This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft File: u-Sqx31jiC90NiBwTCTb7bGIDXo.mft (raw, json) Hash identifier: YjalcnknrWtBRbpnJpfJQtNa++yyv7FJK5lpt9+34mM= Subject key identifier: B4:B2:51:E5:F5:9C:33:4B:56:46:4C:B7:3E:87:19:CF:BE:D4:2E:EE Authority key identifier: BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A Certificate issuer: /CN=bbe4aac77d63882f743620704c24dbedb1880d7a Certificate serial: 019AF12DA054016931E6D54E7B12510C0E48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft Manifest number: 06BB Signing time: Sat 06 Dec 2025 01:01:30 +0000 Manifest this update: Sat 06 Dec 2025 01:01:30 +0000 Manifest next update: Sun 07 Dec 2025 01:01:30 +0000 Files and hashes: 1: u-Sqx31jiC90NiBwTCTb7bGIDXo.crl (hash: Gu4tOpBbmZy1Wpaen1hEAF/B9XWaSq35wMXJjAU/MhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a0:54:01:69:31:e6:d5:4e:7b:12:51:0c:0e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe4aac77d63882f743620704c24dbedb1880d7a Validity Not Before: Dec 6 01:01:30 2025 GMT Not After : Dec 7 01:01:30 2025 GMT Subject: CN=b4b251e5f59c334b56464cb73e8719cfbed42eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:e5:8e:71:69:1f:88:6a:35:ff:4e:84:78: 98:3d:f2:f7:f9:f2:00:b7:7b:72:8a:00:72:a3:73: 1d:05:65:5a:64:30:56:41:b2:37:c2:2a:1b:e4:3a: e0:f7:89:44:2b:9f:96:f2:23:06:46:1c:27:9b:85: 9d:6f:aa:df:74:86:18:01:93:14:d2:c0:04:be:9a: 27:0f:cb:1f:52:29:cd:c3:6a:c4:0a:49:65:f8:97: fe:50:e0:03:e7:56:80:79:5a:9b:45:e9:76:10:04: aa:6f:92:ba:16:9c:d2:cc:89:44:6b:c5:2b:67:fb: 2a:a9:74:5c:3b:8e:48:13:d5:23:84:bf:c5:07:83: df:f7:ff:dc:c5:1c:39:b6:ee:08:fd:d8:fc:e7:3c: bf:6d:6f:a0:5a:51:f2:b7:3b:09:d8:64:32:11:72: 71:97:3a:09:80:0c:22:ee:cf:b5:00:c0:e8:c9:87: 89:be:8e:25:a7:4b:e3:7c:c6:53:ab:cd:a7:cf:91: 02:17:95:13:e3:33:ee:ef:74:ff:22:70:16:4e:6f: ca:38:5a:e2:94:1f:26:9f:26:e0:1c:40:c8:77:f1: b5:9b:d7:4c:56:02:e9:74:ab:6d:27:5e:1d:b7:e3: 52:d7:51:92:8e:69:14:c4:cf:98:bd:cf:3a:d7:31: 28:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B2:51:E5:F5:9C:33:4B:56:46:4C:B7:3E:87:19:CF:BE:D4:2E:EE X509v3 Authority Key Identifier: keyid:BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:c3:d2:65:64:5b:18:80:ec:3a:30:5c:ce:90:4e:d4:3a:cf: 6e:b5:15:c2:b6:9f:53:36:11:71:9f:e7:9f:7b:e2:08:d2:65: 0d:49:49:bd:cb:29:56:c1:1b:b0:39:05:f6:54:6b:22:b1:0f: 72:98:00:fb:a0:e8:32:15:59:c9:8d:4f:a6:f0:f3:90:0c:00: 75:38:92:b6:84:13:f1:10:ff:54:f9:21:a5:db:d7:d5:53:bb: 03:1b:83:ad:3e:6e:ee:d8:6a:b6:e9:c8:ba:96:58:0d:b4:3b: 28:0d:86:4c:85:cf:7b:61:e7:e0:c7:00:f2:d0:92:12:a2:86: 5a:77:03:c6:a8:70:fd:82:68:6c:49:6d:0e:b5:70:de:ca:85: df:e2:c7:1a:a2:53:70:5d:11:70:43:25:87:3d:ae:9a:41:b7: 84:e1:8d:31:d5:54:48:81:f7:1c:e3:e1:ab:16:24:45:cc:87: ba:42:e5:e9:bf:b5:df:a2:97:06:02:06:db:8e:77:a4:91:25: 92:db:7f:c6:a5:ef:93:6f:45:c9:f9:38:eb:2a:ad:a3:ca:1a: 41:5d:97:4d:43:63:57:26:40:23:ac:50:00:f6:fb:15:af:b0: b7:84:75:a2:0b:5e:e5:5a:c1:96:dc:1d:50:84:8f:a8:a1:52: e3:d7:a7:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaBUAWkx5tVOexJRDA5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTRhYWM3N2Q2Mzg4MmY3NDM2MjA3MDRjMjRkYmVkYjE4 ODBkN2EwHhcNMjUxMjA2MDEwMTMwWhcNMjUxMjA3MDEwMTMwWjAzMTEwLwYDVQQD EyhiNGIyNTFlNWY1OWMzMzRiNTY0NjRjYjczZTg3MTljZmJlZDQyZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyPljnFpH4hqNf9OhHiYPfL3+fIA t3tyigByo3MdBWVaZDBWQbI3wiob5Drg94lEK5+W8iMGRhwnm4Wdb6rfdIYYAZMU 0sAEvponD8sfUinNw2rECkll+Jf+UOAD51aAeVqbRel2EASqb5K6FpzSzIlEa8Ur Z/sqqXRcO45IE9UjhL/FB4Pf9//cxRw5tu4I/dj85zy/bW+gWlHytzsJ2GQyEXJx lzoJgAwi7s+1AMDoyYeJvo4lp0vjfMZTq82nz5ECF5UT4zPu73T/InAWTm/KOFri lB8mnybgHEDId/G1m9dMVgLpdKttJ14dt+NS11GSjmkUxM+Yvc861zEo1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSyUeX1nDNLVkZMtz6HGc++1C7uMB8GA1UdIwQY MBaAFLvkqsd9Y4gvdDYgcEwk2+2xiA16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1TcXgzMWppQzkwTmlCd1RDVGI3YkdJRFhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kNGQ3ZDItOWNiMi00Y2UwLTg2NjUt MWJhMjFiMGUyOTEzLzEvdS1TcXgzMWppQzkwTmlCd1RDVGI3YkdJRFhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9kNGQ3ZDItOWNiMi00Y2UwLTg2NjUtMWJhMjFiMGUyOTEz LzEvdS1TcXgzMWppQzkwTmlCd1RDVGI3YkdJRFhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMPSZWRb GIDsOjBczpBO1DrPbrUVwrafUzYRcZ/nn3viCNJlDUlJvcspVsEbsDkF9lRrIrEP cpgA+6DoMhVZyY1PpvDzkAwAdTiStoQT8RD/VPkhpdvX1VO7AxuDrT5u7thqtunI upZYDbQ7KA2GTIXPe2Hn4McA8tCSEqKGWncDxqhw/YJobEltDrVw3sqF3+LHGqJT cF0RcEMlhz2umkG3hOGNMdVUSIH3HOPhqxYkRcyHukLl6b+136KXBgIG2453pJEl ktt/xqXvk29Fyfk46yqto8oaQV2XTUNjVyZAI6xQAPb7Fa+wt4R1ogte5VrBltwd UISPqKFS49enzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:56 2025 by rpki-client