This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft File: sQvyxqnxpCuKzuASWfkfUUSrivU.mft (raw, json) Hash identifier: eDLIAC75UDfn065eoP8an50v84nbSd3eZtMW4lHMJuQ= Subject key identifier: E2:85:F7:5E:4D:64:F8:97:DF:B1:75:61:27:47:F1:24:30:17:F6:44 Authority key identifier: B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5 Certificate issuer: /CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5 Certificate serial: 019AF1D21939C3EC0539456ED4C2D35F9748 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft Manifest number: 06F9 Signing time: Sat 06 Dec 2025 04:01:09 +0000 Manifest this update: Sat 06 Dec 2025 04:01:09 +0000 Manifest next update: Sun 07 Dec 2025 04:01:09 +0000 Files and hashes: 1: RagZVp33x_ZhRPfhRcY-ePMpfNA.roa (hash: gMsYucRSntBj1BaVj8EkbP09b3qQ09XAtS6QWD6kZsw=) 2: sQvyxqnxpCuKzuASWfkfUUSrivU.crl (hash: wJGrAnLnIUvLIMdxVS/yPuFS2V6J8rzcnXjnzYpdrZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:19:39:c3:ec:05:39:45:6e:d4:c2:d3:5f:97:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5 Validity Not Before: Dec 6 04:01:09 2025 GMT Not After : Dec 7 04:01:09 2025 GMT Subject: CN=e285f75e4d64f897dfb175612747f1243017f644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5e:9c:d6:fe:36:9e:d6:65:09:3a:05:7e:c8: cb:bd:68:55:b3:52:c7:49:70:ee:c4:32:98:8e:e3: 41:bb:45:20:38:26:8f:87:ed:24:f4:92:f3:8f:18: fa:33:e6:ef:c6:98:ef:3d:40:22:f6:04:24:c0:35: a8:92:8d:cd:18:05:49:3b:54:49:06:51:86:9d:5f: 38:fe:3d:7c:96:0b:53:6e:6a:bb:95:f5:e2:6b:85: 6d:87:d2:cc:d5:d1:7f:78:ea:27:ca:8d:ff:02:3a: f2:85:a3:fd:87:74:c8:67:aa:3a:eb:a9:e1:78:ab: b7:29:83:a8:ce:94:02:10:38:f9:4a:6d:c6:6d:49: d1:a8:b5:3f:12:d2:1f:ac:f6:9d:66:ac:c9:a7:5d: d6:cc:46:db:5c:d9:37:fc:a3:6f:89:2d:81:7f:2c: f3:35:95:36:66:1f:61:9a:15:83:82:df:48:84:94: 10:d6:06:17:d0:48:40:9e:49:5d:c0:ec:77:dc:28: c7:63:6a:2c:58:11:02:e0:8e:56:10:d1:0e:35:f9: f3:88:f2:42:9f:c1:2f:95:45:81:24:a8:1c:41:61: c2:34:18:37:e2:97:8d:1a:c6:a8:fd:cf:a9:e8:e2: 35:cc:28:29:3d:ad:a5:8e:8b:0f:76:98:7d:20:b8: 74:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:85:F7:5E:4D:64:F8:97:DF:B1:75:61:27:47:F1:24:30:17:F6:44 X509v3 Authority Key Identifier: keyid:B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1b:7c:e9:ff:93:1a:86:12:4c:a9:64:0b:29:76:3c:d5:79: 3f:97:90:14:a1:46:6e:d5:e5:bc:81:72:ca:22:89:21:68:73: