This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft File: _QsmgyFXCqBCF7NThHwQv3MSVLU.mft (raw, json) Hash identifier: lLWIgQlMS5REdII/d95zYgmx6TvM8XDuCc4fZzxjUe4= Subject key identifier: 99:2B:98:76:C2:EC:05:FC:47:9D:36:38:E6:38:07:66:E8:BC:2A:D7 Authority key identifier: FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5 Certificate issuer: /CN=fd0b268321570aa04217b353847c10bf731254b5 Certificate serial: 019AF19B4892E0BEB2F64224FDDB82D0ADBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:16 +0000 Manifest this update: Sat 06 Dec 2025 03:01:16 +0000 Manifest next update: Sun 07 Dec 2025 03:01:16 +0000 Files and hashes: 1: Th8E4wMERzzrtf61mMlHU7T-O1E.roa (hash: fBxF7gzjtDOzJ+1yYpryOgnsRtCjhNj/m+OItkfcoW4=) 2: _QsmgyFXCqBCF7NThHwQv3MSVLU.crl (hash: hn9dsx9vtjYf8l2wQUdUkfwGBN2der1mwics+eGY3hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:48:92:e0:be:b2:f6:42:24:fd:db:82:d0:ad:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd0b268321570aa04217b353847c10bf731254b5 Validity Not Before: Dec 6 03:01:16 2025 GMT Not After : Dec 7 03:01:16 2025 GMT Subject: CN=992b9876c2ec05fc479d3638e6380766e8bc2ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:96:1a:64:b6:41:39:bd:0f:9c:42:30:8b: 79:90:11:33:83:3c:3b:0f:51:34:ca:fd:54:8a:0f: 1a:04:e1:7c:4f:4b:2e:fc:6b:bb:2c:f0:fd:d5:a9: 17:e9:3a:7f:43:45:2e:2f:4b:6f:06:6d:92:32:91: 7f:e8:f2:65:59:60:98:9a:ad:d9:e2:d1:44:61:ca: df:c2:f5:21:e0:c7:a6:cd:2e:b0:77:01:95:4c:47: d5:7d:49:5e:2f:b1:41:1a:fa:ff:05:12:cb:63:8d: e9:fc:34:b5:01:d9:e4:72:6b:fc:8f:c6:7a:26:3e: 5e:43:ae:5a:5a:49:a3:b0:89:4c:9d:3b:5e:7b:83: 16:17:49:c8:05:a3:ca:f2:91:ca:05:77:00:81:5f: e9:ef:a3:35:7b:b2:fe:ac:be:78:b0:22:70:22:fc: 9a:35:ed:ac:9b:3e:b8:0c:f0:30:c9:77:0d:08:6a: dd:67:37:85:6e:f7:fa:f8:b3:73:af:b0:78:1b:c1: 89:be:df:95:f5:e0:14:bd:b0:84:b7:54:d0:8d:88: fb:2b:55:95:89:40:ce:f0:a3:80:5c:14:00:28:fa: 17:40:45:6a:4b:7a:28:1a:16:87:4e:6b:e7:85:90: 46:12:bc:13:45:bc:9e:50:14:8a:12:d3:08:63:0c: 42:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2B:98:76:C2:EC:05:FC:47:9D:36:38:E6:38:07:66:E8:BC:2A:D7 X509v3 Authority Key Identifier: keyid:FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8e:ef:4c:26:29:5f:f0:96:ef:dc:88:6f:ed:d8:75:46:b5: 81:d0:28:47:78:58:28:d4:7a:41:cb:65:83:0f:e6:9a:97:17: