This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json) Hash identifier: vjLD1R1wIDHHNK36tFC7NWB/iFNLeLHIU9QdIcxELF4= Subject key identifier: 87:9E:B2:9D:C7:67:BE:0B:AA:F6:6B:51:EA:A0:55:F9:AA:E9:AC:45 Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42 Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742 Certificate serial: 019AF577D22932E466F57914E1243B31329B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft Manifest number: 0306 Signing time: Sat 06 Dec 2025 21:01:01 +0000 Manifest this update: Sat 06 Dec 2025 21:01:01 +0000 Manifest next update: Sun 07 Dec 2025 21:01:01 +0000 Files and hashes: 1: 0TAMfzKO6y7wTDVfhrp7A0vqejU.roa (hash: 3Yzu9IXvscc/7fQLVXNg8nKXbm7Wf5jZKKVCSByaB5U=) 2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: OFOajEHIasxKCbWqq3XnXzZPXAQNSq2w67m3iveEAsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:d2:29:32:e4:66:f5:79:14:e1:24:3b:31:32:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742 Validity Not Before: Dec 6 21:01:01 2025 GMT Not After : Dec 7 21:01:01 2025 GMT Subject: CN=879eb29dc767be0baaf66b51eaa055f9aae9ac45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:f0:2c:a7:65:a9:c3:28:82:c4:1f:76:0c: 6d:26:69:d2:5a:2e:e9:f0:26:8e:36:53:3f:22:10: d6:36:86:4d:33:cd:d7:f2:e3:52:69:59:a8:44:e1: df:bc:87:db:c1:4e:13:e5:01:70:48:15:ac:97:22: 50:80:22:c2:d8:09:34:31:08:d6:71:77:2e:9c:32: f3:6c:23:c3:1c:4a:53:00:b0:27:13:75:fa:29:94: 9b:4f:70:e3:be:36:e7:53:5c:11:4f:f8:b4:83:c3: 62:6b:9f:16:46:8c:80:09:91:2c:fe:46:52:ac:8e: b1:44:4c:c0:65:59:c1:ff:e3:43:b4:92:51:c8:2f: 9c:e2:0a:00:67:6e:5b:6d:7d:83:de:46:0f:96:55: e0:b3:b7:17:8d:a4:5d:f0:48:0e:62:58:60:a5:98: 12:b8:56:44:d9:2c:a1:d6:e5:e5:bd:2f:87:7d:bd: cb:98:aa:45:52:02:de:0c:4c:ac:13:2a:91:c5:fc: b1:74:91:b6:21:66:90:18:80:88:17:d3:93:88:95: 4a:ca:b3:b8:25:6c:9a:58:df:ae:67:e1:b8:bc:52: fa:1c:9b:a1:9c:ba:51:47:70:94:32:20:96:a5:89: 67:20:8a:32:2b:f3:6c:5b:8e:b9:53:19:ad:f2:da: 9c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9E:B2:9D:C7:67:BE:0B:AA:F6:6B:51:EA:A0:55:F9:AA:E9:AC:45 X509v3 Authority Key Identifier: keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ab:ac:37:70:6c:0c:1d:1f:ad:20:b3:99:59:51:76:be:16: fd:3e:df:3d:3d:36:5d:58:05:0a:47:02:21:c1:9a:a6:db:5f: e6:71:9c:ed:0a:94:f6:2d:a7:c4:11:7e:a3:a9:85:1b:c3:19: bd:6c:68:4b:ea:1e:fd:c4:69:eb:81:4c:e4:7d:17:75:a8:7d: f5:4b:6b:32:ba:b5:d0:85:09:b1:b3:af:cc:c9:36:b0:e6:1d: f3:53:15:04:68:97:5e:76:b4:a0:25:1e:bd:89:b5:b4:e7:23: d2:19:49:d3:3c:14:55:83:97:92:e1:ea:f7:0a:c0:2c:cd:1f: ee:4a:7e:f4:e8:62:75:54:82:33:b4:23:c6:25:e0:4b:ee:a8: 60:81:ea:2f:c5:84:7a:de:db:44:aa:5b:62:58:2a:e8:a2:d8: e1:f1:67:49:f7:47:ce:97:c9:ed:83:12:e4:09:be:3d:69:34: 51:8e:66:d9:8c:2f:9e:c4:6c:af:68:50:cc:dc:e5:77:74:dc: 38:f3:18:2b:90:01:86:73:65:a6:fa:01:e6:9b:8a:9f:b6:15: 8a:18:6a:97:8f:eb:f5:fe:da:7c:54:e1:77:52:8b:a0:37:12: 15:5a:41:ff:c3:57:f4:a4:76:7c:6a:99:c9:3d:47:46:12:ff: 3c:0f:19:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d9IpMuRm9XkU4SQ7MTKbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhY2E4ZGMwYzBiOTIxYjA4OWYxNjAyNjE4ZTQ1NTM3OTdh NzQ3NDIwHhcNMjUxMjA2MjEwMTAxWhcNMjUxMjA3MjEwMTAxWjAzMTEwLwYDVQQD Eyg4NzllYjI5ZGM3NjdiZTBiYWFmNjZiNTFlYWEwNTVmOWFhZTlhYzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0nwLKdlqcMogsQfdgxtJmnSWi7p 8CaONlM/IhDWNoZNM83X8uNSaVmoROHfvIfbwU4T5QFwSBWslyJQgCLC2Ak0MQjW cXcunDLzbCPDHEpTALAnE3X6KZSbT3DjvjbnU1wRT/i0g8Nia58WRoyACZEs/kZS rI6xREzAZVnB/+NDtJJRyC+c4goAZ25bbX2D3kYPllXgs7cXjaRd8EgOYlhgpZgS uFZE2Syh1uXlvS+Hfb3LmKpFUgLeDEysEyqRxfyxdJG2IWaQGICIF9OTiJVKyrO4 JWyaWN+uZ+G4vFL6HJuhnLpRR3CUMiCWpYlnIIoyK/NsW465Uxmt8tqczQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeesp3HZ74LqvZrUeqgVfmq6axFMB8GA1UdIwQY MBaAFKrKjcDAuSGwifFgJhjkVTeXp0dCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXNxTndNQzVJYkNKOFdBbUdPUlZONWVuUjBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lYjMxZGItZTY1NC00OTFlLWExNDEt OTFkNTA3MzhkMWU4LzEvcXNxTndNQzVJYkNKOFdBbUdPUlZONWVuUjBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9lYjMxZGItZTY1NC00OTFlLWExNDEtOTFkNTA3MzhkMWU4 LzEvcXNxTndNQzVJYkNKOFdBbUdPUlZONWVuUjBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKusN3Bs DB0frSCzmVlRdr4W/T7fPT02XVgFCkcCIcGapttf5nGc7QqU9i2nxBF+o6mFG8MZ vWxoS+oe/cRp64FM5H0Xdah99UtrMrq10IUJsbOvzMk2sOYd81MVBGiXXna0oCUe vYm1tOcj0hlJ0zwUVYOXkuHq9wrALM0f7kp+9OhidVSCM7QjxiXgS+6oYIHqL8WE et7bRKpbYlgq6KLY4fFnSfdHzpfJ7YMS5Am+PWk0UY5m2YwvnsRsr2hQzNzld3Tc OPMYK5ABhnNlpvoB5puKn7YVihhql4/r9f7afFThd1KLoDcSFVpB/8NX9KR2fGqZ yT1HRhL/PA8ZsQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:15 2025 by rpki-client