This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft File: _sQT3TZn54GV5SaKooWupRa8sZk.mft (raw, json) Hash identifier: S9TpWUbAqtWCHX800n4TJVcgQ4244cf/FSF08wcFJj8= Subject key identifier: A2:EF:CA:30:DA:6A:AA:33:AD:DF:75:DA:E8:27:3C:48:B4:D8:93:23 Authority key identifier: FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99 Certificate issuer: /CN=fec413dd3667e78195e5268aa285aea516bcb199 Certificate serial: 019B5ABFA0CD4DFD190E8FA58C29B58B8CE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft Manifest number: 14C1 Signing time: Fri 26 Dec 2025 13:01:06 +0000 Manifest this update: Fri 26 Dec 2025 13:01:06 +0000 Manifest next update: Sat 27 Dec 2025 13:01:06 +0000 Files and hashes: 1: _sQT3TZn54GV5SaKooWupRa8sZk.crl (hash: MxmlQxenx9UZ4vLKUML5MTCdKOYgzMVILYvBUEdmlUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:a0:cd:4d:fd:19:0e:8f:a5:8c:29:b5:8b:8c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fec413dd3667e78195e5268aa285aea516bcb199 Validity Not Before: Dec 26 13:01:06 2025 GMT Not After : Dec 27 13:01:06 2025 GMT Subject: CN=a2efca30da6aaa33addf75dae8273c48b4d89323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:79:38:9c:6c:de:3b:2a:15:45:7f:65:5c: 9f:3b:09:76:bf:18:27:cf:2a:31:94:f4:0d:72:cd: 8a:8f:f3:66:88:bc:fc:83:c6:0b:07:f9:1f:8d:64: 51:b1:3c:ef:cb:f1:72:0b:8a:ba:fa:2a:38:e2:da: e7:9d:69:c0:33:0f:b0:f4:c9:91:f7:da:03:4c:63: b4:c9:f5:cc:76:92:e6:96:bb:2e:e7:6f:2c:01:a1: 70:fc:8d:7d:3e:33:3d:cf:59:73:0e:d7:dd:2a:df: 08:91:dc:1d:d6:a4:19:6b:27:e0:7a:9c:34:0b:ea: b6:3d:b3:d2:54:49:7b:42:f3:2a:f3:e3:ef:f7:19: f4:77:45:38:0c:5c:cc:96:b4:d9:03:53:1b:8d:bb: 3c:3d:e8:75:6c:69:d0:7d:64:b5:69:44:00:e3:80: 5b:f1:55:eb:e1:b4:12:f1:39:b3:d7:9a:d1:c0:4e: 0a:57:76:de:5c:52:af:24:bd:6a:e0:ff:c6:71:e7: 3f:b6:f8:30:9f:f6:e4:52:8a:51:b6:06:ad:88:63: 25:d4:ea:ef:06:6a:6c:3c:59:0b:56:ff:ab:47:ef: d5:f3:03:4f:53:e7:ec:08:9d:2a:ff:06:ae:03:26: e9:49:41:80:0e:dc:df:0a:44:33:da:20:6c:c8:08: 86:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EF:CA:30:DA:6A:AA:33:AD:DF:75:DA:E8:27:3C:48:B4:D8:93:23 X509v3 Authority Key Identifier: keyid:FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:15:be:7b:78:b8:f3:10:b6:d4:9a:d7:6b:9e:36:da:c7:26: 04:78:f5:02:63:73:34:fd:ff:85:9c:f8:9b:a0:ee:5b:8e:07: fa:ad:ac:77:5d:a6:e5:03:ca:3c:b4:cd:c3:7b:d1:94:01:42: 