a9:80:0f:bf:c9:b0:23:93:62:71:72:2c:b6:cf:23:06:79:70: 19:48:60:9d:d0:82:f1:a6:fa:3b:e9:d7:5f:2d:eb:bc:05:6a: 31:59:ad:01:45:a5:58:98:4d:39:f8:a1:89:b1:73:f3:59:9e: 13:cc:04:d5:2d:a4:ba:81:41:93:f9:db:8e:d8:50:27:33:bc: ba:33:4f:d6:6e:43:6f:a7:12:3d:38:38:eb:e3:3f:e1:1a:cb: e6:fa:8e:a1:9c:1d:46:72:c8:ca:ce:b4:98:89:66:50:8c:58: d5:3b:32:a4:ea:92:bd:ed:43:bb:52:24:70:56:35:9b:df:b1: ca:53:b8:21:3d:5d:b0:3f:9a:5c:07:69:2a:b5:f3:90:a0:e7: 0b:0e:f8:9d:af:21:c1:1b:c0:1a:cb:82:6e:85:d0:78:a1:a6: 87:a9:27:0e:34:b4:c0:6f:b3:8c:45:22:b1:a7:f7:dd:15:bd: 97:f7:d8:21:4b:9c:52:26:06:d5:9e:10:0c:b3:c2:28:56:de: d4:00:9f:a6:57:71:4f:7c:85:ed:74:b2:3c:97:83:36:86:1d: cb:e9:a7:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0iS4L6y9kIk/duC0K26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMGIyNjgzMjE1NzBhYTA0MjE3YjM1Mzg0N2MxMGJmNzMx MjU0YjUwHhcNMjUxMjA2MDMwMTE2WhcNMjUxMjA3MDMwMTE2WjAzMTEwLwYDVQQD Eyg5OTJiOTg3NmMyZWMwNWZjNDc5ZDM2MzhlNjM4MDc2NmU4YmMyYWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7WWGmS2QTm9D5xCMIt5kBEzgzw7 D1E0yv1Uig8aBOF8T0su/Gu7LPD91akX6Tp/Q0UuL0tvBm2SMpF/6PJlWWCYmq3Z 4tFEYcrfwvUh4MemzS6wdwGVTEfVfUleL7FBGvr/BRLLY43p/DS1Adnkcmv8j8Z6 Jj5eQ65aWkmjsIlMnTtee4MWF0nIBaPK8pHKBXcAgV/p76M1e7L+rL54sCJwIvya Ne2smz64DPAwyXcNCGrdZzeFbvf6+LNzr7B4G8GJvt+V9eAUvbCEt1TQjYj7K1WV iUDO8KOAXBQAKPoXQEVqS3ooGhaHTmvnhZBGErwTRbyeUBSKEtMIYwxC+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkrmHbC7AX8R502OOY4B2bovCrXMB8GA1UdIwQY MBaAFP0LJoMhVwqgQhezU4R8EL9zElS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1FzbWd5RlhDcUJDRjdOVGhId1F2M01TVkxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80M2YxNzctNTM2OC00YjMxLTg5Yzkt NWIzZjY0MTgxZmZmLzEvX1FzbWd5RlhDcUJDRjdOVGhId1F2M01TVkxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi80M2YxNzctNTM2OC00YjMxLTg5YzktNWIzZjY0MTgxZmZm LzEvX1FzbWd5RlhDcUJDRjdOVGhId1F2M01TVkxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH47vTCYp X/CW79yIb+3YdUa1gdAoR3hYKNR6Qctlgw/mmpcXqYAPv8mwI5NicXIsts8jBnlw GUhgndCC8ab6O+nXXy3rvAVqMVmtAUWlWJhNOfihibFz81meE8wE1S2kuoFBk/nb jthQJzO8ujNP1m5Db6cSPTg46+M/4RrL5vqOoZwdRnLIys60mIlmUIxY1TsypOqS ve1Du1IkcFY1m9+xylO4IT1dsD+aXAdpKrXzkKDnCw74na8hwRvAGsuCboXQeKGm h6knDjS0wG+zjEUisaf33RW9l/fYIUucUiYG1Z4QDLPCKFbe1ACfpldxT3yF7XSy PJeDNoYdy+mndQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:16:04 2025 by rpki-client