This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft File: SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json) Hash identifier: eAcjnwQGprZl2p8E8Ki2Etu8CwSef8ceojsqQKOz7Is= Subject key identifier: 43:E7:51:9C:AD:12:BC:34:5B:EC:EC:F3:9B:E6:ED:3F:F9:04:50:00 Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05 Certificate issuer: /CN=490db999ca4ce287c5c92ab167a500902259bb05 Certificate serial: 019BF72C8413B8FC2968391DD661DF34772E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 22:00:48 +0000 Manifest this update: Sun 25 Jan 2026 22:00:48 +0000 Manifest next update: Mon 26 Jan 2026 22:00:48 +0000 Files and hashes: 1: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: Qwb3LHgSDzxeLJLJ2wfFXXeALYi89zVj2G8ms71J8WQ=) 2: hAZrKewTVxZT3GF5DqzKsU9bNKo.roa (hash: fsGaTWUHmLGtuoOa159GIKQVUnBG8uk4RWTcKenk10M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:84:13:b8:fc:29:68:39:1d:d6:61:df:34:77:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05 Validity Not Before: Jan 25 22:00:48 2026 GMT Not After : Jan 26 22:00:48 2026 GMT Subject: CN=43e7519cad12bc345bececf39be6ed3ff9045000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:19:00:05:77:b3:b4:74:c5:9b:9f:d6:1f: e7:47:ee:4b:c2:db:71:60:b0:b6:d0:db:ff:3e:2b: cf:6b:4d:83:89:a0:7f:37:63:ba:68:b6:b9:3f:a7: 87:71:e1:d8:27:a4:d7:e4:b1:75:be:63:ff:da:19: 18:49:70:ca:53:21:e7:90:70:18:09:25:0d:6d:f5: e5:48:e4:26:14:ff:41:c1:e2:0f:31:9c:c9:f0:42: 8c:11:56:5d:03:cc:cb:86:e8:e2:06:3a:1a:01:16: 33:e9:cd:76:2d:a7:d3:80:9b:e7:9b:1d:fe:cc:04: c0:2a:40:a4:42:69:13:ba:6c:54:6a:e7:37:d5:70: e8:90:e7:6e:f2:d6:bf:a6:10:f1:81:68:43:ec:05: 5c:d9:c8:61:1e:9e:c7:6f:77:19:c7:a3:b3:e8:86: 04:88:51:0d:d9:d1:15:b0:08:43:2e:fa:b4:7b:5b: 29:46:c6:1c:33:e0:a9:a8:a4:ed:6f:c0:ea:62:df: bf:39:35:16:3b:87:c0:47:b1:9b:ad:4e:c3:e4:6a: a6:56:36:a8:ab:ba:58:1a:3e:20:4d:45:d7:c1:68: e2:9b:f1:05:eb:09:a7:c2:5f:93:4d:e8:75:e5:d9: d9:4f:0a:06:71:61:2b:3a:88:f8:ed:00:b5:0f:94: dd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E7:51:9C:AD:12:BC:34:5B:EC:EC:F3:9B:E6:ED:3F:F9:04:50:00 X509v3 Authority Key Identifier: keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:34:2a:75:92:34:2a:eb:63:a7:f8:85:d6:43:8d:71:27:12: 4a:b4:e5:5c:5b:ab:5e:8c:85:18:19:fb:b5:5f:5b:cf:e4:9c: 4f:ba:8f:6f:ec:32:9f:c3:4d:60:8a:c2:80:46:db:e0:9a:14: 46:e3:19:63:48:bd:d1:2d:c2:3b:6f:60:fd:80:92:e2:bd:3f: 3d:b2:c5:de:2e:60:cd:92:0c:f2:03:c8:2e:04:6e:42:1b:e6: 39:88:e8:8d:f6:1c:23:8c:32:32:7e:86:81:c0:67:80:2e:47: fc:53:b8:7a:02:25:b2:ef:da:ab:32:e8:37:12:08:52:f3:07: e8:56:71:2f:c2:4d:2b:7b:db:32:63:ff:d8:2e:83:07:72:08: 4a:d6:96:f5:77:28:4b:b5:2c:a1:ae:d2:98:68:18:47:99:76: a4:89:83:4e:05:66:30:fa:1b:29:92:cd:29:08:ae:3b:72:2b: c4:39:fb:46:8f:66:a2:a5:c4:a6:ff:f1:cb:18:8a:e3:ab:01: bb:6a:61:ef:fc:0a:45:1e:dd:ef:ae:2a:59:a1:7b:fa:8c:b7: 7e:ab:ae:e0:d0:78:af:8a:ad:6e:49:2d:3a:46:9b:4a:4f:c5: 39:21:e1:3d:3a:53:78:f8:c1:d0:e9:36:08:10:07:5a:9f:3a: 6e:1f:7c:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LIQTuPwpaDkd1mHfNHcuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MGRiOTk5Y2E0Y2UyODdjNWM5MmFiMTY3YTUwMDkwMjI1 OWJiMDUwHhcNMjYwMTI1MjIwMDQ4WhcNMjYwMTI2MjIwMDQ4WjAzMTEwLwYDVQQD Eyg0M2U3NTE5Y2FkMTJiYzM0NWJlY2VjZjM5YmU2ZWQzZmY5MDQ1MDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoUZAAV3s7R0xZuf1h/nR+5Lwttx YLC20Nv/PivPa02DiaB/N2O6aLa5P6eHceHYJ6TX5LF1vmP/2hkYSXDKUyHnkHAY CSUNbfXlSOQmFP9BweIPMZzJ8EKMEVZdA8zLhujiBjoaARYz6c12LafTgJvnmx3+ zATAKkCkQmkTumxUauc31XDokOdu8ta/phDxgWhD7AVc2chhHp7Hb3cZx6Oz6IYE iFEN2dEVsAhDLvq0e1spRsYcM+CpqKTtb8DqYt+/OTUWO4fAR7GbrU7D5GqmVjao q7pYGj4gTUXXwWjim/EF6wmnwl+TTeh15dnZTwoGcWErOoj47QC1D5TdLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPnUZytErw0W+zs85vm7T/5BFAAMB8GA1UdIwQY MBaAFEkNuZnKTOKHxckqsWelAJAiWbsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUt OThlMjVlMDQ2OTA4LzEvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUtOThlMjVlMDQ2OTA4 LzEvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODQqdZI0 Kutjp/iF1kONcScSSrTlXFurXoyFGBn7tV9bz+ScT7qPb+wyn8NNYIrCgEbb4JoU RuMZY0i90S3CO29g/YCS4r0/PbLF3i5gzZIM8gPILgRuQhvmOYjojfYcI4wyMn6G gcBngC5H/FO4egIlsu/aqzLoNxIIUvMH6FZxL8JNK3vbMmP/2C6DB3IIStaW9Xco S7Usoa7SmGgYR5l2pImDTgVmMPobKZLNKQiuO3IrxDn7Ro9moqXEpv/xyxiK46sB u2ph7/wKRR7d764qWaF7+oy3fquu4NB4r4qtbkktOkabSk/FOSHhPTpTePjB0Ok2 CBAHWp86bh98NQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:34 2026 by rpki-client