This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft File: sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json) Hash identifier: bJXC2AG6qw+QOGnBKc3W4n787a1JPxYiuwa7TZn8jtE= Subject key identifier: BB:D8:76:EB:A5:B0:06:1A:89:89:78:12:72:3B:3D:97:51:21:D8:E0 Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2 Certificate issuer: /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2 Certificate serial: 019B13824F03E18AC70BB973992F0393D648 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft Manifest number: 0326 Signing time: Fri 12 Dec 2025 17:01:05 +0000 Manifest this update: Fri 12 Dec 2025 17:01:05 +0000 Manifest next update: Sat 13 Dec 2025 17:01:05 +0000 Files and hashes: 1: etRjZbIj12dLl3Cu-wmUuq9jXZg.roa (hash: sbMAcUZawu8ywXd9mLfTWYNQ0XvVNOGuwfVUKcBp2Bo=) 2: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: kC845VFui1z7xPF5bucSDBjVZJMsSUaGKwuEvFaXYf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:82:4f:03:e1:8a:c7:0b:b9:73:99:2f:03:93:d6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2 Validity Not Before: Dec 12 17:01:05 2025 GMT Not After : Dec 13 17:01:05 2025 GMT Subject: CN=bbd876eba5b0061a89897812723b3d975121d8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:74:72:5f:1c:33:54:79:60:21:8d:a4:45:79: c2:f3:e1:36:d4:5e:33:2a:3f:5a:99:73:b5:c8:5c: 45:0a:7f:db:0d:dc:59:d9:fa:31:57:fb:27:0a:54: 36:af:fa:3d:39:1a:bb:27:cc:0e:ab:5c:33:a0:7d: 53:aa:18:ff:57:ca:46:42:bd:35:b3:43:ac:27:31: 22:1b:6d:89:46:c3:f7:7b:75:f9:50:66:51:06:9a: 69:4b:c1:ef:93:7b:d8:9e:27:c1:ae:28:0f:1d:9a: ac:e4:01:38:a1:75:33:68:31:b2:b8:0b:47:83:17: e6:53:47:a1:90:0c:33:7a:06:01:37:ba:0b:9f:f1: f3:08:4a:be:6a:1b:8c:f8:72:19:3a:3d:1e:a0:f7: d0:2c:43:7f:3f:1a:43:63:a9:43:3d:3b:a5:80:d9: f9:8b:b6:d4:3f:ee:b8:02:4c:48:c7:fb:cd:1e:25: 1c:cd:14:11:32:5d:6f:5d:66:a4:c9:cb:f7:47:b8: 08:75:6a:eb:12:45:1e:79:14:25:56:d5:78:68:75: 12:2c:e8:f7:fe:d2:d8:a1:b5:99:d3:92:ae:1c:32: fa:ab:92:fc:8e:16:fb:81:0b:85:1c:b1:4c:42:97: 09:30:97:75:06:5d:b1:df:b2:4f:3a:6f:42:8c:df: 6e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D8:76:EB:A5:B0:06:1A:89:89:78:12:72:3B:3D:97:51:21:D8:E0 X509v3 Authority Key Identifier: keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c7:b7:46:df:c0:fd:6b:db:8d:7a:97:e6:61:bd:35:89:49: e8:73:bb:55:59:ef:c0:1d:17:d9:87:0e:7a:f3:04:7c:cb:8b: fb:27:55:16:5f:47:48:bd:62:8a:68:8f:f0:fd:0e:ac:c0:3a: 39:71:47:bb:f1:d3:4b:83:06:f0:70:c2:43:fc:4f:19:4b:70: ca:8b:fa:7e:be:59:e3:ef:ed:76:56:96:f5:33:f9:a7:2a:19: e2:de:c0:76:3f:72:45:bb:2b:30:07:ac:72:43:bd:05:d1:df: da:59:62:02:c6:45:44:4c:04:57:40:ac:5d:90:81:06:82:98: 60:e1:70:21:d5:54:3a:4c:a7:ae:10:43:84:4c:c6:7c:6a:69: d0:a8:2b:5d:d0:74:c8:c2:8f:c0:20:ab:98:df:65:cf:04:a9: 20:de:0c:1e:3d:c9:8f:86:dc:67:b3:a4:0a:a1:75:f9:72:67: 3b:58:00:31:38:8e:aa:c9:5f:28:b7:69:e0:6e:02:f9:77:c6: e2:21:03:fc:bc:36:aa:ac:d2:cb:d4:d4:f7:8b:63:57:a3:df: 51:87:35:67:06:7d:5c:33:9d:d4:36:49:9c:ad:9b:2f:13:f8: f3:d7:3a:62:68:85:53:bf:90:21:0f:1a:4c:15:35:f4:08:ff: 48:31:11:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsTgk8D4YrHC7lzmS8Dk9ZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYTRmZTNjMzcxOTU1YjkyMTJjYWRlNjQ5Y2JmMTdjNWZj NThlZTIwHhcNMjUxMjEyMTcwMTA1WhcNMjUxMjEzMTcwMTA1WjAzMTEwLwYDVQQD EyhiYmQ4NzZlYmE1YjAwNjFhODk4OTc4MTI3MjNiM2Q5NzUxMjFkOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3RyXxwzVHlgIY2kRXnC8+E21F4z Kj9amXO1yFxFCn/bDdxZ2foxV/snClQ2r/o9ORq7J8wOq1wzoH1Tqhj/V8pGQr01 s0OsJzEiG22JRsP3e3X5UGZRBpppS8Hvk3vYnifBrigPHZqs5AE4oXUzaDGyuAtH gxfmU0ehkAwzegYBN7oLn/HzCEq+ahuM+HIZOj0eoPfQLEN/PxpDY6lDPTulgNn5 i7bUP+64AkxIx/vNHiUczRQRMl1vXWakycv3R7gIdWrrEkUeeRQlVtV4aHUSLOj3 /tLYobWZ05KuHDL6q5L8jhb7gQuFHLFMQpcJMJd1Bl2x37JPOm9CjN9uRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvYduulsAYaiYl4EnI7PZdRIdjgMB8GA1UdIwQY MBaAFLKk/jw3GVW5ISyt5knL8XxfxY7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2Yt YzhjY2RkOWU2ODdhLzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2YtYzhjY2RkOWU2ODdh LzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABse3Rt/A /WvbjXqX5mG9NYlJ6HO7VVnvwB0X2YcOevMEfMuL+ydVFl9HSL1iimiP8P0OrMA6 OXFHu/HTS4MG8HDCQ/xPGUtwyov6fr5Z4+/tdlaW9TP5pyoZ4t7Adj9yRbsrMAes ckO9BdHf2lliAsZFREwEV0CsXZCBBoKYYOFwIdVUOkynrhBDhEzGfGpp0KgrXdB0 yMKPwCCrmN9lzwSpIN4MHj3Jj4bcZ7OkCqF1+XJnO1gAMTiOqslfKLdp4G4C+XfG 4iED/Lw2qqzSy9TU94tjV6PfUYc1ZwZ9XDOd1DZJnK2bLxP489c6YmiFU7+QIQ8a TBU19Aj/SDERcA== -----END CERTIFICATE-----Generated at Fri Dec 12 19:28:52 2025 by rpki-client