This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft File: sq-PF3TgWSXyTkHe5p5bYj2axj0.mft (raw, json) Hash identifier: fuxjTjFeV8ENiZsYl161fvU8v+pgj3RLcUPfj0tcDg8= Subject key identifier: 6C:DB:AF:81:C1:10:51:6B:FB:B0:A2:EC:AF:3F:82:7D:87:11:37:D4 Authority key identifier: B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D Certificate issuer: /CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d Certificate serial: 019B1193B1E2293D70E4E4ECFD11660EF71B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 08:00:50 +0000 Manifest this update: Fri 12 Dec 2025 08:00:50 +0000 Manifest next update: Sat 13 Dec 2025 08:00:50 +0000 Files and hashes: 1: dHmQJZqThrz58J_TSvHl_H-39E8.roa (hash: lBrrDh2GaFmnqywSNW3PsD5utU5WNEXu75PvBG3VZjI=) 2: sq-PF3TgWSXyTkHe5p5bYj2axj0.crl (hash: HOBvSXyfAkW3rhUl8vRqmx7B8pk0FLrpyxE2SS7oXSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:93:b1:e2:29:3d:70:e4:e4:ec:fd:11:66:0e:f7:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d Validity Not Before: Dec 12 08:00:50 2025 GMT Not After : Dec 13 08:00:50 2025 GMT Subject: CN=6cdbaf81c110516bfbb0a2ecaf3f827d871137d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b6:71:13:f5:a2:4b:33:54:9e:65:e4:4f:82: 97:53:1c:7d:51:38:9e:0d:9a:63:76:6e:86:ab:97: e2:f0:d2:3a:e7:62:75:d1:63:07:57:68:9f:8c:1b: 1a:a5:b6:95:03:1f:d8:c5:60:05:80:c8:88:b5:30: 72:67:09:1b:80:7b:b2:05:23:ba:1f:99:23:55:94: 24:57:47:f7:9b:ba:2a:72:2d:ae:18:04:46:70:68: 6c:d1:f7:dc:2e:0d:17:6b:22:b8:14:94:66:5c:15: 14:d0:5e:1f:e1:64:d5:4f:7a:2f:bb:0d:c7:40:d9: 76:5c:19:3b:06:c6:e8:43:5d:a7:25:19:42:ac:a3: 34:8e:89:2f:04:86:e4:d0:65:ee:e5:09:8f:75:6d: d3:24:70:0d:ae:fd:53:cb:76:10:04:9d:bb:ee:c5: 74:6b:6e:7c:97:9e:e8:48:d5:28:12:5c:f6:dc:64: 3b:03:72:21:f3:f8:c1:be:99:6c:0e:a1:49:a6:92: ea:cf:c6:f8:fd:36:6c:6a:de:70:95:a9:2a:4b:8c: ea:64:7f:58:05:12:5b:44:6b:0f:b7:47:3b:a4:ee: 68:8d:85:b8:df:ef:74:e1:8a:77:34:ab:15:ab:13: 1f:d9:82:57:ee:00:d5:db:a0:a8:ac:36:8b:9f:69: ee:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DB:AF:81:C1:10:51:6B:FB:B0:A2:EC:AF:3F:82:7D:87:11:37:D4 X509v3 Authority Key Identifier: keyid:B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e7:e1:86:2a:1c:04:f9:da:2b:c8:0e:c3:de:72:67:60:83: 85:15:55:14:a0:db:80:00:b4:fc:67:a3:57:db:9d:77:8a:d0: b9:1c:4f:15:29:c0:12:df:ff:2a:5b:ca:f3:88:94:33:5b:be: 