This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft File: QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft (raw, json) Hash identifier: d8R6MrLv05TgztB0GN0GUu8GLK6AiRZtJMTVoUtlnfQ= Subject key identifier: B6:41:A5:A0:65:E8:9A:80:1C:76:D8:6F:CD:75:91:3B:E3:F8:2C:E1 Authority key identifier: 41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD Certificate issuer: /CN=412abb114f32570c5dd52066259bdc80c98768fd Certificate serial: 019AF3521810A8AA3789819DB809AB99A168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft Manifest number: 0E9F Signing time: Sat 06 Dec 2025 11:00:34 +0000 Manifest this update: Sat 06 Dec 2025 11:00:34 +0000 Manifest next update: Sun 07 Dec 2025 11:00:34 +0000 Files and hashes: 1: QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl (hash: UeBMGPXQOQ9Gj1vKSM9NUiK737l1mP3dyMaLaHSPT4w=) 2: WjHlxqu14v8phrZRkyuwZHi4tA0.roa (hash: OgrQu5S4ReMsliJzFxYO2+I1LQQpOGuq17K/+Bl2UJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:18:10:a8:aa:37:89:81:9d:b8:09:ab:99:a1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412abb114f32570c5dd52066259bdc80c98768fd Validity Not Before: Dec 6 11:00:34 2025 GMT Not After : Dec 7 11:00:34 2025 GMT Subject: CN=b641a5a065e89a801c76d86fcd75913be3f82ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:dd:b6:ac:50:81:ea:f6:78:7e:6e:da:23: f7:48:b2:26:60:1e:f7:76:7b:f0:54:e8:94:87:37: 40:be:a7:25:05:6e:fb:82:0a:ad:69:ff:33:64:2c: 4a:be:d7:51:c9:4c:4c:fc:84:7d:41:f7:20:8b:8c: c5:df:9b:a6:c0:96:b8:01:fa:0c:76:2a:24:a9:60: 80:7b:1b:bc:91:a0:4d:45:25:b3:32:1e:12:dc:4a: a3:18:74:99:1b:17:88:fa:ea:a4:71:5c:64:ea:7a: 27:96:12:7e:f8:b4:e6:43:68:04:a9:0c:88:78:02: 54:17:4f:f2:36:88:3f:11:b7:56:58:2f:e3:61:b4: f3:44:59:e5:e9:75:eb:f5:b0:29:1d:e2:cb:30:93: ff:09:70:27:06:2e:ad:e0:22:b6:bd:5e:c0:40:14: ba:81:18:0a:06:52:5d:b5:d4:42:b3:69:7b:f3:96: 9f:ee:c4:b4:39:42:49:01:66:af:f3:6b:33:4f:8b: 86:c9:90:f4:d0:e4:94:31:70:b9:f1:26:2b:29:c4: 40:9a:e9:0c:54:30:b5:07:f2:2e:8f:83:32:b0:e2: 0d:04:11:8a:eb:c6:96:a1:24:a4:25:02:30:c9:e9: 44:bd:e1:a5:46:91:6b:b7:d4:80:33:09:d1:9e:76: e6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:41:A5:A0:65:E8:9A:80:1C:76:D8:6F:CD:75:91:3B:E3:F8:2C:E1 X509v3 Authority Key Identifier: keyid:41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:6c:8c:b9:da:78:8b:ff:ea:ec:d0:5c:92:0f:2a:e4:b7:66: 