This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json) Hash identifier: Wp0Om+Ve0d9LLHw8oSVJpb2r4HZ9V38wIsxaIAV9NIE= Subject key identifier: 0B:F0:FB:90:93:79:75:07:92:5E:DC:A8:81:9F:00:66:5B:13:C5:BE Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62 Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462 Certificate serial: 019B4C5FA858B5A2ABC81DDC5B122DE75664 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft Manifest number: 1798 Signing time: Tue 23 Dec 2025 18:01:35 +0000 Manifest this update: Tue 23 Dec 2025 18:01:35 +0000 Manifest next update: Wed 24 Dec 2025 18:01:35 +0000 Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: NiEUxjFT7FjHU/LMbebsP5fEd3DADGu3xRlNBQABVWw=) 2: mC6qnnktw8ocqw8es0LfRst29xw.roa (hash: ppmb2PFwvp6zlS01nCp0DE/SrZFmg3TuLccALf3DpFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:a8:58:b5:a2:ab:c8:1d:dc:5b:12:2d:e7:56:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462 Validity Not Before: Dec 23 18:01:35 2025 GMT Not After : Dec 24 18:01:35 2025 GMT Subject: CN=0bf0fb9093797507925edca8819f00665b13c5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5b:99:47:9a:18:2c:64:03:df:8f:a4:77:e5: 89:a7:60:a1:a4:dc:83:b2:2e:d9:27:a6:f0:6b:b8: 90:98:6c:2b:66:73:87:69:7e:eb:3c:8a:85:f2:18: 75:6e:30:46:49:a3:30:03:0f:61:ab:0e:d2:fb:df: 79:62:de:6d:51:ed:54:7c:a6:4a:01:44:a8:15:8a: 55:a1:31:c3:20:f2:f9:c7:69:6e:94:16:80:d2:84: 51:c9:b1:99:b9:d4:c8:32:94:35:cb:e4:4f:3a:de: b4:f0:12:49:3e:07:c3:3e:c7:c4:c2:a1:d3:d7:71: 12:57:e6:d4:5e:19:1b:b1:a9:5d:81:e0:e5:90:56: d0:8c:d2:9c:b7:52:5c:40:32:4b:2a:fe:b4:23:4d: ea:89:7f:5a:2e:d6:f5:2c:0d:29:3a:07:88:ba:98: 2e:59:f3:3a:f1:33:07:77:9a:96:d5:dd:1d:6a:39: c0:45:44:f7:22:6f:2c:0a:e9:c2:72:92:9a:5a:5b: 21:aa:96:93:eb:40:8f:65:0d:94:0d:b5:81:fa:11: 6a:a6:5a:c7:d3:bd:61:ea:13:0d:6a:05:72:d5:12: ac:9a:d4:3b:1e:85:a1:9a:88:07:fc:84:9e:9f:ed: 1f:81:48:ff:53:a5:b2:c4:6d:b4:aa:b3:a6:83:bb: 34:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F0:FB:90:93:79:75:07:92:5E:DC:A8:81:9F:00:66:5B:13:C5:BE X509v3 Authority Key Identifier: keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:07:41:ed:d0:41:99:e9:8b:c9:2f:41:48:c1:ec:f4:54:a6: b4:53:2d:1d:a6:83:f5:93:d6:d9:8a:e3:72:f7:e8:90:51:34: 0b:cb:bb:55:92:73:e5:36:02:e2:c0:ba:2a:15:c8:cb:63:e8: 55:c0:22:ee:d0:72:6f:38:42:38:57:86:1e:81:4f:89:e2:46: e7:4d:10:9b:6a:7f:9a:3c:ba:1f:59:c8:db:cd:b9:c6:f9:5c: 2b:28:af:7c:6a:71:11:46:01:aa:84:d9:6a:3e:e8:d6:ae:34: bd:c6:dc:c7:a9:65:f4:2b:4e:19:52:f5:91:73:30:89:1c:48: c7:cd:c9:ed:0a:52:c2:ee:0f:1f:e3:6b:e7:30:f7:87:9f:e5: 90:52:3c:be:02:43:68:90:06:3f:12:87:6a:46:22:8b:5b:c9: aa:38:db:42:d5:1c:f8:48:1a:ec:ba:47:16:69:91:f6:60:e1: 58:2b:32:9c:f0:2b:27:99:9c:22:83:84:da:d6:0f:ba:bf:6c: 78:3b:fb:bb:0f:b4:5e:47:87:33:95:18:fa:06:ed:ef:7a:1f: d1:85:b6:92:04:04:1b:b6:ad:33:62:e1:53:f2:1c:3a:20:e5: 0b:b1:4f:91:42:40:98:e9:b6:72:2f:18:98:98:7d:a9:1f:49: 89:b7:a4:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX6hYtaKryB3cWxIt51ZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2RlMzY1ZDdkMmI1ODUwNmU0ZDRhYmYwYzJlZjdjZDVl M2I0NjIwHhcNMjUxMjIzMTgwMTM1WhcNMjUxMjI0MTgwMTM1WjAzMTEwLwYDVQQD EygwYmYwZmI5MDkzNzk3NTA3OTI1ZWRjYTg4MTlmMDA2NjViMTNjNWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVuZR5oYLGQD34+kd+WJp2ChpNyD si7ZJ6bwa7iQmGwrZnOHaX7rPIqF8hh1bjBGSaMwAw9hqw7S+995Yt5tUe1UfKZK AUSoFYpVoTHDIPL5x2lulBaA0oRRybGZudTIMpQ1y+RPOt608BJJPgfDPsfEwqHT 13ESV+bUXhkbsaldgeDlkFbQjNKct1JcQDJLKv60I03qiX9aLtb1LA0pOgeIupgu WfM68TMHd5qW1d0dajnARUT3Im8sCunCcpKaWlshqpaT60CPZQ2UDbWB+hFqplrH 071h6hMNagVy1RKsmtQ7HoWhmogH/ISen+0fgUj/U6WyxG20qrOmg7s0JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvw+5CTeXUHkl7cqIGfAGZbE8W+MB8GA1UdIwQY MBaAFELN42XX0rWFBuTUq/DC73zV47RiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEt MDJlMWJkNjA1MGU1LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEtMDJlMWJkNjA1MGU1 LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgdB7dBB memLyS9BSMHs9FSmtFMtHaaD9ZPW2YrjcvfokFE0C8u7VZJz5TYC4sC6KhXIy2Po VcAi7tBybzhCOFeGHoFPieJG500Qm2p/mjy6H1nI2825xvlcKyivfGpxEUYBqoTZ aj7o1q40vcbcx6ll9CtOGVL1kXMwiRxIx83J7QpSwu4PH+Nr5zD3h5/lkFI8vgJD aJAGPxKHakYii1vJqjjbQtUc+Ega7LpHFmmR9mDhWCsynPArJ5mcIoOE2tYPur9s eDv7uw+0XkeHM5UY+gbt73of0YW2kgQEG7atM2LhU/IcOiDlC7FPkUJAmOm2ci8Y mJh9qR9Jibek3w== -----END CERTIFICATE-----Generated at Wed Dec 24 00:28:20 2025 by rpki-client