This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft File: qS25uA37nJVniwfvLJU9YxB_X2I.mft (raw, json) Hash identifier: gxQJiboPUrPlT3EtaUjhJmFGphhSOi9HitiTCeBFrbE= Subject key identifier: 09:33:2D:7A:42:8B:C3:3C:66:9E:88:B3:23:9F:21:DD:51:06:B1:C5 Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62 Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62 Certificate serial: 019AF61C96EB26F1BD825BD279E1CEAA27B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft Manifest number: 09C4 Signing time: Sun 07 Dec 2025 00:01:00 +0000 Manifest this update: Sun 07 Dec 2025 00:01:00 +0000 Manifest next update: Mon 08 Dec 2025 00:01:00 +0000 Files and hashes: 1: qS25uA37nJVniwfvLJU9YxB_X2I.crl (hash: tcro4mQdsEO83iFuOeP6rYjL0awoYtwH6ALvcyAgTUA=) 2: u2PcO0qxdpMSmR6nWgSSQ3nTHEM.roa (hash: hawJL7X7ALdqooYTS/10qneIqHecH3wASpMJDU35WRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:96:eb:26:f1:bd:82:5b:d2:79:e1:ce:aa:27:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62 Validity Not Before: Dec 7 00:01:00 2025 GMT Not After : Dec 8 00:01:00 2025 GMT Subject: CN=09332d7a428bc33c669e88b3239f21dd5106b1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a8:8f:ab:84:c1:32:55:15:66:53:a8:17:ae: f8:70:7e:60:37:61:c6:24:78:e6:6a:8a:93:85:ce: bb:bb:56:2f:77:64:e7:b3:a8:a1:a5:99:32:57:70: 57:99:fa:8a:25:0d:a9:ec:04:21:4d:c1:a2:c3:16: 1f:ec:2c:29:da:67:5f:1e:74:01:89:a1:a7:5d:9a: 0f:bd:76:7a:cb:2d:78:75:9a:1b:04:25:a0:31:1c: f5:08:d7:e8:63:54:72:0a:df:9b:b2:e6:ad:b0:4f: a1:a9:a5:36:98:54:62:c5:5a:4c:e4:b5:59:34:40: 1b:a0:1d:15:e5:4d:48:cf:1e:d9:34:ee:82:9b:de: ba:7a:4c:e2:b2:7a:1d:fa:bd:e1:57:8d:75:63:1b: 1a:8e:db:7d:ad:72:a8:76:f7:6b:4d:ad:2a:bb:56: 9b:20:7a:a0:2f:ea:73:18:5e:07:92:89:95:7a:a3: 18:f4:fc:b4:4e:5c:94:9f:09:80:86:5c:bc:cc:69: cd:ac:10:57:08:7a:5c:bb:28:db:7a:72:e0:3b:98: cf:dd:bf:f8:3d:73:55:23:d0:37:30:db:ca:6a:d0: 69:20:36:d5:f2:86:92:fe:49:61:e1:4c:3e:b0:ae: 58:4c:a3:da:4c:f7:e0:13:0b:4f:70:29:0b:b8:71: ee:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:33:2D:7A:42:8B:C3:3C:66:9E:88:B3:23:9F:21:DD:51:06:B1:C5 X509v3 Authority Key Identifier: keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:77:f3:bd:dd:4e:9d:e1:a9:84:9d:62:7a:ea:91:9c:ca:56: 11:10:ee:05:2a:2c:9f:42:6d:10:2d:11:76:b0:49:6f:04:cb: 87:af:e2:16:2f:89:60:50:fd:ee:12:0d:a4:66:77:5b:74:12: 60:56:e2:55:90:64:38:70:86:c0:7e:38:d7:ca:b0:d5:74:9a: ad:90:56:f8:52:a6:d7:60:f8:39:2f:77:0d:d1:47:7f:56:c7: 83:94:6e:6c:69:1f:e5:53:ff:c3:ed:8c:9f:d5:14:52:bd:ba: 98:68:7a:10:08:58:02:de:e9:65:55:3e:90:43:59:1b:f7:75: 65:1c:cc:6c:da:08:e0:ca:3a:65:15:66:aa:0e:a9:c6:41:19: e2:d1:40:80:46:2a:4c:6c:09:6b:42:d9:ee:f2:41:09:de:69: 88:68:93:59:11:1f:43:b0:4d:b7:fa:c3:78:9d:fb:d4:c2:ad: 72:d4:bb:68:10:82:2b:9a:c0:9b:8b:7c:7e:8a:bd:ba:21:c6: f4:1c:95:54:90:c7:b4:6f:3e:82:23:68:d6:10:12:c2:d4:f8: 5f:f3:1c:0c:02:d1:30:b9:f1:88:ea:18:8f:cc:a6:3b:5f:25: 31:dc:06:6b:b5:7b:30:2a:2b:23:c5:42:ea:29:40:b1:ce:5d: 4d:46:9b:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HJbrJvG9glvSeeHOqie0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmRiOWI4MGRmYjljOTU2NzhiMDdlZjJjOTUzZDYzMTA3 ZjVmNjIwHhcNMjUxMjA3MDAwMTAwWhcNMjUxMjA4MDAwMTAwWjAzMTEwLwYDVQQD EygwOTMzMmQ3YTQyOGJjMzNjNjY5ZTg4YjMyMzlmMjFkZDUxMDZiMWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6iPq4TBMlUVZlOoF674cH5gN2HG JHjmaoqThc67u1Yvd2Tns6ihpZkyV3BXmfqKJQ2p7AQhTcGiwxYf7Cwp2mdfHnQB iaGnXZoPvXZ6yy14dZobBCWgMRz1CNfoY1RyCt+bsuatsE+hqaU2mFRixVpM5LVZ NEAboB0V5U1Izx7ZNO6Cm966ekzisnod+r3hV411Yxsajtt9rXKodvdrTa0qu1ab IHqgL+pzGF4HkomVeqMY9Py0TlyUnwmAhly8zGnNrBBXCHpcuyjbenLgO5jP3b/4 PXNVI9A3MNvKatBpIDbV8oaS/klh4Uw+sK5YTKPaTPfgEwtPcCkLuHHu0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkzLXpCi8M8Zp6IsyOfId1RBrHFMB8GA1UdIwQY MBaAFKktubgN+5yVZ4sH7yyVPWMQf19iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80MmIzYmItMTkzNS00NzhiLWEzMDIt Y2I3YTVmZDFhYzQ3LzEvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80MmIzYmItMTkzNS00NzhiLWEzMDItY2I3YTVmZDFhYzQ3 LzEvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3fzvd1O neGphJ1ieuqRnMpWERDuBSosn0JtEC0RdrBJbwTLh6/iFi+JYFD97hINpGZ3W3QS YFbiVZBkOHCGwH4418qw1XSarZBW+FKm12D4OS93DdFHf1bHg5RubGkf5VP/w+2M n9UUUr26mGh6EAhYAt7pZVU+kENZG/d1ZRzMbNoI4Mo6ZRVmqg6pxkEZ4tFAgEYq TGwJa0LZ7vJBCd5piGiTWREfQ7BNt/rDeJ371MKtctS7aBCCK5rAm4t8foq9uiHG 9ByVVJDHtG8+giNo1hASwtT4X/McDALRMLnxiOoYj8ymO18lMdwGa7V7MCorI8VC 6ilAsc5dTUab0A== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:42 2025 by rpki-client