This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: iWVdsxj9DZZI/7gTZady47b9BCt5oMIeyKKFifr9uWU= Subject key identifier: 0E:5F:FE:C4:15:24:22:93:35:F1:32:DF:E1:B1:DE:02:9B:06:35:83 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019AF19B07F4224BDAFDDB311665A715A46E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 176D Signing time: Sat 06 Dec 2025 03:01:00 +0000 Manifest this update: Sat 06 Dec 2025 03:01:00 +0000 Manifest next update: Sun 07 Dec 2025 03:01:00 +0000 Files and hashes: 1: 1-j_NENm5-sNQNRhoG12DGhts2RA.roa (hash: rxMl58Hpd8I9+Opcjq2WXGHyT2V7qNJ/2GgS8YODf/c=) 2: 4AzaQ00Qbm11xuSZKiEAVdKCvuo.roa (hash: S2of1YjCL3/XCtKNbSiofOIataHuKf+CE34W0v3KCW4=) 3: 8ICMXIH8G4STVhG9LTK8XF1huYU.roa (hash: sFIpNhCbdCmlf97RdiMILKWsK0y4eXG6qnrYkuB08Vw=) 4: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (hash: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=) 5: OCLegx7AAJrXlZwafZY4saWNhbA.roa (hash: e9VTWsNvHN7d5ckNNnCA+CRusyYItjY5AHniHQNomyw=) 6: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (hash: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=) 7: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: tPNC+KZImUeHjw6Rw35yhtxO90LLXABKkPe2x9gIDnM=) 8: RV95HMnGrJSH6R13BYTApcw5VQE.roa (hash: OCGu39xDZSl3EactuFgzu+oeqkGxYuePRbccAhiaclk=) 9: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (hash: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=) 10: iIDxyZI7f69mJkZ2Wv7XkahzbJk.roa (hash: +LiZiCI3CHohIXxSoLr49Tx7ntAiVnERXS5bwyYZ1ps=) 11: j8Z9luk9TH9XzdeKRdbx_0lXU_Q.roa (hash: SQ7pmoz5e7GX+kpjw+HCwdCwB08Ca3taMT0X/4L2FsQ=) 12: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (hash: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=) 13: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (hash: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:07:f4:22:4b:da:fd:db:31:16:65:a7:15:a4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Dec 6 03:01:00 2025 GMT Not After : Dec 7 03:01:00 2025 GMT Subject: CN=0e5ffec41524229335f132dfe1b1de029b063583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:ea:7d:24:79:04:1b:54:10:c7:f8:2c:2e: 18:b9:7c:5c:ed:5b:25:3e:7f:b5:c0:4f:b9:3e:30: d3:a6:62:0b:c7:50:9b:54:92:d8:80:bf:e8:bf:3f: 3b:f7:61:e5:0b:e2:9a:49:43:d9:2f:7c:58:f8:31: d6:47:3e:58:44:b3:65:f9:f7:b1:83:0c:ce:fd:40: 8d:1c:f2:ea:84:ee:b5:b9:f1:8b:3d:55:13:e5:42: cc:d9:c6:84:a8:70:e7:27:c3:9d:d9:09:9e:95:5f: 15:81:6b:6d:c3:74:00:26:c4:46:12:e2:8c:bc:c7: 77:3f:04:69:7d:68:21:23:c2:17:c3:46:8c:34:b4: b1:f9:41:86:35:98:7e:e0:3c:76:6c:49:ef:97:0d: 46:45:c9:59:aa:3e:19:e6:89:61:77:19:32:db:62: 9c:2e:88:5f:49:4e:82:56:99:bc:87:e5:2f:7b:6f: 4c:42:ba:a4:39:f2:9e:a7:df:fc:6a:e2:de:95:99: 86:b9:de:8a:16:ee:e0:0f:03:e2:1f:a9:7f:22:d7: 8b:20:0a:9e:3a:00:1e:bd:db:cb:f3:47:9c:5e:5d: 45:67:46:4c:76:68:eb:68:21:63:d2:8d:5e:75:eb: 08:43:f4:16:56:34:20:3e:46:e1:1b:fe:1a:bd:4a: 45:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5F:FE:C4:15:24:22:93:35:F1:32:DF:E1:B1:DE:02:9B:06:35:83 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:66:f1:7f:3c:92:fe:20:37:f4:7f:0c:ef:c8:ad:c7:27:f8: 44:7b:92:74:70:e4:93:8f:4e:e8:ed:ae:b9:60:66:83:3f:f9: eb:90:c4:25:31:04:0f:df:10:e8:07:d2:f0:24:46:5e:97:80: e8:af:8e:65:ce:dd:ec:3b:3a:f0:b0:2a:bd:49:66:15:8f:f6: 89:3c:69:da:ea:a5:97:9f:fe:0a:28:f1:4f:12:6c:19:35:1e: 85:30:f6:bf:84:25:a4:8b:28:97:24:b6:37:47:63:cd:39:b2: 5e:51:69:77:e1:a0:96:d1:8c:8c:ba:b7:fc:3d:35:5b:cf:4e: 8f:86:f6:0c:d0:23:77:f1:ce:d5:4f:c6:cc:0e:8c:47:04:e3: 8b:93:9d:dd:1a:fb:28:f2:04:40:c4:23:96:4f:17:b9:ac:e1: 38:48:52:8c:f0:c5:d4:76:c8:1e:3c:55:23:3f:ef:36:1d:5a: 7e:81:71:db:6c:f8:8d:84:59:fc:0f:25:de:2e:76:00:14:a1: a8:ca:be:54:4b:6f:ed:a1:cd:2d:00:28:b2:90:09:a8:0b:78: a1:3f:3d:f5:e4:3a:a0:eb:86:8a:80:3a:4f:99:09:a8:50:c0: 37:eb:79:63:98:55:e2:f5:a3:5b:db:51:a7:5c:d1:e1:30:fa: 7b:78:71:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwf0Ikva/dsxFmWnFaRuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjUxMjA2MDMwMTAwWhcNMjUxMjA3MDMwMTAwWjAzMTEwLwYDVQQD EygwZTVmZmVjNDE1MjQyMjkzMzVmMTMyZGZlMWIxZGUwMjliMDYzNTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso7qfSR5BBtUEMf4LC4YuXxc7Vsl Pn+1wE+5PjDTpmILx1CbVJLYgL/ovz8792HlC+KaSUPZL3xY+DHWRz5YRLNl+fex gwzO/UCNHPLqhO61ufGLPVUT5ULM2caEqHDnJ8Od2QmelV8VgWttw3QAJsRGEuKM vMd3PwRpfWghI8IXw0aMNLSx+UGGNZh+4Dx2bEnvlw1GRclZqj4Z5olhdxky22Kc LohfSU6CVpm8h+Uve29MQrqkOfKep9/8auLelZmGud6KFu7gDwPiH6l/IteLIAqe OgAevdvL80ecXl1FZ0ZMdmjraCFj0o1edesIQ/QWVjQgPkbhG/4avUpFzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5f/sQVJCKTNfEy3+Gx3gKbBjWDMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGbxfzyS /iA39H8M78itxyf4RHuSdHDkk49O6O2uuWBmgz/565DEJTEED98Q6AfS8CRGXpeA 6K+OZc7d7Ds68LAqvUlmFY/2iTxp2uqll5/+CijxTxJsGTUehTD2v4QlpIsolyS2 N0djzTmyXlFpd+GgltGMjLq3/D01W89Oj4b2DNAjd/HO1U/GzA6MRwTji5Od3Rr7 KPIEQMQjlk8XuazhOEhSjPDF1HbIHjxVIz/vNh1afoFx22z4jYRZ/A8l3i52ABSh qMq+VEtv7aHNLQAospAJqAt4oT899eQ6oOuGioA6T5kJqFDAN+t5Y5hV4vWjW9tR p1zR4TD6e3hx7w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:10 2025 by rpki-client