This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft File: qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft (raw, json) Hash identifier: I0NOQC86IuGauexttq1gBerPzjgu3H3mf8cjIYaTmDs= Subject key identifier: 02:03:22:81:AB:1C:CB:6F:43:3D:9F:3F:A8:76:AE:0B:18:87:89:D3 Authority key identifier: A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2 Certificate issuer: /CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2 Certificate serial: 019AF31C533937B4F87BC175E267AFBCF7CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft Manifest number: 1133 Signing time: Sat 06 Dec 2025 10:01:50 +0000 Manifest this update: Sat 06 Dec 2025 10:01:50 +0000 Manifest next update: Sun 07 Dec 2025 10:01:50 +0000 Files and hashes: 1: Ga7xjXDSDjdOVNrcTGr_g6sBFW8.roa (hash: 8Y/Mjf2+mYXubhHwDguXMxh+k+JgGQC7Q5HSVi+iXpA=) 2: qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl (hash: wMomgPVTIPicd/xIJwk4V3doOwqpOKq1pLnObdixJ+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:53:39:37:b4:f8:7b:c1:75:e2:67:af:bc:f7:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2 Validity Not Before: Dec 6 10:01:50 2025 GMT Not After : Dec 7 10:01:50 2025 GMT Subject: CN=02032281ab1ccb6f433d9f3fa876ae0b188789d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:4b:31:29:78:47:5f:8d:48:08:73:d9:3c: a7:94:3a:df:e4:2e:1e:54:c5:41:ab:20:22:5a:5d: a3:c4:8e:8b:f7:7d:a1:7b:22:3a:46:de:da:a8:34: e9:16:9a:97:4b:a7:be:e9:6e:2d:49:52:00:91:da: eb:8c:1e:b9:a6:e6:4e:6b:16:11:1a:e4:41:df:0c: d9:10:74:a0:b9:b2:48:0e:f0:b9:32:df:88:b9:98: af:53:a9:96:02:36:83:03:d2:e0:47:15:10:8b:38: a0:3c:cb:0a:ab:6f:35:42:e4:81:90:31:e7:c9:f6: 78:8a:2f:37:7a:b0:5b:15:4c:48:90:ad:b5:45:60: 16:49:9e:7a:95:4b:b1:b9:42:d2:06:e7:e2:9d:61: f2:ae:af:cd:c8:3e:74:a1:07:d7:11:7c:d0:d7:6f: 95:fb:38:56:26:5d:35:64:e8:8b:e3:9d:8b:0d:2a: a3:6a:ec:8e:97:15:f4:6a:d6:44:e6:94:41:7e:be: 73:25:27:7e:cc:35:14:1f:b1:89:89:b4:2e:ba:50: 93:2e:a1:c5:db:df:a1:bc:09:da:54:c9:15:5d:2d: 70:b7:b4:dc:14:a5:ae:cf:21:c5:3d:89:62:71:74: d7:b2:f6:72:2b:59:b3:47:96:88:e9:a3:be:ca:6e: 2e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:03:22:81:AB:1C:CB:6F:43:3D:9F:3F:A8:76:AE:0B:18:87:89:D3 X509v3 Authority Key Identifier: keyid:A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:62:93:7b:7a:4e:50:58:5c:53:45:4a:63:52:d9:36:0a:c1: 73:d1:7a:15:d6:0d:01:32:59:5f:80:87:19:e0:c8:53:bb:4b: 0a:06:f9:be:8f:3b:10:3e:da:2d:7a:ca:50:44:a8:a3:cd:6a: 7a:5a:d5:fb:57:2a:ee:71:38:c4:3f:b7:77:d4:18:09:e2:7a: b9:7f:d6:e8:dd:df:0d:27:0f:96:43:5c:67:ff:e1:89:dc:60: f0:19:52:0d:e9:f0:3e:63:4f:3f:51:ef:9f:46:51:7c:d6:9f: b5:b3:97:48:0f:9f:0e:b6:ca:30:50:02:06:b1:cb:1e:99:b7: 8b:8e:de:97:2f:85:39:83:d3:ff:ab:9e:22:6d:5b:84:17:c9: d2:1d:7d:26:e0:f9:bd:80:ec:0b:e9:3b:71:e2:32:22:82:ba: 72:7c:4c:ff:56:97:8b:01:49:aa:6b:50:e1:0c:b0:8e:92:a6: d3:76:de:23:4b:74:5b:bd:55:07:5c:06:1e:56:f8:21:d5:4d: 6d:5c:7f:9b:27:1c:91:6a:37:f2:8a:3e:9d:70:2c:bc:5a:90: 88:b5:49:43:c8:d4:cb:ce:ae:b9:24:84:77:0b:60:67:80:70: 12:d3:c0:70:3e:e8:d0:4e:ef:d3:6f:44:c1:34:3a:28:57:92: a2:2c:da:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFM5N7T4e8F14mevvPfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MWIzMjRlYzAyNjEyMWZmZTVkY2E3N2YwZTk0YTZjMDg3 ZTcwZDIwHhcNMjUxMjA2MTAwMTUwWhcNMjUxMjA3MTAwMTUwWjAzMTEwLwYDVQQD EygwMjAzMjI4MWFiMWNjYjZmNDMzZDlmM2ZhODc2YWUwYjE4ODc4OWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPpLMSl4R1+NSAhz2TynlDrf5C4e VMVBqyAiWl2jxI6L932heyI6Rt7aqDTpFpqXS6e+6W4tSVIAkdrrjB65puZOaxYR GuRB3wzZEHSgubJIDvC5Mt+IuZivU6mWAjaDA9LgRxUQizigPMsKq281QuSBkDHn yfZ4ii83erBbFUxIkK21RWAWSZ56lUuxuULSBufinWHyrq/NyD50oQfXEXzQ12+V +zhWJl01ZOiL452LDSqjauyOlxX0atZE5pRBfr5zJSd+zDUUH7GJibQuulCTLqHF 29+hvAnaVMkVXS1wt7TcFKWuzyHFPYlicXTXsvZyK1mzR5aI6aO+ym4uhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIDIoGrHMtvQz2fP6h2rgsYh4nTMB8GA1UdIwQY MBaAFKgbMk7AJhIf/l3Kd/DpSmwIfnDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUJzeVRzQW1FaF8tWGNwMzhPbEtiQWgtY05JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xMTliMzEtNzc0Yy00YTQwLTg3YTAt NzU4ZmJhNWEzOTUxLzEvcUJzeVRzQW1FaF8tWGNwMzhPbEtiQWgtY05JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8xMTliMzEtNzc0Yy00YTQwLTg3YTAtNzU4ZmJhNWEzOTUx LzEvcUJzeVRzQW1FaF8tWGNwMzhPbEtiQWgtY05JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGKTe3pO UFhcU0VKY1LZNgrBc9F6FdYNATJZX4CHGeDIU7tLCgb5vo87ED7aLXrKUESoo81q elrV+1cq7nE4xD+3d9QYCeJ6uX/W6N3fDScPlkNcZ//hidxg8BlSDenwPmNPP1Hv n0ZRfNaftbOXSA+fDrbKMFACBrHLHpm3i47ely+FOYPT/6ueIm1bhBfJ0h19JuD5 vYDsC+k7ceIyIoK6cnxM/1aXiwFJqmtQ4QywjpKm03beI0t0W71VB1wGHlb4IdVN bVx/mycckWo38oo+nXAsvFqQiLVJQ8jUy86uuSSEdwtgZ4BwEtPAcD7o0E7v029E wTQ6KFeSoizaDw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:31 2025 by rpki-client