This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft File: QsCVkBFifd0NBX1zHo-lpRApZZI.mft (raw, json) Hash identifier: 1Lj/cwdB5jgUxvwgyJY6o8/v8MYrmZegLa4w8ZQU1a8= Subject key identifier: 9E:03:5F:A9:99:27:9E:CD:49:D4:C9:04:79:76:90:0B:4A:BA:F4:EF Authority key identifier: 42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92 Certificate issuer: /CN=42c0959011627ddd0d057d731e8fa5a510296592 Certificate serial: 019B30E93C98C47891DA1C95BA30F9316C65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 10:02:30 +0000 Manifest this update: Thu 18 Dec 2025 10:02:30 +0000 Manifest next update: Fri 19 Dec 2025 10:02:30 +0000 Files and hashes: 1: QsCVkBFifd0NBX1zHo-lpRApZZI.crl (hash: /NLfWH2Vxdfk3Tqr13irIeKLhjt56kqplwcvh0rnVRw=) 2: nqDbjTD7-4bF8APAmv3q39AmNtk.roa (hash: zWbRV6cXuufmhpJUA1tayT8JP8s9Ez0NcmTuvgMXFF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:3c:98:c4:78:91:da:1c:95:ba:30:f9:31:6c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c0959011627ddd0d057d731e8fa5a510296592 Validity Not Before: Dec 18 10:02:30 2025 GMT Not After : Dec 19 10:02:30 2025 GMT Subject: CN=9e035fa999279ecd49d4c9047976900b4abaf4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2d:07:ec:e9:d8:48:5a:ed:77:e1:9d:b1:d6: 41:88:52:b7:51:5d:5b:86:13:cb:da:f3:2a:d9:56: 38:d0:79:cc:62:00:31:66:9f:99:ad:07:93:8c:6e: 6d:eb:c8:6e:fb:63:07:87:62:9f:4d:28:99:5c:76: c6:b1:70:88:88:a5:ae:13:aa:48:bb:7a:f3:4d:ad: c7:a4:51:14:42:01:e8:83:7c:b0:a9:1d:99:82:9b: 21:bc:f8:9d:d7:00:4f:bc:37:4d:87:09:b4:af:52: ba:96:cf:f4:8f:45:4f:f7:be:79:e7:e6:9c:a1:87: fd:9c:9e:b5:90:ef:b3:a7:cd:4b:01:ff:4d:fd:a0: dc:59:f4:8e:7c:63:e1:96:ad:bb:f0:00:88:77:7d: da:1b:bc:ea:9d:db:95:6a:91:0e:d1:20:f7:e2:11: 3e:03:82:71:b3:37:e4:a8:4f:65:4a:72:ca:c4:29: e2:f8:92:22:f7:35:f7:93:d3:21:dd:5c:5b:ff:80: 1f:b8:b5:7d:1c:4e:61:ab:2e:d2:6f:88:e9:3d:f0: 60:8f:df:47:1a:c7:8c:9b:3b:f2:10:63:54:f6:65: ed:96:1f:a5:b9:b0:18:d5:18:c2:10:12:81:b4:05: 52:2b:4e:c9:d5:80:5e:9d:91:06:7f:bc:a2:8e:95: 48:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:03:5F:A9:99:27:9E:CD:49:D4:C9:04:79:76:90:0B:4A:BA:F4:EF X509v3 Authority Key Identifier: keyid:42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:13:40:63:6a:84:2b:24:6b:84:76:02:96:80:78:7a:f0:c2: 0c:f9:ce:e6:71:d5:9b:c5:91:2e:c9:19:ba:1a:0e:9c:3f:75: