This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft File: 1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft (raw, json) Hash identifier: yzOzHDKkJHiKc55MFrYwabu+R1CeD49D/beEJAVs+kw= Subject key identifier: 0A:CD:10:B3:18:8F:89:7B:53:55:19:94:4D:5C:26:98:E5:08:45:ED Authority key identifier: F9:4F:D2:41:8E:7F:09:E0:1D:15:11:3F:FF:00:4E:05:5F:80:FC:5E Certificate issuer: /CN=f94fd2418e7f09e01d15113fff004e055f80fc5e Certificate serial: 019AF208D09505AD52E4FFFB64A004E50FE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U_SQY5_CeAdFRE__wBOBV-A_F4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft Manifest number: 07F4 Signing time: Sat 06 Dec 2025 05:00:55 +0000 Manifest this update: Sat 06 Dec 2025 05:00:55 +0000 Manifest next update: Sun 07 Dec 2025 05:00:55 +0000 Files and hashes: 1: 1-U_SQY5_CeAdFRE__wBOBV-A_F4.crl (hash: ztkgvCf/vKjMKsPj+jdTlEv9kJlsKTT0qB7kxVN3pKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-U_SQY5_CeAdFRE__wBOBV-A_F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d0:95:05:ad:52:e4:ff:fb:64:a0:04:e5:0f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f94fd2418e7f09e01d15113fff004e055f80fc5e Validity Not Before: Dec 6 05:00:55 2025 GMT Not After : Dec 7 05:00:55 2025 GMT Subject: CN=0acd10b3188f897b535519944d5c2698e50845ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:53:45:b9:6e:ce:5c:f8:b4:30:ec:4d:68:71: 33:b6:65:b1:a5:86:32:60:42:47:a6:87:c6:e4:ec: 33:0c:ec:be:3e:de:48:0a:dd:70:f9:05:05:38:1c: 57:89:b1:1d:b8:ad:a7:b0:59:b8:53:dd:4e:17:80: 05:e8:ea:24:bd:8d:db:a2:f8:30:86:76:56:24:e7: c1:ec:be:39:00:e3:c6:f5:a3:ea:31:37:f9:c1:20: 11:27:5f:89:1c:ed:7e:26:ad:f8:5f:a5:b0:fb:29: 7f:9f:a7:b7:47:5d:14:bc:ad:6e:75:1c:eb:2e:db: bc:46:d5:3e:fc:24:16:80:8c:cd:58:8c:7c:5b:7a: 1c:24:42:99:b2:2b:0f:1b:49:25:b5:0f:4b:4b:22: 2a:03:e5:7f:a5:84:b2:82:5d:cd:aa:c1:19:57:bd: 01:43:59:db:15:75:fd:c7:ff:01:02:9b:ac:03:e7: ee:09:79:5c:07:1b:77:cb:76:76:cd:44:40:56:e9: 00:b7:3e:3e:e7:dc:68:59:43:f3:9c:89:84:df:6d: 62:fb:46:f2:40:b9:e0:bf:81:46:09:95:61:50:64: 37:de:13:24:ac:4c:71:06:ec:a9:0d:00:c6:f3:4b: 35:b6:3a:b4:be:aa:00:2a:9f:7d:6d:08:aa:78:66: c6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CD:10:B3:18:8F:89:7B:53:55:19:94:4D:5C:26:98:E5:08:45:ED X509v3 Authority Key Identifier: keyid:F9:4F:D2:41:8E:7F:09:E0:1D:15:11:3F:FF:00:4E:05:5F:80:FC:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U_SQY5_CeAdFRE__wBOBV-A_F4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:aa:83:44:fb:62:52:8d:7a:05:12:b7:bb:bb:7b:59:f9:02: 