This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json) Hash identifier: BkYjSEAF/mPReMp9A2yOg7Hs4vFeXu8fcBwf9HWd9gM= Subject key identifier: 47:1D:E2:3C:A4:82:EC:43:27:CF:1C:F4:4A:B2:45:39:D8:3C:D9:3B Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d Certificate serial: 019AF31C8BE0ACC1FDEF3B15A27C9D9045C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 10:02:05 +0000 Manifest this update: Sat 06 Dec 2025 10:02:05 +0000 Manifest next update: Sun 07 Dec 2025 10:02:05 +0000 Files and hashes: 1: 6fJ4zkF0Wp752Gh82PiGV0cycFs.roa (hash: zmN/ZdPf9fmMKW0I3LZoD4w3jrap740/mP6rHx2Dkzc=) 2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: yHez7apSt5s3Afk6LiUhBBsARfxSKfbzKQO1yi76AAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:8b:e0:ac:c1:fd:ef:3b:15:a2:7c:9d:90:45:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d Validity Not Before: Dec 6 10:02:05 2025 GMT Not After : Dec 7 10:02:05 2025 GMT Subject: CN=471de23ca482ec4327cf1cf44ab24539d83cd93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:7f:77:4d:e9:ec:71:c1:71:61:8a:19:06: 8c:47:1c:33:0e:ba:0f:81:25:c7:16:72:11:59:58: 54:71:3e:c8:be:33:a3:09:c3:21:0d:21:88:72:a5: 0b:cd:46:f7:56:66:b8:d9:5d:62:a9:93:16:76:3c: 2e:ed:a3:ce:4c:1e:f5:ec:62:ef:34:27:2c:de:3b: e3:1e:bc:f2:1d:1a:bb:b4:cb:e0:4d:30:30:68:fc: 82:b2:94:5e:a1:c9:6d:96:11:10:2f:b8:8d:00:9d: 30:48:d2:90:f2:0b:fe:48:d1:1e:d6:6b:fa:db:03: ee:62:80:99:43:66:1f:5c:15:5d:e1:4a:01:0a:30: 10:7f:40:7e:49:b9:0a:6d:37:0d:72:1f:c7:3a:fc: 94:50:31:58:44:da:74:6f:d2:8c:fa:a2:bf:7f:37: e7:41:3b:f6:90:1a:25:58:75:89:70:b3:d5:1e:e1: 8e:f2:57:a2:16:74:ea:d7:c4:a8:b0:6d:25:90:1e: ad:45:f8:ac:e4:07:f1:60:fc:67:74:e3:37:88:7f: f6:e4:8e:d5:e0:52:70:9e:db:e1:e9:e8:83:25:34: 10:ac:02:ff:18:01:a8:ee:61:52:1e:17:ba:db:be: e0:11:93:1a:65:16:b5:e3:4a:12:4b:ec:31:fb:01: eb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1D:E2:3C:A4:82:EC:43:27:CF:1C:F4:4A:B2:45:39:D8:3C:D9:3B X509v3 Authority Key Identifier: keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:75:e8:2e:ce:df:e6:72:d8:57:01:97:cc:18:de:8f:36:f2: ba:c0:ee:dc:06:09:da:a3:8c:c3:42:37:19:31:d1:ae:05:b1: 68:3e:fb:b2:04:62:92:2e:0e:3a:93:59:d7:a2:89:68:2c:3b: 28:25:d9:c3:74:93:1c:72:01:6a:20:6c:83:e6:3c:5a:1a:08: 48:cd:99:55:b9:2e:18:7e:02:e3:b2:58:87:0b:c7:31:23:a1: df:4d:94:34:fe:4d:5e:44:17:b2:24:1d:e1:0e:48:b1:39:5d: 17:53:1c:b0:20:c2:e0:ed:91:dc:bf:b2:8e:a3:03:79:f1:d9: 8f:6f:13:b8:c9:34:12:33:50:3d:dc:59:ba:bc:47:ce:0a:cd: e5:0c:b6:f3:82:1f:11:52:c1:04:98:01:9a:76:35:e9:ee:07: 96:ec:3f:d4:bb:69:c7:ad:47:1f:f8:bd:2f:ee:62:18:da:00: 33:69:cf:03:2e:b4:7f:c2:39:f4:b0:47:66:bc:69:37:81:47: 33:ad:fc:ea:f3:2d:21:88:02:f2:0e:ca:5c:97:bb:d6:c0:8a: 33:fb:e6:1f:4a:8c:8d:1f:69:7f:05:69:b5:82:80:96:17:95: 43:67:f8:02:74:e8:1f:e6:3a:8e:28:7e:38:28:81:ee:85:f6: eb:5f:b7:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHIvgrMH97zsVonydkEXJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYzZhZjBjMjliZWJjN2M0ODVjZjgwMDFkYTlmMTk5MzBh Y2U0NWQwHhcNMjUxMjA2MTAwMjA1WhcNMjUxMjA3MTAwMjA1WjAzMTEwLwYDVQQD Eyg0NzFkZTIzY2E0ODJlYzQzMjdjZjFjZjQ0YWIyNDUzOWQ4M2NkOTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOp/d03p7HHBcWGKGQaMRxwzDroP gSXHFnIRWVhUcT7IvjOjCcMhDSGIcqULzUb3Vma42V1iqZMWdjwu7aPOTB717GLv NCcs3jvjHrzyHRq7tMvgTTAwaPyCspReocltlhEQL7iNAJ0wSNKQ8gv+SNEe1mv6 2wPuYoCZQ2YfXBVd4UoBCjAQf0B+SbkKbTcNch/HOvyUUDFYRNp0b9KM+qK/fzfn QTv2kBolWHWJcLPVHuGO8leiFnTq18SosG0lkB6tRfis5AfxYPxndOM3iH/25I7V 4FJwntvh6eiDJTQQrAL/GAGo7mFSHhe6277gEZMaZRa140oSS+wx+wHrKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcd4jykguxDJ88c9EqyRTnYPNk7MB8GA1UdIwQY MBaAFKrGrwwpvrx8SFz4AB2p8ZkwrORdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mOGM0NDUtMGFhYi00MDg3LWEwZDMt OTM0NzU5MTkxMGE4LzEvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9mOGM0NDUtMGFhYi00MDg3LWEwZDMtOTM0NzU5MTkxMGE4 LzEvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnXoLs7f 5nLYVwGXzBjejzbyusDu3AYJ2qOMw0I3GTHRrgWxaD77sgRiki4OOpNZ16KJaCw7 KCXZw3STHHIBaiBsg+Y8WhoISM2ZVbkuGH4C47JYhwvHMSOh302UNP5NXkQXsiQd 4Q5IsTldF1McsCDC4O2R3L+yjqMDefHZj28TuMk0EjNQPdxZurxHzgrN5Qy284If EVLBBJgBmnY16e4Hluw/1Ltpx61HH/i9L+5iGNoAM2nPAy60f8I59LBHZrxpN4FH M6386vMtIYgC8g7KXJe71sCKM/vmH0qMjR9pfwVptYKAlheVQ2f4AnToH+Y6jih+ OCiB7oX261+3zQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:16 2025 by rpki-client