This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft File: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft (raw, json) Hash identifier: 6vhqjd6H/wbgB6tpNn49RwnY7ZNQxxKAPwZZ3R54VKA= Subject key identifier: B8:95:04:49:91:39:69:26:78:F1:DD:13:2D:65:45:EF:35:40:9F:C2 Authority key identifier: 4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43 Certificate issuer: /CN=4aae738ee1782735939a4fb0d672a6317b7f5243 Certificate serial: 019B1ACE44B1F6687F10277A35D4524DF9D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 03:01:24 +0000 Manifest this update: Sun 14 Dec 2025 03:01:24 +0000 Manifest next update: Mon 15 Dec 2025 03:01:24 +0000 Files and hashes: 1: 91OWvN-6lcl5Fjzg5TvE5yYe_W4.roa (hash: Sivu4JLd/Px8fxeRF7CLCRjdAgN7VlKHUjwBf43gaK0=) 2: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl (hash: ShO7fJuaBfObwe2VE+ZTXqbZx5oJTVUUFUHFn80J0mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:ce:44:b1:f6:68:7f:10:27:7a:35:d4:52:4d:f9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aae738ee1782735939a4fb0d672a6317b7f5243 Validity Not Before: Dec 14 03:01:24 2025 GMT Not After : Dec 15 03:01:24 2025 GMT Subject: CN=b89504499139692678f1dd132d6545ef35409fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:16:79:ee:80:ae:35:aa:6c:11:54:9c:a8:c9: 1f:d1:35:23:84:6e:2a:1b:98:b4:eb:81:95:c0:d5: 72:02:4f:69:d8:5e:96:3c:ee:c8:5c:ac:22:f7:a3: b6:53:cc:ef:2d:bf:50:24:0d:ee:91:fa:0c:b0:63: 29:91:60:d1:fc:fa:33:47:fd:8e:63:af:6d:62:56: 60:7e:ed:99:de:6d:c1:f6:e6:34:d9:e0:74:5b:c2: c0:63:e2:9c:6a:43:8e:6c:f0:e5:4e:c9:82:1d:80: 39:f9:61:66:b3:85:b1:34:ae:a5:cb:88:88:e0:18: 2e:0b:22:08:2d:dd:df:45:13:19:0c:04:53:91:79: 4b:ca:48:ec:df:a7:36:19:04:9b:aa:4e:7c:63:43: 89:a2:d7:c8:c2:bb:22:35:56:61:47:b7:eb:95:e5: 24:12:ae:e1:5a:32:ba:91:7f:38:4e:df:f9:bd:6d: 7f:f1:04:34:4b:b2:62:27:5a:b1:e8:18:58:b8:4d: 43:e1:0e:2c:ac:d2:e2:6d:f2:2e:ae:71:e3:4d:0b: 9a:c3:8a:20:7d:d5:92:fe:ee:aa:c1:d7:bb:16:c7: e0:1f:68:93:d8:a3:32:eb:c2:78:41:04:77:9b:d3: 25:d6:dd:80:44:07:f8:e6:74:b4:9b:ba:d0:df:5d: 3a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:95:04:49:91:39:69:26:78:F1:DD:13:2D:65:45:EF:35:40:9F:C2 X509v3 Authority Key Identifier: keyid:4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:9d:75:05:6b:1b:da:5d:cd:3c:06:60:9d:f1:65:c6:4d:b5: 2c:2a:fa:4a:b2:98:ba:34:90:93:41:f9:fc:2a:f3:a5:e5:f7: