This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft File: SQtgyL0tnQHwq1ocTApT4dczn2U.mft (raw, json) Hash identifier: e1S0jyCXI2YsrtlQrwtMPi1Yf23ncp37+eShuU2StJM= Subject key identifier: 0B:92:26:A9:35:4D:E0:F3:99:43:B2:9C:6B:3F:65:15:18:62:01:93 Authority key identifier: 49:0B:60:C8:BD:2D:9D:01:F0:AB:5A:1C:4C:0A:53:E1:D7:33:9F:65 Certificate issuer: /CN=490b60c8bd2d9d01f0ab5a1c4c0a53e1d7339f65 Certificate serial: 019AF12CD9FCB179E15DE38C9206EAA227DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft Manifest number: 1348 Signing time: Sat 06 Dec 2025 01:00:39 +0000 Manifest this update: Sat 06 Dec 2025 01:00:39 +0000 Manifest next update: Sun 07 Dec 2025 01:00:39 +0000 Files and hashes: 1: SQtgyL0tnQHwq1ocTApT4dczn2U.crl (hash: mZ6lot7vdoZg4HiOgnu61GmchLN342+RmTbK2/qy2LE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d9:fc:b1:79:e1:5d:e3:8c:92:06:ea:a2:27:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490b60c8bd2d9d01f0ab5a1c4c0a53e1d7339f65 Validity Not Before: Dec 6 01:00:39 2025 GMT Not After : Dec 7 01:00:39 2025 GMT Subject: CN=0b9226a9354de0f39943b29c6b3f651518620193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dd:30:e6:0e:0e:07:2f:3f:56:c8:4b:58:9d: 7e:3c:1b:b0:36:03:df:e5:2c:8f:d4:0e:d9:f7:b8: 7b:b4:9c:4b:2c:7e:6a:78:91:b4:27:8b:fe:b7:4f: 9f:ca:21:89:f6:e1:bf:43:de:0c:f4:23:d9:78:b8: bd:64:fd:e4:65:77:55:e7:19:db:41:33:b4:51:29: f3:83:cc:f1:84:0b:58:3b:fb:18:c5:4f:fd:32:27: aa:d3:b6:d2:77:69:da:24:b3:5a:e4:39:e6:b0:37: 7f:48:83:8e:87:79:e3:4a:f2:38:9c:0f:d6:60:75: 80:99:86:0f:cb:56:c4:fd:66:6a:cc:59:21:18:b9: c4:2e:d5:f4:dc:a1:ba:d7:ef:a1:a8:fc:90:69:45: 1a:2f:bf:4f:1d:72:78:0a:ac:11:2b:95:d8:f8:de: a8:3e:ea:8b:3e:a9:e3:0a:06:6e:2d:f7:e2:74:de: ce:eb:33:b1:02:46:a4:8b:25:c1:fb:a1:a9:81:a2: e9:c4:62:f5:dd:2f:87:5f:b0:27:d8:8f:76:60:08: 99:91:15:25:de:63:fa:26:f5:10:a8:12:f1:49:eb: a2:c3:0d:13:7d:ea:45:31:c7:06:a2:49:b0:d4:c7: ac:53:cd:36:35:09:b0:a6:60:01:e3:58:26:27:8b: a1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:92:26:A9:35:4D:E0:F3:99:43:B2:9C:6B:3F:65:15:18:62:01:93 X509v3 Authority Key Identifier: keyid:49:0B:60:C8:BD:2D:9D:01:F0:AB:5A:1C:4C:0A:53:E1:D7:33:9F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:06:a8:bf:b8:2b:d3:8e:96:ad:16:84:4a:f4:29:b2:05:df: d8:9c:d9:ef:0b:08:fd:b2:4a:07:16:e3:c6:b6:35:53:65:44: 