5a:f0:19:db:4e:0f:c1:de:ba:37:da:37:c9:17:12:2e:00:2a: d5:09:42:09:ec:b2:1f:f1:0e:d7:3e:79:e5:e5:a7:d8:a2:c2: 03:f3:22:ce:57:f1:2b:90:ea:b4:67:fd:eb:09:ca:5e:dc:67: 27:79:5e:a8:dd:a2:3a:0a:6c:ff:df:55:82:e3:8d:bb:c7:ea: 6f:20:95:d3:8f:b2:bc:73:37:5b:64:72:8f:0a:b1:01:2f:cf: 4e:26:71:b5:51:ea:e0:53:83:2c:c7:dd:a7:72:46:c7:3e:8a: c4:16:18:e3:50:16:00:3e:65:af:5a:52:ec:b2:4e:8c:4c:a3: 5d:bd:a9:34:86:04:ae:34:2f:a8:7e:e5:92:fd:41:89:b4:15: f5:f3:93:b7:66:61:65:e0:7c:c4:ac:4b:13:5d:92:1b:43:62: 93:c3:e2:72:73:51:12:62:52:91:f2:1d:79:d4:9a:8c:6c:cd: 10:b4:31:c2:73:5d:ee:b7:89:f9:86:43:9b:49:70:75:81:7b: e9:fc:e6:09:ef:bf:d5:09:09:0b:f5:ac:18:e1:9b:50:2c:bc: 3f:28:89:9b:6d:f4:13:92:ea:09:01:a5:fd:4c:30:12:4d:b5: 6a:6a:42:0a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCNCVBa1S5P/7ZKAE5Q/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NGZkMjQxOGU3ZjA5ZTAxZDE1MTEzZmZmMDA0ZTA1NWY4 MGZjNWUwHhcNMjUxMjA2MDUwMDU1WhcNMjUxMjA3MDUwMDU1WjAzMTEwLwYDVQQD EygwYWNkMTBiMzE4OGY4OTdiNTM1NTE5OTQ0ZDVjMjY5OGU1MDg0NWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VNFuW7OXPi0MOxNaHEztmWxpYYy YEJHpofG5OwzDOy+Pt5ICt1w+QUFOBxXibEduK2nsFm4U91OF4AF6OokvY3bovgw hnZWJOfB7L45AOPG9aPqMTf5wSARJ1+JHO1+Jq34X6Ww+yl/n6e3R10UvK1udRzr Ltu8RtU+/CQWgIzNWIx8W3ocJEKZsisPG0kltQ9LSyIqA+V/pYSygl3NqsEZV70B Q1nbFXX9x/8BApusA+fuCXlcBxt3y3Z2zURAVukAtz4+59xoWUPznImE321i+0by QLngv4FGCZVhUGQ33hMkrExxBuypDQDG80s1tjq0vqoAKp99bQiqeGbG5QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFArNELMYj4l7U1UZlE1cJpjlCEXtMB8GA1UdIwQY MBaAFPlP0kGOfwngHRURP/8ATgVfgPxeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1VX1NRWTVfQ2VBZEZSRV9fd0JPQlYtQV9GNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvMWZmYmMzLTQ5OGQtNDcwMC05YTVl LTkxNzBlZTlhNTFlNi8xLzEtVV9TUVk1X0NlQWRGUkVfX3dCT0JWLUFfRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Q5LzFmZmJjMy00OThkLTQ3MDAtOWE1ZS05MTcwZWU5YTUx ZTYvMS8xLVVfU1FZNV9DZUFkRlJFX193Qk9CVi1BX0Y0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaqD RPtiUo16BRK3u7t7WfkCWvAZ204Pwd66N9o3yRcSLgAq1QlCCeyyH/EO1z555eWn 2KLCA/MizlfxK5DqtGf96wnKXtxnJ3leqN2iOgps/99VguONu8fqbyCV04+yvHM3 W2RyjwqxAS/PTiZxtVHq4FODLMfdp3JGxz6KxBYY41AWAD5lr1pS7LJOjEyjXb2p NIYErjQvqH7lkv1BibQV9fOTt2ZhZeB8xKxLE12SG0Nik8PicnNREmJSkfIdedSa jGzNELQxwnNd7reJ+YZDm0lwdYF76fzmCe+/1QkJC/WsGOGbUCy8PyiJm230E5Lq CQGl/UwwEk21ampCCg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:24:11 2025 by rpki-client