This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft File: sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json) Hash identifier: bBFwrh4D8cLsYwgzR0wrGQPqYXE+8aTtWQRmE0Hmu+A= Subject key identifier: F3:86:D2:EB:8B:BD:7C:29:33:37:A1:A9:FB:27:13:5F:8F:FD:2C:C4 Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2 Certificate issuer: /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2 Certificate serial: 019AF49C641AD833757654E105DD9F8C8E9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft Manifest number: 0316 Signing time: Sat 06 Dec 2025 17:01:21 +0000 Manifest this update: Sat 06 Dec 2025 17:01:21 +0000 Manifest next update: Sun 07 Dec 2025 17:01:21 +0000 Files and hashes: 1: etRjZbIj12dLl3Cu-wmUuq9jXZg.roa (hash: sbMAcUZawu8ywXd9mLfTWYNQ0XvVNOGuwfVUKcBp2Bo=) 2: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: oBTgE6fU3XLpIjvDe0e+ofxKcQ0lmX7qQLCLt0KT1BE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:64:1a:d8:33:75:76:54:e1:05:dd:9f:8c:8e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2 Validity Not Before: Dec 6 17:01:21 2025 GMT Not After : Dec 7 17:01:21 2025 GMT Subject: CN=f386d2eb8bbd7c293337a1a9fb27135f8ffd2cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1b:05:73:46:9a:d8:9f:76:72:22:4c:a1:8d: 4e:1f:44:3e:b0:f4:9a:b9:88:b4:47:bd:20:95:58: b7:6c:35:00:0c:95:22:e1:5e:a1:d4:7c:c2:72:ee: e8:e5:f9:41:fe:bd:e5:26:18:37:3e:ba:47:39:67: f3:cd:04:ef:64:b0:0a:fb:d0:ef:49:b9:1d:32:23: b4:3e:52:b7:bf:90:8c:b3:a9:d4:07:64:41:49:75: 75:0f:68:4e:7d:e6:6f:fd:8f:ba:ff:c8:36:c2:43: 96:54:e5:3e:d6:38:12:43:b3:09:09:4e:49:d4:94: 1f:be:37:e8:af:a8:08:45:38:5a:b2:e9:87:6c:3a: 43:f9:eb:ce:e0:bf:01:56:cc:d2:64:75:75:24:59: e5:63:55:fe:40:ee:ec:33:36:e4:27:ff:4b:3a:27: 40:b5:6e:2e:76:ba:1f:68:7f:72:98:4a:0a:3e:ef: ae:60:6d:98:37:da:44:21:af:51:84:fb:c0:60:05: f3:aa:86:72:79:87:42:9e:a4:e8:20:90:a8:73:43: 5f:4b:d9:5d:45:d9:94:61:a5:99:3f:e5:d4:1c:0a: d6:a7:98:e2:56:1c:c8:3c:fe:e9:59:ce:0b:a8:60: 9d:a4:3c:7a:40:f5:7a:95:42:4d:30:00:ca:08:bb: 11:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:86:D2:EB:8B:BD:7C:29:33:37:A1:A9:FB:27:13:5F:8F:FD:2C:C4 X509v3 Authority Key Identifier: keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b8:08:91:17:6d:48:d7:38:f0:c9:45:4b:e3:04:20:7c:7c: fc:a1:7c:78:dd:b1:47:5a:a2:57:b3:42:6d:98:59:0c:d1:0f: 27:05:e5:af:d1:30:ee:f5:fd:ff:ca:16:03:82:c0:52:66:95: 19:54:f6:31:4f:14:79:98:5b:14:35:a1:ac:64:04:e0:44:4d: 29:e6:ab:36:ef:e5:d4:64:e5:f2:7d:63:8e:7e:2f:a4:a8:e4: e8:a4:33:ed:19:94:fb:b7:9f:bb:07:40:2c:93:18:6b:f9:5e: 0b:2a:06:9d:06:c1:ae:6f:54:e3:6a:1f:8d:da:53:ac:08:97: 84:fd:dc:13:0c:14:29:10:f5:d8:9f:52:19:2d:3f:e4:83:a9: 24:27:aa:2e:5f:d1:43:82:18:5f:be:28:e0:25:3a:0b:ae:9b: 92:94:79:cd:82:57:98:6f:cf:07:c0:a0:c1:36:eb:09:42:43: 4e:d9:b8:68:66:f7:57:2b:e1:c5:fc:74:e4:d1:9d:70:1b:4b: 9e:bc:0b:7b:df:8f:e8:e9:9a:1d:89:26:24:1a:6b:b1:03:8b: 86:5b:53:9a:99:a4:96:43:13:95:82:44:8f:0a:9a:f1:da:d3: aa:83:e8:05:ad:29:3e:ec:15:3c:96:5f:07:c4:94:62:69:6c: b4:32:92:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nGQa2DN1dlThBd2fjI6dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYTRmZTNjMzcxOTU1YjkyMTJjYWRlNjQ5Y2JmMTdjNWZj NThlZTIwHhcNMjUxMjA2MTcwMTIxWhcNMjUxMjA3MTcwMTIxWjAzMTEwLwYDVQQD EyhmMzg2ZDJlYjhiYmQ3YzI5MzMzN2ExYTlmYjI3MTM1ZjhmZmQyY2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBsFc0aa2J92ciJMoY1OH0Q+sPSa uYi0R70glVi3bDUADJUi4V6h1HzCcu7o5flB/r3lJhg3PrpHOWfzzQTvZLAK+9Dv SbkdMiO0PlK3v5CMs6nUB2RBSXV1D2hOfeZv/Y+6/8g2wkOWVOU+1jgSQ7MJCU5J 1JQfvjfor6gIRThasumHbDpD+evO4L8BVszSZHV1JFnlY1X+QO7sMzbkJ/9LOidA tW4udrofaH9ymEoKPu+uYG2YN9pEIa9RhPvAYAXzqoZyeYdCnqToIJCoc0NfS9ld RdmUYaWZP+XUHArWp5jiVhzIPP7pWc4LqGCdpDx6QPV6lUJNMADKCLsRXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOG0uuLvXwpMzehqfsnE1+P/SzEMB8GA1UdIwQY MBaAFLKk/jw3GVW5ISyt5knL8XxfxY7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2Yt YzhjY2RkOWU2ODdhLzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2YtYzhjY2RkOWU2ODdh LzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbgIkRdt SNc48MlFS+MEIHx8/KF8eN2xR1qiV7NCbZhZDNEPJwXlr9Ew7vX9/8oWA4LAUmaV GVT2MU8UeZhbFDWhrGQE4ERNKearNu/l1GTl8n1jjn4vpKjk6KQz7RmU+7efuwdA LJMYa/leCyoGnQbBrm9U42ofjdpTrAiXhP3cEwwUKRD12J9SGS0/5IOpJCeqLl/R Q4IYX74o4CU6C66bkpR5zYJXmG/PB8CgwTbrCUJDTtm4aGb3Vyvhxfx05NGdcBtL nrwLe9+P6OmaHYkmJBprsQOLhltTmpmklkMTlYJEjwqa8drTqoPoBa0pPuwVPJZf B8SUYmlstDKS7w== -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:35 2025 by rpki-client