This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft File: SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft (raw, json) Hash identifier: WiS+Ww0mNuAp6OlSTTb2LE7AV6B8WiMDn73AblkR5W8= Subject key identifier: BD:F3:26:DA:83:0F:91:6F:85:93:6C:D7:46:D4:00:32:57:10:AF:82 Authority key identifier: 49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F Certificate issuer: /CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f Certificate serial: 019B255207C681434447EC10EA87036C970E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft Manifest number: 0FD9 Signing time: Tue 16 Dec 2025 04:01:31 +0000 Manifest this update: Tue 16 Dec 2025 04:01:31 +0000 Manifest next update: Wed 17 Dec 2025 04:01:31 +0000 Files and hashes: 1: SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl (hash: 1lxKRzC2BWbsGniJIIM+aUWywrjbw+XMwmmVEdYXBQo=) 2: qbL9OL5sc-w50AXrG2tZRkZnW2s.roa (hash: Q4+OtthvOte+9IlGsVQn+tB7AZLUhi+dropNGViFYc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:07:c6:81:43:44:47:ec:10:ea:87:03:6c:97:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f Validity Not Before: Dec 16 04:01:31 2025 GMT Not After : Dec 17 04:01:31 2025 GMT Subject: CN=bdf326da830f916f85936cd746d400325710af82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:51:1b:82:a8:ba:3e:30:cc:5a:a3:fa:9b:24: a6:97:21:69:07:0c:1b:71:9b:15:54:3b:fc:d9:c3: 6f:c7:6a:75:4d:51:a1:8c:93:f6:ac:dc:e0:4b:d4: 29:0c:5e:1b:13:ce:20:5b:fa:61:78:8b:94:50:ee: 64:3c:64:cb:d9:4c:d5:75:f5:52:8f:9d:73:06:47: 50:04:cf:f3:da:13:53:c8:f1:42:39:9a:09:34:22: 69:ba:9a:14:eb:0d:19:4f:d0:23:fe:ee:7a:13:0d: 5b:38:5e:aa:da:9f:8f:56:59:81:d8:f5:a3:13:d1: 31:cc:d9:a9:ad:b5:46:bd:d5:a3:6b:38:a5:4c:06: 11:34:38:e4:e4:42:72:1b:df:fe:7f:37:16:c3:13: 2d:d6:2d:5a:cd:c8:e6:86:78:75:b1:8a:0d:09:e9: 19:7a:b2:de:0b:0f:d4:c8:9e:e5:d4:1c:3b:e1:c7: 06:47:c7:ce:a4:fc:15:82:a3:b4:9b:ba:5b:45:ad: 84:8c:74:51:74:20:56:47:97:99:03:72:fd:9f:15: 72:0c:ac:c5:a2:4d:ad:00:9c:f0:6c:db:b9:63:cc: bf:fa:87:20:b1:82:4f:ba:9f:b0:57:8c:7f:71:b4: dc:80:7a:8e:54:60:f3:77:71:15:45:51:cc:b6:a0: 5e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F3:26:DA:83:0F:91:6F:85:93:6C:D7:46:D4:00:32:57:10:AF:82 X509v3 Authority Key Identifier: keyid:49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:9c:bb:46:7b:0e:30:aa:ee:c6:ae:ab:ff:da:b1:56:bd:46: 2a:dd:da:95:25:f1:25:1c:5a:38:85:af:8d:61:dd:66:48:ec: