This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft File: sQBtYOzMF8WGM3oONk176YAd6fE.mft (raw, json) Hash identifier: Fdo9HCHhIFIgab0ikbbJKHCUFNqliKjCD2zcFKmM1Eo= Subject key identifier: BE:FF:26:27:E9:74:F0:AC:FC:94:C3:6E:D2:58:7C:0B:C3:67:81:DC Authority key identifier: B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1 Certificate issuer: /CN=b1006d60eccc17c586337a0e364d7be9801de9f1 Certificate serial: 019AF19ABB0F18E23833C1FC440EAF86C945 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft Manifest number: 16EF Signing time: Sat 06 Dec 2025 03:00:40 +0000 Manifest this update: Sat 06 Dec 2025 03:00:40 +0000 Manifest next update: Sun 07 Dec 2025 03:00:40 +0000 Files and hashes: 1: sQBtYOzMF8WGM3oONk176YAd6fE.crl (hash: AD+knu9Ya95s8SxzelwFt0VpBSnVxPEBAZ4IeVBGVw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:bb:0f:18:e2:38:33:c1:fc:44:0e:af:86:c9:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1006d60eccc17c586337a0e364d7be9801de9f1 Validity Not Before: Dec 6 03:00:40 2025 GMT Not After : Dec 7 03:00:40 2025 GMT Subject: CN=beff2627e974f0acfc94c36ed2587c0bc36781dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6c:8a:68:dd:f9:af:49:a5:e9:15:60:31:9e: a6:c3:c2:07:34:72:93:82:eb:fa:60:1f:8a:9a:45: 54:d2:0c:d1:c7:28:32:3c:34:ef:58:82:fd:9c:15: bd:37:de:f4:49:83:65:6e:3b:77:b8:78:ba:b9:f3: 93:20:d4:80:dc:51:fd:32:9b:34:81:de:10:ac:97: 9d:4e:ea:6e:50:b9:44:91:35:92:fd:47:b0:91:7c: e8:65:93:00:32:c1:e7:3c:74:50:b7:66:94:7d:90: 7b:06:fa:21:ab:c6:78:37:87:8e:87:47:c2:20:ef: d5:86:2b:16:31:ad:ca:fb:46:27:a3:18:7b:38:a9: 11:91:b2:be:5e:90:ac:dd:86:98:0a:16:cc:b6:22: b0:ea:96:27:3c:36:56:c1:b8:98:1f:78:7a:d6:ba: ab:0a:54:3c:35:04:20:20:16:0b:3f:4d:68:3f:ef: ee:ec:02:c5:b1:54:13:8a:44:09:a7:cf:fa:83:ba: 9a:16:d6:ab:e0:25:1f:04:55:a8:8e:3b:f1:ea:0d: 6a:03:09:93:f5:cf:2f:74:d9:9f:c0:90:be:42:93: 90:c8:d5:df:f4:50:e2:74:64:90:78:12:44:b4:c1: 16:28:45:29:d8:5f:fe:70:61:a1:fb:20:c1:3b:0c: 3a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FF:26:27:E9:74:F0:AC:FC:94:C3:6E:D2:58:7C:0B:C3:67:81:DC X509v3 Authority Key Identifier: keyid:B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7e:0c:7e:ba:dd:a6:bf:79:2f:4e:a3:93:38:40:c9:98:46: b7:b7:9c:f7:f1:c9:7d:a1:6e:5d:06:dc:9b:48:d4:6f:78:9e: 59:e1:6e:4f:1e:6a:cc:9b:0d:97:4b:be:a6:aa:fc:23:5e:9e: 