This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json) Hash identifier: 9LE9AZzg7VptmzvtH3pF/luZaxpweS2yPsa/fKlt694= Subject key identifier: D2:89:37:2F:A5:42:BC:D7:7C:BB:9E:3B:09:89:15:E5:F9:33:EF:92 Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Certificate serial: 019AF0F5F47EB8133044F4407049CBB01325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft Manifest number: 176D Signing time: Sat 06 Dec 2025 00:00:41 +0000 Manifest this update: Sat 06 Dec 2025 00:00:41 +0000 Manifest next update: Sun 07 Dec 2025 00:00:41 +0000 Files and hashes: 1: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (hash: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=) 2: 4m5zxgIpcpLPeYwAolQiZO3OfJg.roa (hash: OQBGj0xAcvnf7DgtTAHxl/RhajJjDdIaXO2XNvZqjbE=) 3: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (hash: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=) 4: X0xBUO01yDVN5CRqvm4XAUfMOJU.roa (hash: 4DOTlT3v5tZvSddUKapPHYVNXtvABPFyf5Abe5iqGYM=) 5: Xc8Qyh1LirsUEn7RQ8UyXB3RH0o.roa (hash: J+DRmxT7YhmhWsrfnEFIQoC5CTBLXKphVIrLyARlJ+w=) 6: XsUV3yVUcv5weCqiqsURBEgaXXY.roa (hash: 2vI6p11F93XXFNfMhYK7zAMvScbfypBZSjvbJS+JGeY=) 7: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (hash: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=) 8: oIKeScBXNP08SzFzC94DmvUIs80.roa (hash: NFvZgh8Blc1rDmTWkTD21o0JAYAkx72d5ckrzpZJxzc=) 9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: m5fFMF3xSxZKJ5x5mtoNfM+ym5F/XB1HA3+diMNYwiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f4:7e:b8:13:30:44:f4:40:70:49:cb:b0:13:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Validity Not Before: Dec 6 00:00:41 2025 GMT Not After : Dec 7 00:00:41 2025 GMT Subject: CN=d289372fa542bcd77cbb9e3b098915e5f933ef92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:bf:35:3d:df:08:b6:59:e3:08:e8:ef:63: 4b:37:82:a9:3f:79:22:7b:48:51:54:84:c6:94:5a: fa:1d:28:b1:5d:04:55:ba:bb:ba:2d:d3:6f:bd:46: ec:8b:b5:2f:70:96:51:20:68:3d:f2:25:c6:7f:62: 6c:b6:b4:b2:f0:85:73:09:ce:c8:82:ae:e3:9b:cc: 85:0d:a4:38:eb:07:f8:a3:05:af:9f:1f:51:62:bd: 3c:e8:66:57:c9:19:ec:c1:53:d2:5b:1e:be:89:1b: 79:4b:87:81:6e:e2:39:88:c0:be:49:2d:7f:ae:76: f2:42:90:b1:27:55:16:06:7b:63:96:db:68:c5:37: 3e:20:b6:83:61:71:36:ff:59:fe:59:38:33:01:a4: 39:42:5a:ce:1c:21:92:cd:83:77:71:71:3c:77:0e: ee:7d:2f:ad:2e:15:9b:65:dd:98:64:01:ba:30:91: 58:a1:fc:b3:80:31:cd:72:58:b0:0e:38:42:09:6e: dd:e9:b7:28:d1:3b:a3:4a:5f:4c:87:55:33:39:9f: 84:da:b2:86:42:5a:59:4f:d7:1e:8c:a2:5f:f7:a0: