This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft File: qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json) Hash identifier: euhBC25WohEMRcl/k7xZYf/Fm2pKHGqbLJ2Ppr20PVY= Subject key identifier: 89:91:5D:98:52:7E:84:E3:67:C4:1A:68:5C:41:B4:A6:53:A1:5F:1A Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80 Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80 Certificate serial: 019B34565C43226C13E79F50DAD94398740F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft Manifest number: 0D60 Signing time: Fri 19 Dec 2025 02:00:33 +0000 Manifest this update: Fri 19 Dec 2025 02:00:33 +0000 Manifest next update: Sat 20 Dec 2025 02:00:33 +0000 Files and hashes: 1: ZZqXGnxEBhLfDD9lB7yOqiX8_H0.roa (hash: AmgNgGv8HaEfNgQu4ILsUPklwcafU90+t65Aj2bSX9Y=) 2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: b7hpbvZdkfjbpW+TF+wT5uLmjPBu0lJNhOIFm/objrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:5c:43:22:6c:13:e7:9f:50:da:d9:43:98:74:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80 Validity Not Before: Dec 19 02:00:33 2025 GMT Not After : Dec 20 02:00:33 2025 GMT Subject: CN=89915d98527e84e367c41a685c41b4a653a15f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c5:84:cb:3e:43:ad:27:88:4e:02:32:79:5b: b3:72:34:46:79:a6:f0:88:df:80:8e:99:12:e8:a7: 4b:84:ad:5b:18:53:ca:86:9e:62:0e:2f:72:7f:79: 0d:d8:21:18:fa:ed:88:97:b5:2a:f8:44:41:17:c2: 6a:5b:80:a1:b3:df:66:d2:62:0f:ea:1f:87:39:78: b5:78:aa:a9:b8:42:8c:6a:48:2a:60:9f:50:a2:34: 25:7f:d8:fa:9f:34:4d:60:e7:c1:9b:21:79:9e:e1: 3e:e7:e9:1f:fc:b9:9e:65:0b:dc:9e:ac:47:37:51: 38:da:4e:60:88:c6:9c:d0:9e:69:67:5b:60:25:c8: 0c:3e:cd:5e:f9:33:db:98:69:08:25:95:55:81:5f: b8:e0:7b:0c:06:d2:9b:63:af:6d:f9:cf:fa:50:59: 17:b8:8f:40:63:44:a4:7c:c2:49:c8:b4:c8:ba:14: c5:ea:82:90:d2:d6:b3:d6:f4:0d:e9:6e:23:dd:f3: e4:50:09:94:92:cc:d4:3f:e9:51:c1:9c:62:66:8a: 7f:4f:01:f3:cb:c9:c2:b6:51:1c:31:64:e2:f0:d8: db:2f:39:64:96:be:48:20:da:ca:a8:52:5f:77:65: 95:dc:1f:cd:bd:2e:48:f1:93:7a:63:25:32:38:35: 5b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:91:5D:98:52:7E:84:E3:67:C4:1A:68:5C:41:B4:A6:53:A1:5F:1A X509v3 Authority Key Identifier: keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b4:84:bf:d8:1b:3c:f8:24:a4:16:ac:a9:15:55:8d:6a:00: 26:a3:cf:5b:5f:61:2e:7d:61:b6:8f:02:6c:b0:63:b7:e2:d1: ce:5e:dd:a7:af:b5:85:78:a2:d6:f1:40:28:25:87:2d:67:ba: 16:cf:f4:1b:00:71:14:dc:05:2b:be:65:23:78:c0:bf:c6:66: e1:ff:a6:98:e9:a3:97:eb:82:9d:7b:ae:55:e3:6d:3d:5e:67: 4e:5f:82:b9:b3:bb:a5:75:f3:81:69:14:51:b7:eb:28:e5:88: f4:59:70:57:1c:38:d1:29:cb:b2:76:08:49:21:4f:bd:dd:47: 51:2b:84:a9:54:2c:f1:ad:f8:27:50:a7:3f:05:16:2b:07:c3: 79:79:c6:5e:27:91:b6:e2:10:4a:81:95:d6:c1:f5:0f:49:bf: 20:11:12:64:3f:c7:93:c1:09:4a:e6:db:a8:7c:be:be:94:43: fe:93:a3:a6:6f:0b:2d:a6:db:22:bc:66:a9:45:32:38:69:08: 62:39:98:ea:86:b2:19:13:6c:4e:59:26:b3:30:43:48:b6:27: a0:75:1c:d8:96:7e:e0:bb:cd:84:49:ed:6e:54:87:88:11:13: 10:f3:4f:38:1c:06:21:c9:3e:2c:cc:54:f6:28:4b:53:74:74: 93:57:15:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VlxDImwT559Q2tlDmHQPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZjQ5MWYyMTBjNTdiZjQ2ZmI1MmQ0YWYyMmU3ZWNmNmY0 Y2RhODAwHhcNMjUxMjE5MDIwMDMzWhcNMjUxMjIwMDIwMDMzWjAzMTEwLwYDVQQD Eyg4OTkxNWQ5ODUyN2U4NGUzNjdjNDFhNjg1YzQxYjRhNjUzYTE1ZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsWEyz5DrSeITgIyeVuzcjRGeabw iN+AjpkS6KdLhK1bGFPKhp5iDi9yf3kN2CEY+u2Il7Uq+ERBF8JqW4Chs99m0mIP 6h+HOXi1eKqpuEKMakgqYJ9QojQlf9j6nzRNYOfBmyF5nuE+5+kf/LmeZQvcnqxH N1E42k5giMac0J5pZ1tgJcgMPs1e+TPbmGkIJZVVgV+44HsMBtKbY69t+c/6UFkX uI9AY0SkfMJJyLTIuhTF6oKQ0taz1vQN6W4j3fPkUAmUkszUP+lRwZxiZop/TwHz y8nCtlEcMWTi8NjbLzlklr5IINrKqFJfd2WV3B/NvS5I8ZN6YyUyODVbuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImRXZhSfoTjZ8QaaFxBtKZToV8aMB8GA1UdIwQY MBaAFKj0kfIQxXv0b7UtSvIufs9vTNqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2Et MzMwYjhhZDQyNGJkLzEvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2EtMzMwYjhhZDQyNGJk LzEvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLSEv9gb PPgkpBasqRVVjWoAJqPPW19hLn1hto8CbLBjt+LRzl7dp6+1hXii1vFAKCWHLWe6 Fs/0GwBxFNwFK75lI3jAv8Zm4f+mmOmjl+uCnXuuVeNtPV5nTl+CubO7pXXzgWkU UbfrKOWI9FlwVxw40SnLsnYISSFPvd1HUSuEqVQs8a34J1CnPwUWKwfDeXnGXieR tuIQSoGV1sH1D0m/IBESZD/Hk8EJSubbqHy+vpRD/pOjpm8LLabbIrxmqUUyOGkI YjmY6oayGRNsTlkmszBDSLYnoHUc2JZ+4LvNhEntblSHiBETEPNPOBwGIck+LMxU 9ihLU3R0k1cV/g== -----END CERTIFICATE-----Generated at Fri Dec 19 05:44:24 2025 by rpki-client