This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft File: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json) Hash identifier: RMguPEucC2CGrF8KP+NqsDUzdLLLJ57A+YvQIooBd+k= Subject key identifier: E3:80:DC:74:A7:F7:09:B8:71:E6:35:B1:32:E8:35:33:3A:F4:C4:4F Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E Certificate issuer: /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e Certificate serial: 019B39EB59D210B8B9D01DDA70D9DEACA145 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft Manifest number: 149D Signing time: Sat 20 Dec 2025 04:01:23 +0000 Manifest this update: Sat 20 Dec 2025 04:01:23 +0000 Manifest next update: Sun 21 Dec 2025 04:01:23 +0000 Files and hashes: 1: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: o2ymnS5XlV/UtH1np8DNcGHro84Ii5rK+OnDfWZzyYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:59:d2:10:b8:b9:d0:1d:da:70:d9:de:ac:a1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e Validity Not Before: Dec 20 04:01:23 2025 GMT Not After : Dec 21 04:01:23 2025 GMT Subject: CN=e380dc74a7f709b871e635b132e835333af4c44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1f:6c:68:b7:a3:99:3d:11:9c:58:3f:bf:f5: 69:ba:a7:eb:46:b6:7b:81:31:da:da:d2:24:cf:c3: ab:2a:26:66:c2:92:62:4a:4e:d9:32:a8:7f:f2:fa: 76:60:b0:07:7a:ab:5e:c3:14:18:7b:66:4f:21:69: 7a:7b:12:08:68:b0:cc:76:78:3e:60:e3:ad:c0:d6: f6:6e:fb:29:f8:52:cf:a7:2c:30:31:62:5b:5e:26: 8a:38:da:e2:a0:91:a3:21:c5:d0:ab:2e:ac:d2:e7: 38:77:6f:45:89:22:f3:ff:85:e3:a2:20:ac:7b:aa: 90:2d:b2:c2:4d:58:ad:1b:bf:9d:44:79:9f:61:29: 33:8b:fa:04:49:55:2d:c3:c7:c6:12:c1:0a:64:2f: f0:7e:c1:e7:90:7e:5a:b5:f5:fb:60:ff:f1:43:fd: 09:5f:6e:31:d2:4d:6c:c8:e3:cc:87:3f:df:c6:50: 56:a1:ca:2d:f9:28:2a:47:04:a9:a0:36:c9:58:df: f6:d5:60:32:c4:2c:72:26:c7:32:8d:29:96:6f:fb: 98:e6:c7:fc:1c:04:bd:6b:27:96:c2:23:d4:be:f3: 55:1c:20:6e:00:cf:80:f0:f3:51:a2:e2:e0:0e:d6: c1:2e:69:35:d7:c8:81:a1:66:59:c8:1a:30:2b:85: 2b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:80:DC:74:A7:F7:09:B8:71:E6:35:B1:32:E8:35:33:3A:F4:C4:4F X509v3 Authority Key Identifier: keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:71:12:f2:87:e0:22:46:a1:20:ce:8d:b4:a1:d9:2d:8c:46: 33:47:2b:48:0f:c3:2e:aa:a7:9d:b1:4e:c9:83:ce:e2:8b:9a: 9b:8e:8f:2f:2a:cd:a4:5b:47:61:9e:a5:cb:07:42:4f:fc:01: 43:8e:06:76:a7:ec:11:f8:c3:9f:cd:f9:17:aa:6c:7c:95:99: 0d:cd:ac:c6:36:04:52:db:7f:6b:cf:45:47:cf:be:57:a7:15: 46:03:27:58:91:40:45:d6:0c:98:bb:16:45:f3:bc:a9:0f:cc: 02:0c:7b:c1:f6:3b:ba:58:70:81:14:4c:79:6e:03:59:cd:4d: 9d:f8:b5:c7:10:ba:f4:f0:67:3c:b2:6f:fd:52:e4:c4:27:77: 78:e4:8f:5b:0f:8c:fe:54:c7:2e:62:83:65:0a:a8:bb:12:82: fe:df:90:e1:04:e2:fc:49:90:ff:40:e9:e5:4a:03:0a:73:68: b1:9f:63:9f:5a:fb:a7:df:a0:eb:a4:3c:91:d5:5f:9e:80:b9: 7f:2b:6c:78:dd:7c:91:f8:5b:34:e5:30:44:0a:33:e9:da:67: 38:26:59:c9:37:55:8c:dc:97:18:b2:f3:2a:81:d0:8a:a6:52: d9:31:da:00:32:b8:94:f8:93:84:4a:37:df:aa:e8:f2:1b:03: e6:41:68:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs561nSELi50B3acNnerKFFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MGQwNDJjZmE3NjZlN2UyYmI2ZjBiMDRjMzdkNjAzZmZh MzM4M2UwHhcNMjUxMjIwMDQwMTIzWhcNMjUxMjIxMDQwMTIzWjAzMTEwLwYDVQQD EyhlMzgwZGM3NGE3ZjcwOWI4NzFlNjM1YjEzMmU4MzUzMzNhZjRjNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h9saLejmT0RnFg/v/VpuqfrRrZ7 gTHa2tIkz8OrKiZmwpJiSk7ZMqh/8vp2YLAHeqtewxQYe2ZPIWl6exIIaLDMdng+ YOOtwNb2bvsp+FLPpywwMWJbXiaKONrioJGjIcXQqy6s0uc4d29FiSLz/4XjoiCs e6qQLbLCTVitG7+dRHmfYSkzi/oESVUtw8fGEsEKZC/wfsHnkH5atfX7YP/xQ/0J X24x0k1syOPMhz/fxlBWocot+SgqRwSpoDbJWN/21WAyxCxyJscyjSmWb/uY5sf8 HAS9ayeWwiPUvvNVHCBuAM+A8PNRouLgDtbBLmk118iBoWZZyBowK4Ur9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOA3HSn9wm4ceY1sTLoNTM69MRPMB8GA1UdIwQY MBaAFEkNBCz6dm5+K7bwsEw31gP/ozg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kYzg3NzgtYTU3MC00ZTQ4LWFjMzMt OTYyNjJjODE5MzMzLzEvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kYzg3NzgtYTU3MC00ZTQ4LWFjMzMtOTYyNjJjODE5MzMz LzEvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnES8ofg IkahIM6NtKHZLYxGM0crSA/DLqqnnbFOyYPO4ouam46PLyrNpFtHYZ6lywdCT/wB Q44GdqfsEfjDn835F6psfJWZDc2sxjYEUtt/a89FR8++V6cVRgMnWJFARdYMmLsW RfO8qQ/MAgx7wfY7ulhwgRRMeW4DWc1Nnfi1xxC69PBnPLJv/VLkxCd3eOSPWw+M /lTHLmKDZQqouxKC/t+Q4QTi/EmQ/0Dp5UoDCnNosZ9jn1r7p9+g66Q8kdVfnoC5 fytseN18kfhbNOUwRAoz6dpnOCZZyTdVjNyXGLLzKoHQiqZS2THaADK4lPiThEo3 36ro8hsD5kFoNw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:38:52 2025 by rpki-client