a1:74:93:81:5c:b5:f8:3f:3e:25:89:1a:54:b5:9e:24:27:3a: 4a:22:05:78:e3:6b:6c:be:75:d1:b7:1a:d6:27:f5:b5:a4:23: 23:8c:89:13:03:ba:66:29:cb:c1:0a:f3:53:f3:16:27:1c:57: e2:7d:f0:19:2b:f3:5f:64:2a:55:fd:d6:37:ff:ae:db:45:8a: a0:7c:a7:f8:e0:d3:f2:1a:8d:d5:04:1d:0a:a2:95:1b:f3:2d: 88:b0:6d:71:75:ba:5c:0f:05:5a:ff:e7:fe:7a:83:dd:62:73: c1:8e:0e:5d:33:68:a0:a5:58:12:ef:5b:04:cb:fe:5d:82:a9: 71:b5:8b:11:77:dd:7d:f2:50:8a:81:8b:42:67:3d:f7:80:20: 2f:47:26:72:61:6f:b3:49:66:b3:fe:98:31:84:e3:29:0f:2f: 8c:56:cf:39:a7:81:c3:9f:f7:68:28:1d:12:d7:c8:ab:ff:9d: de:38:44:fb:32:f9:c1:9a:bf:fc:71:10:05:92:bb:9a:9a:8c: 51:77:af:3a:74:9b:98:c6:ba:a2:44:ed:90:4f:75:78:e4:55: 87:b3:67:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazkSx9mh/ECd6NdRSTfnQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYWU3MzhlZTE3ODI3MzU5MzlhNGZiMGQ2NzJhNjMxN2I3 ZjUyNDMwHhcNMjUxMjE0MDMwMTI0WhcNMjUxMjE1MDMwMTI0WjAzMTEwLwYDVQQD EyhiODk1MDQ0OTkxMzk2OTI2NzhmMWRkMTMyZDY1NDVlZjM1NDA5ZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxZ57oCuNapsEVScqMkf0TUjhG4q G5i064GVwNVyAk9p2F6WPO7IXKwi96O2U8zvLb9QJA3ukfoMsGMpkWDR/PozR/2O Y69tYlZgfu2Z3m3B9uY02eB0W8LAY+KcakOObPDlTsmCHYA5+WFms4WxNK6ly4iI 4BguCyIILd3fRRMZDARTkXlLykjs36c2GQSbqk58Y0OJotfIwrsiNVZhR7frleUk Eq7hWjK6kX84Tt/5vW1/8QQ0S7JiJ1qx6BhYuE1D4Q4srNLibfIurnHjTQuaw4og fdWS/u6qwde7FsfgH2iT2KMy68J4QQR3m9Ml1t2ARAf45nS0m7rQ3106ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiVBEmROWkmePHdEy1lRe81QJ/CMB8GA1UdIwQY MBaAFEquc47heCc1k5pPsNZypjF7f1JDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3E1emp1RjRKeldUbWstdzFuS21NWHRfVWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85ZTAyNGUtYzZlNS00OTc3LWIzNjkt MWZmOWZmMTkyY2Q3LzEvU3E1emp1RjRKeldUbWstdzFuS21NWHRfVWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85ZTAyNGUtYzZlNS00OTc3LWIzNjktMWZmOWZmMTkyY2Q3 LzEvU3E1emp1RjRKeldUbWstdzFuS21NWHRfVWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZ11BWsb 2l3NPAZgnfFlxk21LCr6SrKYujSQk0H5/CrzpeX3oXSTgVy1+D8+JYkaVLWeJCc6 SiIFeONrbL510bca1if1taQjI4yJEwO6ZinLwQrzU/MWJxxX4n3wGSvzX2QqVf3W N/+u20WKoHyn+ODT8hqN1QQdCqKVG/MtiLBtcXW6XA8FWv/n/nqD3WJzwY4OXTNo oKVYEu9bBMv+XYKpcbWLEXfdffJQioGLQmc994AgL0cmcmFvs0lms/6YMYTjKQ8v jFbPOaeBw5/3aCgdEtfIq/+d3jhE+zL5wZq//HEQBZK7mpqMUXevOnSbmMa6okTt kE91eORVh7Nndg== -----END CERTIFICATE-----Generated at Sun Dec 14 12:05:35 2025 by rpki-client