This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json) Hash identifier: jJq9v3ae7VBG+VLMVpJKkFa5QeWKZQ1Dt7Ysxhjs8yI= Subject key identifier: 83:60:80:38:E7:68:98:A9:05:B7:2C:0E:85:E1:7F:12:D0:FF:E5:EF Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42 Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742 Certificate serial: 019B2B8A212D6EA0C435E92A89F535FB8968 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft Manifest number: 0322 Signing time: Wed 17 Dec 2025 09:00:31 +0000 Manifest this update: Wed 17 Dec 2025 09:00:31 +0000 Manifest next update: Thu 18 Dec 2025 09:00:31 +0000 Files and hashes: 1: 0TAMfzKO6y7wTDVfhrp7A0vqejU.roa (hash: 3Yzu9IXvscc/7fQLVXNg8nKXbm7Wf5jZKKVCSByaB5U=) 2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: iLflsd1lmdx7mFRL9eTF00wKjCCsieq81d2QZeJ1V/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:21:2d:6e:a0:c4:35:e9:2a:89:f5:35:fb:89:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742 Validity Not Before: Dec 17 09:00:31 2025 GMT Not After : Dec 18 09:00:31 2025 GMT Subject: CN=83608038e76898a905b72c0e85e17f12d0ffe5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:52:26:e7:ee:8d:8d:9c:11:ba:bd:5e:b9:11: ab:6e:9d:2f:d8:c3:84:ac:17:05:fb:65:7e:1d:e8: 04:24:b7:15:2e:05:ce:1f:03:24:61:f5:1f:55:38: ca:6c:00:25:1f:fd:15:44:0c:bf:97:c2:65:ec:4d: f4:2d:f4:11:60:ed:51:d5:f0:b0:69:9e:2e:b4:dd: e9:72:ac:6a:a0:df:96:03:dd:c6:10:03:2e:fb:cf: 81:94:43:3c:a3:4b:3f:d2:f1:11:42:81:de:80:e9: 38:3e:90:22:bc:fb:05:d3:00:24:6d:08:38:55:06: fd:2b:e2:1b:b1:1c:74:09:67:47:77:9b:e9:19:5a: 05:42:98:28:de:c5:83:28:94:71:70:d9:15:b9:db: c9:fc:5a:91:f6:e4:27:84:e3:83:92:d5:a5:2d:a1: 92:bd:f8:7e:88:26:9b:83:95:22:ad:bc:52:1a:8c: dd:97:a9:80:82:49:c7:72:05:a2:bd:27:25:f5:fd: 74:db:5a:f5:45:79:00:e4:fa:12:75:b3:3e:ad:d8: 20:38:8b:e0:d7:a7:f2:31:b9:5a:a6:97:ca:d5:3c: ca:3b:19:44:db:a0:a8:eb:8b:82:45:40:5b:c9:dd: 1d:15:d1:20:aa:3d:dd:06:82:1a:c7:0b:49:97:9d: 9a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:60:80:38:E7:68:98:A9:05:B7:2C:0E:85:E1:7F:12:D0:FF:E5:EF X509v3 Authority Key Identifier: keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:7e:62:54:30:46:f8:e8:b4:0d:0f:5b:e3:2a:fd:5a:92:7a: 40:90:46:27:51:5d:23:af:70:7c:2c:07:af:a1:a8:3f:f5:6e: 3c:55:0c:01:80:27:03:0f:ca:55:6e:78:ea:03:c8:4a:04:88: 59:7c:d6:95:7f:fa:4a:54:bc:17:4b:91:fc:21:23:f5:ad:34: 45:8d:e0:af:7d:96:c6:cb:95:79:0a:f5:f7:4e:4c:fd:93:60: 5a:51:54:72:64:c9:09:86:d1:02:12:33:e9:96:19:29:5e:37: 1d:3f:7d:c4:2d:ae:11:e2:81:3b:af:99:f3:17:62:4a:7f:b0: 1f:90:aa:9c:64:82:6b:e6:a0:37:00:be:3e:15:34:a1:08:65: 5f:a1:44:3a:97:f0:59:71:de:8c:a6:c0:01:90:00:ec:f7:56: fe:e2:30:7a:e0:ee:c2:7b:27:2b:6a:4d:c3:c6:09:db:7a:da: cc:1b:cd:ce:4d:7c:20:0d:4b:89:4e:d1:1a:07:5c:f6:53:54: 6e:d0:00:79:ae:32:ee:38:a1:e7:f0:f8:57:fa:1b:f3:c8:9f: 6d:b8:5f:35:ce:e2:f1:1f:c2:4f:1b:64:4d:a9:46:d4:2b:80: e2:bc:a6:fa:dc:23:53:73:59:aa:1a:8b:a0:88:c2:99:8f:19: f7:06:cf:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriiEtbqDENekqifU1+4loMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhY2E4ZGMwYzBiOTIxYjA4OWYxNjAyNjE4ZTQ1NTM3OTdh NzQ3NDIwHhcNMjUxMjE3MDkwMDMxWhcNMjUxMjE4MDkwMDMxWjAzMTEwLwYDVQQD Eyg4MzYwODAzOGU3Njg5OGE5MDViNzJjMGU4NWUxN2YxMmQwZmZlNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFIm5+6NjZwRur1euRGrbp0v2MOE rBcF+2V+HegEJLcVLgXOHwMkYfUfVTjKbAAlH/0VRAy/l8Jl7E30LfQRYO1R1fCw aZ4utN3pcqxqoN+WA93GEAMu+8+BlEM8o0s/0vERQoHegOk4PpAivPsF0wAkbQg4 VQb9K+IbsRx0CWdHd5vpGVoFQpgo3sWDKJRxcNkVudvJ/FqR9uQnhOODktWlLaGS vfh+iCabg5UirbxSGozdl6mAgknHcgWivScl9f1021r1RXkA5PoSdbM+rdggOIvg 16fyMblappfK1TzKOxlE26Co64uCRUBbyd0dFdEgqj3dBoIaxwtJl52acQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINggDjnaJipBbcsDoXhfxLQ/+XvMB8GA1UdIwQY MBaAFKrKjcDAuSGwifFgJhjkVTeXp0dCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXNxTndNQzVJYkNKOFdBbUdPUlZONWVuUjBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lYjMxZGItZTY1NC00OTFlLWExNDEt OTFkNTA3MzhkMWU4LzEvcXNxTndNQzVJYkNKOFdBbUdPUlZONWVuUjBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9lYjMxZGItZTY1NC00OTFlLWExNDEtOTFkNTA3MzhkMWU4 LzEvcXNxTndNQzVJYkNKOFdBbUdPUlZONWVuUjBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIn5iVDBG +Oi0DQ9b4yr9WpJ6QJBGJ1FdI69wfCwHr6GoP/VuPFUMAYAnAw/KVW546gPISgSI WXzWlX/6SlS8F0uR/CEj9a00RY3gr32WxsuVeQr1905M/ZNgWlFUcmTJCYbRAhIz 6ZYZKV43HT99xC2uEeKBO6+Z8xdiSn+wH5CqnGSCa+agNwC+PhU0oQhlX6FEOpfw WXHejKbAAZAA7PdW/uIweuDuwnsnK2pNw8YJ23razBvNzk18IA1LiU7RGgdc9lNU btAAea4y7jih5/D4V/ob88ifbbhfNc7i8R/CTxtkTalG1CuA4rym+twjU3NZqhqL oIjCmY8Z9wbPXw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:47:53 2025 by rpki-client