This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft File: SqvRp2WuXL4dyT2vAk06R-cqyRg.mft (raw, json) Hash identifier: WkvtsDsdr0EH6n/N4PxXn2Ebw5D6VATMQF9znmqex3c= Subject key identifier: 03:4B:4F:ED:6C:23:C7:77:48:0D:53:EB:1F:25:A8:A4:48:E2:D8:CC Authority key identifier: 4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18 Certificate issuer: /CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918 Certificate serial: 019AF2AD6D6156DB6A45D6C9B18FD398C680 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft Manifest number: 111D Signing time: Sat 06 Dec 2025 08:00:43 +0000 Manifest this update: Sat 06 Dec 2025 08:00:43 +0000 Manifest next update: Sun 07 Dec 2025 08:00:43 +0000 Files and hashes: 1: SqvRp2WuXL4dyT2vAk06R-cqyRg.crl (hash: i9ULhHpRWunngCjGy0Keg5GmEWUq+Vf1DFBvkkAqfyc=) 2: tmx5LjQV62XIOiTTxX3EbhTuW90.roa (hash: ONvGVTfcwoaLd5CXPlp64qPMMnmfgrXhtwa7DXeFCYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6d:61:56:db:6a:45:d6:c9:b1:8f:d3:98:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918 Validity Not Before: Dec 6 08:00:43 2025 GMT Not After : Dec 7 08:00:43 2025 GMT Subject: CN=034b4fed6c23c777480d53eb1f25a8a448e2d8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:af:5c:dd:8c:23:bd:80:51:67:28:65:3d:fe: e6:25:be:99:c7:8c:25:8e:b3:24:0b:97:d2:7b:87: 07:4f:fe:b3:24:20:27:c6:d7:e7:7c:f3:16:b4:ce: f2:26:c4:ee:9a:56:c8:66:02:77:ce:df:d5:31:a2: 39:bc:b9:30:b4:6a:59:c2:d8:07:7d:50:a1:fc:7c: 59:34:ef:03:c5:6f:51:13:27:06:3c:db:7e:c7:f4: 27:b4:2e:8b:a2:69:35:59:42:b7:05:b5:c8:8c:0e: 74:ca:26:68:3f:53:1b:51:aa:73:d4:a8:f3:ba:6e: e4:5a:1d:9d:55:c5:62:67:3d:cc:29:e8:9a:ab:36: cb:90:3d:aa:c8:6a:eb:06:dc:66:64:c4:ee:0a:78: 3d:5e:ff:61:21:a7:00:47:f6:d2:02:24:d6:d6:99: 3f:84:b4:87:6f:d8:07:35:8a:21:57:17:ae:cd:c6: 37:83:71:48:08:85:75:74:7d:26:7a:a8:7d:0b:d8: 9a:88:c9:dc:66:36:ec:83:3e:2c:15:4b:7a:95:40: f3:e1:8a:c4:c6:1b:8b:0f:e1:d1:e5:dd:f6:31:1c: 34:b0:02:19:f9:41:1a:61:f3:06:1a:7c:76:36:50: 26:e5:64:d4:a6:f2:30:1d:26:9d:63:97:dd:dc:1a: 34:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4B:4F:ED:6C:23:C7:77:48:0D:53:EB:1F:25:A8:A4:48:E2:D8:CC X509v3 Authority Key Identifier: keyid:4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:0e:46:97:06:60:fa:41:74:55:76:69:3a:a5:8a:07:72:b7: e8:fe:b6:99:b6:2c:c6:2e:19:c5:c4:81:8a:d5:fd:4b:57:1d: 