This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft File: sQeA3za1uUL2YOQDov5ginXk5X0.mft (raw, json) Hash identifier: LLUi8cd+diCXH1kTJGHt92960KBQctBxke3pL0JxL7A= Subject key identifier: BD:F5:FE:8D:CF:3C:75:CA:E5:BE:02:ED:E6:D6:52:97:59:7A:4C:8B Authority key identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D Certificate issuer: /CN=b10780df36b5b942f660e403a2fe608a75e4e57d Certificate serial: 019B31C3EE3F24EDDF68BDDB6C798C5607E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft Manifest number: 1714 Signing time: Thu 18 Dec 2025 14:01:22 +0000 Manifest this update: Thu 18 Dec 2025 14:01:22 +0000 Manifest next update: Fri 19 Dec 2025 14:01:22 +0000 Files and hashes: 1: dc2u-8bkbufd4cw_d9F3xDaopuc.roa (hash: Umyl5IxYyTMcYEGSrVHWEMRSVhNtzrLiUEYgvIObXig=) 2: sQeA3za1uUL2YOQDov5ginXk5X0.crl (hash: uw9xlarmzUADgkve8Uku0f8qj9xc5sCq16aDUI2AjEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:ee:3f:24:ed:df:68:bd:db:6c:79:8c:56:07:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b10780df36b5b942f660e403a2fe608a75e4e57d Validity Not Before: Dec 18 14:01:22 2025 GMT Not After : Dec 19 14:01:22 2025 GMT Subject: CN=bdf5fe8dcf3c75cae5be02ede6d65297597a4c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e8:c0:1d:5f:57:ab:41:94:23:a9:84:8e:60: 9b:8e:28:7c:58:be:f0:21:fe:1c:80:40:25:bd:64: 4e:79:36:e6:41:b9:b8:ab:7c:1a:5c:af:4d:79:a1: 63:2a:26:96:ac:c5:5e:0a:2e:48:62:2c:3b:90:38: c8:ff:d9:5b:f7:a7:d5:21:cc:86:06:d4:92:19:2a: be:bf:25:5d:80:00:59:fb:33:0f:28:90:44:3c:3b: 68:46:da:57:95:03:cd:21:2a:46:1b:23:e0:f6:1e: e2:e9:ec:c9:48:1c:7d:f8:b2:80:29:73:25:f2:c7: 76:23:e7:de:84:c0:d7:35:21:32:ab:02:25:ce:67: 63:d4:e8:db:ba:25:1c:0b:8c:fb:77:7f:82:b5:4b: 30:c2:67:8c:53:71:ac:25:a6:0c:e9:4b:16:58:16: c5:b0:a5:7b:15:2b:f4:4e:9e:e5:67:3f:42:b1:68: 2d:a2:2c:c4:6a:9e:80:24:13:e5:aa:84:30:5b:73: e0:1d:3a:e5:c4:d5:6d:83:59:40:f1:f2:5b:4b:c2: 74:0e:e3:c6:6f:d0:a5:5c:4d:5a:71:90:a0:e0:1f: 8a:e4:b4:68:d6:61:b9:e8:65:6a:95:6d:f7:c1:04: f1:d6:77:7d:c4:55:52:69:f1:b0:88:99:11:3f:57: d0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F5:FE:8D:CF:3C:75:CA:E5:BE:02:ED:E6:D6:52:97:59:7A:4C:8B X509v3 Authority Key Identifier: keyid:B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:8f:52:8e:2d:90:d4:94:9c:45:de:d6:4a:8e:25:f3:9a:be: