This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json) Hash identifier: Ld4PEEI1rgQYA5IOSkH9gkY+bnBV/Cd0OrrC/itD/tA= Subject key identifier: D6:9B:10:72:2B:36:8D:44:08:99:28:CD:0C:72:B9:52:76:F0:18:C8 Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21 Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21 Certificate serial: 019AF50B5A38DA8B9E976B387D0F81376562 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 19:02:32 +0000 Manifest this update: Sat 06 Dec 2025 19:02:32 +0000 Manifest next update: Sun 07 Dec 2025 19:02:32 +0000 Files and hashes: 1: 1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa (hash: p66SMlwKH8qksSnzyFy8M1MJ9eGvVUlsB0A2v++rXYg=) 2: BO2GxdENWf3nZf4IjS3W9dxIBdA.roa (hash: CoT9/NP4/6nCeDdnm6fFk7HZ3lUZardt1KwDlood7sQ=) 3: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: PXIyDSedaomazxy2uNxoT/K5xoNXKEu+DTpCViAK46g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:5a:38:da:8b:9e:97:6b:38:7d:0f:81:37:65:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21 Validity Not Before: Dec 6 19:02:32 2025 GMT Not After : Dec 7 19:02:32 2025 GMT Subject: CN=d69b10722b368d44089928cd0c72b95276f018c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:9d:65:1a:56:5c:b7:4c:8e:a1:bb:e7:fe: 67:02:42:3c:5e:24:d9:73:7f:c9:13:60:24:4e:f7: e0:53:e2:e4:42:bf:4a:33:49:ae:da:f7:14:bd:52: 91:da:1c:c7:72:03:d8:60:4a:9d:a2:bd:1e:c7:86: c2:52:5b:6c:cd:92:73:a1:7a:77:3a:af:b0:dd:28: cc:8a:47:81:bf:a4:ad:35:27:c7:65:f0:c6:96:aa: 16:d6:06:be:cd:2c:eb:c5:1b:cb:e7:09:d4:69:18: 0e:2e:6d:40:dc:39:f9:cb:71:e2:5e:2d:0c:57:29: a6:5a:9b:8e:73:89:2e:e4:10:59:99:b3:a3:2f:8c: 0d:9e:8d:f0:86:5d:5f:33:27:58:a3:7c:33:0a:a5: 82:e4:5f:a1:8a:a1:8a:08:85:8e:c7:d8:0c:f3:75: ea:73:ee:94:bd:59:75:a5:ac:a4:8c:2e:4f:d8:6d: 6d:97:f0:6a:a7:a5:f9:c6:60:39:ef:3e:34:63:c7: 39:a5:9f:b0:e3:a0:74:0f:f5:ab:8a:c9:1f:cb:8e: 2d:e3:87:96:c1:2f:b7:cf:34:a1:73:82:bd:d2:e1: 1c:49:01:11:d9:1b:e7:fa:3f:dc:f4:dc:cd:29:f4: ca:6e:71:ec:11:30:5f:3d:0e:bf:4a:6f:5d:75:2b: 44:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9B:10:72:2B:36:8D:44:08:99:28:CD:0C:72:B9:52:76:F0:18:C8 X509v3 Authority Key Identifier: keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:fa:8c:2b:39:c7:e9:2f:6a:ca:21:34:6d:40:53:6d:25:91: 37:da:8a:f4:28:db:5f:86:64:9a:71:62:43:89:9d:1f:0a:88: 4b:3c:97:a6:72:a1:31:bd:37:6c:10:fa:aa:d1:e4:fc:ac:c9: 0a:f8:ef:0a:31:a8:9c:52:ef:0b:7e:9a:b1:81:65:57:a2:8b: 74:2b:1c:bb:d1:10:83:15:ac:6f:56:58:ee:38:20:91:74:4b: 36:6a:ca:76:bd:5e:6d:94:a3:50:1b:1c:af:79:50:f5:35:d1: f5:8e:71:48:b1:21:b8:ef:5b:6e:68:bd:d4:b8:48:0f:69:24: 56:37:74:6e:4d:3c:cf:cd:a3:6f:41:a3:69:9b:25:b5:52:56: 1b:23:2b:42:c3:47:e8:dd:c2:0c:89:38:19:85:19:6f:fe:82: 64:36:c9:a3:95:9b:a4:ea:d8:30:1d:0d:d5:9a:0a:de:70:a7: 46:6f:c5:24:e6:b2:03:49:c6:bc:74:1a:59:da:29:2a:b1:46: ce:28:a8:5a:d9:39:90:04:a0:76:e2:c3:70:eb:77:92:83:47: 21:b5:10:ac:03:71:b8:f8:98:0f:a1:16:cf:aa:cc:ec:55:75: cd:bc:ca:85:21:0d:29:70:4d:a9:df:c3:88:d9:6b:32:30:71: 16:82:ea:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C1o42ouel2s4fQ+BN2ViMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMjZhYzRhZmFmZDI2OTg4MWMxMGFkMmVjYTJmNGRlZjhl ZGJkMjEwHhcNMjUxMjA2MTkwMjMyWhcNMjUxMjA3MTkwMjMyWjAzMTEwLwYDVQQD EyhkNjliMTA3MjJiMzY4ZDQ0MDg5OTI4Y2QwYzcyYjk1Mjc2ZjAxOGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpidZRpWXLdMjqG75/5nAkI8XiTZ c3/JE2AkTvfgU+LkQr9KM0mu2vcUvVKR2hzHcgPYYEqdor0ex4bCUltszZJzoXp3 Oq+w3SjMikeBv6StNSfHZfDGlqoW1ga+zSzrxRvL5wnUaRgOLm1A3Dn5y3HiXi0M VymmWpuOc4ku5BBZmbOjL4wNno3whl1fMydYo3wzCqWC5F+hiqGKCIWOx9gM83Xq c+6UvVl1paykjC5P2G1tl/Bqp6X5xmA57z40Y8c5pZ+w46B0D/Wriskfy44t44eW wS+3zzShc4K90uEcSQER2Rvn+j/c9NzNKfTKbnHsETBfPQ6/Sm9ddStECwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNabEHIrNo1ECJkozQxyuVJ28BjIMB8GA1UdIwQY MBaAFEEmrEr6/SaYgcEK0uyi9N747b0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEt YzM5OWJlMDMxYjRhLzEvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEtYzM5OWJlMDMxYjRh LzEvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/qMKznH 6S9qyiE0bUBTbSWRN9qK9CjbX4ZkmnFiQ4mdHwqISzyXpnKhMb03bBD6qtHk/KzJ CvjvCjGonFLvC36asYFlV6KLdCscu9EQgxWsb1ZY7jggkXRLNmrKdr1ebZSjUBsc r3lQ9TXR9Y5xSLEhuO9bbmi91LhID2kkVjd0bk08z82jb0GjaZsltVJWGyMrQsNH 6N3CDIk4GYUZb/6CZDbJo5WbpOrYMB0N1ZoK3nCnRm/FJOayA0nGvHQaWdopKrFG ziioWtk5kASgduLDcOt3koNHIbUQrANxuPiYD6EWz6rM7FV1zbzKhSENKXBNqd/D iNlrMjBxFoLqzg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:09:44 2025 by rpki-client