This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft File: SSqOSCqB2QxFxNkKxmij8iRcDW0.mft (raw, json) Hash identifier: 0yugqR+EosnEAMFSK7OAHGJOhoU7Oe9lt6dJuoAaYDI= Subject key identifier: E4:EC:BB:C0:DD:AC:F1:DD:D0:5D:75:74:B1:D5:39:77:CF:38:1E:E1 Authority key identifier: 49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D Certificate issuer: /CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d Certificate serial: 019B3EDAAFBA1E1B73433A5E3D26A68FD81A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft Manifest number: 1791 Signing time: Sun 21 Dec 2025 03:01:17 +0000 Manifest this update: Sun 21 Dec 2025 03:01:17 +0000 Manifest next update: Mon 22 Dec 2025 03:01:17 +0000 Files and hashes: 1: QKjCAOKQJMjqOOmayga7OQ2UBwc.roa (hash: jA/gBvlqnMxkZ4Kz1oiT52kTp3obybgFm8vN9PxrrXM=) 2: SSqOSCqB2QxFxNkKxmij8iRcDW0.crl (hash: aTKrXjyT95DAMvuJ7+XjXB90kViYuVL6QjbALDK5FBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:af:ba:1e:1b:73:43:3a:5e:3d:26:a6:8f:d8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d Validity Not Before: Dec 21 03:01:17 2025 GMT Not After : Dec 22 03:01:17 2025 GMT Subject: CN=e4ecbbc0ddacf1ddd05d7574b1d53977cf381ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:4a:0a:26:a0:b7:1f:8a:7f:86:ee:1d:cb: 96:55:e3:a6:ac:c0:e2:89:30:f8:02:69:40:19:33: c4:ef:80:5b:f8:cd:7d:47:9d:26:b6:1b:44:83:e7: 47:1d:5a:ac:5c:ac:cb:ae:d3:3e:59:46:32:2d:b9: 41:29:5d:66:05:42:b1:6d:19:73:3d:3c:91:7d:1e: dc:91:23:e6:ff:cd:6c:0d:90:c7:cc:c7:eb:d4:58: 70:75:c4:1d:d5:cc:f7:39:83:b2:9d:39:a1:58:4a: 48:8c:c9:06:de:23:db:9d:88:58:56:53:79:af:bf: 48:66:c7:5e:6b:ef:0b:f9:34:b3:ed:35:b7:fd:65: f5:ce:c8:8f:b9:87:6f:2f:20:82:24:6e:b0:1f:bc: 62:d8:6a:c7:cd:f5:a8:cb:47:d2:a7:97:9a:f1:ce: b5:2c:cf:9f:9c:30:fb:5f:70:1c:d7:e1:a2:32:5a: 0a:89:8f:86:fe:04:d9:bf:02:ce:e6:fd:73:fb:ad: 8d:d7:b9:7e:00:04:d8:c6:0a:b7:bd:b6:cd:29:63: 07:4e:ba:5c:fa:1c:e4:78:0f:f0:8b:ce:de:62:68: 9d:48:a8:05:f8:b5:24:76:51:fc:f2:d9:27:ba:b2: 56:4b:5b:78:49:51:c8:85:90:bd:4d:c9:c6:ba:52: 40:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EC:BB:C0:DD:AC:F1:DD:D0:5D:75:74:B1:D5:39:77:CF:38:1E:E1 X509v3 Authority Key Identifier: keyid:49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0d:bb:16:c6:58:f7:fe:26:77:73:d1:90:6b:e3:49:ab:82: 14:cf:94:7f:26:a2:7d:c9:37:11:b7:51:dd:ba:e6:8d:85:d2: 