d9:1c:9a:e0:c0:b9:d3:15:77:74:79:64:10:ec:a2:bf:73:88: bb:67:b9:eb:90:38:c8:20:37:bb:35:f1:f1:0d:42:76:3b:4b: 68:3a:db:a4:94:f7:75:15:e7:09:26:8b:69:0f:85:bb:79:f0: 27:d2:8c:e6:bb:80:67:39:11:83:0f:89:ed:31:dd:10:43:0c: c2:b5:d1:00:53:96:31:3f:a1:37:07:de:7b:47:a0:88:40:fc: 0d:66:c2:ec:f4:10:92:f3:6b:73:3d:b5:00:9b:7e:57:46:89: 48:ca:3c:df:d4:79:f4:a3:00:26:c4:5b:05:57:9c:76:06:3e: 90:b4:e7:5e:23:5c:d4:a7:6c:2c:6e:49:e0:a3:a4:fa:1f:6b: c2:ca:55:53:3f:e1:e1:b2:d1:cb:bd:ce:c2:7a:42:58:e2:07: 06:db:f8:0c:53:c4:a8:f4:ff:28:1b:03:af:e1:82:7d:ac:c4: 3f:f1:9e:da:7d:5f:e9:9e:ed:30:b2:28:6e:07:0e:6b:0d:9b: 9f:04:4a:2f:be:92:a5:8e:03:39:d2:96:89:bd:b1:e2:a7:c9: 06:d6:9a:b2:61:f5:00:d2:7f:9b:88:0d:1f:e6:c3:ea:fa:42: 89:2f:a9:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw+4/JO3faL3bbHmMVgfnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMDc4MGRmMzZiNWI5NDJmNjYwZTQwM2EyZmU2MDhhNzVl NGU1N2QwHhcNMjUxMjE4MTQwMTIyWhcNMjUxMjE5MTQwMTIyWjAzMTEwLwYDVQQD EyhiZGY1ZmU4ZGNmM2M3NWNhZTViZTAyZWRlNmQ2NTI5NzU5N2E0YzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyujAHV9Xq0GUI6mEjmCbjih8WL7w If4cgEAlvWROeTbmQbm4q3waXK9NeaFjKiaWrMVeCi5IYiw7kDjI/9lb96fVIcyG BtSSGSq+vyVdgABZ+zMPKJBEPDtoRtpXlQPNISpGGyPg9h7i6ezJSBx9+LKAKXMl 8sd2I+fehMDXNSEyqwIlzmdj1OjbuiUcC4z7d3+CtUswwmeMU3GsJaYM6UsWWBbF sKV7FSv0Tp7lZz9CsWgtoizEap6AJBPlqoQwW3PgHTrlxNVtg1lA8fJbS8J0DuPG b9ClXE1acZCg4B+K5LRo1mG56GVqlW33wQTx1nd9xFVSafGwiJkRP1fQlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL31/o3PPHXK5b4C7ebWUpdZekyLMB8GA1UdIwQY MBaAFLEHgN82tblC9mDkA6L+YIp15OV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iNTY1MDQtZWQxNy00MTk3LWJiYTAt YTBhZGVjZmQ1ZmE5LzEvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iNTY1MDQtZWQxNy00MTk3LWJiYTAtYTBhZGVjZmQ1ZmE5 LzEvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJY9Sji2Q 1JScRd7WSo4l85q+2Rya4MC50xV3dHlkEOyiv3OIu2e565A4yCA3uzXx8Q1CdjtL aDrbpJT3dRXnCSaLaQ+Fu3nwJ9KM5ruAZzkRgw+J7THdEEMMwrXRAFOWMT+hNwfe e0egiED8DWbC7PQQkvNrcz21AJt+V0aJSMo839R59KMAJsRbBVecdgY+kLTnXiNc 1KdsLG5J4KOk+h9rwspVUz/h4bLRy73OwnpCWOIHBtv4DFPEqPT/KBsDr+GCfazE P/Ge2n1f6Z7tMLIobgcOaw2bnwRKL76SpY4DOdKWib2x4qfJBtaasmH1ANJ/m4gN H+bD6vpCiS+phA== -----END CERTIFICATE-----Generated at Thu Dec 18 18:16:31 2025 by rpki-client