This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json) Hash identifier: +EqHhBgm0/e8hbzDmaJtgZH9eyceYGW8SauCBhNgBsY= Subject key identifier: 9E:15:A9:25:41:9B:BB:15:BD:FD:87:D1:B7:78:B3:97:39:6C:65:92 Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70 Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070 Certificate serial: 019AF31BCC8C1161C3B5258FE6B1B766FDA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft Manifest number: 1777 Signing time: Sat 06 Dec 2025 10:01:16 +0000 Manifest this update: Sat 06 Dec 2025 10:01:16 +0000 Manifest next update: Sun 07 Dec 2025 10:01:16 +0000 Files and hashes: 1: FbIoob4iTw44eH-Dt8h61MoAIPY.roa (hash: 7Jgl5oeZbwQ2DvaEShI936iS6DHQaWaMAl7kfq1Du28=) 2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: RGtse8wcB3XNfEMUgXL10fuDWzxhWcpadtedNJQE5Zs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:cc:8c:11:61:c3:b5:25:8f:e6:b1:b7:66:fd:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070 Validity Not Before: Dec 6 10:01:16 2025 GMT Not After : Dec 7 10:01:16 2025 GMT Subject: CN=9e15a925419bbb15bdfd87d1b778b397396c6592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:31:a5:7e:96:d5:49:68:66:6e:79:7b:6e:4a: 69:9f:49:c8:cf:93:a6:11:62:a6:1a:37:25:b6:8d: 58:57:3d:0f:ac:47:15:c6:44:c4:ed:c7:66:f7:a1: 4c:90:65:ac:88:50:2f:01:aa:11:1b:48:dd:25:4c: f1:e0:e3:ec:f3:07:9d:3e:80:ca:bc:6c:7e:1b:a1: 4d:75:fe:6c:ea:10:91:64:88:02:92:41:28:9a:56: ec:1b:f7:20:ca:66:82:d3:67:55:4d:26:80:f4:2f: bd:38:31:a4:f2:9c:01:6b:aa:14:b2:08:2e:4b:65: b6:05:b2:2c:d2:27:b3:e2:b2:e8:8c:d2:16:bc:4f: 72:cb:0a:34:a0:eb:8f:4c:e0:82:b8:dd:eb:d5:94: 42:90:3e:44:27:93:c4:93:df:79:f6:ed:0d:e8:04: 4f:6a:13:d3:8f:71:a8:4e:e4:66:f4:4e:78:33:1c: d1:73:53:ad:b8:ee:c4:18:10:fa:8f:3f:5c:f7:4d: d8:5e:1c:dc:67:03:0b:9c:37:6a:3e:40:31:2c:35: fb:1b:51:8f:2e:52:34:e1:d7:7f:7f:7d:2f:49:2e: e0:9e:c0:2b:75:3d:06:86:05:e2:75:5e:46:31:24: ed:79:4f:7f:05:82:da:56:0c:64:e4:10:fd:0f:5e: 96:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:15:A9:25:41:9B:BB:15:BD:FD:87:D1:B7:78:B3:97:39:6C:65:92 X509v3 Authority Key Identifier: keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:5c:da:51:6c:d1:83:db:53:f6:b1:c2:bd:70:c1:07:6a:d1: c2:cf:9b:b4:1d:c5:bf:70:f0:5a:b6:ce:88:64:39:c5:cc:5f: 93:b3:d0:ce:0f:6a:d4:e0:59:d6:1b:ea:e8:ed:de:fb:c1:f1: 92:c3:6b:40:cf:a3:34:94:54:6a:f6:58:4b:44:81:7c:49:5c: 2e:ab:e1:07:0f:bd:5b:14:41:82:b4:e8:28:70:f2:e0:ea:3f: b6:73:57:fd:55:1d:18:b4:ad:80:da:f9:96:1e:9a:5c:b4:82: 35:9b:07:4a:4c:d1:b8:a3:14:89:d1:e6:02:72:f2:40:33:7c: df:6a:85:03:33:5d:bb:cb:ca:d4:2a:a4:7b:57:fc:a0:ee:89: cb:20:08:c1:19:c8:43:79:66:b0:ea:8e:4e:72:32:cd:b5:6b: 99:f6:7e:8d:dd:57:d0:39:f4:3a:4a:4d:a0:19:d9:fa:ec:fc: fd:6f:0f:22:86:2c:39:2d:9e:e5:b3:a8:88:7f:f1:b5:c6:98: ce:4f:a2:bf:7a:9b:ee:13:e1:16:d4:e1:c9:1d:f8:8f:59:2b: 3f:27:f8:0b:8d:9e:89:b4:0a:9d:e5:61:49:3c:2a:59:12:b5: d0:ec:4e:30:24:3a:29:3c:ae:00:c3:3a:0b:45:5e:18:e0:0f: e5:96:96:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8yMEWHDtSWP5rG3Zv2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMGMzY2YzZGM1M2NhNTQ5YzAzZTRmNWY0NmQ5MWNlOTBi OGUwNzAwHhcNMjUxMjA2MTAwMTE2WhcNMjUxMjA3MTAwMTE2WjAzMTEwLwYDVQQD Eyg5ZTE1YTkyNTQxOWJiYjE1YmRmZDg3ZDFiNzc4YjM5NzM5NmM2NTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTGlfpbVSWhmbnl7bkppn0nIz5Om EWKmGjclto1YVz0PrEcVxkTE7cdm96FMkGWsiFAvAaoRG0jdJUzx4OPs8wedPoDK vGx+G6FNdf5s6hCRZIgCkkEomlbsG/cgymaC02dVTSaA9C+9ODGk8pwBa6oUsggu S2W2BbIs0iez4rLojNIWvE9yywo0oOuPTOCCuN3r1ZRCkD5EJ5PEk9959u0N6ARP ahPTj3GoTuRm9E54MxzRc1OtuO7EGBD6jz9c903YXhzcZwMLnDdqPkAxLDX7G1GP LlI04dd/f30vSS7gnsArdT0GhgXidV5GMSTteU9/BYLaVgxk5BD9D16WJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4VqSVBm7sVvf2H0bd4s5c5bGWSMB8GA1UdIwQY MBaAFLEMPPPcU8pUnAPk9fRtkc6QuOBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMt MzZmODJiZDM3OWJkLzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMtMzZmODJiZDM3OWJk LzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlzaUWzR g9tT9rHCvXDBB2rRws+btB3Fv3DwWrbOiGQ5xcxfk7PQzg9q1OBZ1hvq6O3e+8Hx ksNrQM+jNJRUavZYS0SBfElcLqvhBw+9WxRBgrToKHDy4Oo/tnNX/VUdGLStgNr5 lh6aXLSCNZsHSkzRuKMUidHmAnLyQDN832qFAzNdu8vK1Cqke1f8oO6JyyAIwRnI Q3lmsOqOTnIyzbVrmfZ+jd1X0Dn0OkpNoBnZ+uz8/W8PIoYsOS2e5bOoiH/xtcaY zk+iv3qb7hPhFtThyR34j1krPyf4C42eibQKneVhSTwqWRK10OxOMCQ6KTyuAMM6 C0VeGOAP5ZaW+A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:56 2025 by rpki-client