This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft File: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft (raw, json) Hash identifier: Tau8Xd0wpN1QbM8c4Aki80O63XnUIyBOHbCQYBQ3oMI= Subject key identifier: 61:95:1F:8B:F0:C6:B3:72:BC:3F:B4:0B:9F:59:13:59:5E:26:F1:A2 Authority key identifier: B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14 Certificate issuer: /CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014 Certificate serial: 019B5ABF6A5846F507B0C8C1B4B6ED804FAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft Manifest number: 11CA Signing time: Fri 26 Dec 2025 13:00:52 +0000 Manifest this update: Fri 26 Dec 2025 13:00:52 +0000 Manifest next update: Sat 27 Dec 2025 13:00:52 +0000 Files and hashes: 1: snSOZMPfK49AItHHPweedqu08i4.roa (hash: pOp6DYxwdd50QS7EO4q/xTqIWe4F0C/r3RXRy+6+GXo=) 2: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl (hash: 87qjiSIWUrzg4h0SVc4YfcsZ1llFUwqX0EeJE19Ypj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:6a:58:46:f5:07:b0:c8:c1:b4:b6:ed:80:4f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014 Validity Not Before: Dec 26 13:00:52 2025 GMT Not After : Dec 27 13:00:52 2025 GMT Subject: CN=61951f8bf0c6b372bc3fb40b9f5913595e26f1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:1d:00:14:fa:3e:ef:fa:78:af:54:f9:1a: c6:4e:83:79:a2:79:41:07:6f:4d:05:61:88:e4:08: c9:3e:e1:a3:85:51:fe:46:63:05:f1:dd:42:ce:fb: 06:15:23:87:f6:ce:8b:89:79:b9:2b:d9:f9:d4:eb: 92:93:7a:8b:1c:0f:14:9e:7b:eb:96:62:3d:cf:77: 6f:ef:58:12:54:d0:2c:58:48:3d:42:c2:bd:f6:86: 1c:07:4b:a1:13:2f:ed:65:f9:e9:a7:9a:10:3b:f8: 05:19:37:60:30:8f:f5:db:5c:c6:c9:0c:de:bc:22: e0:e0:76:58:02:9f:c8:ba:3c:a9:2d:92:97:d6:bb: 02:db:68:a1:1d:71:89:f8:02:e9:15:3f:ac:44:06: 8a:7c:8b:de:f3:18:0a:2b:cd:16:fa:d3:85:0d:7c: 16:af:9d:e8:fe:9d:e4:ce:dc:94:69:c0:01:78:11: 3b:b0:18:d2:2b:9d:5b:60:8c:57:1b:0d:47:a6:a5: 64:3a:ef:76:a7:b3:07:3e:c6:b9:df:24:82:13:69: 0b:9a:5f:58:e9:9f:36:6a:fc:29:5f:af:cd:59:f1: 72:33:bc:69:d4:c0:e8:8b:46:f9:00:14:94:ae:e5: 00:79:6f:21:b2:33:df:cc:7c:b0:3d:5d:5b:5c:39: d7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:95:1F:8B:F0:C6:B3:72:BC:3F:B4:0B:9F:59:13:59:5E:26:F1:A2 X509v3 Authority Key Identifier: keyid:B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:5c:d5:5d:9d:5c:e2:29:40:1e:91:de:14:48:53:e6:91:b7: a3:aa:72:47:39:ca:61:d2:9f:44:21:37:cb:09:ca:1c:57:fe: 32:1d:53:d2:30:ab:8f:88:9b:b7:1d:2e:04:1f:d5:fd:1b:85: b1:d7:9a:c1:ae:8f:3d:4e:bb:03:ea:7e:d6:34:17:94:5b:ea: 1a:4a:5b:02:db:ff:98:a0:d9:e1:06:54:08:a6:e8:b8:b5:ef: 8c:15:09:95:db:24:80:13:f0:b2:2d:d2:7c:27:41:6f:2a:68: 64:fe:a0:1e:68:7c:0b:b5:67:47:ca:b6:54:45:ef:52:a4:58: a0:5f:21:aa:32:c9:3f:cb:35:89:fa:32:cf:d4:31:bf:94:ac: b1:c4:f4:d4:ad:ab:04:12:16:0c:ca:16:3e:b1:09:66:4d:72: c1:d1:68:00:ec:d7:db:d9:99:43:d6:15:98:97:3e:41:fe:ca: 41:b8:f1:86:94:a1:40:b5:3b:b0:60:11:6b:81:59:fa:74:4d: 40:e4:a7:c9:83:5b:06:4a:ed:3b:9c:c9:a7:aa:f5:07:25:60: dd:53:54:59:7f:aa:12:79:ae:ca:1c:2a:4f:28:04:55:d1:80: c5:17:f5:5f:60:e0:bb:f6:a9:33:82:7a:d9:0f:c3:9e:b7:a1: 2c:cb:0b:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav2pYRvUHsMjBtLbtgE+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYTQ4YWYzZDk2OTMxYmQ5MGMzYmZkNTVmMWZhMzA0N2Iz NTYwMTQwHhcNMjUxMjI2MTMwMDUyWhcNMjUxMjI3MTMwMDUyWjAzMTEwLwYDVQQD Eyg2MTk1MWY4YmYwYzZiMzcyYmMzZmI0MGI5ZjU5MTM1OTVlMjZmMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUgdABT6Pu/6eK9U+RrGToN5onlB B29NBWGI5AjJPuGjhVH+RmMF8d1CzvsGFSOH9s6LiXm5K9n51OuSk3qLHA8Unnvr lmI9z3dv71gSVNAsWEg9QsK99oYcB0uhEy/tZfnpp5oQO/gFGTdgMI/121zGyQze vCLg4HZYAp/IujypLZKX1rsC22ihHXGJ+ALpFT+sRAaKfIve8xgKK80W+tOFDXwW r53o/p3kztyUacABeBE7sBjSK51bYIxXGw1HpqVkOu92p7MHPsa53ySCE2kLml9Y 6Z82avwpX6/NWfFyM7xp1MDoi0b5ABSUruUAeW8hsjPfzHywPV1bXDnXcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGVH4vwxrNyvD+0C59ZE1leJvGiMB8GA1UdIwQY MBaAFLKkivPZaTG9kMO/1V8fowR7NWAUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNTFhZGYtMTQ5Mi00YzE0LTg4MjEt YjliZDA2NTk0ODNhLzEvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kNTFhZGYtMTQ5Mi00YzE0LTg4MjEtYjliZDA2NTk0ODNh LzEvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlzVXZ1c 4ilAHpHeFEhT5pG3o6pyRznKYdKfRCE3ywnKHFf+Mh1T0jCrj4ibtx0uBB/V/RuF sdeawa6PPU67A+p+1jQXlFvqGkpbAtv/mKDZ4QZUCKbouLXvjBUJldskgBPwsi3S fCdBbypoZP6gHmh8C7VnR8q2VEXvUqRYoF8hqjLJP8s1ifoyz9Qxv5SsscT01K2r BBIWDMoWPrEJZk1ywdFoAOzX29mZQ9YVmJc+Qf7KQbjxhpShQLU7sGARa4FZ+nRN QOSnyYNbBkrtO5zJp6r1ByVg3VNUWX+qEnmuyhwqTygEVdGAxRf1X2Dgu/apM4J6 2Q/DnrehLMsLAQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:54 2025 by rpki-client