This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft File: sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft (raw, json) Hash identifier: lVm+CqC+rxVCBm3d0jIdJIj2/Kyd3aTM/1Zqe09UuL4= Subject key identifier: 04:48:8C:96:84:E3:71:99:F8:72:61:09:91:A8:A0:85:00:A7:12:40 Authority key identifier: B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57 Certificate issuer: /CN=b1040bc251fe02669f57fea572743a37acfbd557 Certificate serial: 019B5A1AC6AFAEDBF67D890F7B0408C2E29A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft Manifest number: 093D Signing time: Fri 26 Dec 2025 10:01:02 +0000 Manifest this update: Fri 26 Dec 2025 10:01:02 +0000 Manifest next update: Sat 27 Dec 2025 10:01:02 +0000 Files and hashes: 1: sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl (hash: AbfVSDRXQeb8lQ+jsCN8nGErP6EtzMXoXM37e+isBag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:c6:af:ae:db:f6:7d:89:0f:7b:04:08:c2:e2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1040bc251fe02669f57fea572743a37acfbd557 Validity Not Before: Dec 26 10:01:02 2025 GMT Not After : Dec 27 10:01:02 2025 GMT Subject: CN=04488c9684e37199f872610991a8a08500a71240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:af:15:b3:4f:51:46:7c:b1:ba:c7:ab:51:57: d0:c8:c0:2d:1c:fb:83:cd:a6:f7:3e:d8:9c:14:9d: d5:5e:c3:6b:34:17:1e:bc:69:69:ec:1d:51:77:5c: 4a:d5:8c:c9:e9:21:3f:22:3d:6f:3f:ca:b9:86:2f: 84:62:e1:21:d4:fe:35:75:dc:5a:ac:f6:cb:02:51: fa:d7:35:16:0d:ed:5c:33:a0:5c:e7:2d:9d:54:a9: 55:cc:87:f6:70:e9:4c:97:cd:f9:63:d0:66:9e:3d: 5d:04:34:ec:4f:5b:c1:b8:7f:4e:d4:12:a3:1f:30: de:30:58:26:9b:01:00:8d:d4:a1:79:5a:e2:7a:5d: 63:30:3c:52:ec:b6:c9:4e:43:05:34:e2:fb:57:76: 73:bd:69:6f:25:0e:56:b3:3e:8a:65:77:00:de:b3: 8a:c3:dd:a8:c7:dc:b4:73:ed:01:26:08:df:92:2a: 41:7b:ac:d9:81:48:33:d3:00:94:a2:97:74:85:ba: c6:d4:4b:d2:26:f8:21:2e:cc:20:90:09:70:f1:ac: ec:31:53:91:3d:df:0a:2a:42:0b:fe:06:aa:2d:37: 08:4b:51:ac:9d:a7:33:71:da:7a:e2:1a:e1:81:c7: 5a:36:2e:e9:b5:43:35:b8:d2:1e:0a:60:e5:56:b3: 12:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:48:8C:96:84:E3:71:99:F8:72:61:09:91:A8:A0:85:00:A7:12:40 X509v3 Authority Key Identifier: keyid:B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:fc:cf:fb:56:3c:c7:db:a1:eb:3d:f8:96:d9:9f:ce:01:34: 5b:8f:09:a2:8b:42:59:13:1d:62:45:63:c6:de:a7:2c:55:27: a2:ee:aa:ad:82:ae:d6:73:56:ba:1d:e9:9a:72:ab:4e:b9:50: 84:cd:67:21:b1:71:a5:a9:14:f2:01:fd:35:1a:85:2d:54:39: d8:fc:c6:7d:ea:ef:ef:f3:61:b4:1c:07:1c:0d:01:5c:6d:56: 48:4c:83:86:32:18:39:d7:66:4e:a5:ce:34:88:f8:52:00:e0: 11:47:34:62:ca:15:c9:14:6e:cd:c9:d0:e9:ad:ab:a4:03:5f: 86:a2:9a:d4:ca:af:67:55:0a:c8:8c:16:e6:5f:24:94:59:2c: 9a:39:16:38:2d:6e:91:a0:9a:ee:da:b8:88:43:b4:ab:6b:36: 08:77:ca:4b:dc:a4:df:7b:67:16:e2:a5:f8:06:94:8e:43:71: ab:0f:fb:c5:4c:80:60:eb:36:a9:e6:b1:59:15:be:7f:b8:06: 0a:c0:de:c9:39:7c:df:9f:6b:89:71:6c:fe:bf:54:8f:91:d1: 63:0b:28:43:e0:1e:e8:41:30:f8:d4:80:15:06:a3:ca:64:ee: 3d:45:85:c0:14:e4:ea:2b:03:de:cd:5f:04:59:9a:fc:4c:43: b8:f8:e6:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGsavrtv2fYkPewQIwuKaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMDQwYmMyNTFmZTAyNjY5ZjU3ZmVhNTcyNzQzYTM3YWNm YmQ1NTcwHhcNMjUxMjI2MTAwMTAyWhcNMjUxMjI3MTAwMTAyWjAzMTEwLwYDVQQD EygwNDQ4OGM5Njg0ZTM3MTk5Zjg3MjYxMDk5MWE4YTA4NTAwYTcxMjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK8Vs09RRnyxuserUVfQyMAtHPuD zab3PticFJ3VXsNrNBcevGlp7B1Rd1xK1YzJ6SE/Ij1vP8q5hi+EYuEh1P41ddxa rPbLAlH61zUWDe1cM6Bc5y2dVKlVzIf2cOlMl835Y9Bmnj1dBDTsT1vBuH9O1BKj HzDeMFgmmwEAjdSheVriel1jMDxS7LbJTkMFNOL7V3ZzvWlvJQ5Wsz6KZXcA3rOK w92ox9y0c+0BJgjfkipBe6zZgUgz0wCUopd0hbrG1EvSJvghLswgkAlw8azsMVOR Pd8KKkIL/gaqLTcIS1Gsnaczcdp64hrhgcdaNi7ptUM1uNIeCmDlVrMSewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARIjJaE43GZ+HJhCZGooIUApxJAMB8GA1UdIwQY MBaAFLEEC8JR/gJmn1f+pXJ0Ojes+9VXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xMzA1ZDctM2ExNi00NjIzLWI3NGUt ZWVhZjIwZWJmOGVmLzEvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8xMzA1ZDctM2ExNi00NjIzLWI3NGUtZWVhZjIwZWJmOGVm LzEvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvzP+1Y8 x9uh6z34ltmfzgE0W48JootCWRMdYkVjxt6nLFUnou6qrYKu1nNWuh3pmnKrTrlQ hM1nIbFxpakU8gH9NRqFLVQ52PzGferv7/NhtBwHHA0BXG1WSEyDhjIYOddmTqXO NIj4UgDgEUc0YsoVyRRuzcnQ6a2rpANfhqKa1MqvZ1UKyIwW5l8klFksmjkWOC1u kaCa7tq4iEO0q2s2CHfKS9yk33tnFuKl+AaUjkNxqw/7xUyAYOs2qeaxWRW+f7gG CsDeyTl8359riXFs/r9Uj5HRYwsoQ+Ae6EEw+NSAFQajymTuPUWFwBTk6isD3s1f BFma/ExDuPjm+w== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:21 2025 by rpki-client