This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft File: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft (raw, json) Hash identifier: 9G1GjaEkDUXuAftH84Rg8Zbtav0MV+J2lu1YfgWZI0M= Subject key identifier: A7:FB:23:FB:B1:87:D7:B7:4B:43:28:48:A9:79:7D:E0:C2:14:45:C1 Authority key identifier: B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14 Certificate issuer: /CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014 Certificate serial: 019AF0880BA9A73D0ABFF3D7B8B437C237DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft Manifest number: 1193 Signing time: Fri 05 Dec 2025 22:00:38 +0000 Manifest this update: Fri 05 Dec 2025 22:00:38 +0000 Manifest next update: Sat 06 Dec 2025 22:00:38 +0000 Files and hashes: 1: snSOZMPfK49AItHHPweedqu08i4.roa (hash: pOp6DYxwdd50QS7EO4q/xTqIWe4F0C/r3RXRy+6+GXo=) 2: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl (hash: /0mifViUayXwOWCFwuMxawEQmrp6SUlXC7S+d9k4HEs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:0b:a9:a7:3d:0a:bf:f3:d7:b8:b4:37:c2:37:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014 Validity Not Before: Dec 5 22:00:38 2025 GMT Not After : Dec 6 22:00:38 2025 GMT Subject: CN=a7fb23fbb187d7b74b432848a9797de0c21445c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:17:c2:53:d3:f3:f6:52:51:00:64:0e:3c: 2f:ee:22:53:4c:c4:d2:a4:20:6b:e9:d4:e2:65:a7: bb:9b:ab:8a:f0:01:4e:f7:9b:ad:ad:d3:97:c8:07: 69:2d:3e:57:b5:c0:b1:f5:b2:8a:ef:89:1d:74:91: 73:3d:1b:67:ed:a9:51:86:83:8d:91:a8:e4:69:db: d6:2f:39:f5:61:42:82:f7:56:60:9a:b7:3d:2b:c2: dc:9d:d6:e7:c4:7f:b6:77:ed:bf:5e:44:2f:f6:87: af:53:80:f4:76:78:bf:1b:25:87:90:5c:e3:b2:1b: 64:b3:48:74:e3:66:7d:cb:ab:88:9a:38:6e:fa:9e: 7d:df:a5:76:e1:71:b2:89:58:f7:30:2e:b0:cf:91: 46:52:cb:85:52:ea:b8:67:8e:05:e1:d5:17:47:e3: 57:69:73:ed:4a:be:9e:c7:e0:8e:be:91:95:5a:af: b5:a0:b5:01:30:61:0f:07:bf:44:f2:92:d5:73:5a: 61:d7:5c:e6:36:71:71:de:2b:fb:a5:13:e0:6c:c1: c6:46:e6:3e:06:4c:9f:90:32:cc:e3:5a:96:6c:4c: ef:67:af:07:2a:55:55:f1:4b:b8:da:88:e3:2a:bf: 24:c5:97:17:dd:fb:40:89:c8:9a:30:3e:30:19:6f: e4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FB:23:FB:B1:87:D7:B7:4B:43:28:48:A9:79:7D:E0:C2:14:45:C1 X509v3 Authority Key Identifier: keyid:B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:7f:28:b0:98:f9:33:41:80:55:1d:ca:94:70:f3:25:a6:aa: 68:64:51:13:ad:90:81:00:9e:e6:ca:cb:e8:12:1c:e9:74:1e: e5:b1:84:67:bc:c8:5e:cf:02:3b:6f:40:3f:80:62:9f:19:8d: bb:22:b2:27:78:21:cb:92:cd:b3:d7:a1:c8:e4:80:fd:7b:39: 22:85:d1:2f:80:07:64:53:91:5a:77:cb:bb:4c:d8:ac:22:93: 59:63:5b:90:04:4c:ea:d1:31:37:da:40:76:cb:f8:07:5a:e3: 50:59:6b:05:cb:18:48:cf:cd:9a:82:c3:8f:cc:4d:be:d7:de: 89:69:28:71:39:4e:ed:2c:01:78:c7:8b:40:f2:21:8f:a7:4d: b3:4f:9c:e5:44:57:4c:5d:c4:b2:ea:f6:63:7f:90:e6:80:d8: 30:28:65:67:7f:73:00:fb:ec:cb:7d:94:b4:78:83:73:97:d6: 4f:10:0e:95:1a:de:34:3b:88:7e:83:68:12:66:66:f8:81:c3: 7c:40:97:a2:da:6b:7e:25:69:1f:6c:c8:3c:e4:bb:fb:21:df: 45:f5:db:af:11:2d:a7:77:f0:92:a4:22:fa:33:1e:80:25:f7: c6:b1:40:66:21:48:1b:fa:83:19:09:8c:f0:56:a1:04:4f:0b: 57:a0:8d:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiAuppz0Kv/PXuLQ3wjfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYTQ4YWYzZDk2OTMxYmQ5MGMzYmZkNTVmMWZhMzA0N2Iz NTYwMTQwHhcNMjUxMjA1MjIwMDM4WhcNMjUxMjA2MjIwMDM4WjAzMTEwLwYDVQQD EyhhN2ZiMjNmYmIxODdkN2I3NGI0MzI4NDhhOTc5N2RlMGMyMTQ0NWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucYXwlPT8/ZSUQBkDjwv7iJTTMTS pCBr6dTiZae7m6uK8AFO95utrdOXyAdpLT5XtcCx9bKK74kddJFzPRtn7alRhoON kajkadvWLzn1YUKC91Zgmrc9K8LcndbnxH+2d+2/XkQv9oevU4D0dni/GyWHkFzj shtks0h042Z9y6uImjhu+p5936V24XGyiVj3MC6wz5FGUsuFUuq4Z44F4dUXR+NX aXPtSr6ex+COvpGVWq+1oLUBMGEPB79E8pLVc1ph11zmNnFx3iv7pRPgbMHGRuY+ BkyfkDLM41qWbEzvZ68HKlVV8Uu42ojjKr8kxZcX3ftAiciaMD4wGW/keQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKf7I/uxh9e3S0MoSKl5feDCFEXBMB8GA1UdIwQY MBaAFLKkivPZaTG9kMO/1V8fowR7NWAUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNTFhZGYtMTQ5Mi00YzE0LTg4MjEt YjliZDA2NTk0ODNhLzEvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kNTFhZGYtMTQ5Mi00YzE0LTg4MjEtYjliZDA2NTk0ODNh LzEvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT38osJj5 M0GAVR3KlHDzJaaqaGRRE62QgQCe5srL6BIc6XQe5bGEZ7zIXs8CO29AP4BinxmN uyKyJ3ghy5LNs9ehyOSA/Xs5IoXRL4AHZFORWnfLu0zYrCKTWWNbkARM6tExN9pA dsv4B1rjUFlrBcsYSM/NmoLDj8xNvtfeiWkocTlO7SwBeMeLQPIhj6dNs0+c5URX TF3Esur2Y3+Q5oDYMChlZ39zAPvsy32UtHiDc5fWTxAOlRreNDuIfoNoEmZm+IHD fECXotprfiVpH2zIPOS7+yHfRfXbrxEtp3fwkqQi+jMegCX3xrFAZiFIG/qDGQmM 8FahBE8LV6CNHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:22 2025 by rpki-client