This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft File: sQeA3za1uUL2YOQDov5ginXk5X0.mft (raw, json) Hash identifier: AJhdOiakIiiw4AH90SRiONdr+RdTYTKmOro+7Y2+I5E= Subject key identifier: ED:F3:E9:8D:C8:B2:C8:AB:4A:8E:EB:EA:61:38:77:1E:7B:6B:E9:AE Authority key identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D Certificate issuer: /CN=b10780df36b5b942f660e403a2fe608a75e4e57d Certificate serial: 019B20624A4CD9539269651FF11134F8FBD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft Manifest number: 170B Signing time: Mon 15 Dec 2025 05:01:10 +0000 Manifest this update: Mon 15 Dec 2025 05:01:10 +0000 Manifest next update: Tue 16 Dec 2025 05:01:10 +0000 Files and hashes: 1: dc2u-8bkbufd4cw_d9F3xDaopuc.roa (hash: Umyl5IxYyTMcYEGSrVHWEMRSVhNtzrLiUEYgvIObXig=) 2: sQeA3za1uUL2YOQDov5ginXk5X0.crl (hash: 2btGv/NQqUbPz29ZtGba/vNuOHSPWK0JJvE6O9Yl68I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:4a:4c:d9:53:92:69:65:1f:f1:11:34:f8:fb:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b10780df36b5b942f660e403a2fe608a75e4e57d Validity Not Before: Dec 15 05:01:10 2025 GMT Not After : Dec 16 05:01:10 2025 GMT Subject: CN=edf3e98dc8b2c8ab4a8eebea6138771e7b6be9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2b:3b:b5:73:0f:0e:e3:76:0a:a7:bf:2a:a4: 04:cb:5c:8d:53:49:30:ef:a2:f3:32:75:1d:52:12: ec:37:3e:44:46:e0:f7:31:0a:b1:7b:6f:47:04:3f: 7e:cc:a7:d1:11:36:55:f9:69:19:40:52:02:c2:16: cc:72:bc:82:97:4b:37:8a:b9:94:c5:ba:c4:00:c5: 06:36:b7:ef:34:2d:8a:bf:ac:01:36:06:92:8d:91: 05:ab:79:02:97:d8:5f:c9:59:a8:a9:fa:e5:34:84: 26:32:72:5a:ef:52:d4:b5:57:0c:b3:c1:ca:d8:5f: 92:7b:a9:c3:6b:29:9a:95:61:a9:9a:f8:3f:36:ad: 87:7c:a3:fa:cd:6a:66:32:86:01:5c:ea:72:fb:66: b9:4b:86:72:bf:dc:f5:23:94:0a:bf:62:3b:11:3e: 8b:a8:b2:10:06:4d:61:b0:ad:14:10:52:70:1a:06: b1:b1:f8:62:ec:12:f8:58:70:d1:ad:a8:53:81:2c: 8a:b9:04:eb:4b:50:75:f9:5c:a2:5a:95:87:6a:22: 5d:c1:3e:b3:2a:3c:6f:8b:93:9b:1a:4b:3c:d9:75: 50:96:26:61:f8:38:30:bc:96:e9:65:ab:fd:88:2a: e2:60:24:0f:23:a1:91:c7:39:58:70:7c:6b:2b:05: 2e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F3:E9:8D:C8:B2:C8:AB:4A:8E:EB:EA:61:38:77:1E:7B:6B:E9:AE X509v3 Authority Key Identifier: keyid:B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:48:6b:1d:90:e3:8a:bc:7e:fb:5e:b6:b7:66:24:7e:91:43: 