This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft File: pqSmiq_slSLanKyAC0MkzNfWxaU.mft (raw, json) Hash identifier: 7zJIa9GqzjwlNJXmyYtELbPhR0EsSUYLEtJWrQse7z0= Subject key identifier: 76:94:D2:74:F2:43:14:76:E3:D7:06:4F:49:BF:3B:FC:60:17:96:13 Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5 Certificate issuer: /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5 Certificate serial: 019B0D490901BD9AC8DA20729107359D5762 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft Manifest number: 08E2 Signing time: Thu 11 Dec 2025 12:00:48 +0000 Manifest this update: Thu 11 Dec 2025 12:00:48 +0000 Manifest next update: Fri 12 Dec 2025 12:00:48 +0000 Files and hashes: 1: FERbP680nVn9-OXBaT2aTWtd8aw.roa (hash: zQlyYeEOYC4qxko+i8oAsMpuMceTMqew9h1oxgQMJNU=) 2: pqSmiq_slSLanKyAC0MkzNfWxaU.crl (hash: K+kAtAK8UJ7kJCYNpFQMMHWKnN19F4j0bvPS5SOid90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:49:09:01:bd:9a:c8:da:20:72:91:07:35:9d:57:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5 Validity Not Before: Dec 11 12:00:48 2025 GMT Not After : Dec 12 12:00:48 2025 GMT Subject: CN=7694d274f2431476e3d7064f49bf3bfc60179613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8d:59:6b:48:4c:d0:8d:b0:51:99:e3:ad:ef: 2d:2c:92:fb:3f:57:a8:9b:d8:fb:3d:a1:ad:ba:45: d8:fa:e4:b1:04:05:a1:35:16:82:20:d0:78:65:f3: 2d:8f:a3:33:9c:ae:17:c9:c1:8e:a9:6a:e8:6b:63: f9:4c:e6:b5:5e:d9:c8:8b:de:3a:2d:4c:33:d9:e2: 75:c5:f7:9b:78:f5:bc:a7:f8:9c:ba:2c:a0:8b:5c: 3b:32:92:4a:e5:6a:03:26:a6:89:37:fb:2f:2e:4c: 06:80:0a:59:b2:64:9c:78:82:47:aa:44:fa:b8:de: d2:9a:27:70:21:57:17:43:f0:1e:60:64:d5:60:45: b2:39:74:ad:c7:69:14:b9:7a:57:a5:8a:6f:78:33: 17:6c:4f:8e:25:27:b8:a0:46:21:80:78:a3:3b:32: 9f:90:a7:5e:b9:ae:9a:a8:ed:82:6c:fb:78:35:d1: 40:de:4b:1b:47:23:56:0d:88:88:87:ac:93:5a:f3: c0:f6:dd:c6:83:e6:fb:3a:3c:57:40:5e:df:cd:18: 07:19:25:50:79:e0:6a:0d:db:82:6f:cc:2f:44:4e: 2b:c7:d4:23:4b:6d:ab:6a:12:c7:45:0f:9c:36:9f: 3b:f2:39:6e:4a:1c:6f:ad:d3:0d:65:b9:aa:98:9a: 7e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:94:D2:74:F2:43:14:76:E3:D7:06:4F:49:BF:3B:FC:60:17:96:13 X509v3 Authority Key Identifier: keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b0:13:b9:4a:02:bd:96:60:51:0b:9c:92:9d:a4:87:c2:de: 2f:bb:14:40:ae:71:46:62:3a:74:1c:82:a5:e3:1a:cd:ec:2f: 2f:f1:61:8c:70:77:80:96:9d:3f:7e:fd:24:22:9c:92:fc:a1: 9f:4f:c9:37:7f:19:3a:a3:f0:aa:2d:37:89:ed:db:c0:7b:c1: 5d:fa:9a:0c:cb:55:5c:0b:ff:34:14:31:61:99:93:d0:38:d8: b2:db:dc:da:f4:de:17:51:4a:7b:11:08:6f:fe:a3:29:ef:b0: 99:34:bf:53:de:69:56:c7:75:ed:90:bf:c4:08:ec:21:50:7e: 5b:60:b6:e7:a8:80:57:3f:43:83:a1:e1:43:37:e9:21:23:fd: 28:dc:fc:fe:d5:2a:78:3a:d8:c0:5a:f3:81:ee:67:34:87:b0: 47:1e:93:46:81:28:c0:86:b6:40:86:87:76:8b:87:fb:fa:b1: 80:5f:8c:82:7e:91:31:31:24:17:34:06:bb:f6:f7:35:14:7f: d9:01:4b:0e:f4:f4:47:f4:22:e3:0e:97:40:91:5c:40:3f:d3: 78:86:31:30:e7:cd:c1:5a:3d:3f:0e:a1:8e:e9:45:5e:b2:d4: 54:44:c6:af:01:1d:f8:5d:d2:c6:25:de:38:3d:49:bc:87:d0: 71:c7:ae:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNSQkBvZrI2iBykQc1nVdiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTRhNjhhYWZlYzk1MjJkYTljYWM4MDBiNDMyNGNjZDdk NmM1YTUwHhcNMjUxMjExMTIwMDQ4WhcNMjUxMjEyMTIwMDQ4WjAzMTEwLwYDVQQD Eyg3Njk0ZDI3NGYyNDMxNDc2ZTNkNzA2NGY0OWJmM2JmYzYwMTc5NjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY1Za0hM0I2wUZnjre8tLJL7P1eo m9j7PaGtukXY+uSxBAWhNRaCINB4ZfMtj6MznK4XycGOqWroa2P5TOa1XtnIi946 LUwz2eJ1xfebePW8p/icuiygi1w7MpJK5WoDJqaJN/svLkwGgApZsmSceIJHqkT6 uN7SmidwIVcXQ/AeYGTVYEWyOXStx2kUuXpXpYpveDMXbE+OJSe4oEYhgHijOzKf kKdeua6aqO2CbPt4NdFA3ksbRyNWDYiIh6yTWvPA9t3Gg+b7OjxXQF7fzRgHGSVQ eeBqDduCb8wvRE4rx9QjS22rahLHRQ+cNp878jluShxvrdMNZbmqmJp+MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaU0nTyQxR249cGT0m/O/xgF5YTMB8GA1UdIwQY MBaAFKakpoqv7JUi2pysgAtDJMzX1sWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85ZTliMTctZWQ4My00MjcyLWJmYmUt ZTkzMDFhZmMzODRmLzEvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85ZTliMTctZWQ4My00MjcyLWJmYmUtZTkzMDFhZmMzODRm LzEvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7ATuUoC vZZgUQuckp2kh8LeL7sUQK5xRmI6dByCpeMazewvL/FhjHB3gJadP379JCKckvyh n0/JN38ZOqPwqi03ie3bwHvBXfqaDMtVXAv/NBQxYZmT0DjYstvc2vTeF1FKexEI b/6jKe+wmTS/U95pVsd17ZC/xAjsIVB+W2C256iAVz9Dg6HhQzfpISP9KNz8/tUq eDrYwFrzge5nNIewRx6TRoEowIa2QIaHdouH+/qxgF+Mgn6RMTEkFzQGu/b3NRR/ 2QFLDvT0R/Qi4w6XQJFcQD/TeIYxMOfNwVo9Pw6hjulFXrLUVETGrwEd+F3SxiXe OD1JvIfQcceueQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:04 2025 by rpki-client