a9:07:15:43:37:f3:7b:29:9f:e5:ea:76:65:9b:75:b6:ac:c8: 37:9b:8d:77:e0:67:f9:a4:91:ee:ce:cd:2f:e5:61:b4:b0:f3: 07:0a:bd:8f:8c:89:9d:9d:c4:03:12:17:2c:c4:7c:99:55:b2: 1d:63:7a:3d:0f:f5:cd:ba:4c:1f:92:fc:dc:a0:71:4d:6a:8a: 13:d2:28:06:30:15:ec:16:ab:3f:ff:15:fe:a1:ea:52:b9:85: 62:13:14:33:b0:45:93:54:4c:13:d5:b2:a2:12:9e:90:c6:1a: 2d:cb:a3:2b:bf:d7:11:8d:88:fd:aa:ab:5b:56:cd:db:89:ad: e3:e2:58:35:6d:b1:4f:56:8e:c6:e3:17:12:4a:d4:9d:97:30: 13:de:83:cb:19:3d:5f:b7:c9:27:74:8b:69:1f:b8:55:8b:5d: a3:96:32:b4:0b:97:03:7d:ce:34:f8:51:df:f2:a5:7d:3f:c7: f7:91:aa:59:ae:81:e5:f8:cd:f3:a2:34:66:9c:d6:52:9b:58: 80:03:df:4d:5f:47:7a:42:ae:0d:22:2f:73:43:1b:a6:40:20: 4c:3d:13:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6TyYxHiR2hyVujD5MWxlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYzA5NTkwMTE2MjdkZGQwZDA1N2Q3MzFlOGZhNWE1MTAy OTY1OTIwHhcNMjUxMjE4MTAwMjMwWhcNMjUxMjE5MTAwMjMwWjAzMTEwLwYDVQQD Eyg5ZTAzNWZhOTk5Mjc5ZWNkNDlkNGM5MDQ3OTc2OTAwYjRhYmFmNGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2i0H7OnYSFrtd+GdsdZBiFK3UV1b hhPL2vMq2VY40HnMYgAxZp+ZrQeTjG5t68hu+2MHh2KfTSiZXHbGsXCIiKWuE6pI u3rzTa3HpFEUQgHog3ywqR2ZgpshvPid1wBPvDdNhwm0r1K6ls/0j0VP97555+ac oYf9nJ61kO+zp81LAf9N/aDcWfSOfGPhlq278ACId33aG7zqnduVapEO0SD34hE+ A4JxszfkqE9lSnLKxCni+JIi9zX3k9Mh3Vxb/4AfuLV9HE5hqy7Sb4jpPfBgj99H GseMmzvyEGNU9mXtlh+lubAY1RjCEBKBtAVSK07J1YBenZEGf7yijpVITQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4DX6mZJ57NSdTJBHl2kAtKuvTvMB8GA1UdIwQY MBaAFELAlZARYn3dDQV9cx6PpaUQKWWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNDVmtCRmlmZDBOQlgxekhvLWxwUkFwWlpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iYTEyY2QtMmU3ZS00MGRjLWFlODgt MjQ4YjU5YzM2OTZiLzEvUXNDVmtCRmlmZDBOQlgxekhvLWxwUkFwWlpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9iYTEyY2QtMmU3ZS00MGRjLWFlODgtMjQ4YjU5YzM2OTZi LzEvUXNDVmtCRmlmZDBOQlgxekhvLWxwUkFwWlpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhNAY2qE KyRrhHYCloB4evDCDPnO5nHVm8WRLskZuhoOnD91qQcVQzfzeymf5ep2ZZt1tqzI N5uNd+Bn+aSR7s7NL+VhtLDzBwq9j4yJnZ3EAxIXLMR8mVWyHWN6PQ/1zbpMH5L8 3KBxTWqKE9IoBjAV7BarP/8V/qHqUrmFYhMUM7BFk1RME9WyohKekMYaLcujK7/X EY2I/aqrW1bN24mt4+JYNW2xT1aOxuMXEkrUnZcwE96Dyxk9X7fJJ3SLaR+4VYtd o5YytAuXA33ONPhR3/KlfT/H95GqWa6B5fjN86I0ZpzWUptYgAPfTV9HekKuDSIv c0MbpkAgTD0Tsw== -----END CERTIFICATE-----Generated at Thu Dec 18 16:18:41 2025 by rpki-client