This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json) Hash identifier: Avv0q2C8fTUQGH13xrV6ebA25noXtx2Qsj4O2hKhBfI= Subject key identifier: AA:F2:62:E4:56:82:F3:87:15:19:54:8D:8A:88:B9:BC:5E:57:32:D2 Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70 Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070 Certificate serial: 019B4627A2A2F3A666D41A174237220CB2C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft Manifest number: 17A2 Signing time: Mon 22 Dec 2025 13:02:41 +0000 Manifest this update: Mon 22 Dec 2025 13:02:41 +0000 Manifest next update: Tue 23 Dec 2025 13:02:41 +0000 Files and hashes: 1: FbIoob4iTw44eH-Dt8h61MoAIPY.roa (hash: 7Jgl5oeZbwQ2DvaEShI936iS6DHQaWaMAl7kfq1Du28=) 2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: iEZTgJUGzmzY5x128XRDaXZ9URHeQ8Uoa1cqva1byvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:a2:a2:f3:a6:66:d4:1a:17:42:37:22:0c:b2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070 Validity Not Before: Dec 22 13:02:41 2025 GMT Not After : Dec 23 13:02:41 2025 GMT Subject: CN=aaf262e45682f3871519548d8a88b9bc5e5732d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f7:b3:dc:ce:71:9b:da:ac:c0:8a:82:6b:37: 6b:d1:84:9e:d0:95:3c:5c:2c:91:4f:76:08:13:05: 90:fc:d4:bd:48:9a:a6:98:69:63:22:45:6c:a0:99: 91:f6:61:a6:43:e1:9d:f9:ac:14:d9:28:30:61:91: e5:d9:c6:21:53:34:a7:46:d1:8f:02:2b:47:61:f0: 8a:33:00:d4:43:60:04:fc:84:41:c8:1a:38:a8:f2: a3:73:c7:62:8f:9e:d8:95:5b:2b:c2:2e:45:fd:98: d3:4f:11:e7:63:27:a3:e6:d1:80:2d:f6:3e:30:23: 78:87:0b:74:0d:ba:a8:b8:bf:8c:80:13:ac:a5:60: 13:c0:1e:3c:60:7a:d0:2f:bd:35:51:86:d4:fb:e8: 76:35:4a:5b:ce:82:c6:fa:15:91:ac:4a:67:c9:15: 06:65:46:53:6f:fb:84:b4:a7:b5:3a:a8:14:70:e1: 34:d9:3c:45:02:35:9e:21:68:a1:45:9e:f9:39:61: 81:79:c3:3e:98:a2:56:84:f8:8c:8c:0b:56:ad:d3: d1:b6:bd:9b:b5:66:f8:09:70:4a:8a:75:d3:71:bf: 52:41:c8:0a:a9:53:0b:41:81:2d:a4:1c:a8:0b:82: c5:7c:be:c9:89:99:ce:65:e5:36:b5:99:4b:1b:2d: b8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F2:62:E4:56:82:F3:87:15:19:54:8D:8A:88:B9:BC:5E:57:32:D2 X509v3 Authority Key Identifier: keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:44:6e:32:46:ee:da:5e:fd:ed:4a:12:7f:cb:67:1f:0c:14: 64:68:85:8e:ff:8c:dc:6c:e3:da:8f:3f:4f:31:a4:4b:c0:63: a5:eb:58:f5:74:4b:12:77:38:62:56:02:99:c5:40:91:7f:d7: 72:d5:fc:49:a8:43:bb:fd:69:60:0e:d1:25:ac:a2:fc:ec:bc: 61:89:21:ae:b6:65:b1:14:fd:01:c4:68:bf:3e:96:9f:b4:83: c2:86:61:3f:4b:16:64:a0:6d:c9:95:36:5d:ed:a7:f6:67:c6: 7d:cf:62:c8:f8:a8:1a:7d:86:d7:d3:b6:ab:d7:da:40:e8:ec: f0:91:a6:9e:f7:02:8a:47:e6:68:93:a9:b9:5b:46:c6:71:38: aa:09:e8:70:e6:6a:ad:d2:d9:b9:2f:85:27:1b:e0:4d:c3:73: de:fa:bc:1b:97:a9:70:53:63:89:af:9e:1f:8f:69:d9:2d:f0: 1d:26:8d:fa:96:7b:3d:69:1a:4f:33:09:13:a5:06:57:59:49: 0c:e9:96:ea:52:1a:44:cf:48:73:cb:82:5e:6e:87:04:ee:fa: 88:d9:ff:d1:fd:5c:7c:fb:82:8e:21:eb:41:12:d3:85:77:4c: fa:13:65:61:cb:d3:0e:9f:cd:8a:0f:03:a2:f0:bb:dc:72:7d: c0:5f:b4:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ6Ki86Zm1BoXQjciDLLHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMGMzY2YzZGM1M2NhNTQ5YzAzZTRmNWY0NmQ5MWNlOTBi OGUwNzAwHhcNMjUxMjIyMTMwMjQxWhcNMjUxMjIzMTMwMjQxWjAzMTEwLwYDVQQD EyhhYWYyNjJlNDU2ODJmMzg3MTUxOTU0OGQ4YTg4YjliYzVlNTczMmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfez3M5xm9qswIqCazdr0YSe0JU8 XCyRT3YIEwWQ/NS9SJqmmGljIkVsoJmR9mGmQ+Gd+awU2SgwYZHl2cYhUzSnRtGP AitHYfCKMwDUQ2AE/IRByBo4qPKjc8dij57YlVsrwi5F/ZjTTxHnYyej5tGALfY+ MCN4hwt0DbqouL+MgBOspWATwB48YHrQL701UYbU++h2NUpbzoLG+hWRrEpnyRUG ZUZTb/uEtKe1OqgUcOE02TxFAjWeIWihRZ75OWGBecM+mKJWhPiMjAtWrdPRtr2b tWb4CXBKinXTcb9SQcgKqVMLQYEtpByoC4LFfL7JiZnOZeU2tZlLGy24EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKryYuRWgvOHFRlUjYqIubxeVzLSMB8GA1UdIwQY MBaAFLEMPPPcU8pUnAPk9fRtkc6QuOBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMt MzZmODJiZDM3OWJkLzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMtMzZmODJiZDM3OWJk LzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0RuMkbu 2l797UoSf8tnHwwUZGiFjv+M3Gzj2o8/TzGkS8BjpetY9XRLEnc4YlYCmcVAkX/X ctX8SahDu/1pYA7RJayi/Oy8YYkhrrZlsRT9AcRovz6Wn7SDwoZhP0sWZKBtyZU2 Xe2n9mfGfc9iyPioGn2G19O2q9faQOjs8JGmnvcCikfmaJOpuVtGxnE4qgnocOZq rdLZuS+FJxvgTcNz3vq8G5epcFNjia+eH49p2S3wHSaN+pZ7PWkaTzMJE6UGV1lJ DOmW6lIaRM9Ic8uCXm6HBO76iNn/0f1cfPuCjiHrQRLThXdM+hNlYcvTDp/Nig8D ovC73HJ9wF+0hA== -----END CERTIFICATE-----Generated at Mon Dec 22 20:27:20 2025 by rpki-client