This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft File: qsU0mf8g8DXLixwKqbd8PX0ol2w.mft (raw, json) Hash identifier: Y58wPpzJY6AYJ1tl346hKmOC88a8DTjNEJ6cBJT0cXQ= Subject key identifier: 53:08:E0:FA:B5:C9:2D:14:20:7E:8A:24:EA:1C:84:9A:F6:E4:41:43 Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C Certificate issuer: /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c Certificate serial: 019AF42E7A5ECEFF12A412865EDB27B86B40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 15:01:17 +0000 Manifest this update: Sat 06 Dec 2025 15:01:17 +0000 Manifest next update: Sun 07 Dec 2025 15:01:17 +0000 Files and hashes: 1: 3RChXaGg2mHXT_oEdTM0SpY6jhc.roa (hash: PV09Dkm12mpf6AJ4aFGi0VOS8JddqTI6zuA00aTTnSY=) 2: qsU0mf8g8DXLixwKqbd8PX0ol2w.crl (hash: oMWuX51tga/zaJOhIP18oM7wz8KNCF8kMwdQYAUTdK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:7a:5e:ce:ff:12:a4:12:86:5e:db:27:b8:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c Validity Not Before: Dec 6 15:01:17 2025 GMT Not After : Dec 7 15:01:17 2025 GMT Subject: CN=5308e0fab5c92d14207e8a24ea1c849af6e44143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b6:72:1f:0f:2c:de:62:a3:8f:53:75:0b:73: cd:64:84:08:00:66:50:71:d4:5a:7a:c8:94:d4:14: 82:d6:fe:b2:0c:21:5e:12:6a:cb:93:38:22:18:2d: e4:43:d2:be:68:b0:c6:96:26:41:74:21:fd:a0:8b: 75:e4:33:69:93:89:b4:bc:c7:19:36:d0:40:12:16: d3:e9:6e:d6:49:46:03:88:d6:df:30:e9:36:45:7b: 57:69:8f:61:33:80:45:b0:68:51:8c:57:48:64:04: 7c:bc:d3:76:2c:65:c4:a5:4c:ae:17:2a:b2:86:03: 5e:38:8b:d4:cf:40:57:a0:dd:ec:48:10:90:d0:d2: 78:85:8c:18:83:9c:c3:55:8c:a1:27:65:c1:94:b3: 54:a3:25:00:ff:d1:63:d2:34:76:7a:41:13:a5:5a: 08:89:8c:46:d7:ba:85:18:27:bd:33:d8:58:a0:ce: 51:61:5a:aa:d9:4c:c9:ca:b1:aa:82:0c:1b:0b:a5: 54:a9:1d:ee:cd:1f:02:80:8a:6c:ed:4a:8a:80:ef: b7:3e:c8:c1:55:f1:0f:0e:2f:93:4b:8b:24:2f:df: 15:2d:0e:00:4c:20:93:28:71:aa:5a:60:87:19:6a: fa:37:28:81:c7:ad:c0:b7:3c:13:bb:71:e6:9e:81: b4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:08:E0:FA:B5:C9:2D:14:20:7E:8A:24:EA:1C:84:9A:F6:E4:41:43 X509v3 Authority Key Identifier: keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2a:ce:4b:24:94:8b:b0:a1:4a:b5:7a:3d:6d:3a:a7:1c:1a: bf:5a:ce:ab:75:26:3c:e2:2f:65:d5:3d:d6:dd:74:82:b3:bb: 34:d0:a3:6b:61:47:56:e7:1f:0f:fa:1b:0e:0e:25:ee:07:d6: 4d:b9:17:59:2b:b1:24:e6:ee:4c:6d:e7:23:5e:b4:2f:d8:58: ed:65:ef:fc:2a:7c:4b:bf:5a:c5:a5:2d:ca:b0:aa:73:98:2f: 42:72:d0:1e:5b:5a:4c:8b:d2:9b:3c:c5:a2:1a:fc:61:ff:dc: 9c:69:08:6c:2b:55:d0:96:f8:b7:96:60:eb:7c:e9:cd:8e:2d: 16:52:8d:a8:38:82:3d:ba:9f:cb:63:c4:98:b9:b3:88:86:12: 7f:5e:0c:c4:2a:64:2c:c5:5f:c9:d2:8f:44:74:29:48:2f:53: b4:1c:74:f5:ef:97:0f:9f:49:b1:b3:76:fe:9b:b3:f6:af:94: 37:d1:93:2c:76:8c:b6:d8:88:69:b0:d5:15:89:98:65:14:f0: 08:15:e4:ad:8f:e8:76:89:e4:cd:88:41:6b:e7:a6:0f:a7:1f: 54:a3:88:ee:46:e1:db:10:ae:54:d4:7e:69:f5:55:d7:2a:8f: 6d:69:46:95:4a:41:35:4e:9a:51:9d:a4:1f:81:2e:14:7c:91: 6e:7a:97:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lnpezv8SpBKGXtsnuGtAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYzUzNDk5ZmYyMGYwMzVjYjhiMWMwYWE5Yjc3YzNkN2Qy ODk3NmMwHhcNMjUxMjA2MTUwMTE3WhcNMjUxMjA3MTUwMTE3WjAzMTEwLwYDVQQD Eyg1MzA4ZTBmYWI1YzkyZDE0MjA3ZThhMjRlYTFjODQ5YWY2ZTQ0MTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrZyHw8s3mKjj1N1C3PNZIQIAGZQ cdRaesiU1BSC1v6yDCFeEmrLkzgiGC3kQ9K+aLDGliZBdCH9oIt15DNpk4m0vMcZ NtBAEhbT6W7WSUYDiNbfMOk2RXtXaY9hM4BFsGhRjFdIZAR8vNN2LGXEpUyuFyqy hgNeOIvUz0BXoN3sSBCQ0NJ4hYwYg5zDVYyhJ2XBlLNUoyUA/9Fj0jR2ekETpVoI iYxG17qFGCe9M9hYoM5RYVqq2UzJyrGqggwbC6VUqR3uzR8CgIps7UqKgO+3PsjB VfEPDi+TS4skL98VLQ4ATCCTKHGqWmCHGWr6NyiBx63AtzwTu3HmnoG0cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMI4Pq1yS0UIH6KJOochJr25EFDMB8GA1UdIwQY MBaAFKrFNJn/IPA1y4scCqm3fD19KJdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MThlZTAtYmNjNy00ODUxLWJjMmMt ZmFiOWJmN2EyNmQ4LzEvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82MThlZTAtYmNjNy00ODUxLWJjMmMtZmFiOWJmN2EyNmQ4 LzEvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFirOSySU i7ChSrV6PW06pxwav1rOq3UmPOIvZdU91t10grO7NNCja2FHVucfD/obDg4l7gfW TbkXWSuxJObuTG3nI160L9hY7WXv/Cp8S79axaUtyrCqc5gvQnLQHltaTIvSmzzF ohr8Yf/cnGkIbCtV0Jb4t5Zg63zpzY4tFlKNqDiCPbqfy2PEmLmziIYSf14MxCpk LMVfydKPRHQpSC9TtBx09e+XD59JsbN2/puz9q+UN9GTLHaMttiIabDVFYmYZRTw CBXkrY/odonkzYhBa+emD6cfVKOI7kbh2xCuVNR+afVV1yqPbWlGlUpBNU6aUZ2k H4EuFHyRbnqXHg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:35:59 2025 by rpki-client