84:d3:b9:0b:06:b6:34:de:ca:09:8c:59:f9:ed:e2:03:f3:4d: 50:2b:a4:c4:ce:c4:43:e4:0b:80:b3:56:b9:4e:e3:c9:ce:00: 1f:9c:61:0b:72:81:5a:4b:6e:bd:cd:7d:66:c5:70:e6:79:27: 6a:03:03:ed:61:6b:94:e4:20:74:0d:21:a1:b7:e7:a9:ba:fa: e8:0b:83:b9:d4:d1:ce:fa:11:4f:14:91:8e:a7:17:46:a3:bc: 94:a5:71:06:fa:ab:d3:ca:dc:bd:03:28:2f:cc:f3:42:da:89: 1f:50:50:fe:db:17:27:cc:0e:3d:7a:71:7a:ca:e1:46:01:bc: 24:44:d8:c4:ad:ad:0d:a7:4d:4d:a4:10:fb:43:3c:38:4b:31: ce:74:42:86:c1:85:bb:34:90:2c:80:41:ec:25:c5:9a:9a:8a: 9f:b1:25:40:88:74:cf:ed:01:80:fd:2e:3b:88:05:bf:63:92: 84:2b:1c:ff:e7:b2:d3:7a:7d:64:d0:1c:7b:9b:54:14:c1:28: e3:ae:f9:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrsPGOI4M8H8RA6vhslFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMDA2ZDYwZWNjYzE3YzU4NjMzN2EwZTM2NGQ3YmU5ODAx ZGU5ZjEwHhcNMjUxMjA2MDMwMDQwWhcNMjUxMjA3MDMwMDQwWjAzMTEwLwYDVQQD EyhiZWZmMjYyN2U5NzRmMGFjZmM5NGMzNmVkMjU4N2MwYmMzNjc4MWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2yKaN35r0ml6RVgMZ6mw8IHNHKT guv6YB+KmkVU0gzRxygyPDTvWIL9nBW9N970SYNlbjt3uHi6ufOTINSA3FH9Mps0 gd4QrJedTupuULlEkTWS/UewkXzoZZMAMsHnPHRQt2aUfZB7Bvohq8Z4N4eOh0fC IO/VhisWMa3K+0Ynoxh7OKkRkbK+XpCs3YaYChbMtiKw6pYnPDZWwbiYH3h61rqr ClQ8NQQgIBYLP01oP+/u7ALFsVQTikQJp8/6g7qaFtar4CUfBFWojjvx6g1qAwmT 9c8vdNmfwJC+QpOQyNXf9FDidGSQeBJEtMEWKEUp2F/+cGGh+yDBOww6lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7/JifpdPCs/JTDbtJYfAvDZ4HcMB8GA1UdIwQY MBaAFLEAbWDszBfFhjN6DjZNe+mAHenxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1FCdFlPek1GOFdHTTNvT05rMTc2WUFkNmZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9kNWQ5YTAtZTY1NS00NWRhLTk0NDIt NTY1OTE1NzFkMTYxLzEvc1FCdFlPek1GOFdHTTNvT05rMTc2WUFkNmZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9kNWQ5YTAtZTY1NS00NWRhLTk0NDItNTY1OTE1NzFkMTYx LzEvc1FCdFlPek1GOFdHTTNvT05rMTc2WUFkNmZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIX4Mfrrd pr95L06jkzhAyZhGt7ec9/HJfaFuXQbcm0jUb3ieWeFuTx5qzJsNl0u+pqr8I16e hNO5Cwa2NN7KCYxZ+e3iA/NNUCukxM7EQ+QLgLNWuU7jyc4AH5xhC3KBWktuvc19 ZsVw5nknagMD7WFrlOQgdA0hobfnqbr66AuDudTRzvoRTxSRjqcXRqO8lKVxBvqr 08rcvQMoL8zzQtqJH1BQ/tsXJ8wOPXpxesrhRgG8JETYxK2tDadNTaQQ+0M8OEsx znRChsGFuzSQLIBB7CXFmpqKn7ElQIh0z+0BgP0uO4gFv2OShCsc/+ey03p9ZNAc e5tUFMEo4675sQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:50 2025 by rpki-client