This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft File: QsoaHj0JJUIzEMFUtQLChCiI5hI.mft (raw, json) Hash identifier: Nd45wLBnOTj6HFTyJhvxdzK8W6wU9zWNKuxt7uVI920= Subject key identifier: 83:EB:D6:1A:B4:35:C7:13:A7:67:7A:AD:45:44:37:20:A1:E9:C3:26 Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12 Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612 Certificate serial: 019AF1D2488531052B67EF8B15B94C289CFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 04:01:21 +0000 Manifest this update: Sat 06 Dec 2025 04:01:21 +0000 Manifest next update: Sun 07 Dec 2025 04:01:21 +0000 Files and hashes: 1: FxWyjGUTIC45dat-1Rxw3IG5Eak.roa (hash: VjQJokywMbR3ejkYBNWJHSZbR0fnNPmK9n+7WEsPRYs=) 2: QsoaHj0JJUIzEMFUtQLChCiI5hI.crl (hash: WLzMYhijPgMe/T8IzkNpHxWM+zru69EqM1jl3YzHR70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:48:85:31:05:2b:67:ef:8b:15:b9:4c:28:9c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612 Validity Not Before: Dec 6 04:01:21 2025 GMT Not After : Dec 7 04:01:21 2025 GMT Subject: CN=83ebd61ab435c713a7677aad45443720a1e9c326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:52:7b:b6:0b:d6:ec:06:51:5c:a1:47:58:0f: 13:8e:02:79:b0:30:eb:a8:9a:c4:50:01:72:ec:e8: 80:d4:10:4a:dc:c8:41:c3:59:06:6b:10:a1:50:5b: 7e:9a:f1:23:83:ca:47:6f:25:38:b6:89:69:e5:8a: 7d:8c:69:b8:d3:22:5c:81:6d:cd:cb:c4:3a:48:4e: 67:f7:1c:d1:f8:bb:9d:a2:c4:ef:e1:d2:dc:75:3d: c0:d3:c8:2d:57:02:b0:3d:d0:2f:16:c5:bb:19:61: b3:a5:6b:7a:be:71:16:b9:fd:56:8e:18:80:c0:bd: b9:8b:4e:6f:b7:dd:65:3a:fe:f9:8e:93:a4:34:b9: 5d:e1:33:17:d3:db:1a:14:98:0e:fb:8f:2b:c6:c4: fb:87:c8:e5:67:40:cd:48:64:33:fb:e6:05:39:00: d7:b1:79:0c:29:19:7b:71:fc:08:3a:62:ce:c6:89: b0:ee:e1:9b:55:62:38:43:51:4c:96:2d:2b:95:6c: fc:f8:97:6d:c8:42:42:bd:54:ad:ef:39:72:e3:1b: be:12:33:76:70:5d:1f:ea:ef:da:cd:8a:94:73:54: 0e:3d:26:05:bd:d3:ee:67:8d:75:50:1e:59:39:16: 3b:78:54:08:37:74:4b:45:35:24:68:df:b5:de:4b: 16:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EB:D6:1A:B4:35:C7:13:A7:67:7A:AD:45:44:37:20:A1:E9:C3:26 X509v3 Authority Key Identifier: keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:62:8e:6f:63:0b:ed:54:d7:7f:a3:7a:d9:a6:41:ef:e6:ad: d7:a9:29:28:6b:d6:bf:df:a8:b7:86:25:84:1a:a3:78:65:b9: 83:cc:b3:69:d5:8e:bd:af:60:07:8a:66:6e:68:03:cb:df:71: 71:36:d5:b8:60:9a:bd:d6:de:a7:cb:fd:72:9c:d0:7e:53:a1: 7d:08:0b:d9:4c:86:ad:97:7e:61:aa:51:6d:11:e7:74:60:ab: 8c:6d:74:69:70:b2:ce:f9:0a:2b:33:80:2c:f5:58:ea:14:39: 57:03:77:0f:9a:6c:d0:55:e5:a0:64:91:26:78:68:52:00:35: 68:5a:4f:67:b7:36:47:42:61:0e:06:57:6e:ac:dd:e7:a5:59: d9:0a:93:f8:6f:42:e3:c8:06:ba:dd:e2:a5:46:ff:d3:99:a7: 5d:b3:9c:46:43:94:c8:44:6d:f8:c3:9b:91:50:f0:6c:08:88: c2:5c:9e:63:eb:75:f2:ca:e8:d0:22:ef:fa:19:2e:86:0b:de: 21:d7:5c:ba:ad:f7:b8:18:63:bf:94:da:53:e9:21:b7:4b:e3: 78:d6:31:ce:8f:29:64:49:0e:a7:57:64:2e:5d:84:c7:8d:07: 89:90:9d:80:35:28:f8:d8:38:8d:dc:fa:d7:09:74:27:35:d4: ad:ba:a5:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kiFMQUrZ++LFblMKJz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2ExYTFlM2QwOTI1NDIzMzEwYzE1NGI1MDJjMjg0Mjg4 OGU2MTIwHhcNMjUxMjA2MDQwMTIxWhcNMjUxMjA3MDQwMTIxWjAzMTEwLwYDVQQD Eyg4M2ViZDYxYWI0MzVjNzEzYTc2NzdhYWQ0NTQ0MzcyMGExZTljMzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lJ7tgvW7AZRXKFHWA8TjgJ5sDDr qJrEUAFy7OiA1BBK3MhBw1kGaxChUFt+mvEjg8pHbyU4tolp5Yp9jGm40yJcgW3N y8Q6SE5n9xzR+LudosTv4dLcdT3A08gtVwKwPdAvFsW7GWGzpWt6vnEWuf1WjhiA wL25i05vt91lOv75jpOkNLld4TMX09saFJgO+48rxsT7h8jlZ0DNSGQz++YFOQDX sXkMKRl7cfwIOmLOxomw7uGbVWI4Q1FMli0rlWz8+JdtyEJCvVSt7zly4xu+EjN2 cF0f6u/azYqUc1QOPSYFvdPuZ411UB5ZORY7eFQIN3RLRTUkaN+13ksWQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPr1hq0NccTp2d6rUVENyCh6cMmMB8GA1UdIwQY MBaAFELKGh49CSVCMxDBVLUCwoQoiOYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNvYUhqMEpKVUl6RU1GVXRRTENoQ2lJNWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85MmI4YWUtOWMwOS00NDNjLWI4YmEt NDM2YmZiOWU3N2VkLzEvUXNvYUhqMEpKVUl6RU1GVXRRTENoQ2lJNWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85MmI4YWUtOWMwOS00NDNjLWI4YmEtNDM2YmZiOWU3N2Vk LzEvUXNvYUhqMEpKVUl6RU1GVXRRTENoQ2lJNWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0GKOb2ML 7VTXf6N62aZB7+at16kpKGvWv9+ot4YlhBqjeGW5g8yzadWOva9gB4pmbmgDy99x cTbVuGCavdbep8v9cpzQflOhfQgL2UyGrZd+YapRbRHndGCrjG10aXCyzvkKKzOA LPVY6hQ5VwN3D5ps0FXloGSRJnhoUgA1aFpPZ7c2R0JhDgZXbqzd56VZ2QqT+G9C 48gGut3ipUb/05mnXbOcRkOUyERt+MObkVDwbAiIwlyeY+t18sro0CLv+hkuhgve Iddcuq33uBhjv5TaU+kht0vjeNYxzo8pZEkOp1dkLl2Ex40HiZCdgDUo+Ng4jdz6 1wl0JzXUrbqlFg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:50 2025 by rpki-client