This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft File: qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json) Hash identifier: fSz5PS65WZJx1YXnKLVeCa7SwSAeEfCCq4quKw56kmQ= Subject key identifier: A2:F8:A9:0C:2E:FA:D5:CA:5B:FE:21:1D:45:D9:20:FF:94:79:94:C6 Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80 Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80 Certificate serial: 019AF2AD41AA345E238E8D0DF54B0277A15C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft Manifest number: 0D3E Signing time: Sat 06 Dec 2025 08:00:31 +0000 Manifest this update: Sat 06 Dec 2025 08:00:31 +0000 Manifest next update: Sun 07 Dec 2025 08:00:31 +0000 Files and hashes: 1: ZZqXGnxEBhLfDD9lB7yOqiX8_H0.roa (hash: AmgNgGv8HaEfNgQu4ILsUPklwcafU90+t65Aj2bSX9Y=) 2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: GctLB3qNL7yyz5gGGAAkbg6bye4OCgiWtYP18O2qvHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:41:aa:34:5e:23:8e:8d:0d:f5:4b:02:77:a1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80 Validity Not Before: Dec 6 08:00:31 2025 GMT Not After : Dec 7 08:00:31 2025 GMT Subject: CN=a2f8a90c2efad5ca5bfe211d45d920ff947994c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:bc:a7:d3:c9:2f:dd:95:f4:9d:ae:60:b1: ed:1b:e7:3d:08:cf:41:67:cd:08:02:41:f3:a7:d2: ec:68:57:d3:0c:ff:70:99:a9:98:4d:83:9b:d2:7f: ab:c4:44:e4:45:90:63:4a:fb:05:6a:37:00:ae:bd: 80:76:a3:23:0c:04:bf:f5:80:6b:cd:fd:48:38:80: a3:7e:14:70:88:54:ff:d5:40:4b:fd:2d:fa:39:69: ae:29:99:e9:43:92:65:38:92:78:1f:30:8f:7c:f8: 8f:18:76:b8:1d:78:f3:bf:f3:8a:65:89:fb:cd:11: f8:6a:d7:d9:bb:e5:9b:f0:15:22:2c:30:4f:58:cc: 4a:d9:86:c6:ed:4f:31:98:94:b4:23:19:cf:40:ad: 21:db:f0:7c:3e:2c:cb:20:65:d6:48:e9:d2:45:55: 55:f0:19:08:76:e8:72:95:e9:cd:a5:2e:9e:7c:f8: 70:aa:e3:97:d9:74:74:23:19:b5:97:ec:6a:06:df: 61:ff:a2:b2:8d:32:a5:74:0a:72:58:28:1b:84:7a: 1f:c2:95:25:a8:10:92:b4:78:70:2d:4e:57:54:82: c4:e2:fc:da:5c:61:ee:01:fc:75:f3:6b:79:5c:18: c6:b7:f2:fa:cd:0f:12:fd:1b:00:32:fe:4c:ed:8c: 6f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F8:A9:0C:2E:FA:D5:CA:5B:FE:21:1D:45:D9:20:FF:94:79:94:C6 X509v3 Authority Key Identifier: keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:96:c2:3b:7c:bf:f6:cd:f3:bf:3a:f0:7e:20:a0:7e:98:76: fc:79:27:0f:ad:d0:d6:15:52:bc:7c:02:5c:c0:1a:7b:6e:4f: be:c2:a8:12:cd:e9:eb:44:e3:9f:33:74:5e:78:c7:a3:15:d5: 2a:20:52:03:ea:64:e0:f4:99:25:01:da:d5:1a:7f:60:ca:11: 9a:84:31:c0:1d:13:c1:17:45:00:93:35:e4:19:be:24:eb:46: 47:97:83:cf:00:04:91:96:28:16:c4:67:1b:fe:e3:30:e2:cd: 30:8e:ac:aa:76:7e:7d:b8:0b:c1:5c:dc:f9:16:b7:6e:27:51: 25:fb:fc:37:3c:76:6c:4f:b8:72:77:20:eb:f1:d7:e7:e3:01: 72:fe:1f:c8:5b:b5:46:1b:e5:ba:ef:98:93:0f:40:04:91:e9: 9b:8b:ed:c3:e1:98:0f:d3:13:a9:a2:67:fe:10:29:0d:12:b4: 77:c6:f1:35:de:ce:df:b7:2b:3b:16:48:34:2a:9b:13:1d:76: c2:2e:b9:23:b8:01:e2:fa:65:58:ec:a9:6d:da:76:f9:b9:6a: ca:f3:76:1c:77:a0:c8:9c:07:67:d5:48:d5:f0:a2:4f:87:69: 6f:40:b8:c5:7a:d8:bf:e5:6c:c8:af:13:72:4e:28:19:a1:ed: 86:ce:d3:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUGqNF4jjo0N9UsCd6FcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZjQ5MWYyMTBjNTdiZjQ2ZmI1MmQ0YWYyMmU3ZWNmNmY0 Y2RhODAwHhcNMjUxMjA2MDgwMDMxWhcNMjUxMjA3MDgwMDMxWjAzMTEwLwYDVQQD EyhhMmY4YTkwYzJlZmFkNWNhNWJmZTIxMWQ0NWQ5MjBmZjk0Nzk5NGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwie8p9PJL92V9J2uYLHtG+c9CM9B Z80IAkHzp9LsaFfTDP9wmamYTYOb0n+rxETkRZBjSvsFajcArr2AdqMjDAS/9YBr zf1IOICjfhRwiFT/1UBL/S36OWmuKZnpQ5JlOJJ4HzCPfPiPGHa4HXjzv/OKZYn7 zRH4atfZu+Wb8BUiLDBPWMxK2YbG7U8xmJS0IxnPQK0h2/B8PizLIGXWSOnSRVVV 8BkIduhylenNpS6efPhwquOX2XR0Ixm1l+xqBt9h/6KyjTKldApyWCgbhHofwpUl qBCStHhwLU5XVILE4vzaXGHuAfx182t5XBjGt/L6zQ8S/RsAMv5M7Yxv7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKL4qQwu+tXKW/4hHUXZIP+UeZTGMB8GA1UdIwQY MBaAFKj0kfIQxXv0b7UtSvIufs9vTNqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2Et MzMwYjhhZDQyNGJkLzEvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2EtMzMwYjhhZDQyNGJk LzEvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5bCO3y/ 9s3zvzrwfiCgfph2/HknD63Q1hVSvHwCXMAae25PvsKoEs3p60TjnzN0XnjHoxXV KiBSA+pk4PSZJQHa1Rp/YMoRmoQxwB0TwRdFAJM15Bm+JOtGR5eDzwAEkZYoFsRn G/7jMOLNMI6sqnZ+fbgLwVzc+Ra3bidRJfv8Nzx2bE+4cncg6/HX5+MBcv4fyFu1 Rhvluu+Ykw9ABJHpm4vtw+GYD9MTqaJn/hApDRK0d8bxNd7O37crOxZINCqbEx12 wi65I7gB4vplWOypbdp2+blqyvN2HHegyJwHZ9VI1fCiT4dpb0C4xXrYv+VsyK8T ck4oGaHths7TFw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:35 2025 by rpki-client