9d:bc:a6:3f:3d:9c:63:be:c4:8a:a3:42:e4:c0:fe:3a:b6:7d: a4:62:8c:22:99:09:f7:e4:b8:ec:04:f5:7e:20:70:49:37:67: 1f:ae:4f:7e:46:fd:70:85:fb:ac:58:ee:97:58:c5:e0:ca:d2: 4a:da:58:4a:a7:3c:ff:bf:22:14:e2:5e:2d:1e:bb:11:4a:80: 44:9f:94:d3:50:19:14:c8:91:92:66:68:6b:25:b0:c9:29:1b: 5c:59:e4:84:51:64:e3:a1:a2:3d:2e:24:92:43:70:da:e9:0f: 0a:e9:18:ff:2d:49:5c:4d:f8:bb:46:de:48:20:e7:5c:dc:6f: 5e:d7:46:4f:c4:15:a4:3f:de:7d:b2:6c:e6:ea:70:c3:a9:4b: f8:40:83:80:f1:0a:5c:dd:b3:a8:4d:2c:a6:58:c4:33:44:78: 3e:24:00:b4:32:81:f1:24:07:17:ae:62:97:d9:97:97:bc:aa: 64:d7:c5:d8:cc:8b:1a:5b:3d:b5:1f:f5:04:b6:4c:12:75:a3: 89:89:c2:6a:39:33:4e:8a:b7:cc:63:cc:9b:52:bf:ca:2b:58: ce:fa:94:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNn8sXnhXeOMkgbqoifbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MGI2MGM4YmQyZDlkMDFmMGFiNWExYzRjMGE1M2UxZDcz MzlmNjUwHhcNMjUxMjA2MDEwMDM5WhcNMjUxMjA3MDEwMDM5WjAzMTEwLwYDVQQD EygwYjkyMjZhOTM1NGRlMGYzOTk0M2IyOWM2YjNmNjUxNTE4NjIwMTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA190w5g4OBy8/VshLWJ1+PBuwNgPf 5SyP1A7Z97h7tJxLLH5qeJG0J4v+t0+fyiGJ9uG/Q94M9CPZeLi9ZP3kZXdV5xnb QTO0USnzg8zxhAtYO/sYxU/9Mieq07bSd2naJLNa5DnmsDd/SIOOh3njSvI4nA/W YHWAmYYPy1bE/WZqzFkhGLnELtX03KG61++hqPyQaUUaL79PHXJ4CqwRK5XY+N6o PuqLPqnjCgZuLffidN7O6zOxAkakiyXB+6GpgaLpxGL13S+HX7An2I92YAiZkRUl 3mP6JvUQqBLxSeuiww0TfepFMccGokmw1MesU802NQmwpmAB41gmJ4uhJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuSJqk1TeDzmUOynGs/ZRUYYgGTMB8GA1UdIwQY MBaAFEkLYMi9LZ0B8KtaHEwKU+HXM59lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1F0Z3lMMHRuUUh3cTFvY1RBcFQ0ZGN6bjJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85MjZiNTctY2MxMi00OGZjLWI5OTYt OTJhNGJlODVjMTFkLzEvU1F0Z3lMMHRuUUh3cTFvY1RBcFQ0ZGN6bjJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy85MjZiNTctY2MxMi00OGZjLWI5OTYtOTJhNGJlODVjMTFk LzEvU1F0Z3lMMHRuUUh3cTFvY1RBcFQ0ZGN6bjJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewaov7gr 046WrRaESvQpsgXf2JzZ7wsI/bJKBxbjxrY1U2VEnbymPz2cY77EiqNC5MD+OrZ9 pGKMIpkJ9+S47AT1fiBwSTdnH65Pfkb9cIX7rFjul1jF4MrSStpYSqc8/78iFOJe LR67EUqARJ+U01AZFMiRkmZoayWwySkbXFnkhFFk46GiPS4kkkNw2ukPCukY/y1J XE34u0beSCDnXNxvXtdGT8QVpD/efbJs5upww6lL+ECDgPEKXN2zqE0spljEM0R4 PiQAtDKB8SQHF65il9mXl7yqZNfF2MyLGls9tR/1BLZMEnWjiYnCajkzToq3zGPM m1K/yitYzvqUEw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:48 2025 by rpki-client