This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json) Hash identifier: LXlr6y2BbH3cY0xdZyKOJYQOCV1GS/+s1tPyoxuZLO8= Subject key identifier: D8:06:01:C1:4F:CF:51:E4:6F:94:23:FE:5C:FB:C0:11:3F:AC:60:B2 Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62 Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462 Certificate serial: 019AF19B2990E08AC0411C6438C7C569A48C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 03:01:08 +0000 Manifest this update: Sat 06 Dec 2025 03:01:08 +0000 Manifest next update: Sun 07 Dec 2025 03:01:08 +0000 Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: Hmspk8jIwGNdBYPrY2dqoFMCF2eOpKdADpWBQBUOvqI=) 2: mC6qnnktw8ocqw8es0LfRst29xw.roa (hash: ppmb2PFwvp6zlS01nCp0DE/SrZFmg3TuLccALf3DpFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:29:90:e0:8a:c0:41:1c:64:38:c7:c5:69:a4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462 Validity Not Before: Dec 6 03:01:08 2025 GMT Not After : Dec 7 03:01:08 2025 GMT Subject: CN=d80601c14fcf51e46f9423fe5cfbc0113fac60b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1a:6d:e8:47:6b:2a:44:20:b3:3b:7b:37:77: 44:08:fd:f1:57:80:cb:e1:f0:1b:31:4a:90:b8:f5: b8:6d:3b:cb:fe:70:bb:44:b7:b9:a4:31:24:51:0f: f0:d2:63:85:b1:99:9f:c2:82:f4:c6:6c:5b:e8:90: 2f:da:48:b3:57:c9:e8:9f:8e:88:b9:30:4a:ff:73: 19:ab:da:47:de:75:d2:e2:c2:b0:4c:6d:83:58:31: 6c:01:d3:62:da:76:eb:17:1c:86:e1:4e:8a:85:af: dc:0f:be:e6:7f:bb:56:6e:23:d2:b9:62:1a:84:e9: 1a:53:c2:13:ac:c1:95:a5:8a:53:36:9b:bb:b2:12: 4c:0e:23:19:2e:20:55:92:6c:88:21:5d:a0:56:74: bc:71:25:1b:4a:92:4f:d8:69:dc:b4:9d:eb:3a:21: 41:9d:f0:4b:a3:9c:da:14:b8:9b:d8:45:64:37:27: fa:27:75:9d:dd:83:e2:6c:76:26:e3:27:83:a6:df: c7:d2:63:04:f2:11:f7:4e:b6:d4:b3:43:71:76:1f: 4c:60:b5:c3:9b:0c:c8:31:e5:ab:7d:76:77:72:05: 62:a5:92:a5:32:90:5d:72:a5:b0:f9:2d:e2:dc:36: 9e:41:7f:df:08:b2:20:a9:6c:1e:16:d9:eb:e3:61: 71:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:06:01:C1:4F:CF:51:E4:6F:94:23:FE:5C:FB:C0:11:3F:AC:60:B2 X509v3 Authority Key Identifier: keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:aa:96:f0:47:e4:60:cf:5c:5c:ed:7d:89:74:b7:20:13:2c: 7b:0d:f4:e1:5c:30:9c:22:11:05:b9:ab:dd:87:03:a1:f0:e6: bf:dc:39:87:d7:e3:30:fc:1f:2d:b8:8b:b5:cb:09:7f:f9:05: e3:f9:ea:2d:b3:3e:4c:e3:cf:2b:59:eb:72:95:5b:b9:84:b2: 17:ac:29:09:f8:0d:e7:27:13:31:27:6a:eb:52:17:16:54:05: 35:d6:a2:e2:0d:60:a6:be:2c:2d:9f:a0:07:17:f8:46:0a:a7: f7:cd:9d:00:29:c4:ef:96:e5:d7:92:2b:00:58:2c:f2:db:f4: c4:f4:95:7e:f5:1e:8a:a4:bd:c4:54:92:42:37:44:c2:2f:b6: a0:17:96:77:fd:cd:5b:d3:36:98:90:ad:db:51:c6:b3:85:85: a5:81:73:ea:16:d4:9d:c8:7d:e5:59:87:7b:13:4b:a5:07:ab: 00:0b:55:bd:09:5a:5a:bd:cc:b3:9e:0e:85:48:a6:b7:49:6e: e7:72:c7:ab:41:61:e3:d5:a3:fe:8c:72:5e:a6:d6:94:50:c5: 80:ee:24:32:4c:e0:1f:70:42:2d:ea:e0:79:4b:b5:ee:21:7e: f8:f1:38:97:4d:1a:39:9c:51:9a:fc:79:47:99:82:91:7f:e9: 3b:e4:37:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmymQ4IrAQRxkOMfFaaSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2RlMzY1ZDdkMmI1ODUwNmU0ZDRhYmYwYzJlZjdjZDVl M2I0NjIwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD EyhkODA2MDFjMTRmY2Y1MWU0NmY5NDIzZmU1Y2ZiYzAxMTNmYWM2MGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxpt6EdrKkQgszt7N3dECP3xV4DL 4fAbMUqQuPW4bTvL/nC7RLe5pDEkUQ/w0mOFsZmfwoL0xmxb6JAv2kizV8non46I uTBK/3MZq9pH3nXS4sKwTG2DWDFsAdNi2nbrFxyG4U6Kha/cD77mf7tWbiPSuWIa hOkaU8ITrMGVpYpTNpu7shJMDiMZLiBVkmyIIV2gVnS8cSUbSpJP2GnctJ3rOiFB nfBLo5zaFLib2EVkNyf6J3Wd3YPibHYm4yeDpt/H0mME8hH3TrbUs0Nxdh9MYLXD mwzIMeWrfXZ3cgVipZKlMpBdcqWw+S3i3DaeQX/fCLIgqWweFtnr42Fx5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgGAcFPz1Hkb5Qj/lz7wBE/rGCyMB8GA1UdIwQY MBaAFELN42XX0rWFBuTUq/DC73zV47RiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEt MDJlMWJkNjA1MGU1LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEtMDJlMWJkNjA1MGU1 LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaqW8Efk YM9cXO19iXS3IBMsew304VwwnCIRBbmr3YcDofDmv9w5h9fjMPwfLbiLtcsJf/kF 4/nqLbM+TOPPK1nrcpVbuYSyF6wpCfgN5ycTMSdq61IXFlQFNdai4g1gpr4sLZ+g Bxf4Rgqn982dACnE75bl15IrAFgs8tv0xPSVfvUeiqS9xFSSQjdEwi+2oBeWd/3N W9M2mJCt21HGs4WFpYFz6hbUnch95VmHexNLpQerAAtVvQlaWr3Ms54OhUimt0lu 53LHq0Fh49Wj/oxyXqbWlFDFgO4kMkzgH3BCLergeUu17iF++PE4l00aOZxRmvx5 R5mCkX/pO+Q3lQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:45 2025 by rpki-client