46:50:5b:19:d6:1a:7c:68:eb:63:11:69:4d:6c:d7:93:ce:af: c6:a8:bb:88:8d:67:dc:61:e9:1b:95:bc:11:ee:8f:86:6a:1d: 43:1b:40:d7:64:9b:04:f0:db:8c:a1:4b:4d:18:cc:e6:5c:37: 76:f0:c5:c1:4e:76:a0:e6:ea:62:5e:42:66:07:3d:48:9a:25: 40:ef:61:69:96:12:91:3b:36:bd:6f:ab:95:47:d2:05:71:64: 41:10:2e:44:46:d4:f8:cf:9d:4c:00:d4:71:c3:eb:c8:a3:c2: e9:b5:5b:33:f0:44:20:24:84:a7:6b:aa:90:96:ca:d4:8e:dc: ea:06:bb:eb:35:94:a3:92:7c:bb:61:3b:13:7c:71:43:e6:31: 07:b2:7f:1e:fc:51:06:07:2e:46:13:77:ca:05:0f:fe:bc:c5: e2:19:84:4a:c8:c4:55:0d:a8:ed:d3:76:55:7d:63:06:27:28: 58:5c:6e:6d:25:6e:d6:ee:de:61:bc:88:1e:a5:6d:cb:3f:ba: 68:60:88:2d:a3:ca:d9:4d:8c:d3:05:4a:d9:28:e7:5c:9a:cb: e2:9b:3e:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrW1hVttqRdbJsY/TmMaAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYWJkMWE3NjVhZTVjYmUxZGM5M2RhZjAyNGQzYTQ3ZTcy YWM5MTgwHhcNMjUxMjA2MDgwMDQzWhcNMjUxMjA3MDgwMDQzWjAzMTEwLwYDVQQD EygwMzRiNGZlZDZjMjNjNzc3NDgwZDUzZWIxZjI1YThhNDQ4ZTJkOGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK9c3YwjvYBRZyhlPf7mJb6Zx4wl jrMkC5fSe4cHT/6zJCAnxtfnfPMWtM7yJsTumlbIZgJ3zt/VMaI5vLkwtGpZwtgH fVCh/HxZNO8DxW9REycGPNt+x/QntC6Lomk1WUK3BbXIjA50yiZoP1MbUapz1Kjz um7kWh2dVcViZz3MKeiaqzbLkD2qyGrrBtxmZMTuCng9Xv9hIacAR/bSAiTW1pk/ hLSHb9gHNYohVxeuzcY3g3FICIV1dH0meqh9C9iaiMncZjbsgz4sFUt6lUDz4YrE xhuLD+HR5d32MRw0sAIZ+UEaYfMGGnx2NlAm5WTUpvIwHSadY5fd3Bo0jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANLT+1sI8d3SA1T6x8lqKRI4tjMMB8GA1UdIwQY MBaAFEqr0adlrly+Hck9rwJNOkfnKskYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3F2UnAyV3VYTDRkeVQydkFrMDZSLWNxeVJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mYmYyMzktNWY4YS00ZDZhLWEwY2It NDRhYzZhZGIzYTQ5LzEvU3F2UnAyV3VYTDRkeVQydkFrMDZSLWNxeVJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mYmYyMzktNWY4YS00ZDZhLWEwY2ItNDRhYzZhZGIzYTQ5 LzEvU3F2UnAyV3VYTDRkeVQydkFrMDZSLWNxeVJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKA5GlwZg +kF0VXZpOqWKB3K36P62mbYsxi4ZxcSBitX9S1cdRlBbGdYafGjrYxFpTWzXk86v xqi7iI1n3GHpG5W8Ee6PhmodQxtA12SbBPDbjKFLTRjM5lw3dvDFwU52oObqYl5C Zgc9SJolQO9haZYSkTs2vW+rlUfSBXFkQRAuREbU+M+dTADUccPryKPC6bVbM/BE ICSEp2uqkJbK1I7c6ga76zWUo5J8u2E7E3xxQ+YxB7J/HvxRBgcuRhN3ygUP/rzF 4hmESsjEVQ2o7dN2VX1jBicoWFxubSVu1u7eYbyIHqVtyz+6aGCILaPK2U2M0wVK 2SjnXJrL4ps+RQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:18 2025 by rpki-client