This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft File: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft (raw, json) Hash identifier: uJiRKrR0GpB2wYq16iW3ZDXIS4+bra1gi3ngjg+lPgw= Subject key identifier: 5D:65:67:6F:52:A1:45:BD:AE:10:EE:81:64:14:05:3C:33:13:89:13 Authority key identifier: 4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43 Certificate issuer: /CN=4aae738ee1782735939a4fb0d672a6317b7f5243 Certificate serial: 019AF2401E2BCB8FBAC166C7429C87ADE770 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:01:19 +0000 Manifest this update: Sat 06 Dec 2025 06:01:19 +0000 Manifest next update: Sun 07 Dec 2025 06:01:19 +0000 Files and hashes: 1: 91OWvN-6lcl5Fjzg5TvE5yYe_W4.roa (hash: Sivu4JLd/Px8fxeRF7CLCRjdAgN7VlKHUjwBf43gaK0=) 2: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl (hash: Y3WO2a3ecWguDA+ZIXiytrheTPMdaEFpEnhv8AoBlWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1e:2b:cb:8f:ba:c1:66:c7:42:9c:87:ad:e7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aae738ee1782735939a4fb0d672a6317b7f5243 Validity Not Before: Dec 6 06:01:19 2025 GMT Not After : Dec 7 06:01:19 2025 GMT Subject: CN=5d65676f52a145bdae10ee816414053c33138913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7f:ab:88:3e:f8:b3:f7:98:97:71:01:18:f6: 66:e4:04:93:65:bb:8a:78:68:27:76:ef:16:ba:9a: 94:75:ce:11:ab:17:df:c7:c4:81:e3:07:82:e3:a8: 94:2e:01:02:b7:d2:a0:d6:94:5b:65:7e:01:fa:47: 34:3a:57:15:39:fe:b7:5a:20:f1:51:8c:ec:c8:a1: d7:2b:66:08:02:0a:1f:28:65:e1:3e:6b:61:4e:b5: 1d:1b:e8:df:2f:b2:b9:33:8c:05:0a:51:ee:a8:47: 7d:2f:58:8d:a2:5d:64:b2:27:3e:39:e0:ee:0e:d3: f7:a4:fe:b5:90:50:f4:51:90:94:cc:13:1a:43:06: 1c:25:0a:b3:67:df:08:e2:dd:ed:f0:cd:d3:89:39: a4:ab:94:c3:f2:25:66:0e:93:20:85:4a:31:0b:fb: 85:41:ee:d6:37:0a:78:77:13:0e:2d:60:b7:db:ba: 97:10:23:fd:aa:32:3b:66:4c:45:09:c2:00:76:0e: d1:cc:85:a8:44:a2:ad:6d:df:e3:7b:bf:1e:3b:d6: 76:e9:73:df:ee:a6:81:7a:b5:df:0d:8c:0f:24:67: 9a:06:5a:3a:f3:fc:18:6c:ea:a6:92:69:3f:56:27: cc:b7:b1:fb:2b:29:5c:67:92:3a:5d:5a:28:c2:19: 5c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:65:67:6F:52:A1:45:BD:AE:10:EE:81:64:14:05:3C:33:13:89:13 X509v3 Authority Key Identifier: keyid:4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:2b:ca:04:8e:a9:04:f9:e1:c1:5c:23:d4:59:35:37:94:63: 5d:71:fa:56:c9:94:5f:08:fb:b3:a1:c7:b8:b6:a8:0e:60:98: d7:7f:a8:dc:4e:85:bd:97:2e:0e:50:28:1c:a1:c9:3d:e2:4d: 04:93:6f:ac:0a:74:17:fd:2d:ea:85:00:42:f7:c1:a8:61:ef: 87:57:62:ff:4a:d8:c7:55:57:fa:6d:e9:0f:09:eb:be:9e:13: a2:9f:4e:59:e2:dd:20:83:c8:a5:14:4d:0a:f1:eb:f0:9f:0a: 90:34:47:39:ba:28:2b:50:5c:47:8f:aa:37:3f:0a:01:e4:45: f0:27:b9:d1:9d:75:d1:c0:d3:db:e8:26:cf:cb:2b:1d:e1:f7: d4:3f:c1:3d:5c:84:cf:ed:3a:fe:4a:c0:7a:bf:62:e1:ca:88: 5c:b8:5a:ca:51:77:f5:30:99:d1:a6:40:f5:94:f5:0b:56:1a: 3d:b9:43:d5:a6:c9:15:b3:a2:53:d1:69:04:27:af:dd:4d:80: 98:4a:97:fe:32:2a:e0:12:10:f4:c2:3f:d1:52:50:47:33:b4: a9:7d:fc:1a:fd:ef:f4:3a:87:a2:2c:38:a0:5e:a8:29:07:51: ff:4c:1c:f8:59:5d:ae:96:e8:63:3f:73:43:50:e3:4d:ad:4f: 7c:36:71:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQB4ry4+6wWbHQpyHredwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYWU3MzhlZTE3ODI3MzU5MzlhNGZiMGQ2NzJhNjMxN2I3 ZjUyNDMwHhcNMjUxMjA2MDYwMTE5WhcNMjUxMjA3MDYwMTE5WjAzMTEwLwYDVQQD Eyg1ZDY1Njc2ZjUyYTE0NWJkYWUxMGVlODE2NDE0MDUzYzMzMTM4OTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX+riD74s/eYl3EBGPZm5ASTZbuK eGgndu8WupqUdc4Rqxffx8SB4weC46iULgECt9Kg1pRbZX4B+kc0OlcVOf63WiDx UYzsyKHXK2YIAgofKGXhPmthTrUdG+jfL7K5M4wFClHuqEd9L1iNol1ksic+OeDu DtP3pP61kFD0UZCUzBMaQwYcJQqzZ98I4t3t8M3TiTmkq5TD8iVmDpMghUoxC/uF Qe7WNwp4dxMOLWC327qXECP9qjI7ZkxFCcIAdg7RzIWoRKKtbd/je78eO9Z26XPf 7qaBerXfDYwPJGeaBlo68/wYbOqmkmk/VifMt7H7KylcZ5I6XVoowhlcyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1lZ29SoUW9rhDugWQUBTwzE4kTMB8GA1UdIwQY MBaAFEquc47heCc1k5pPsNZypjF7f1JDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3E1emp1RjRKeldUbWstdzFuS21NWHRfVWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85ZTAyNGUtYzZlNS00OTc3LWIzNjkt MWZmOWZmMTkyY2Q3LzEvU3E1emp1RjRKeldUbWstdzFuS21NWHRfVWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85ZTAyNGUtYzZlNS00OTc3LWIzNjktMWZmOWZmMTkyY2Q3 LzEvU3E1emp1RjRKeldUbWstdzFuS21NWHRfVWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsSvKBI6p BPnhwVwj1Fk1N5RjXXH6VsmUXwj7s6HHuLaoDmCY13+o3E6FvZcuDlAoHKHJPeJN BJNvrAp0F/0t6oUAQvfBqGHvh1di/0rYx1VX+m3pDwnrvp4Top9OWeLdIIPIpRRN CvHr8J8KkDRHObooK1BcR4+qNz8KAeRF8Ce50Z110cDT2+gmz8srHeH31D/BPVyE z+06/krAer9i4cqIXLhaylF39TCZ0aZA9ZT1C1YaPblD1abJFbOiU9FpBCev3U2A mEqX/jIq4BIQ9MI/0VJQRzO0qX38Gv3v9DqHoiw4oF6oKQdR/0wc+FldrpboYz9z Q1DjTa1PfDZxhA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:38 2025 by rpki-client