This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft File: sq89ZYtJTLFxUgbFzXbnkuckfvc.mft (raw, json) Hash identifier: xHTh58itpSo5M00ff+Ww5CKTUptSOciMTWtjYE4RPwA= Subject key identifier: 10:0B:F2:FC:2C:4B:4D:56:6B:EC:A9:4E:85:3D:62:0B:34:0D:28:B8 Authority key identifier: B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7 Certificate issuer: /CN=b2af3d658b494cb1715206c5cd76e792e7247ef7 Certificate serial: 019AF4650D2B3E903E9BCFE5F51EC2854D19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft Manifest number: 05F0 Signing time: Sat 06 Dec 2025 16:00:54 +0000 Manifest this update: Sat 06 Dec 2025 16:00:54 +0000 Manifest next update: Sun 07 Dec 2025 16:00:54 +0000 Files and hashes: 1: 53_H80-AjcuM7a-7V7Ni8CDVxmc.roa (hash: TnMZlgDSn2wGls3cni5JDswiMtfBk15EprIHZOUPW18=) 2: sq89ZYtJTLFxUgbFzXbnkuckfvc.crl (hash: haOeuRaXYoa5dbbrbwxYtlHEaCEkvyWJSop9QnMNjYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:0d:2b:3e:90:3e:9b:cf:e5:f5:1e:c2:85:4d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2af3d658b494cb1715206c5cd76e792e7247ef7 Validity Not Before: Dec 6 16:00:54 2025 GMT Not After : Dec 7 16:00:54 2025 GMT Subject: CN=100bf2fc2c4b4d566beca94e853d620b340d28b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7f:26:a8:ad:1a:d2:44:e0:cd:08:14:70:99: 65:82:a1:7e:d2:41:d0:94:83:1f:8a:75:11:c8:c3: d2:87:8c:f1:b5:66:ba:d8:0d:38:17:34:20:7e:b3: fa:69:f8:5f:22:c7:91:da:70:26:d6:63:32:6b:20: 09:b5:80:ff:44:8a:8e:d2:e2:c2:b2:6b:8a:b8:79: 88:a3:7b:09:0f:ad:79:56:4a:a3:1c:50:0b:0d:fa: 35:14:e9:7d:f6:5e:55:d3:ec:1f:c3:14:b3:85:aa: 28:f3:35:b3:cb:a1:fc:f6:c2:e8:b9:ea:60:8c:ce: b3:17:a9:26:cb:55:1a:48:49:49:95:e9:b6:7d:2f: 3b:25:39:23:c4:fd:cd:08:e3:c8:7f:9e:c5:8a:59: 4d:1a:1b:01:41:9c:c0:23:fd:0d:7d:91:2d:9d:91: 6a:4f:26:4e:c0:35:01:8e:16:52:7d:55:b8:39:a8: 26:85:a7:66:0c:f9:c0:1f:de:b7:91:d7:91:69:e2: b3:22:22:16:b1:09:4c:12:cb:16:0f:25:f9:c0:ce: 99:08:1c:dc:cb:6d:b1:f9:6f:96:fb:03:f6:07:73: 92:ec:e0:1b:85:58:23:08:fe:66:65:ea:dd:94:7a: a2:39:68:0e:d7:23:36:1e:05:d7:04:75:52:95:44: f3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0B:F2:FC:2C:4B:4D:56:6B:EC:A9:4E:85:3D:62:0B:34:0D:28:B8 X509v3 Authority Key Identifier: keyid:B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:7c:3f:f2:f8:65:f2:4e:2a:44:5f:5d:fe:0e:40:21:6a:1c: 3a:fd:af:6c:b8:60:e6:ab:bc:48:f1:2b:4d:98:e4:f3:4b:a8: 