e6:90:93:80:9f:17:af:6c:f2:ff:ca:28:3a:12:0c: 46:d4:d0:11:72:fe:09:63:49:b3:a5:e0:8f:ad:37: b1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:89:37:2F:A5:42:BC:D7:7C:BB:9E:3B:09:89:15:E5:F9:33:EF:92 X509v3 Authority Key Identifier: keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2d:1d:34:cd:50:c5:e1:c6:0e:b6:7a:43:7e:5e:48:06:13: 6c:75:59:1a:3d:72:58:ee:9f:21:61:27:8b:1c:07:19:ef:27: d8:66:8e:6f:8b:b0:6f:4b:d2:fe:62:e7:ff:db:fe:01:6e:07: f3:2d:4e:b3:43:d7:cb:ff:9e:ef:e5:df:ad:a8:3d:04:22:ff: a2:7e:35:4c:76:17:82:e6:9a:55:12:b5:8f:8d:6d:02:37:a9: 5e:83:6c:11:81:53:3e:75:eb:00:ce:9e:25:86:27:f9:20:33: 4a:0a:83:f8:8a:06:fc:50:25:ac:79:d6:8f:c2:30:26:9e:b4: 09:d4:05:82:4e:3c:b3:54:a1:c0:a9:fe:7c:c0:57:4f:b0:28: cf:b4:9c:33:6f:46:d4:98:a6:82:4b:ca:54:ab:a3:1b:e5:1e: f9:e3:5a:c9:83:d3:53:d1:a1:fc:4e:a9:74:83:eb:71:a3:1b: 03:b9:a4:97:cb:01:65:b2:50:b6:ff:56:31:54:07:f0:ff:38: 27:90:a3:0d:f3:b9:7a:5b:58:48:78:25:d4:ff:66:e2:ce:f7: c5:58:59:58:44:68:14:41:24:2a:4b:6e:2b:26:af:35:87:b2: 98:cf:db:6a:75:f3:3c:06:c2:d4:a5:2d:06:80:78:6a:0f:ef: d0:a0:2c:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9fR+uBMwRPRAcEnLsBMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMWRjNTBhNGI1MjZkZjE4ZThiMGE2NTY1ZDdiOWQ1OGE3 NWQzMTUwHhcNMjUxMjA2MDAwMDQxWhcNMjUxMjA3MDAwMDQxWjAzMTEwLwYDVQQD EyhkMjg5MzcyZmE1NDJiY2Q3N2NiYjllM2IwOTg5MTVlNWY5MzNlZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZu/NT3fCLZZ4wjo72NLN4KpP3ki e0hRVITGlFr6HSixXQRVuru6LdNvvUbsi7UvcJZRIGg98iXGf2JstrSy8IVzCc7I gq7jm8yFDaQ46wf4owWvnx9RYr086GZXyRnswVPSWx6+iRt5S4eBbuI5iMC+SS1/ rnbyQpCxJ1UWBntjlttoxTc+ILaDYXE2/1n+WTgzAaQ5QlrOHCGSzYN3cXE8dw7u fS+tLhWbZd2YZAG6MJFYofyzgDHNcliwDjhCCW7d6bco0TujSl9Mh1UzOZ+E2rKG QlpZT9cejKJf96DmkJOAnxevbPL/yig6EgxG1NARcv4JY0mzpeCPrTexEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKJNy+lQrzXfLueOwmJFeX5M++SMB8GA1UdIwQY MBaAFKodxQpLUm3xjosKZWXXudWKddMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMt MzNkNzI4NDMzYzExLzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMtMzNkNzI4NDMzYzEx LzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHi0dNM1Q xeHGDrZ6Q35eSAYTbHVZGj1yWO6fIWEnixwHGe8n2GaOb4uwb0vS/mLn/9v+AW4H 8y1Os0PXy/+e7+Xfrag9BCL/on41THYXguaaVRK1j41tAjepXoNsEYFTPnXrAM6e JYYn+SAzSgqD+IoG/FAlrHnWj8IwJp60CdQFgk48s1ShwKn+fMBXT7Aoz7ScM29G 1JimgkvKVKujG+Ue+eNayYPTU9Gh/E6pdIPrcaMbA7mkl8sBZbJQtv9WMVQH8P84 J5CjDfO5eltYSHgl1P9m4s73xVhZWERoFEEkKktuKyavNYeymM/banXzPAbC1KUt BoB4ag/v0KAsnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:53 2025 by rpki-client