This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft File: qS3HvbydCXM23mJDtVCrFzN16jk.mft (raw, json) Hash identifier: GKheyNmYO/xm8woyAnLRQJUl/P+medF2M9T4p+Kq3Wo= Subject key identifier: 7C:7B:7E:97:31:DB:37:FA:52:F4:EC:94:1C:24:31:39:8C:53:D0:82 Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39 Certificate issuer: /CN=a92dc7bdbc9d097336de6243b550ab173375ea39 Certificate serial: 019AF1643ADFA10D1668A524DAEB6501CAEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft Manifest number: 0E84 Signing time: Sat 06 Dec 2025 02:01:08 +0000 Manifest this update: Sat 06 Dec 2025 02:01:08 +0000 Manifest next update: Sun 07 Dec 2025 02:01:08 +0000 Files and hashes: 1: DGt82DR6xw_Ywh3-AvmkhvWCcVM.roa (hash: Xe6PXCoxFN3TxuAuxssMLTkZiOn7w8CCGbAYJjxvzp8=) 2: ICTqfYBG-REglE6QLqLm2DMr9nE.roa (hash: tDqSslkp4cv0xRmwxWP8ihUEHojImR31lIwN5aeFXMA=) 3: UxnwQU-ZGAuotd8bwz7nlEVCsKA.roa (hash: WlUQqIFYI5VcIHzcu2H+hLq92ENL7s5Vno3Whj19yac=) 4: qS3HvbydCXM23mJDtVCrFzN16jk.crl (hash: xLOqUDcxhEMiKJXSusIUkH56bk16qO5zfvOusxMhITw=) 5: z4IiemcHS1pMiHT-EsPFFeOITkw.roa (hash: 0Cm5tDp/8EqZeA3+YLY/lnsQEFVnqQEXb0poa3VHvws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:3a:df:a1:0d:16:68:a5:24:da:eb:65:01:ca:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39 Validity Not Before: Dec 6 02:01:08 2025 GMT Not After : Dec 7 02:01:08 2025 GMT Subject: CN=7c7b7e9731db37fa52f4ec941c2431398c53d082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:39:67:1f:71:0b:a2:55:09:6f:7a:8e:6c: 8e:d0:9a:0d:77:2d:a4:8e:2d:ff:63:f1:b0:de:b8: cf:4d:44:c6:42:e0:d7:51:75:43:b9:21:41:19:c3: 93:1b:fe:20:21:04:d2:a6:3f:1f:f7:40:dc:57:1d: c0:b5:84:59:01:58:16:2a:38:fc:07:f9:4d:c2:54: 1e:58:63:ce:1b:0a:5f:3f:46:9d:bd:48:ac:f3:1b: 7f:3d:3e:c5:88:52:97:08:ab:ba:59:4f:d0:37:15: da:3e:47:d5:07:20:7d:b4:96:bb:e3:19:22:31:ff: 17:0a:fa:20:1c:90:5d:df:4b:a1:62:95:76:4c:3d: c2:bf:d1:96:8b:90:0b:c8:58:e5:ea:4b:38:85:0d: f4:9a:3c:84:a2:e8:a0:1c:33:ed:c7:73:93:c6:d8: 36:c1:f2:9b:12:23:2d:53:b2:85:77:f6:ec:4f:22: 14:31:50:67:a3:1d:7a:7b:c5:50:e5:97:7c:2d:b8: a6:57:63:e9:58:4a:b5:7e:04:4d:56:fc:23:cf:37: c9:81:c7:d8:dc:20:cd:5d:ea:8c:f6:3e:bb:f1:bd: 03:96:cb:b6:a4:f9:73:e5:c6:1b:2b:b6:86:54:1c: c1:48:1d:5f:9e:25:da:b2:d7:6c:ef:fa:1a:a9:57: 26:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7B:7E:97:31:DB:37:FA:52:F4:EC:94:1C:24:31:39:8C:53:D0:82 X509v3 Authority Key Identifier: keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:00:62:5b:cf:7e:e1:6f:eb:b6:48:2b:33:55:48:7a:19:87: 