYDVQQD EygyMWI2OWVhODA5NWJiOTQ1NDc3ZWRkYTQxNWU4ZGFhMmU2YmQzODg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6U/BkElCzAceselLR0t8y1z0L0g ylkGtj3mawf1n4r/bUcfPld5KaJvuW2utA6DU+8YrND883NQd/x/0RN3KrucyGIT vZ5/BBK8TgZl/REXqAGERPLdzU8jaSGnjKGGN127lJaPsPwbUrF6Hr3jIFOZVdXG OFP4HOwtf8r9/R7Kme56WI1hU+nkm42FzFsmR/I6P+f36JGnrCibbLLCTYuiBshp VgbgC32EtIlUkgb/1LzaipIyP7c/cUUiMh4UKq0CM7gOROyzs24IvuxnnWM+PCL6 2a4odh1Oh+2K2Vgrx0U3GuhbseeNikgVNjDgaQglgO6DR2ALgTEVOvgAzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCG2nqgJW7lFR37dpBXo2qLmvTiFMB8GA1UdIwQY MBaAFEkNuZnKTOKHxckqsWelAJAiWbsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUt OThlMjVlMDQ2OTA4LzEvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUtOThlMjVlMDQ2OTA4 LzEvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaCdisqj PS57Fknw3U/k4OjwP9fIVl5YpOEpHXFVll52rCxKKGdJe/iHq4+cBhh6zBIZ1im5 RyS1yABpfYcxGD76nBXYiwALpX0gqNzaULB7iSaHEZD59lvfXi3nCHVzvJdruRmR P7Q6zd5k/Hu2p8sw9iTy5uADdr48kOMmOc7gbA41JlciIcu/78m6cFiQ43QhPfBn z2MzIXLddvb0WJA3kddDK/RUIWA+uFq6E6w4hwgOYxepDeg69ZC7rJ7lNY7wsBRz eGShrT6eIZ6AVSEtrA+SsgKTgLdVh9XoOPMaUl/qH2cijod83Q26SzbcnDSq9y5n BaTYcosgj7v7oQ== -----END CERTIFICATE-----Generated at Thu Dec 18 09:30:21 2025 by rpki-client