This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft File: SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json) Hash identifier: HU4Gi2bmYSPxWDDXdoxF/k1E/sgS+82g+yw/BAh7o0g= Subject key identifier: BC:CA:51:03:C2:97:76:22:CB:5C:24:79:89:5C:25:FA:40:22:76:58 Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05 Certificate issuer: /CN=490db999ca4ce287c5c92ab167a500902259bb05 Certificate serial: 019AF23FD4E931BAFEA112858B15AD7B3216 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: CqiCeQuNX5qYQWUphyM9iUBKOh4.roa (hash: RxNADbHHkDaXqyxPAae3UN8wvqfkoDaWlyxd0mzE4zw=) 2: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: cRHbTu3TpHaJQwBNIz/wCrErKGcaizlRkOiTATBxx5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d4:e9:31:ba:fe:a1:12:85:8b:15:ad:7b:32:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05 Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=bcca5103c2977622cb5c2479895c25fa40227658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:d3:d8:04:a5:da:ac:b9:e2:78:2d:30:e1: e8:ba:05:25:03:fe:ed:03:44:86:69:ba:bf:d0:b2: 00:cd:49:1d:ff:13:e0:e8:59:76:54:e9:e7:9c:be: 70:37:e4:d9:d3:48:8e:5a:fe:fc:f2:e5:c2:52:60: 84:c0:0b:cd:67:1c:ed:24:7b:6b:1a:b9:dc:25:9f: a5:90:75:d4:45:8f:d9:a8:a3:7b:f2:a6:9c:98:92: 2e:25:33:ae:85:c3:8e:5d:48:84:91:2e:ac:95:d2: 35:24:49:85:3f:d3:3d:65:13:81:db:e7:ee:eb:67: 03:75:88:73:cc:2c:9b:36:19:35:e6:31:63:9c:e1: e7:98:0f:98:56:9d:38:c1:43:39:1d:a4:3b:c0:e5: 87:fe:ef:5f:2a:90:77:f2:17:f8:f5:98:4b:49:bf: e4:f9:b5:d6:ec:bc:97:ba:8c:34:03:71:3a:45:98: e2:7a:c4:d8:ae:0d:7a:06:f8:ed:7d:f3:1b:4e:1e: b3:7a:70:6f:1e:53:4c:f8:2c:71:e3:4b:3e:d8:c8: 7d:2b:3a:c8:1f:f0:1b:0c:14:45:e6:63:0e:51:25: c0:52:19:a3:03:af:14:c0:88:c8:a7:7a:5c:a5:b1: 49:46:15:47:15:a0:42:61:98:31:5a:e7:42:cf:62: 2b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CA:51:03:C2:97:76:22:CB:5C:24:79:89:5C:25:FA:40:22:76:58 X509v3 Authority Key Identifier: keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:33:b0:89:41:60:62:10:09:29:4b:b2:d5:68:b3:73:6c:2d: c3:26:8c:34:ca:7c:35:96:a1:ea:d2:2f:86:18:e4:34:0e:79: 77:cb:b7:55:fc:db:77:4f:10:9a:8f:70:d8:9d:4b:91:e8:b1: 21:0c:53:14:65:4c:72:89:54:95:8a:9c:6d:de:61:e2:88:4a: 69:89:c8:bc:63:71:79:21:d6:26:8a:f8:67:64:24:0e:55:9a: 39:98:23:e4:a7:80:d9:ac:07:91:10:9b:d6:56:0e:04:d9:55: 18:9d:d1:39:3c:c1:5e:7b:7a:86:73:a0:41:56:c3:29:bb:1f: 5f:4f:66:24:9e:47:53:18:9b:e2:f2:bd:1a:b2:2f:93:ed:83: 5b:00:b0:6f:b4:6f:8f:6d:ac:62:4c:82:c1:d0:c6:b6:f1:35: 05:bd:c4:c9:16:12:6f:6b:77:35:b5:a5:a9:f6:b3:04:a6:17: b6:bd:c3:82:3b:cd:fb:a1:dc:41:c0:e0:79:da:5f:00:1a:3a: 6b:48:ca:65:a5:7c:fa:3c:54:2e:50:40:04:3e:f4:15:f9:21: c2:89:9b:23:68:9a:eb:88:3d:26:03:7a:42:58:39:90:4d:16: c3:0c:ec:fa:6d:48:7a:f2:91:5f:91:b8:b2:e2:0a:16:a3:2e: e1:28:0d:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9TpMbr+oRKFixWtezIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MGRiOTk5Y2E0Y2UyODdjNWM5MmFiMTY3YTUwMDkwMjI1 OWJiMDUwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD EyhiY2NhNTEwM2MyOTc3NjIyY2I1YzI0Nzk4OTVjMjVmYTQwMjI3NjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7XT2ASl2qy54ngtMOHougUlA/7t A0SGabq/0LIAzUkd/xPg6Fl2VOnnnL5wN+TZ00iOWv788uXCUmCEwAvNZxztJHtr GrncJZ+lkHXURY/ZqKN78qacmJIuJTOuhcOOXUiEkS6sldI1JEmFP9M9ZROB2+fu 62cDdYhzzCybNhk15jFjnOHnmA+YVp04wUM5HaQ7wOWH/u9fKpB38hf49ZhLSb/k +bXW7LyXuow0A3E6RZjiesTYrg16BvjtffMbTh6zenBvHlNM+Cxx40s+2Mh9KzrI H/AbDBRF5mMOUSXAUhmjA68UwIjIp3pcpbFJRhVHFaBCYZgxWudCz2Ir6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzKUQPCl3Yiy1wkeYlcJfpAInZYMB8GA1UdIwQY MBaAFEkNuZnKTOKHxckqsWelAJAiWbsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUt OThlMjVlMDQ2OTA4LzEvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUtOThlMjVlMDQ2OTA4 LzEvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDOwiUFg YhAJKUuy1Wizc2wtwyaMNMp8NZah6tIvhhjkNA55d8u3Vfzbd08Qmo9w2J1Lkeix IQxTFGVMcolUlYqcbd5h4ohKaYnIvGNxeSHWJor4Z2QkDlWaOZgj5KeA2awHkRCb 1lYOBNlVGJ3ROTzBXnt6hnOgQVbDKbsfX09mJJ5HUxib4vK9GrIvk+2DWwCwb7Rv j22sYkyCwdDGtvE1Bb3EyRYSb2t3NbWlqfazBKYXtr3DgjvN+6HcQcDgedpfABo6 a0jKZaV8+jxULlBABD70FfkhwombI2ia64g9JgN6Qlg5kE0Wwwzs+m1IevKRX5G4 suIKFqMu4SgNdA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:20 2025 by rpki-client