75:7d:cd:25:3c:d1:33:22:7c:f4:de:c1:18:34:68:48:8a:8d: 64:3e:d9:38:76:ec:25:ab:5c:09:03:2e:86:ad:55:53:b3:38: 68:11:fc:79:e1:fc:d1:d9:c0:08:d9:cf:03:7a:16:32:b8:41: b9:28:a6:86:ce:90:35:59:f2:9e:c7:6a:74:70:ea:91:fb:3a: b8:2d:4a:87:11:13:e7:61:66:0f:db:c5:56:24:1f:56:da:a2: 9d:b8:06:61:d1:7d:85:25:37:e5:3e:6d:b4:54:54:65:8c:50: 14:38:f6:a2:c9:f7:54:a1:4e:77:dd:0a:d7:ea:0a:0c:65:14: ff:2a:0c:79:f2:1c:3a:f2:84:9e:2f:ae:5b:86:a6:d0:2d:eb: 2c:05:9e:4b:2c:10:43:30:df:cd:a6:01:64:b3:3e:66:62:98: 93:e0:4e:fe:f0:dd:99:24:bc:8a:37:61:14:2a:c3:14:9f:0e: 71:5c:18:be:ba:08:32:8d:1f:1c:84:38:ee:de:e9:32:58:a7: d2:64:a5:01:f2:2c:4c:19:a2:e0:af:e9:f0:eb:43:d6:0d:82: 6f:32:61:03:74:1f:8a:dc:d9:1e:47:9c:a6:2e:24:cd:ed:78: 59:72:a0:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDrfoQ0WaKUk2utlAcrsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmRjN2JkYmM5ZDA5NzMzNmRlNjI0M2I1NTBhYjE3MzM3 NWVhMzkwHhcNMjUxMjA2MDIwMTA4WhcNMjUxMjA3MDIwMTA4WjAzMTEwLwYDVQQD Eyg3YzdiN2U5NzMxZGIzN2ZhNTJmNGVjOTQxYzI0MzEzOThjNTNkMDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgo5Zx9xC6JVCW96jmyO0JoNdy2k ji3/Y/Gw3rjPTUTGQuDXUXVDuSFBGcOTG/4gIQTSpj8f90DcVx3AtYRZAVgWKjj8 B/lNwlQeWGPOGwpfP0advUis8xt/PT7FiFKXCKu6WU/QNxXaPkfVByB9tJa74xki Mf8XCvogHJBd30uhYpV2TD3Cv9GWi5ALyFjl6ks4hQ30mjyEouigHDPtx3OTxtg2 wfKbEiMtU7KFd/bsTyIUMVBnox16e8VQ5Zd8LbimV2PpWEq1fgRNVvwjzzfJgcfY 3CDNXeqM9j678b0Dlsu2pPlz5cYbK7aGVBzBSB1fniXastds7/oaqVcmdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHx7fpcx2zf6UvTslBwkMTmMU9CCMB8GA1UdIwQY MBaAFKktx728nQlzNt5iQ7VQqxczdeo5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVMzSHZieWRDWE0yM21KRHRWQ3JGek4xNmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wYjQ2MjktMzljYy00ZTZjLTllMWMt OTkxYjdhZWU3NDZjLzEvcVMzSHZieWRDWE0yM21KRHRWQ3JGek4xNmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8wYjQ2MjktMzljYy00ZTZjLTllMWMtOTkxYjdhZWU3NDZj LzEvcVMzSHZieWRDWE0yM21KRHRWQ3JGek4xNmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgBiW89+ 4W/rtkgrM1VIehmHdX3NJTzRMyJ89N7BGDRoSIqNZD7ZOHbsJatcCQMuhq1VU7M4 aBH8eeH80dnACNnPA3oWMrhBuSimhs6QNVnynsdqdHDqkfs6uC1KhxET52FmD9vF ViQfVtqinbgGYdF9hSU35T5ttFRUZYxQFDj2osn3VKFOd90K1+oKDGUU/yoMefIc OvKEni+uW4am0C3rLAWeSywQQzDfzaYBZLM+ZmKYk+BO/vDdmSS8ijdhFCrDFJ8O cVwYvroIMo0fHIQ47t7pMlin0mSlAfIsTBmi4K/p8OtD1g2CbzJhA3QfitzZHkec pi4kze14WXKg0w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:37:49 2025 by rpki-client