This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft File: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json) Hash identifier: 4+FE03mx+re68XSaFfHDZYCc8qOw3/9JX0b9gYj+ouQ= Subject key identifier: 9A:8E:7E:72:46:5E:26:88:0F:20:F1:00:C4:CF:BE:86:1D:85:55:79 Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E Certificate issuer: /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e Certificate serial: 019B476F7AEE773F11D3641D9196970D64E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft Manifest number: 14A4 Signing time: Mon 22 Dec 2025 19:00:46 +0000 Manifest this update: Mon 22 Dec 2025 19:00:46 +0000 Manifest next update: Tue 23 Dec 2025 19:00:46 +0000 Files and hashes: 1: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: nfCyE5KjgGFe02TZE5DFYjnPxN2QKfvN2CSKMjYwX1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:7a:ee:77:3f:11:d3:64:1d:91:96:97:0d:64:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e Validity Not Before: Dec 22 19:00:46 2025 GMT Not After : Dec 23 19:00:46 2025 GMT Subject: CN=9a8e7e72465e26880f20f100c4cfbe861d855579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:65:c8:14:62:06:d6:81:e8:35:c4:73:88: 19:c8:cc:03:9b:29:55:86:bf:e0:fb:a0:83:3a:50: 6a:f5:2b:14:03:e3:24:12:d4:58:93:bc:bb:1a:8a: ca:1e:25:3e:28:e8:2b:08:62:7e:20:16:52:da:51: 30:7f:4d:4e:d1:95:28:41:ee:f6:fb:df:f4:53:c0: 9d:99:9b:ed:d5:44:32:6f:2a:eb:8a:2e:e3:e9:6a: 73:e5:f9:e9:2f:82:de:18:4b:46:0a:5c:de:2a:27: 8b:33:00:36:66:b8:9c:68:66:17:3a:8b:7c:54:58: 8d:c6:ab:99:7e:bd:47:a5:6e:e6:72:43:66:2c:d8: 00:f4:1d:59:85:05:2a:af:53:3d:b5:73:5d:84:36: 97:ec:9f:c1:97:b5:44:53:67:49:82:58:7f:27:5d: b6:78:a2:d2:dd:d0:0c:5d:ee:79:9e:8c:a6:06:ee: 36:45:25:f6:d7:ac:08:17:15:23:04:bb:c1:a5:65: e8:0b:18:ac:f0:9e:c7:b3:42:74:bb:75:51:49:c3: f5:8f:f2:86:04:86:f4:8b:67:8a:8a:b0:b3:56:70: 8f:e7:86:d5:b0:f4:83:54:3e:99:aa:da:5a:cf:35: 6d:68:13:e9:de:30:13:9d:31:c7:89:6f:ca:c1:38: 21:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8E:7E:72:46:5E:26:88:0F:20:F1:00:C4:CF:BE:86:1D:85:55:79 X509v3 Authority Key Identifier: keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ec:a0:5d:c8:3a:a8:26:65:98:55:18:19:56:c7:02:22:66:77: 83:2d:95:a8:e1:68:87:88:ad:bd:4c:18:1d:d8:44:32:63:25: c5:df:44:a3:a5:0c:a0:a1:04:6b:29:4a:f0:00:ab:98:7c:92: 90:e2:d6:78:10:93:2a:b7:82:0c:b6:43:08:7b:d6:9d:ef:ff: c5:08:b1:b1:cb:f0:d8:59:d3:43:f4:2b:60:c0:d0:7f:3c:40: 18:04:ad:b9:a8:7d:5a:94:22:1c:b8:fa:a2:c4:d2:f1:52:15: 9d:0d:28:62:bb:f8:47:6c:40:27:07:7c:69:95:e5:dc:be:36: 8a:84:62:32:46:8b:e8:7e:08:7d:e1:6e:a4:a1:01:df:9e:e2: 45:57:88:03:ac:63:0e:99:57:65:a0:0d:24:bb:dc:1b:4e:b3: 60:de:33:8d:a1:ec:87:dc:71:31:a4:35:4c:04:11:0f:18:df: 92:ed:71:09:22:0b:90:46:d9:ac:a1:f3:31:a8:09:d6:8e:fa: 8e:60:25:06:00:f1:31:40:a1:59:a8:42:6d:8d:87:80:ef:7e: e7:ea:29:b8:f6:f4:70:e5:97:a9:aa:f6:33:b4:5e:b4:7f:1b: e0:c6:6c:a2:c3:57:71:e8:5b:7f:df:03:61:44:0a:51:e8:dd: 16:02:08:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb3rudz8R02QdkZaXDWTgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MGQwNDJjZmE3NjZlN2UyYmI2ZjBiMDRjMzdkNjAzZmZh MzM4M2UwHhcNMjUxMjIyMTkwMDQ2WhcNMjUxMjIzMTkwMDQ2WjAzMTEwLwYDVQQD Eyg5YThlN2U3MjQ2NWUyNjg4MGYyMGYxMDBjNGNmYmU4NjFkODU1NTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTxlyBRiBtaB6DXEc4gZyMwDmylV hr/g+6CDOlBq9SsUA+MkEtRYk7y7GorKHiU+KOgrCGJ+IBZS2lEwf01O0ZUoQe72 +9/0U8CdmZvt1UQybyrrii7j6Wpz5fnpL4LeGEtGClzeKieLMwA2ZricaGYXOot8 VFiNxquZfr1HpW7mckNmLNgA9B1ZhQUqr1M9tXNdhDaX7J/Bl7VEU2dJglh/J122 eKLS3dAMXe55noymBu42RSX216wIFxUjBLvBpWXoCxis8J7Hs0J0u3VRScP1j/KG BIb0i2eKirCzVnCP54bVsPSDVD6ZqtpazzVtaBPp3jATnTHHiW/KwTghNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqOfnJGXiaIDyDxAMTPvoYdhVV5MB8GA1UdIwQY MBaAFEkNBCz6dm5+K7bwsEw31gP/ozg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kYzg3NzgtYTU3MC00ZTQ4LWFjMzMt OTYyNjJjODE5MzMzLzEvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kYzg3NzgtYTU3MC00ZTQ4LWFjMzMtOTYyNjJjODE5MzMz LzEvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7KBdyDqo JmWYVRgZVscCImZ3gy2VqOFoh4itvUwYHdhEMmMlxd9Eo6UMoKEEaylK8ACrmHyS kOLWeBCTKreCDLZDCHvWne//xQixscvw2FnTQ/QrYMDQfzxAGAStuah9WpQiHLj6 osTS8VIVnQ0oYrv4R2xAJwd8aZXl3L42ioRiMkaL6H4IfeFupKEB357iRVeIA6xj DplXZaANJLvcG06zYN4zjaHsh9xxMaQ1TAQRDxjfku1xCSILkEbZrKHzMagJ1o76 jmAlBgDxMUChWahCbY2HgO9+5+opuPb0cOWXqar2M7RetH8b4MZsosNXcehbf98D YUQKUejdFgIIXw== -----END CERTIFICATE-----Generated at Mon Dec 22 22:37:14 2025 by rpki-client