This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft File: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json) Hash identifier: 5Ni2K0j5YO+ocf9W8+3sB15fx5um+VlNVRxzMHR+wTs= Subject key identifier: E6:57:94:C9:8B:A9:F0:F8:BC:31:CD:B8:DF:F7:F4:81:B4:F2:91:5F Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E Certificate issuer: /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e Certificate serial: 019AF277267F37DA23BA53051586E6058253 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft Manifest number: 1478 Signing time: Sat 06 Dec 2025 07:01:26 +0000 Manifest this update: Sat 06 Dec 2025 07:01:26 +0000 Manifest next update: Sun 07 Dec 2025 07:01:26 +0000 Files and hashes: 1: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: 3IUTaQMVE7pVrZlz1E9HhlGEdS9RCHCmpSBspK94jPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:26:7f:37:da:23:ba:53:05:15:86:e6:05:82:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e Validity Not Before: Dec 6 07:01:26 2025 GMT Not After : Dec 7 07:01:26 2025 GMT Subject: CN=e65794c98ba9f0f8bc31cdb8dff7f481b4f2915f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:90:ce:e3:fa:09:f3:c9:41:87:db:01:3b:a3: 67:ee:f8:93:7d:15:90:fa:28:a7:b5:08:85:32:13: d0:38:e7:65:c7:cf:8f:c6:0f:cc:7c:28:c9:99:c9: 94:df:12:af:77:5f:90:e7:a9:2b:da:a5:cc:49:0d: 03:00:f2:0c:47:19:81:b1:4e:ad:99:21:68:28:4b: 96:b5:dd:50:07:a9:68:ac:e0:df:6f:54:dd:38:cf: d2:58:0f:07:76:7c:83:ff:96:66:4c:37:b0:f3:22: 74:3d:09:a4:a1:9a:5f:08:f0:77:64:c9:1c:55:6b: 85:6f:e8:99:7d:ff:38:5e:6e:37:7d:c3:94:85:65: 22:4e:0f:03:97:1d:3b:e4:65:c1:10:a0:19:81:8a: 27:4a:a2:f9:45:d6:38:90:0f:b8:5b:ff:91:c9:77: 66:fd:ed:cc:cb:dd:ec:c9:f4:fa:df:51:b5:e4:01: 22:d7:8c:dd:ae:3e:2e:14:08:91:b5:d2:20:fb:fe: 89:3a:1a:14:5c:65:aa:a3:1d:a8:9a:b6:af:be:37: 3f:ab:1c:d0:30:5a:56:50:6d:ab:8d:69:5a:28:e6: 93:54:c3:a4:ab:ad:aa:06:7b:ca:9f:d7:d0:67:93: 9c:93:f5:60:6f:17:17:3e:e5:c7:74:78:ce:c7:8f: 1f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:57:94:C9:8B:A9:F0:F8:BC:31:CD:B8:DF:F7:F4:81:B4:F2:91:5F X509v3 Authority Key Identifier: keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:1f:63:0b:c9:d3:77:1e:8d:ce:45:02:cb:f9:2e:19:f6:89: 00:8d:29:c8:b4:d3:b7:84:67:fc:09:62:7c:4c:2e:aa:b8:58: ac:f8:50:78:9d:ee:d2:74:86:1f:b2:33:34:48:02:26:19:e7: da:4f:75:8c:8c:bb:fc:01:d3:b0:34:bb:8d:07:45:8c:0b:08: 79:a7:4f:82:67:a3:b0:9c:75:ec:29:55:ee:f7:20:ba:12:b0: 6f:05:ac:c5:de:24:4d:cd:0e:4b:da:3e:d0:76:9f:57:eb:da: d6:f0:30:af:c0:cd:33:91:48:32:01:f1:e5:6a:ff:a9:ba:0d: 21:c0:e0:81:3f:84:6e:e4:a4:8c:ab:f6:97:c0:90:55:9b:92: 7c:22:f6:af:cd:44:49:88:ac:36:a0:bb:2b:42:d6:06:06:62: 69:b4:e5:78:b5:8e:c1:6c:06:2a:a7:82:00:86:58:b7:08:12: ad:24:22:50:97:95:80:07:a2:76:84:37:3a:c2:aa:7e:e6:00: 32:49:00:0a:e1:18:8a:45:08:23:cc:8d:5f:d6:4c:f9:22:15: a2:b2:69:1f:60:59:11:bb:74:ec:2b:36:c2:a9:ff:21:58:52: 19:82:f2:8c:35:6f:7d:7c:6e:e4:ab:aa:88:54:6d:e0:f6:f1: 1e:cf:52:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyZ/N9ojulMFFYbmBYJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MGQwNDJjZmE3NjZlN2UyYmI2ZjBiMDRjMzdkNjAzZmZh MzM4M2UwHhcNMjUxMjA2MDcwMTI2WhcNMjUxMjA3MDcwMTI2WjAzMTEwLwYDVQQD EyhlNjU3OTRjOThiYTlmMGY4YmMzMWNkYjhkZmY3ZjQ4MWI0ZjI5MTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZDO4/oJ88lBh9sBO6Nn7viTfRWQ +iintQiFMhPQOOdlx8+Pxg/MfCjJmcmU3xKvd1+Q56kr2qXMSQ0DAPIMRxmBsU6t mSFoKEuWtd1QB6lorODfb1TdOM/SWA8HdnyD/5ZmTDew8yJ0PQmkoZpfCPB3ZMkc VWuFb+iZff84Xm43fcOUhWUiTg8Dlx075GXBEKAZgYonSqL5RdY4kA+4W/+RyXdm /e3My93syfT631G15AEi14zdrj4uFAiRtdIg+/6JOhoUXGWqox2omravvjc/qxzQ MFpWUG2rjWlaKOaTVMOkq62qBnvKn9fQZ5Ock/VgbxcXPuXHdHjOx48fhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZXlMmLqfD4vDHNuN/39IG08pFfMB8GA1UdIwQY MBaAFEkNBCz6dm5+K7bwsEw31gP/ozg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kYzg3NzgtYTU3MC00ZTQ4LWFjMzMt OTYyNjJjODE5MzMzLzEvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kYzg3NzgtYTU3MC00ZTQ4LWFjMzMtOTYyNjJjODE5MzMz LzEvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYR9jC8nT dx6NzkUCy/kuGfaJAI0pyLTTt4Rn/AlifEwuqrhYrPhQeJ3u0nSGH7IzNEgCJhnn 2k91jIy7/AHTsDS7jQdFjAsIeadPgmejsJx17ClV7vcguhKwbwWsxd4kTc0OS9o+ 0HafV+va1vAwr8DNM5FIMgHx5Wr/qboNIcDggT+EbuSkjKv2l8CQVZuSfCL2r81E SYisNqC7K0LWBgZiabTleLWOwWwGKqeCAIZYtwgSrSQiUJeVgAeidoQ3OsKqfuYA MkkACuEYikUII8yNX9ZM+SIVorJpH2BZEbt07Cs2wqn/IVhSGYLyjDVvfXxu5Kuq iFRt4PbxHs9Sew== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:21 2025 by rpki-client