This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft File: sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft (raw, json) Hash identifier: ivpxzE5HNbqwrJaA4gci1mUYDOI5HG36N4loQkRE3AI= Subject key identifier: 52:12:A9:DF:E4:FF:6E:C8:54:3E:5C:CA:E8:17:19:B1:70:AB:33:0C Authority key identifier: B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57 Certificate issuer: /CN=b1040bc251fe02669f57fea572743a37acfbd557 Certificate serial: 019AF1D1828E7380ADCDC700DE58A058E8B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft Manifest number: 0907 Signing time: Sat 06 Dec 2025 04:00:30 +0000 Manifest this update: Sat 06 Dec 2025 04:00:30 +0000 Manifest next update: Sun 07 Dec 2025 04:00:30 +0000 Files and hashes: 1: sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl (hash: VdA7KYJqqx5BC8/X357Bto8UMk6YuRL5H5X0KFuc+9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:82:8e:73:80:ad:cd:c7:00:de:58:a0:58:e8:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1040bc251fe02669f57fea572743a37acfbd557 Validity Not Before: Dec 6 04:00:30 2025 GMT Not After : Dec 7 04:00:30 2025 GMT Subject: CN=5212a9dfe4ff6ec8543e5ccae81719b170ab330c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:98:52:6b:0b:69:9b:7c:b3:3a:bc:a4:5d:45: f2:2f:80:fc:c7:46:10:bc:0f:34:fc:a8:48:4c:c7: 72:fe:e9:3c:52:1f:ba:2c:9b:d5:7c:7b:1a:23:1e: d5:1a:89:8e:15:57:1a:d6:9b:09:eb:23:00:20:b7: 45:68:a8:9a:6b:88:01:96:31:5f:4b:64:7f:9c:36: b4:8d:49:a2:72:00:6b:06:00:f6:01:a0:38:be:d2: 99:b5:8d:e6:54:35:be:bb:72:ae:bb:94:a9:46:32: d4:c3:48:7b:b9:23:64:a7:ee:86:ba:9d:a9:45:03: fd:cf:2f:43:f6:c8:66:ed:15:e8:0e:fd:ca:00:35: 04:45:44:02:af:92:55:e6:c4:e1:5d:89:a3:60:03: 9c:f0:45:e5:70:38:c5:31:e7:a2:4d:c7:1f:da:16: 81:f0:86:65:89:ea:31:09:10:be:0d:c2:52:1f:90: 3d:48:d0:ea:12:ec:9a:04:ba:a4:ac:e8:d6:59:4d: bb:26:14:e1:46:bc:ef:05:31:ac:27:8d:3c:68:bb: 37:94:f9:69:ee:49:9e:9f:fb:18:8c:c6:32:4d:54: ad:55:e0:e8:fe:7a:60:6c:b7:63:77:aa:e6:8e:1c: 6c:9c:58:00:80:24:21:b3:82:83:d9:98:1f:61:b1: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:12:A9:DF:E4:FF:6E:C8:54:3E:5C:CA:E8:17:19:B1:70:AB:33:0C X509v3 Authority Key Identifier: keyid:B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:5a:f1:cc:47:b7:1f:f9:49:5c:ca:63:f0:ae:50:91:78:58: d2:c7:57:d3:3f:37:e6:9f:a9:ed:33:af:66:03:da:2b:25:66: a4:57:89:af:82:73:4e:d5:d9:ee:79:f9:cb:b0:38:8f:43:4d: 5a:09:af:26:27:94:fc:e1:95:2c:b7:71:1e:f9:5a:69:44:4c: 33:af:84:40:3a:c6:d6:86:80:25:0e:8a:b4:57:03:05:f0:6c: 41:41:54:63:bc:62:f9:53:da:ed:7b:d3:35:c7:49:c9:a2:18: b5:9d:58:62:9c:03:cc:4f:7d:84:0a:0e:fc:ea:9f:c7:02:e6: 70:37:45:65:7e:6c:66:a8:ad:1b:a0:91:c1:43:55:e1:40:81: fb:9a:d0:51:2a:a0:cd:19:11:9d:21:40:61:c2:07:75:58:b9: 01:32:b0:d3:dc:98:ad:be:15:5c:09:fd:02:ac:af:d9:b6:2d: e0:49:57:ad:62:3c:05:08:98:1e:3c:95:0b:3a:8c:63:fc:2f: 86:91:47:3f:11:fa:b2:0f:74:aa:1d:ee:58:05:be:5a:ea:f8: 58:f0:fd:84:75:15:df:ca:41:eb:6b:66:9d:03:a3:17:0c:69: e1:66:7a:7f:be:93:de:76:98:f5:94:fb:3f:73:57:71:6a:12: 88:e2:f3:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YKOc4CtzccA3ligWOi3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMDQwYmMyNTFmZTAyNjY5ZjU3ZmVhNTcyNzQzYTM3YWNm YmQ1NTcwHhcNMjUxMjA2MDQwMDMwWhcNMjUxMjA3MDQwMDMwWjAzMTEwLwYDVQQD Eyg1MjEyYTlkZmU0ZmY2ZWM4NTQzZTVjY2FlODE3MTliMTcwYWIzMzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJhSawtpm3yzOrykXUXyL4D8x0YQ vA80/KhITMdy/uk8Uh+6LJvVfHsaIx7VGomOFVca1psJ6yMAILdFaKiaa4gBljFf S2R/nDa0jUmicgBrBgD2AaA4vtKZtY3mVDW+u3Kuu5SpRjLUw0h7uSNkp+6Gup2p RQP9zy9D9shm7RXoDv3KADUERUQCr5JV5sThXYmjYAOc8EXlcDjFMeeiTccf2haB 8IZlieoxCRC+DcJSH5A9SNDqEuyaBLqkrOjWWU27JhThRrzvBTGsJ408aLs3lPlp 7kmen/sYjMYyTVStVeDo/npgbLdjd6rmjhxsnFgAgCQhs4KD2ZgfYbEM7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFISqd/k/27IVD5cyugXGbFwqzMMMB8GA1UdIwQY MBaAFLEEC8JR/gJmn1f+pXJ0Ojes+9VXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xMzA1ZDctM2ExNi00NjIzLWI3NGUt ZWVhZjIwZWJmOGVmLzEvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8xMzA1ZDctM2ExNi00NjIzLWI3NGUtZWVhZjIwZWJmOGVm LzEvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVrxzEe3 H/lJXMpj8K5QkXhY0sdX0z835p+p7TOvZgPaKyVmpFeJr4JzTtXZ7nn5y7A4j0NN WgmvJieU/OGVLLdxHvlaaURMM6+EQDrG1oaAJQ6KtFcDBfBsQUFUY7xi+VPa7XvT NcdJyaIYtZ1YYpwDzE99hAoO/OqfxwLmcDdFZX5sZqitG6CRwUNV4UCB+5rQUSqg zRkRnSFAYcIHdVi5ATKw09yYrb4VXAn9Aqyv2bYt4ElXrWI8BQiYHjyVCzqMY/wv hpFHPxH6sg90qh3uWAW+Wur4WPD9hHUV38pB62tmnQOjFwxp4WZ6f76T3naY9ZT7 P3NXcWoSiOLzjg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:48 2025 by rpki-client