61:af:75:f3:33:1c:7e:92:2e:83:65:eb:1b:a5:26:1b:8e:a4: 04:2b:54:e5:02:50:29:08:6c:b0:b8:9d:d8:aa:f1:3b:18:78: bb:a0:51:c0:a7:22:cb:4f:05:e0:ce:bc:2c:5c:bd:23:cf:04: f9:b3:9a:e5:2c:3c:fc:c4:0c:23:9a:ce:e0:a7:bb:a9:65:0e: 0b:c2:d5:3d:08:39:4a:b0:40:8a:97:3c:9e:82:d8:21:af:c0: 78:48:fc:3b:04:6e:a2:12:23:b4:dc:bb:a4:78:1b:8b:9c:d4: b3:5a:4c:04:df:6f:2f:a9:0a:39:27:f2:74:a0:b6:8b:b1:04: 8a:9e:a7:06:4b:73:4c:77:73:9a:95:73:76:60:f1:f9:7e:f4: 98:eb:77:ee:fc:84:47:86:39:72:06:5f:d5:0e:7c:63:43:c3: d1:a0:16:18:ab:3c:a8:64:2a:8a:98:f2:b2:91:20:3c:e4:f5: 9a:f9:f5:71:b2:34:78:e7:f7:0c:0a:90:71:b4:2c:a6:71:bc: bf:c0:07:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav6DNTf0ZDo+ljCm1i4zpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYzQxM2RkMzY2N2U3ODE5NWU1MjY4YWEyODVhZWE1MTZi Y2IxOTkwHhcNMjUxMjI2MTMwMTA2WhcNMjUxMjI3MTMwMTA2WjAzMTEwLwYDVQQD EyhhMmVmY2EzMGRhNmFhYTMzYWRkZjc1ZGFlODI3M2M0OGI0ZDg5MzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArER5OJxs3jsqFUV/ZVyfOwl2vxgn zyoxlPQNcs2Kj/NmiLz8g8YLB/kfjWRRsTzvy/FyC4q6+io44trnnWnAMw+w9MmR 99oDTGO0yfXMdpLmlrsu528sAaFw/I19PjM9z1lzDtfdKt8Ikdwd1qQZayfgepw0 C+q2PbPSVEl7QvMq8+Pv9xn0d0U4DFzMlrTZA1Mbjbs8Peh1bGnQfWS1aUQA44Bb 8VXr4bQS8Tmz15rRwE4KV3beXFKvJL1q4P/Gcec/tvgwn/bkUopRtgatiGMl1Orv BmpsPFkLVv+rR+/V8wNPU+fsCJ0q/wauAybpSUGADtzfCkQz2iBsyAiGXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLvyjDaaqozrd912ugnPEi02JMjMB8GA1UdIwQY MBaAFP7EE902Z+eBleUmiqKFrqUWvLGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3NRVDNUWm41NEdWNVNhS29vV3VwUmE4c1prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9iMTk1ZTctYjgwNC00NTk0LTk2NWUt M2ZkMTRiOTM2ZWI0LzEvX3NRVDNUWm41NEdWNVNhS29vV3VwUmE4c1prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9iMTk1ZTctYjgwNC00NTk0LTk2NWUtM2ZkMTRiOTM2ZWI0 LzEvX3NRVDNUWm41NEdWNVNhS29vV3VwUmE4c1prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRW+e3i4 8xC21JrXa5422scmBHj1AmNzNP3/hZz4m6DuW44H+q2sd12m5QPKPLTNw3vRlAFC Ya918zMcfpIug2XrG6UmG46kBCtU5QJQKQhssLid2KrxOxh4u6BRwKciy08F4M68 LFy9I88E+bOa5Sw8/MQMI5rO4Ke7qWUOC8LVPQg5SrBAipc8noLYIa/AeEj8OwRu ohIjtNy7pHgbi5zUs1pMBN9vL6kKOSfydKC2i7EEip6nBktzTHdzmpVzdmDx+X70 mOt37vyER4Y5cgZf1Q58Y0PD0aAWGKs8qGQqipjyspEgPOT1mvn1cbI0eOf3DAqQ cbQspnG8v8AH4w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:54 2025 by rpki-client