56:49:16:69:2f:41:b6:d3:1e:80:0a:36:b3:61:e1:83:d9:64: d4:25:5a:2c:65:da:a3:df:72:93:be:c2:77:4f:ef:b9:32:4d: fa:26:04:d8:31:6d:45:1d:f8:0a:86:14:56:51:83:7c:29:9f: 7f:e6:1f:e6:0a:c7:c1:2f:a5:1a:b1:0a:3a:80:a9:43:4e:e3: 6e:7d:ae:b8:35:33:90:34:c8:97:0d:2c:24:77:e7:d3:89:e1: d3:39:fa:26:21:14:a3:18:f5:10:2e:2f:60:8e:00:d5:4b:f6: b5:14:2a:23:ba:07:22:65:84:85:0d:b3:71:fe:86:a9:56:c4: 32:8f:32:0e:f5:f5:77:be:da:12:ca:4a:25:e3:97:d3:82:e5: a6:5e:39:36:37:07:c1:31:0a:1c:b5:2d:08:f4:3d:c4:5a:61: af:22:bc:36:c6:2d:3f:1f:17:4d:9b:9c:20:b9:bb:e3:97:9f: e2:d1:c6:ac:a7:10:ce:eb:ca:98:3a:dc:53:1d:b7:84:cc:83: a2:da:de:6e:fb:3b:8b:7a:db:a6:d7:24:ef:1c:a8:2f:21:51: 38:ef:49:d9:51:de:14:34:e9:33:b4:14:34:77:64:55:75:81: cc:bb:8e:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUhgQqKo3iYGduAmrmaFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMmFiYjExNGYzMjU3MGM1ZGQ1MjA2NjI1OWJkYzgwYzk4 NzY4ZmQwHhcNMjUxMjA2MTEwMDM0WhcNMjUxMjA3MTEwMDM0WjAzMTEwLwYDVQQD EyhiNjQxYTVhMDY1ZTg5YTgwMWM3NmQ4NmZjZDc1OTEzYmUzZjgyY2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpjdtqxQger2eH5u2iP3SLImYB73 dnvwVOiUhzdAvqclBW77ggqtaf8zZCxKvtdRyUxM/IR9Qfcgi4zF35umwJa4AfoM diokqWCAexu8kaBNRSWzMh4S3EqjGHSZGxeI+uqkcVxk6nonlhJ++LTmQ2gEqQyI eAJUF0/yNog/EbdWWC/jYbTzRFnl6XXr9bApHeLLMJP/CXAnBi6t4CK2vV7AQBS6 gRgKBlJdtdRCs2l785af7sS0OUJJAWav82szT4uGyZD00OSUMXC58SYrKcRAmukM VDC1B/Iuj4MysOINBBGK68aWoSSkJQIwyelEveGlRpFrt9SAMwnRnnbm/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZBpaBl6JqAHHbYb811kTvj+CzhMB8GA1UdIwQY MBaAFEEquxFPMlcMXdUgZiWb3IDJh2j9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNxN0VVOHlWd3hkMVNCbUpadmNnTW1IYVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85MzEyNzgtOWM1Yy00OTM1LWE0ZjEt YTM1MDdkYzY3NGMyLzEvUVNxN0VVOHlWd3hkMVNCbUpadmNnTW1IYVAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi85MzEyNzgtOWM1Yy00OTM1LWE0ZjEtYTM1MDdkYzY3NGMy LzEvUVNxN0VVOHlWd3hkMVNCbUpadmNnTW1IYVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmyMudp4 i//q7NBckg8q5LdmVkkWaS9BttMegAo2s2Hhg9lk1CVaLGXao99yk77Cd0/vuTJN +iYE2DFtRR34CoYUVlGDfCmff+Yf5grHwS+lGrEKOoCpQ07jbn2uuDUzkDTIlw0s JHfn04nh0zn6JiEUoxj1EC4vYI4A1Uv2tRQqI7oHImWEhQ2zcf6GqVbEMo8yDvX1 d77aEspKJeOX04Llpl45NjcHwTEKHLUtCPQ9xFphryK8NsYtPx8XTZucILm745ef 4tHGrKcQzuvKmDrcUx23hMyDotrebvs7i3rbptck7xyoLyFROO9J2VHeFDTpM7QU NHdkVXWBzLuOdA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:02:13 2025 by rpki-client