71:bd:16:6c:37:53:cc:b9:89:27:05:b1:ff:8f:29:31:8f:65: 6f:76:41:90:57:f0:e9:0c:f4:42:5d:bc:87:f4:a4:e4:5a:b6: 73:ce:48:82:d1:47:d8:28:5e:b5:77:82:71:2e:8f:d3:9b:87: bb:5a:e6:29:55:05:71:ed:97:aa:63:ad:5f:08:cd:04:26:aa: 44:8a:aa:70:1a:c3:b6:4b:32:77:12:26:23:eb:2e:56:ee:dd: fe:a5:69:c9:a8:72:03:36:25:ee:b4:37:f0:52:06:a3:cd:20: 41:7d:05:f7:73:19:ed:47:d3:fc:3f:01:06:07:83:78:6c:3f: 7c:f6:07:70:2d:e0:0f:a1:a2:49:dd:b7:68:46:45:75:2b:fc: 23:0a:4f:5c:97:2f:5d:61:50:8b:ad:9b:f3:eb:15:12:d0:66: 63:9a:f4:17:bb:7f:6e:6a:7c:19:36:63:d1:b5:09:4f:6d:c1: bf:3d:e7:e6:f8:9c:ed:d7:72:32:39:07:14:7d:58:0b:e2:d3: 0e:5c:ab:48:a2:63:4e:61:0f:a8:aa:fc:f5:fe:9f:36:61:f8: aa:e1:2b:6c:55:52:6a:14:98:eb:6f:5f:09:56:71:35:f4:f3: ab:53:b9:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYkpM2VOSaWUf8RE0+PvZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMDc4MGRmMzZiNWI5NDJmNjYwZTQwM2EyZmU2MDhhNzVl NGU1N2QwHhcNMjUxMjE1MDUwMTEwWhcNMjUxMjE2MDUwMTEwWjAzMTEwLwYDVQQD EyhlZGYzZTk4ZGM4YjJjOGFiNGE4ZWViZWE2MTM4NzcxZTdiNmJlOWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnys7tXMPDuN2Cqe/KqQEy1yNU0kw 76LzMnUdUhLsNz5ERuD3MQqxe29HBD9+zKfRETZV+WkZQFICwhbMcryCl0s3irmU xbrEAMUGNrfvNC2Kv6wBNgaSjZEFq3kCl9hfyVmoqfrlNIQmMnJa71LUtVcMs8HK 2F+Se6nDaymalWGpmvg/Nq2HfKP6zWpmMoYBXOpy+2a5S4Zyv9z1I5QKv2I7ET6L qLIQBk1hsK0UEFJwGgaxsfhi7BL4WHDRrahTgSyKuQTrS1B1+VyiWpWHaiJdwT6z Kjxvi5ObGks82XVQliZh+DgwvJbpZav9iCriYCQPI6GRxzlYcHxrKwUuMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3z6Y3IssirSo7r6mE4dx57a+muMB8GA1UdIwQY MBaAFLEHgN82tblC9mDkA6L+YIp15OV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iNTY1MDQtZWQxNy00MTk3LWJiYTAt YTBhZGVjZmQ1ZmE5LzEvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iNTY1MDQtZWQxNy00MTk3LWJiYTAtYTBhZGVjZmQ1ZmE5 LzEvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0hrHZDj irx++162t2YkfpFDcb0WbDdTzLmJJwWx/48pMY9lb3ZBkFfw6Qz0Ql28h/Sk5Fq2 c85IgtFH2ChetXeCcS6P05uHu1rmKVUFce2XqmOtXwjNBCaqRIqqcBrDtksydxIm I+suVu7d/qVpyahyAzYl7rQ38FIGo80gQX0F93MZ7UfT/D8BBgeDeGw/fPYHcC3g D6GiSd23aEZFdSv8IwpPXJcvXWFQi62b8+sVEtBmY5r0F7t/bmp8GTZj0bUJT23B vz3n5vic7ddyMjkHFH1YC+LTDlyrSKJjTmEPqKr89f6fNmH4quErbFVSahSY629f CVZxNfTzq1O5eg== -----END CERTIFICATE-----Generated at Mon Dec 15 12:09:53 2025 by rpki-client