2f:56:55:0b:0d:d6:88:47:b9:1d:d0:09:0b:e0:44:a0:6b:cf: d9:24:bc:35:18:85:62:d3:7a:3d:43:fe:66:3c:e4:d9:28:cb: 24:a6:2f:e5:78:4e:a0:7b:73:33:5b:e7:87:61:fb:21:66:b3: 02:ec:32:27:74:87:5e:ab:a7:f4:46:dd:6b:af:8d:98:e8:a8: 82:67:70:63:af:82:ab:74:4a:65:f6:93:0a:1e:5c:da:05:b7: 4b:3e:8f:12:84:0c:dc:e0:c3:ce:52:d1:8e:97:ec:39:93:96: 44:b2:7b:3c:9b:e0:a6:db:32:a6:b3:f6:6e:46:d6:d3:0a:a4: ef:90:ec:60:ca:65:47:17:1e:d5:8f:e5:9d:c4:99:79:d4:57: cd:19:67:84:c2:a2:27:a9:d3:85:fa:9f:c9:6c:79:d6:db:a6: 0c:fb:69:ed:93:fc:cd:86:61:8e:ec:7e:0a:70:cc:86:b8:b2: 8c:45:0b:ce:62:c7:38:7e:43:a4:a2:e8:07:de:ba:52:5b:d9: 15:77:a5:0c:56:7b:52:4a:23:3d:3c:99:b5:56:d8:7b:97:b2: bb:76:f4:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQ0rPpA+m8/l9R7ChU0ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYWYzZDY1OGI0OTRjYjE3MTUyMDZjNWNkNzZlNzkyZTcy NDdlZjcwHhcNMjUxMjA2MTYwMDU0WhcNMjUxMjA3MTYwMDU0WjAzMTEwLwYDVQQD EygxMDBiZjJmYzJjNGI0ZDU2NmJlY2E5NGU4NTNkNjIwYjM0MGQyOGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn8mqK0a0kTgzQgUcJllgqF+0kHQ lIMfinURyMPSh4zxtWa62A04FzQgfrP6afhfIseR2nAm1mMyayAJtYD/RIqO0uLC smuKuHmIo3sJD615VkqjHFALDfo1FOl99l5V0+wfwxSzhaoo8zWzy6H89sLouepg jM6zF6kmy1UaSElJlem2fS87JTkjxP3NCOPIf57FillNGhsBQZzAI/0NfZEtnZFq TyZOwDUBjhZSfVW4OagmhadmDPnAH963kdeRaeKzIiIWsQlMEssWDyX5wM6ZCBzc y22x+W+W+wP2B3OS7OAbhVgjCP5mZerdlHqiOWgO1yM2HgXXBHVSlUTzrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAL8vwsS01Wa+ypToU9Ygs0DSi4MB8GA1UdIwQY MBaAFLKvPWWLSUyxcVIGxc1255LnJH73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3E4OVpZdEpUTEZ4VWdiRnpYYm5rdWNrZnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80OGI0MmMtYzllZi00ZTBlLTg2YjQt YTJlZWJiMTY2ZmM4LzEvc3E4OVpZdEpUTEZ4VWdiRnpYYm5rdWNrZnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS80OGI0MmMtYzllZi00ZTBlLTg2YjQtYTJlZWJiMTY2ZmM4 LzEvc3E4OVpZdEpUTEZ4VWdiRnpYYm5rdWNrZnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXw/8vhl 8k4qRF9d/g5AIWocOv2vbLhg5qu8SPErTZjk80uoL1ZVCw3WiEe5HdAJC+BEoGvP 2SS8NRiFYtN6PUP+Zjzk2SjLJKYv5XhOoHtzM1vnh2H7IWazAuwyJ3SHXqun9Ebd a6+NmOiogmdwY6+Cq3RKZfaTCh5c2gW3Sz6PEoQM3ODDzlLRjpfsOZOWRLJ7PJvg ptsyprP2bkbW0wqk75DsYMplRxce1Y/lncSZedRXzRlnhMKiJ6nThfqfyWx51tum DPtp7ZP8zYZhjux+CnDMhriyjEULzmLHOH5DpKLoB966UlvZFXelDFZ7UkojPTyZ tVbYe5eyu3b0dw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:34:48 2025 by rpki-client