This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft File: pqSmiq_slSLanKyAC0MkzNfWxaU.mft (raw, json) Hash identifier: 5Ndf0kGF6j2qkT7YEwl50dhlmjaILDjHHDYPW/e4WzQ= Subject key identifier: 52:0B:CB:F5:07:13:4A:D4:29:9A:87:0B:CE:01:AD:C4:A4:08:6A:CD Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5 Certificate issuer: /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5 Certificate serial: 019AF61C4619D7AAE54451A585F39F3BE7A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft Manifest number: 08D6 Signing time: Sun 07 Dec 2025 00:00:39 +0000 Manifest this update: Sun 07 Dec 2025 00:00:39 +0000 Manifest next update: Mon 08 Dec 2025 00:00:39 +0000 Files and hashes: 1: FERbP680nVn9-OXBaT2aTWtd8aw.roa (hash: zQlyYeEOYC4qxko+i8oAsMpuMceTMqew9h1oxgQMJNU=) 2: pqSmiq_slSLanKyAC0MkzNfWxaU.crl (hash: josirYiZKdsvBEn7+KijmU0iEXBBGuILrabvxMwE05c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:46:19:d7:aa:e5:44:51:a5:85:f3:9f:3b:e7:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5 Validity Not Before: Dec 7 00:00:39 2025 GMT Not After : Dec 8 00:00:39 2025 GMT Subject: CN=520bcbf507134ad4299a870bce01adc4a4086acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a9:c5:4f:d5:7c:e0:d8:e9:ab:f9:24:e0:e9: 27:2f:85:cb:6a:6d:23:bb:76:23:95:fb:31:4c:9e: 75:e9:0d:2b:e9:cd:c9:63:d4:26:28:3c:74:e3:7a: 50:ec:f7:c9:d3:35:67:d6:df:e9:cf:01:80:ac:70: 7d:cc:85:cf:3e:d3:b5:3e:72:aa:45:25:c9:94:84: 5e:05:91:87:82:45:f6:8d:94:63:47:88:21:26:f5: 79:30:92:3e:90:0e:37:38:8c:cd:0e:f7:86:73:a0: 42:dc:cf:c5:19:af:2c:42:d1:54:f5:00:5d:f6:b1: 25:d1:6b:38:94:38:d7:90:44:71:2c:55:65:4c:e0: 31:c1:23:1b:65:14:3d:b3:f5:ae:d7:d6:b7:55:c0: 4c:2b:5a:0d:3f:9c:88:66:44:41:58:90:41:4c:3d: 0a:e1:3b:b0:fc:70:a7:08:77:6f:a3:c6:59:38:ec: b4:b1:e9:7f:4f:6a:dc:5c:31:73:de:98:bb:82:09: e9:1a:d6:01:37:e6:24:2b:a6:c8:13:fb:eb:62:23: 11:f0:47:39:60:84:10:58:6f:14:81:3c:91:9e:9b: 47:33:0b:c1:0c:6e:a5:c7:5f:03:6a:d4:b9:75:87: 85:e9:96:f1:dd:37:96:07:0c:1e:69:f6:fd:74:c1: 9b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0B:CB:F5:07:13:4A:D4:29:9A:87:0B:CE:01:AD:C4:A4:08:6A:CD X509v3 Authority Key Identifier: keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:12:fd:4b:1a:9e:34:df:eb:c5:40:1d:b9:24:e6:36:d7:73: 2f:a8:64:6c:cf:e8:ac:57:9b:45:3c:09:80:27:dd:30:79:c1: 57:51:fa:8b:90:a0:c1:1e:97:2d:46:9f:69:90:8c:43:2b:fd: e6:c7:0e:9c:dd:68:77:c0:44:0b:88:23:db:bb:1d:ae:a8:b9: 56:8c:30:6f:81:c9:54:f4:e6:61:e5:90:14:1b:74:c9:ea:b3: 8d:d3:44:f1:e7:44:da:ba:df:02:df:86:c6:f5:27:3c:e3:c8: 81:10:90:7f:68:ba:b9:c8:c0:1e:8a:f8:cc:44:c2:2b:40:6f: ae:40:d3:32:8a:11:4c:fb:07:f0:b9:8c:52:4b:17:41:ac:42: ea:ae:99:bf:04:78:9d:f0:c2:80:f6:92:b5:5e:47:9b:70:94: 68:4a:15:dc:f0:75:83:3e:70:06:8c:14:bd:b8:aa:9b:d3:bb: 64:6b:41:02:10:12:fe:de:3d:26:b6:dd:91:f7:03:05:27:ff: 82:6a:10:4e:e8:b1:24:84:ad:2a:62:ed:5e:7f:8e:9d:b8:b5: d4:e6:d5:93:7f:b0:1c:c0:e8:df:95:4a:eb:3c:02:c4:c8:6a: 1b:30:c1:6b:f0:36:fe:20:7b:36:65:db:08:5b:fc:90:3c:cf: 19:81:93:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HEYZ16rlRFGlhfOfO+emMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTRhNjhhYWZlYzk1MjJkYTljYWM4MDBiNDMyNGNjZDdk NmM1YTUwHhcNMjUxMjA3MDAwMDM5WhcNMjUxMjA4MDAwMDM5WjAzMTEwLwYDVQQD Eyg1MjBiY2JmNTA3MTM0YWQ0Mjk5YTg3MGJjZTAxYWRjNGE0MDg2YWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6nFT9V84Njpq/kk4OknL4XLam0j u3YjlfsxTJ516Q0r6c3JY9QmKDx043pQ7PfJ0zVn1t/pzwGArHB9zIXPPtO1PnKq RSXJlIReBZGHgkX2jZRjR4ghJvV5MJI+kA43OIzNDveGc6BC3M/FGa8sQtFU9QBd 9rEl0Ws4lDjXkERxLFVlTOAxwSMbZRQ9s/Wu19a3VcBMK1oNP5yIZkRBWJBBTD0K 4Tuw/HCnCHdvo8ZZOOy0sel/T2rcXDFz3pi7ggnpGtYBN+YkK6bIE/vrYiMR8Ec5 YIQQWG8UgTyRnptHMwvBDG6lx18DatS5dYeF6Zbx3TeWBwweafb9dMGb5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFILy/UHE0rUKZqHC84BrcSkCGrNMB8GA1UdIwQY MBaAFKakpoqv7JUi2pysgAtDJMzX1sWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85ZTliMTctZWQ4My00MjcyLWJmYmUt ZTkzMDFhZmMzODRmLzEvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85ZTliMTctZWQ4My00MjcyLWJmYmUtZTkzMDFhZmMzODRm LzEvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBL9Sxqe NN/rxUAduSTmNtdzL6hkbM/orFebRTwJgCfdMHnBV1H6i5CgwR6XLUafaZCMQyv9 5scOnN1od8BEC4gj27sdrqi5Vowwb4HJVPTmYeWQFBt0yeqzjdNE8edE2rrfAt+G xvUnPOPIgRCQf2i6ucjAHor4zETCK0BvrkDTMooRTPsH8LmMUksXQaxC6q6ZvwR4 nfDCgPaStV5Hm3CUaEoV3PB1gz5wBowUvbiqm9O7ZGtBAhAS/t49JrbdkfcDBSf/ gmoQTuixJIStKmLtXn+Onbi11ObVk3+wHMDo35VK6zwCxMhqGzDBa/A2/iB7NmXb CFv8kDzPGYGTqw== -----END CERTIFICATE-----Generated at Sun Dec 7 08:12:23 2025 by rpki-client