d1:88:50:de:98:60:99:9f:13:87:27:2b:00:53:bf:92:64:fc: be:5e:f4:0b:b9:a7:23:29:e1:e4:53:7c:42:3f:9f:27:9f:bf: 84:7f:5d:f0:c5:6a:f8:3d:fb:be:75:5a:87:b1:78:a7:b7:b3: 37:d3:d9:d4:df:9e:bc:cc:05:0b:58:7b:36:a4:c6:e4:8f:0d: 92:e5:56:1c:2a:db:91:52:00:b3:22:fd:d1:ba:ca:bb:cb:b4: d5:76:ae:c4:09:c8:10:97:61:91:c0:d8:d8:dd:1d:85:ac:4b: bd:84:ac:a9:77:2e:71:b7:70:e2:f7:73:a3:b3:6e:b0:58:52: 4d:1f:c1:bc:2d:f7:21:06:6e:44:45:6f:11:62:22:6d:80:6b: 46:68:b8:78:b9:15:c3:b2:38:52:bc:81:a4:29:a8:0e:a3:02: 58:89:3c:0e:17:75:8e:88:06:46:ba:2f:de:a0:be:eb:04:92: 1b:27:ee:86:23:26:6f:42:83:53:31:bc:9c:8e:e2:cc:0f:3f: bc:ea:72:af:e2:3d:74:29:c3:5a:a1:a1:74:26:a8:14:d3:a2: 91:0f:7c:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUgfGgUNER+wQ6ocDbJcOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjQwYjU5YmJmNjkwNmE1NTVlMTA3NGM1YWU3M2VjNjJk ZmZjNWYwHhcNMjUxMjE2MDQwMTMxWhcNMjUxMjE3MDQwMTMxWjAzMTEwLwYDVQQD EyhiZGYzMjZkYTgzMGY5MTZmODU5MzZjZDc0NmQ0MDAzMjU3MTBhZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FEbgqi6PjDMWqP6mySmlyFpBwwb cZsVVDv82cNvx2p1TVGhjJP2rNzgS9QpDF4bE84gW/pheIuUUO5kPGTL2UzVdfVS j51zBkdQBM/z2hNTyPFCOZoJNCJpupoU6w0ZT9Aj/u56Ew1bOF6q2p+PVlmB2PWj E9ExzNmprbVGvdWjazilTAYRNDjk5EJyG9/+fzcWwxMt1i1azcjmhnh1sYoNCekZ erLeCw/UyJ7l1Bw74ccGR8fOpPwVgqO0m7pbRa2EjHRRdCBWR5eZA3L9nxVyDKzF ok2tAJzwbNu5Y8y/+ocgsYJPup+wV4x/cbTcgHqOVGDzd3EVRVHMtqBeDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3zJtqDD5FvhZNs10bUADJXEK+CMB8GA1UdIwQY MBaAFEkkC1m79pBqVV4QdMWuc+xi3/xfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NRTFdidjJrR3BWWGhCMHhhNXo3R0xmX0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yMjZiZTgtYzdiNy00N2YwLWIwZDUt ZDE0YWYyY2I4ZmRlLzEvU1NRTFdidjJrR3BWWGhCMHhhNXo3R0xmX0Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yMjZiZTgtYzdiNy00N2YwLWIwZDUtZDE0YWYyY2I4ZmRl LzEvU1NRTFdidjJrR3BWWGhCMHhhNXo3R0xmX0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJy7RnsO MKruxq6r/9qxVr1GKt3alSXxJRxaOIWvjWHdZkjs0YhQ3phgmZ8ThycrAFO/kmT8 vl70C7mnIynh5FN8Qj+fJ5+/hH9d8MVq+D37vnVah7F4p7ezN9PZ1N+evMwFC1h7 NqTG5I8NkuVWHCrbkVIAsyL90brKu8u01XauxAnIEJdhkcDY2N0dhaxLvYSsqXcu cbdw4vdzo7NusFhSTR/BvC33IQZuREVvEWIibYBrRmi4eLkVw7I4UryBpCmoDqMC WIk8Dhd1jogGRrov3qC+6wSSGyfuhiMmb0KDUzG8nI7izA8/vOpyr+I9dCnDWqGh dCaoFNOikQ98xQ== -----END CERTIFICATE-----Generated at Tue Dec 16 06:21:23 2025 by rpki-client