e6:e3:71:a4:6e:db:72:9c:09:b4:b5:a7:e5:e8:7e:b9:a3:27: 80:aa:24:3d:08:0b:e4:78:f6:fd:15:4b:e8:28:8e:06:65:de: f5:a9:09:2d:8f:e9:f1:cd:54:b5:b4:a8:6a:9a:88:9e:3a:17: 58:0f:1e:fd:1b:47:f4:01:57:95:f6:07:61:77:12:ad:ad:a4: b7:c7:f2:52:46:b8:18:9e:00:73:9f:9e:84:13:f5:5d:d8:49: 65:dd:ff:77:7a:97:fd:97:b1:7f:f2:f8:81:b7:59:cc:4c:94: 43:11:cf:ae:9b:e0:e2:4e:26:71:5c:47:1b:18:01:06:d7:de: d0:51:2b:54:ba:88:34:1e:7c:65:e1:40:a7:b8:16:d9:44:89: df:7c:3b:a0:b6:0e:7c:73:1f:75:06:b1:f8:9a:b1:f8:8c:d0: 92:25:a7:30:1b:64:f5:0b:28:da:7a:e8:0a:a2:ae:10:cd:5c: d0:00:45:f0:d6:30:e1:15:fa:f5:c0:8a:93:2d:ee:e3:41:03: 92:ae:36:54:a5:90:14:22:c5:9a:e6:ff:00:6c:32:c6:d9:f5: fd:02:5c:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hk5w+wFOUVu1MLTX5dIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMGJmMmM2YTlmMWE0MmI4YWNlZTAxMjU5ZjkxZjUxNDRh YjhhZjUwHhcNMjUxMjA2MDQwMTA5WhcNMjUxMjA3MDQwMTA5WjAzMTEwLwYDVQQD EyhlMjg1Zjc1ZTRkNjRmODk3ZGZiMTc1NjEyNzQ3ZjEyNDMwMTdmNjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql6c1v42ntZlCToFfsjLvWhVs1LH SXDuxDKYjuNBu0UgOCaPh+0k9JLzjxj6M+bvxpjvPUAi9gQkwDWoko3NGAVJO1RJ BlGGnV84/j18lgtTbmq7lfXia4Vth9LM1dF/eOonyo3/AjryhaP9h3TIZ6o666nh eKu3KYOozpQCEDj5Sm3GbUnRqLU/EtIfrPadZqzJp13WzEbbXNk3/KNviS2Bfyzz NZU2Zh9hmhWDgt9IhJQQ1gYX0EhAnkldwOx33CjHY2osWBEC4I5WENEONfnziPJC n8EvlUWBJKgcQWHCNBg34peNGsao/c+p6OI1zCgpPa2ljosPdph9ILh0KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKF915NZPiX37F1YSdH8SQwF/ZEMB8GA1UdIwQY MBaAFLEL8sap8aQris7gEln5H1FEq4r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1F2eXhxbnhwQ3VLenVBU1dma2ZVVVNyaXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lZDE4OGEtMGZmZi00ZjBmLWEyNmQt MjUxYTljODY0ZDI2LzEvc1F2eXhxbnhwQ3VLenVBU1dma2ZVVVNyaXZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9lZDE4OGEtMGZmZi00ZjBmLWEyNmQtMjUxYTljODY0ZDI2 LzEvc1F2eXhxbnhwQ3VLenVBU1dma2ZVVVNyaXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxt86f+T GoYSTKlkCyl2PNV5P5eQFKFGbtXlvIFyyiKJIWhz5uNxpG7bcpwJtLWn5eh+uaMn gKokPQgL5Hj2/RVL6CiOBmXe9akJLY/p8c1UtbSoapqInjoXWA8e/RtH9AFXlfYH YXcSra2kt8fyUka4GJ4Ac5+ehBP1XdhJZd3/d3qX/Zexf/L4gbdZzEyUQxHPrpvg 4k4mcVxHGxgBBtfe0FErVLqINB58ZeFAp7gW2USJ33w7oLYOfHMfdQax+Jqx+IzQ kiWnMBtk9Qso2nroCqKuEM1c0ABF8NYw4RX69cCKky3u40EDkq42VKWQFCLFmub/ AGwyxtn1/QJcXA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:42:48 2025 by rpki-client