This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json) Hash identifier: L/jrccHWuE8ubrm8AIfZ/b/zIBOfjevca9vvvlHhMaI= Subject key identifier: FA:48:0B:BA:9D:1E:78:75:1A:1B:7B:26:4A:50:E1:30:40:04:06:B7 Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7 Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7 Certificate serial: 019B318D0DD81068269E3BCF107CD88A589A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft Manifest number: 1788 Signing time: Thu 18 Dec 2025 13:01:26 +0000 Manifest this update: Thu 18 Dec 2025 13:01:26 +0000 Manifest next update: Fri 19 Dec 2025 13:01:26 +0000 Files and hashes: 1: nNICaFb7G3xV0xaZvY4tLFZeqjU.roa (hash: 5uzWSjZq0ATl8Nrn/VGx6JZA+5X6g81sHleJ+o0B2vM=) 2: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: WpIju1WnOPyazYtpkVt88SRKYQeeiIU10TOn6423+Co=) 3: vlECbF8HkBG6WpBhMBZnOl_AraI.roa (hash: 3UR9pQsXBE1n+38LaDwJGSYsS95ZptnvsHsDatSDo+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8d:0d:d8:10:68:26:9e:3b:cf:10:7c:d8:8a:58:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7 Validity Not Before: Dec 18 13:01:26 2025 GMT Not After : Dec 19 13:01:26 2025 GMT Subject: CN=fa480bba9d1e78751a1b7b264a50e130400406b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b4:ae:28:d2:1d:f6:af:8d:f9:aa:3d:5a:d7: 57:a8:f8:19:f2:5d:cc:c9:75:61:8b:68:b5:34:d5: 50:87:9e:90:df:fb:3e:8b:bb:06:09:50:c6:2c:45: aa:b6:50:45:c2:c4:ed:f1:5b:e8:04:a4:69:89:34: 57:49:ae:57:b6:ae:a7:a1:87:1f:30:39:42:20:4a: e9:b9:f9:e8:dc:d2:e7:26:7f:09:be:13:01:96:4c: 0d:50:26:5a:ca:70:e0:a1:60:a9:86:f5:cf:5a:4d: ec:93:4d:9e:0a:d3:93:11:b2:62:de:1c:0c:f5:1d: d4:9e:c6:9d:47:a8:59:c1:e4:94:24:83:8e:d8:0a: a6:b3:51:b8:ae:94:9e:49:be:44:2d:36:e3:9e:e4: 8e:a9:46:e5:bd:29:2e:1e:0b:29:5d:bd:62:36:bd: ba:1b:f7:56:ee:d1:4d:72:8e:06:cc:a9:ac:45:17: 70:11:c4:c5:d4:67:4f:1b:70:3b:31:91:f6:63:57: 50:df:be:18:b4:83:38:50:16:ca:0f:73:4d:16:3f: 46:51:f5:94:9c:78:59:d3:01:10:9f:26:74:a8:66: b3:8a:d7:06:7f:9f:3c:59:c7:3a:fa:c7:16:a7:65: 6d:ee:2e:eb:1e:c5:36:29:91:22:d4:21:ff:ce:56: cd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:48:0B:BA:9D:1E:78:75:1A:1B:7B:26:4A:50:E1:30:40:04:06:B7 X509v3 Authority Key Identifier: keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b0:13:64:70:ed:14:8e:7b:41:1d:d7:fe:e1:bf:11:9d:01: 08:42:24:0c:71:be:85:3b:65:23:32:f7:a5:d0:54:c8:82:41: b1:0a:49:bc:e7:52:7a:2f:60:c2:e5:8d:ac:07:e3:a6:ac:6d: f7:27:8b:6a:95:bf:78:74:62:49:c4:2a:6b:6e:ad:ab:a1:92: d3:a5:bb:b5:00:33:7e:b8:0f:da:3a:23:1d:88:95:f6:5d:ce: 73:d2:eb:c9:27:31:22:5b:af:89:4c:25:0b:03:8a:2e:80:3e: cf:1c:85:f8:44:53:9e:17:ba:60:18:37:e3:b1:8b:e2:db:8a: f6:26:9d:71:a0:38:9d:9e:be:7b:4a:2a:a4:f0:1d:a5:a1:03: 85:65:2c:a2:f1:ec:9a:6d:18:2e:be:6f:e6:98:85:79:97:82: 64:38:e0:6e:c1:e3:9b:99:93:4b:d6:81:12:65:41:f3:6b:51: f6:2b:70:9b:29:a7:d1:42:c2:25:85:83:06:b9:af:3f:7b:2b: 33:73:64:ad:e6:57:46:ef:a3:64:4d:4c:fe:b7:04:09:da:a6: e1:e9:71:5e:34:34:5c:b4:a7:9b:65:b8:42:0f:3d:93:16:39: 40:6d:2b:3f:ee:c7:02:10:54:8f:e4:30:ef:46:58:36:9e:c0: 05:b7:58:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjQ3YEGgmnjvPEHzYiliaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MzRiOGRlYzEyODFiYzU0MzE3YzdmZWQwZTlhY2JjN2I5 N2NhYzcwHhcNMjUxMjE4MTMwMTI2WhcNMjUxMjE5MTMwMTI2WjAzMTEwLwYDVQQD EyhmYTQ4MGJiYTlkMWU3ODc1MWExYjdiMjY0YTUwZTEzMDQwMDQwNmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLSuKNId9q+N+ao9WtdXqPgZ8l3M yXVhi2i1NNVQh56Q3/s+i7sGCVDGLEWqtlBFwsTt8VvoBKRpiTRXSa5Xtq6noYcf MDlCIErpufno3NLnJn8JvhMBlkwNUCZaynDgoWCphvXPWk3sk02eCtOTEbJi3hwM 9R3UnsadR6hZweSUJIOO2Aqms1G4rpSeSb5ELTbjnuSOqUblvSkuHgspXb1iNr26 G/dW7tFNco4GzKmsRRdwEcTF1GdPG3A7MZH2Y1dQ374YtIM4UBbKD3NNFj9GUfWU nHhZ0wEQnyZ0qGazitcGf588Wcc6+scWp2Vt7i7rHsU2KZEi1CH/zlbNgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpIC7qdHnh1Ght7JkpQ4TBABAa3MB8GA1UdIwQY MBaAFKk0uN7BKBvFQxfH/tDprLx7l8rHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84N2I1NjItY2I3ZC00YTkzLWJkNDMt MjdlZTQyZDkyNWFkLzEvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC84N2I1NjItY2I3ZC00YTkzLWJkNDMtMjdlZTQyZDkyNWFk LzEvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrATZHDt FI57QR3X/uG/EZ0BCEIkDHG+hTtlIzL3pdBUyIJBsQpJvOdSei9gwuWNrAfjpqxt 9yeLapW/eHRiScQqa26tq6GS06W7tQAzfrgP2jojHYiV9l3Oc9LryScxIluviUwl CwOKLoA+zxyF+ERTnhe6YBg347GL4tuK9iadcaA4nZ6+e0oqpPAdpaEDhWUsovHs mm0YLr5v5piFeZeCZDjgbsHjm5mTS9aBEmVB82tR9itwmymn0ULCJYWDBrmvP3sr M3NkreZXRu+jZE1M/rcECdqm4elxXjQ0XLSnm2W4Qg89kxY5QG0rP+7HAhBUj+Qw 70ZYNp7ABbdYLA== -----END CERTIFICATE-----Generated at Thu Dec 18 16:13:39 2025 by rpki-client