23:03:cc:39:b5:dc:19:a4:91:e0:f2:81:7c:b7:ab:86:cd:39: ca:8b:57:51:cf:bb:58:ce:9f:69:f6:40:44:c0:93:8d:46:e6: 38:f8:0d:6a:67:a6:b1:f0:69:f6:2f:b5:6d:29:af:b3:f5:2b: 4e:dd:08:4e:c5:f7:74:cd:a4:37:4f:70:ac:af:d5:3f:7b:57: 18:a7:32:e6:ff:a0:54:d8:8e:45:e9:7b:ba:9f:b2:70:14:27: 9f:ac:7a:29:5a:28:af:30:30:1d:95:12:25:5b:e4:2b:ef:4f: 60:6e:b0:6f:8d:cc:4c:84:41:b1:a2:9d:85:cb:b2:af:b5:48: 8e:b8:3a:b4:90:e4:e3:39:42:6d:69:57:9c:de:ca:a9:ea:8e: 0e:c5:a5:89:bc:0c:50:b2:3d:50:db:76:cc:01:d6:9f:8a:88: 50:2e:64:b1:fc:51:81:c4:44:f2:ff:db:c7:54:72:2c:bd:f9: 37:40:57:3a:22:4e:de:84:bd:d9:67:e1:45:cd:b0:83:f5:b4: 64:b0:db:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRk7HiKT1w5OTs/RFmDvcbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYWY4ZjE3NzRlMDU5MjVmMjRlNDFkZWU2OWU1YjYyM2Q5 YWM2M2QwHhcNMjUxMjEyMDgwMDUwWhcNMjUxMjEzMDgwMDUwWjAzMTEwLwYDVQQD Eyg2Y2RiYWY4MWMxMTA1MTZiZmJiMGEyZWNhZjNmODI3ZDg3MTEzN2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LZxE/WiSzNUnmXkT4KXUxx9UTie DZpjdm6Gq5fi8NI652J10WMHV2ifjBsapbaVAx/YxWAFgMiItTByZwkbgHuyBSO6 H5kjVZQkV0f3m7oqci2uGARGcGhs0ffcLg0XayK4FJRmXBUU0F4f4WTVT3ovuw3H QNl2XBk7BsboQ12nJRlCrKM0jokvBIbk0GXu5QmPdW3TJHANrv1Ty3YQBJ277sV0 a258l57oSNUoElz23GQ7A3Ih8/jBvplsDqFJppLqz8b4/TZsat5wlakqS4zqZH9Y BRJbRGsPt0c7pO5ojYW43+904Yp3NKsVqxMf2YJX7gDV26CorDaLn2nuaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzbr4HBEFFr+7Ci7K8/gn2HETfUMB8GA1UdIwQY MBaAFLKvjxd04Fkl8k5B3uaeW2I9msY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3EtUEYzVGdXU1h5VGtIZTVwNWJZajJheGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jMTU2NzEtYmExYi00OGYyLWI2OTEt ZmE1N2MxMjZiYzJhLzEvc3EtUEYzVGdXU1h5VGtIZTVwNWJZajJheGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9jMTU2NzEtYmExYi00OGYyLWI2OTEtZmE1N2MxMjZiYzJh LzEvc3EtUEYzVGdXU1h5VGtIZTVwNWJZajJheGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALOfhhioc BPnaK8gOw95yZ2CDhRVVFKDbgAC0/GejV9udd4rQuRxPFSnAEt//KlvK84iUM1u+ IwPMObXcGaSR4PKBfLerhs05yotXUc+7WM6fafZARMCTjUbmOPgNamemsfBp9i+1 bSmvs/UrTt0ITsX3dM2kN09wrK/VP3tXGKcy5v+gVNiORel7up+ycBQnn6x6KVoo rzAwHZUSJVvkK+9PYG6wb43MTIRBsaKdhcuyr7VIjrg6tJDk4zlCbWlXnN7KqeqO DsWlibwMULI9UNt2zAHWn4qIUC5ksfxRgcRE8v/bx1RyLL35N0BXOiJO3oS92Wfh Rc2wg/W0ZLDbpQ== -----END CERTIFICATE-----Generated at Fri Dec 12 13:00:52 2025 by rpki-client