This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft File: Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft (raw, json) Hash identifier: DBog27Ck2K2d6goAkvwCTYn2K/GSuTkM3jY4/akdi5s= Subject key identifier: CF:42:5C:EB:B9:63:9B:DD:6F:12:CF:A6:FD:DC:AB:67:64:89:F5:76 Authority key identifier: 4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0 Certificate issuer: /CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0 Certificate serial: 019AF19BC15E96588AAE438588ED31BDA9A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:47 +0000 Manifest this update: Sat 06 Dec 2025 03:01:47 +0000 Manifest next update: Sun 07 Dec 2025 03:01:47 +0000 Files and hashes: 1: 9jNi3XWKVAeYgvXNk0P0T-yhT_A.roa (hash: r6wD0yfA7SejIQA44lGGyfTLE1iB9zVRdLay3h3WMPk=) 2: Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl (hash: Q/Z0owCksYIibzCGzshUxIsWT7fTI6MZo+BPSttrJ0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:c1:5e:96:58:8a:ae:43:85:88:ed:31:bd:a9:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0 Validity Not Before: Dec 6 03:01:47 2025 GMT Not After : Dec 7 03:01:47 2025 GMT Subject: CN=cf425cebb9639bdd6f12cfa6fddcab676489f576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:5d:21:58:f7:ff:da:27:53:de:5e:3c:08: 9d:7d:39:54:1e:fe:e5:1c:d4:31:54:16:2c:82:2e: 03:62:09:1c:7e:20:29:af:cd:93:c3:f4:b7:5c:34: 69:1b:09:cc:c5:3d:5b:b7:d5:01:f0:71:c7:e8:fa: f5:9c:2c:86:ab:4c:4f:73:6a:a6:4e:63:26:11:1d: 02:f8:52:2e:d3:ee:e9:16:02:7f:de:b1:d6:58:b8: 47:3d:09:c2:e9:43:25:a5:db:fa:11:44:7a:95:fe: 81:af:b3:29:45:d3:06:41:f0:db:50:01:d8:aa:88: 91:1a:8e:34:c6:29:b0:8e:37:89:c1:ba:93:d5:1e: c0:e6:61:8e:cb:48:74:14:f3:fe:1a:7f:0e:69:5a: 8e:c5:b8:22:ea:2c:fa:cc:1a:81:a1:24:57:8d:93: 0f:77:1e:66:94:a5:5a:1e:ed:71:0f:03:de:c2:ce: 18:92:a9:ad:04:6c:6a:ef:4c:98:e9:b4:78:18:3a: a8:dd:19:88:ff:1f:54:ed:c4:02:ab:3e:ca:56:b6: 7c:94:7b:08:00:8e:f8:a9:ba:82:75:0c:15:24:fc: d1:be:03:dd:9c:46:78:eb:6f:ed:21:31:64:64:95: f4:1d:68:40:33:18:d9:ed:41:11:d3:c8:1e:d1:ff: b7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:42:5C:EB:B9:63:9B:DD:6F:12:CF:A6:FD:DC:AB:67:64:89:F5:76 X509v3 Authority Key Identifier: keyid:4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9b:55:c6:57:8c:45:1a:01:d7:3f:7a:3b:bf:4a:05:9c:87: 54:ce:a4:09:3a:f8:1a:80:89:03:48:bc:c0:46:97:fa:17:ea: b0:8d:5b:a2:be:f2:5f:db:ee:bf:94:3b:bb:5b:2f:1b:ed:7f: e9:fd:8c:ce:03:48:9b:37:e2:65:4c:4e:ee:64:1e:f2:eb:6d: 4b:89:32:33:53:16:45:d7:c3:bf:b6:c4:de:11:01:6e:61:da: 64:38:06:32:1f:4f:6f:34:76:2c:63:84:fa:c8:b6:83:c2:f5: 81:ab:c3:f7:bb:24:0a:25:3a:2b:18:85:29:44:ed:49:83:42: f4:67:ec:14:a9:de:da:d5:ca:6c:0b:30:14:6e:05:32:4b:25: 83:18:65:a2:6e:d2:23:f4:67:ac:38:d2:9e:9f:b7:1c:27:b8: 9d:ca:49:04:79:a5:13:5f:f1:4a:17:ec:1c:3e:2c:18:dd:b8: cd:b6:56:2b:c9:58:3b:32:cc:be:c8:bb:b1:d8:b9:f9:e5:eb: 37:76:1e:30:05:6a:94:3c:01:a2:55:a1:49:bd:ba:34:af:42: 43:ff:61:3b:cf:bd:82:31:89:44:ec:ac:17:6b:a7:bb:18:90: 52:8d:a1:d6:01:eb:f4:07:b7:1a:2d:cf:d3:6c:7a:0f:f6:c5: 95:e4:f5:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm8FelliKrkOFiO0xvampMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYWZlNDViMzBmYTdmNTk0OTI1ZGQzOTViYTE0Y2VmYjY3 M2UyYzAwHhcNMjUxMjA2MDMwMTQ3WhcNMjUxMjA3MDMwMTQ3WjAzMTEwLwYDVQQD EyhjZjQyNWNlYmI5NjM5YmRkNmYxMmNmYTZmZGRjYWI2NzY0ODlmNTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvJdIVj3/9onU95ePAidfTlUHv7l HNQxVBYsgi4DYgkcfiApr82Tw/S3XDRpGwnMxT1bt9UB8HHH6Pr1nCyGq0xPc2qm TmMmER0C+FIu0+7pFgJ/3rHWWLhHPQnC6UMlpdv6EUR6lf6Br7MpRdMGQfDbUAHY qoiRGo40ximwjjeJwbqT1R7A5mGOy0h0FPP+Gn8OaVqOxbgi6iz6zBqBoSRXjZMP dx5mlKVaHu1xDwPews4YkqmtBGxq70yY6bR4GDqo3RmI/x9U7cQCqz7KVrZ8lHsI AI74qbqCdQwVJPzRvgPdnEZ462/tITFkZJX0HWhAMxjZ7UER08ge0f+3MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9CXOu5Y5vdbxLPpv3cq2dkifV2MB8GA1UdIwQY MBaAFEqv5Fsw+n9ZSSXdOVuhTO+2c+LAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Ffa1d6RDZmMWxKSmQwNVc2Rk03N1p6NHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZTA5ZmItZjUzNi00N2ExLTk3ODct ZjFmNjAzZjkxOTcxLzEvU3Ffa1d6RDZmMWxKSmQwNVc2Rk03N1p6NHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZTA5ZmItZjUzNi00N2ExLTk3ODctZjFmNjAzZjkxOTcx LzEvU3Ffa1d6RDZmMWxKSmQwNVc2Rk03N1p6NHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5tVxleM RRoB1z96O79KBZyHVM6kCTr4GoCJA0i8wEaX+hfqsI1bor7yX9vuv5Q7u1svG+1/ 6f2MzgNImzfiZUxO7mQe8uttS4kyM1MWRdfDv7bE3hEBbmHaZDgGMh9PbzR2LGOE +si2g8L1gavD97skCiU6KxiFKUTtSYNC9GfsFKne2tXKbAswFG4FMkslgxhlom7S I/RnrDjSnp+3HCe4ncpJBHmlE1/xShfsHD4sGN24zbZWK8lYOzLMvsi7sdi5+eXr N3YeMAVqlDwBolWhSb26NK9CQ/9hO8+9gjGJROysF2unuxiQUo2h1gHr9Ae3Gi3P 02x6D/bFleT1bg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:25 2025 by rpki-client