66:1a:3a:1b:f0:21:81:13:23:42:45:0e:16:96:30:27:84:98: db:81:86:f2:8f:dc:26:a9:a0:ac:58:23:f6:73:b4:a1:2c:f5: 5a:ad:6b:8c:e8:89:c1:37:89:4a:36:bc:31:2b:c7:33:5b:08: a2:ea:7a:17:bb:99:ad:bd:db:8b:ed:ab:0d:63:a8:fa:0f:82: f7:a9:3d:d2:f3:d8:27:45:f8:6a:c7:7c:47:fe:8e:b2:23:fe: 33:8d:47:d1:e1:c2:c2:1a:45:0a:36:36:93:17:f4:04:7f:cc: cb:b1:36:af:6c:4d:d0:79:38:5f:2b:bf:6e:b0:7e:8c:b9:c8: 86:cd:e6:4e:9f:14:60:48:5e:39:e8:8d:ee:9c:09:34:47:90: 46:c6:d7:fa:78:ea:7a:aa:ca:89:4a:39:8b:18:30:21:be:87: 19:4e:93:0e:f7:c5:92:cb:2a:a4:ff:1c:ab:50:50:9e:6c:59: aa:61:0c:aa:68:83:09:bf:05:bb:94:51:cc:79:63:a0:e7:a7: f9:de:20:af:8b:de:f0:a4:8a:f1:b5:32:28:3c:f6:0a:95:4f: 97:00:48:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2q+6HhtzQzpePSamj9gaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MmE4ZTQ4MmE4MWQ5MGM0NWM0ZDkwYWM2NjhhM2YyMjQ1 YzBkNmQwHhcNMjUxMjIxMDMwMTE3WhcNMjUxMjIyMDMwMTE3WjAzMTEwLwYDVQQD EyhlNGVjYmJjMGRkYWNmMWRkZDA1ZDc1NzRiMWQ1Mzk3N2NmMzgxZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfNKCiagtx+Kf4buHcuWVeOmrMDi iTD4AmlAGTPE74Bb+M19R50mthtEg+dHHVqsXKzLrtM+WUYyLblBKV1mBUKxbRlz PTyRfR7ckSPm/81sDZDHzMfr1FhwdcQd1cz3OYOynTmhWEpIjMkG3iPbnYhYVlN5 r79IZsdea+8L+TSz7TW3/WX1zsiPuYdvLyCCJG6wH7xi2GrHzfWoy0fSp5ea8c61 LM+fnDD7X3Ac1+GiMloKiY+G/gTZvwLO5v1z+62N17l+AATYxgq3vbbNKWMHTrpc +hzkeA/wi87eYmidSKgF+LUkdlH88tknurJWS1t4SVHIhZC9TcnGulJARwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTsu8DdrPHd0F11dLHVOXfPOB7hMB8GA1UdIwQY MBaAFEkqjkgqgdkMRcTZCsZoo/IkXA1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NxT1NDcUIyUXhGeE5rS3htaWo4aVJjRFcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iOGVhZGYtODAzNy00ZmFlLThkMmMt ZTBhM2NiZDA0Nzk2LzEvU1NxT1NDcUIyUXhGeE5rS3htaWo4aVJjRFcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9iOGVhZGYtODAzNy00ZmFlLThkMmMtZTBhM2NiZDA0Nzk2 LzEvU1NxT1NDcUIyUXhGeE5rS3htaWo4aVJjRFcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADA27FsZY 9/4md3PRkGvjSauCFM+Ufyaifck3EbdR3brmjYXSZho6G/AhgRMjQkUOFpYwJ4SY 24GG8o/cJqmgrFgj9nO0oSz1Wq1rjOiJwTeJSja8MSvHM1sIoup6F7uZrb3bi+2r DWOo+g+C96k90vPYJ0X4asd8R/6OsiP+M41H0eHCwhpFCjY2kxf0BH/My7E2r2xN 0Hk4Xyu/brB+jLnIhs3mTp8UYEheOeiN7pwJNEeQRsbX+njqeqrKiUo5ixgwIb6H GU6TDvfFkssqpP8cq1BQnmxZqmEMqmiDCb8Fu5RRzHljoOen+d4gr4ve8KSK8bUy KDz2CpVPlwBIDQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:38:20 2025 by rpki-client