This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft File: qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json) Hash identifier: 0ieefsyl0kSTsOtXeR0ApYYF1B6pu0cAMyt9AZaIPsY= Subject key identifier: 3A:95:92:3F:27:29:6B:65:41:12:60:EF:9D:A8:04:63:55:A6:8B:8E Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98 Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898 Certificate serial: 019AF276EBEA93EA2D05460D6E6A7E4ADBF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 07:01:11 +0000 Manifest this update: Sat 06 Dec 2025 07:01:11 +0000 Manifest next update: Sun 07 Dec 2025 07:01:11 +0000 Files and hashes: 1: _n0xC-sidbdSFPfTnRV-lr4kGic.roa (hash: ++bpQemmXYA46AzwIRn3gko69y6uULCJsSLSxSSwsGM=) 2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: uxj0H4ScVfY9swAnR1WPj3WIa65IHnhhoRmgsrNX49c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:eb:ea:93:ea:2d:05:46:0d:6e:6a:7e:4a:db:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898 Validity Not Before: Dec 6 07:01:11 2025 GMT Not After : Dec 7 07:01:11 2025 GMT Subject: CN=3a95923f27296b65411260ef9da8046355a68b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:73:7e:b2:3a:42:51:a7:e6:1b:9c:62:65:38: fa:df:3b:ba:13:11:c4:a6:e8:27:a7:cf:51:89:ed: 5f:64:0d:33:1d:4e:5b:64:35:d2:81:37:5e:8b:ae: fe:22:71:57:a2:76:90:1f:2f:c6:53:29:70:a1:ca: bd:97:24:16:c3:e2:38:32:ba:38:a2:bf:9a:f3:a0: 12:e3:dc:be:a4:f5:3b:04:9d:dd:e4:c9:bd:25:23: 3a:46:82:68:93:f5:b8:88:ad:81:64:ee:41:66:71: 4f:c3:47:96:b9:d9:68:de:3f:7c:dd:d8:00:37:f2: a8:6e:e1:ec:61:0e:db:0c:a2:64:c3:1d:9f:1a:96: e9:5b:cf:d5:27:56:30:df:03:26:41:2c:9f:d5:e6: 99:b6:0b:4f:12:77:96:cb:b5:ec:fd:52:e9:6d:31: 40:4f:87:10:17:43:0c:44:59:57:01:c1:ef:2f:17: 99:b7:c5:91:85:44:6b:91:40:64:2a:b0:c4:74:72: 00:06:f4:fb:ff:a9:83:bd:21:58:6e:5c:e2:0e:bb: 01:67:49:6f:db:fc:c6:61:b2:5d:2e:fa:04:92:bd: 2a:3c:26:87:a7:e3:ea:04:a8:2d:fb:70:60:24:bb: 7f:43:3d:c1:fc:f7:6d:75:62:7f:42:41:ff:77:53: dd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:95:92:3F:27:29:6B:65:41:12:60:EF:9D:A8:04:63:55:A6:8B:8E X509v3 Authority Key Identifier: keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:ae:98:e1:72:fd:65:d7:4e:7e:92:b1:7e:32:42:c5:5f:87: 37:08:33:75:43:17:d8:38:61:cc:42:ac:47:c3:39:01:1a:29: 6f:1f:fc:cc:dc:27:b2:df:a4:44:53:64:ad:7d:cc:bc:3e:76: 4d:9d:9d:55:48:fe:24:0a:63:54:3e:b8:fa:41:4d:e9:03:08: 65:f1:4c:44:47:3b:d3:b0:90:b2:50:96:2e:1a:4a:e4:6e:2d: 25:0d:75:ae:c8:e4:33:5c:8e:37:a6:ca:f6:7c:d0:29:e5:74: d4:0a:a5:f5:03:b1:3d:a4:48:27:dd:7d:b6:c0:66:3e:51:75: f5:55:f2:4a:8c:2a:5b:d1:71:3f:93:3e:0a:ed:32:35:59:5c: 9e:fd:32:ce:1f:fd:07:8b:e3:31:ba:cf:64:28:1d:7b:21:34: 75:d6:57:f3:b1:34:3f:46:4f:f5:90:11:07:96:89:58:23:5c: d7:b7:54:e9:28:bc:63:e5:79:e4:fe:14:78:37:84:77:1c:20: 9f:ca:85:05:76:e2:10:45:77:c4:46:73:be:dd:f0:55:a1:82: 83:84:eb:1f:8e:87:32:a9:35:f8:0b:bf:e7:c4:70:39:c8:37: bd:d7:16:7c:a6:2e:91:39:cc:01:ed:e1:f7:38:f3:9a:e2:2c: 73:d8:f1:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduvqk+otBUYNbmp+Stv1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmIyNDQwYTdjN2EyZGZjZjJlNDIxNmRhOGEzYmRlNjhi OWI4OTgwHhcNMjUxMjA2MDcwMTExWhcNMjUxMjA3MDcwMTExWjAzMTEwLwYDVQQD EygzYTk1OTIzZjI3Mjk2YjY1NDExMjYwZWY5ZGE4MDQ2MzU1YTY4YjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3N+sjpCUafmG5xiZTj63zu6ExHE pugnp89Rie1fZA0zHU5bZDXSgTdei67+InFXonaQHy/GUylwocq9lyQWw+I4Mro4 or+a86AS49y+pPU7BJ3d5Mm9JSM6RoJok/W4iK2BZO5BZnFPw0eWudlo3j983dgA N/KobuHsYQ7bDKJkwx2fGpbpW8/VJ1Yw3wMmQSyf1eaZtgtPEneWy7Xs/VLpbTFA T4cQF0MMRFlXAcHvLxeZt8WRhURrkUBkKrDEdHIABvT7/6mDvSFYblziDrsBZ0lv 2/zGYbJdLvoEkr0qPCaHp+PqBKgt+3BgJLt/Qz3B/PdtdWJ/QkH/d1PdawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqVkj8nKWtlQRJg752oBGNVpouOMB8GA1UdIwQY MBaAFKkrJECnx6Lfzy5CFtqKO95oubiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84OTIxOTMtOWVkOS00NDQ3LTg0MDIt ZjJjNjdlY2EzZTViLzEvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS84OTIxOTMtOWVkOS00NDQ3LTg0MDItZjJjNjdlY2EzZTVi LzEvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArK6Y4XL9 ZddOfpKxfjJCxV+HNwgzdUMX2DhhzEKsR8M5ARopbx/8zNwnst+kRFNkrX3MvD52 TZ2dVUj+JApjVD64+kFN6QMIZfFMREc707CQslCWLhpK5G4tJQ11rsjkM1yON6bK 9nzQKeV01Aql9QOxPaRIJ919tsBmPlF19VXySowqW9FxP5M+Cu0yNVlcnv0yzh/9 B4vjMbrPZCgdeyE0ddZX87E0P0ZP9ZARB5aJWCNc17dU6Si8Y+V55P4UeDeEdxwg n8qFBXbiEEV3xEZzvt3wVaGCg4TrH46HMqk1+Au/58RwOcg3vdcWfKYukTnMAe3h 9zjzmuIsc9jx2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:19:49 2025 by rpki-client