This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft File: SqbchPRraQchSFpEBb_JOdolSWk.mft (raw, json) Hash identifier: 11HP3UeNpY4jZLW/lXZW/6c2MF7XYXWM/6ztCUNExb0= Subject key identifier: C9:BC:2E:F6:D6:C4:EA:B6:F7:8A:9F:52:FB:EF:34:B6:0C:67:8D:50 Authority key identifier: 4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69 Certificate issuer: /CN=4aa6dc84f46b690721485a4405bfc939da254969 Certificate serial: 019AF2AD5483AEE833C0762AB2A4C003D27B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft Manifest number: 02B7 Signing time: Sat 06 Dec 2025 08:00:36 +0000 Manifest this update: Sat 06 Dec 2025 08:00:36 +0000 Manifest next update: Sun 07 Dec 2025 08:00:36 +0000 Files and hashes: 1: SqbchPRraQchSFpEBb_JOdolSWk.crl (hash: PERdf19AUBAO1m1scyHJdcyrIDmEgTGim2dOfVd3OGk=) 2: b__HqKu-AMKs2UTm6p-v2OEs7OA.roa (hash: f7396FR/6MUlNoG4o7cmoviarkI5X6EgtZeJr/g+J2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:54:83:ae:e8:33:c0:76:2a:b2:a4:c0:03:d2:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa6dc84f46b690721485a4405bfc939da254969 Validity Not Before: Dec 6 08:00:36 2025 GMT Not After : Dec 7 08:00:36 2025 GMT Subject: CN=c9bc2ef6d6c4eab6f78a9f52fbef34b60c678d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:9f:35:79:4a:a2:73:6d:57:24:c4:23:f5: c7:4f:1c:20:d6:8f:0b:55:36:0b:ab:a1:0c:dc:89: 99:3c:0d:26:86:b8:09:0a:a5:19:7d:5e:e0:e9:62: 24:be:cf:75:12:0c:41:c2:50:94:79:fa:0e:14:61: 6e:ac:c6:fd:11:95:14:cc:0d:95:ef:5a:8e:c9:b9: 17:77:02:ab:d3:ff:65:bc:d7:b4:a6:85:29:e8:5d: 95:a1:57:ff:e7:91:30:56:e0:16:76:42:98:fb:40: d0:62:ae:20:48:ae:de:6c:34:71:42:48:c2:3a:c5: 31:14:ec:58:29:eb:fe:a7:fb:94:ff:a3:53:32:a7: 29:be:a3:b3:bb:71:5a:28:a9:6a:07:29:ae:87:c9: 48:a9:4d:9e:76:fd:af:95:ea:2a:74:fb:1d:37:52: ac:ec:67:c2:c4:ee:de:74:6a:6c:a2:cc:cb:ce:13: 16:22:88:a4:69:aa:3a:11:2e:40:2e:dd:b9:8b:bd: b9:2c:c0:3d:c2:eb:59:7c:70:8f:8f:cf:2f:3f:b3: c7:9b:de:59:75:95:77:af:13:be:ca:77:7f:71:ff: 9c:8a:9c:2c:eb:ff:fa:10:f0:a1:fb:cc:3c:ba:bc: 22:08:e6:8c:b4:57:f7:8f:49:28:91:20:90:59:d0: ed:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BC:2E:F6:D6:C4:EA:B6:F7:8A:9F:52:FB:EF:34:B6:0C:67:8D:50 X509v3 Authority Key Identifier: keyid:4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d7:19:88:c8:2e:4c:4f:5d:2a:ff:36:25:e3:39:3c:db:35: 7f:18:69:d2:42:39:5f:e2:47:f2:9a:c8:0b:97:2e:78:99:2e: f7:37:bc:55:fa:2f:61:14:0a:0a:92:a8:bb:f7:28:72:e0:c9: 4d:dd:61:ca:7c:1e:bc:5b:4d:25:95:53:26:5b:9a:b9:06:98: 73:64:87:f5:59:4c:e2:e4:fe:12:1c:24:15:e6:be:cf:20:26: 5e:68:26:4d:2a:dd:7c:6e:d4:d1:64:26:97:91:de:96:dc:2e: fc:2c:32:51:b2:a6:8f:f1:ef:d9:00:51:85:d7:a9:f5:f0:00: a1:64:83:3a:da:18:16:06:f0:b5:2a:4b:6c:b7:9e:f5:95:cc: ef:5b:f8:c1:05:a0:30:a7:72:74:37:9a:5a:5c:9b:46:84:58: 1c:28:ed:cf:62:d0:b2:82:90:16:b2:2b:89:25:9e:ce:c9:34: e0:6d:a8:90:e7:23:20:37:bd:b2:15:71:04:82:0a:d0:03:99: 0f:fe:aa:db:60:ea:c3:63:f7:45:65:be:0a:34:ae:10:47:8f: f7:f1:61:12:ca:41:c4:f9:96:1b:d8:3e:28:1c:36:0b:a2:29: e9:99:23:80:99:7b:90:e4:d5:dc:78:4e:94:96:21:c5:41:7c: 47:10:16:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVSDrugzwHYqsqTAA9J7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYTZkYzg0ZjQ2YjY5MDcyMTQ4NWE0NDA1YmZjOTM5ZGEy NTQ5NjkwHhcNMjUxMjA2MDgwMDM2WhcNMjUxMjA3MDgwMDM2WjAzMTEwLwYDVQQD EyhjOWJjMmVmNmQ2YzRlYWI2Zjc4YTlmNTJmYmVmMzRiNjBjNjc4ZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCufNXlKonNtVyTEI/XHTxwg1o8L VTYLq6EM3ImZPA0mhrgJCqUZfV7g6WIkvs91EgxBwlCUefoOFGFurMb9EZUUzA2V 71qOybkXdwKr0/9lvNe0poUp6F2VoVf/55EwVuAWdkKY+0DQYq4gSK7ebDRxQkjC OsUxFOxYKev+p/uU/6NTMqcpvqOzu3FaKKlqBymuh8lIqU2edv2vleoqdPsdN1Ks 7GfCxO7edGpsoszLzhMWIoikaao6ES5ALt25i725LMA9wutZfHCPj88vP7PHm95Z dZV3rxO+ynd/cf+cipws6//6EPCh+8w8urwiCOaMtFf3j0kokSCQWdDtEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMm8LvbWxOq294qfUvvvNLYMZ41QMB8GA1UdIwQY MBaAFEqm3IT0a2kHIUhaRAW/yTnaJUlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3FiY2hQUnJhUWNoU0ZwRUJiX0pPZG9sU1drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81NzM3N2EtMWE3Yi00ZTg0LWEyNDQt MDlmYzliYjM0YjlkLzEvU3FiY2hQUnJhUWNoU0ZwRUJiX0pPZG9sU1drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy81NzM3N2EtMWE3Yi00ZTg0LWEyNDQtMDlmYzliYjM0Yjlk LzEvU3FiY2hQUnJhUWNoU0ZwRUJiX0pPZG9sU1drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNcZiMgu TE9dKv82JeM5PNs1fxhp0kI5X+JH8prIC5cueJku9ze8VfovYRQKCpKou/cocuDJ Td1hynwevFtNJZVTJluauQaYc2SH9VlM4uT+EhwkFea+zyAmXmgmTSrdfG7U0WQm l5Heltwu/CwyUbKmj/Hv2QBRhdep9fAAoWSDOtoYFgbwtSpLbLee9ZXM71v4wQWg MKdydDeaWlybRoRYHCjtz2LQsoKQFrIriSWezsk04G2okOcjIDe9shVxBIIK0AOZ D/6q22Dqw2P3RWW+CjSuEEeP9/FhEspBxPmWG9g+KBw2C6Ip6ZkjgJl7kOTV3HhO lJYhxUF8RxAWsw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:36:51 2025 by rpki-client