This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json) Hash identifier: 71nP52ytmiAxf+BPQWKMojoqJV4tIaIgXzlPZXTpGn0= Subject key identifier: 46:DC:03:D7:EF:3C:10:44:15:1F:05:FB:5B:B9:AE:0F:99:B1:BE:53 Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7 Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7 Certificate serial: 019B3D231D7E734224B3497893EDFDED986F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 19:01:09 +0000 Manifest this update: Sat 20 Dec 2025 19:01:09 +0000 Manifest next update: Sun 21 Dec 2025 19:01:09 +0000 Files and hashes: 1: nNICaFb7G3xV0xaZvY4tLFZeqjU.roa (hash: 5uzWSjZq0ATl8Nrn/VGx6JZA+5X6g81sHleJ+o0B2vM=) 2: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: vQ3mu1vHoIxw76PZhDWX2t7Bt5Y5sHve2GsqnMjAKGI=) 3: vlECbF8HkBG6WpBhMBZnOl_AraI.roa (hash: 3UR9pQsXBE1n+38LaDwJGSYsS95ZptnvsHsDatSDo+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:1d:7e:73:42:24:b3:49:78:93:ed:fd:ed:98:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7 Validity Not Before: Dec 20 19:01:09 2025 GMT Not After : Dec 21 19:01:09 2025 GMT Subject: CN=46dc03d7ef3c1044151f05fb5bb9ae0f99b1be53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:e2:69:4c:35:c6:42:84:82:33:bb:86:83: 69:c2:0a:5f:c6:bb:30:a6:39:72:ff:2a:8d:df:4a: 04:06:8a:fb:12:f6:30:a1:db:ce:c2:b6:8d:af:68: 5b:5a:18:5e:b1:a4:6d:51:8f:7e:31:92:9b:cf:fd: 32:de:a5:31:d1:53:34:03:1e:be:f1:93:30:54:46: 5c:7b:07:b8:7a:07:16:57:45:77:ab:26:9e:8d:e0: 6f:65:9d:0f:d6:46:37:5b:99:cd:28:48:90:de:40: 36:d1:89:27:c3:21:ab:31:03:2a:2d:c1:d4:52:98: 6a:59:9f:cf:19:d7:a8:0f:52:15:2e:b6:31:f7:8f: 54:94:da:b2:ca:4d:ec:22:34:05:da:4c:87:f4:a8: 03:56:e6:e4:25:c1:a7:d7:43:b7:0f:11:cc:36:71: a4:87:f4:e6:0b:6a:6c:de:b0:6c:b8:f8:10:26:db: d4:16:30:28:28:15:7f:56:a9:39:19:df:fb:27:c4: 00:ca:b1:cd:7d:9b:f8:ae:b5:c4:be:1f:52:0d:c8: 4a:3a:2e:54:0b:4f:1a:52:4a:a6:35:53:98:67:08: 18:6a:67:9a:71:c2:09:f4:38:df:17:2e:15:22:44: 1b:a8:5b:95:a4:0f:e6:04:09:fd:97:33:95:ea:c8: ab:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DC:03:D7:EF:3C:10:44:15:1F:05:FB:5B:B9:AE:0F:99:B1:BE:53 X509v3 Authority Key Identifier: keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:71:72:51:b3:25:cc:75:e1:ff:80:7a:fa:5c:fe:41:14:e9: 06:eb:0e:08:64:f9:b9:31:47:2d:85:ab:e9:2e:06:eb:b9:da: 73:06:20:f2:1e:7d:50:8e:4b:f2:22:4c:c4:41:a6:26:82:e1: a5:08:b8:0a:d2:62:97:20:16:26:6e:11:0f:0f:a5:c5:4b:29: 38:22:92:f6:4e:37:69:5e:d3:a2:5d:fc:ad:e4:71:ce:ce:8a: 11:a0:e3:0f:05:1d:3f:30:17:f3:27:fd:c5:86:e5:c8:10:58: ff:f8:b3:53:47:21:53:a4:8c:ce:62:5d:bb:e9:b8:70:5c:b1: 00:95:0c:47:2e:70:04:f2:fd:6b:81:db:ff:6b:f2:fa:59:bf: d0:f7:39:11:3b:f0:0a:75:3e:d7:47:77:07:91:cd:9f:4a:f3: 5e:7b:03:33:9b:69:93:a1:c1:e4:e8:d5:57:3a:fb:57:63:8d: 83:6e:db:30:8a:2d:6a:f1:11:10:90:3e:b6:dc:e7:77:34:7d: 89:2e:58:d5:55:13:95:5a:a5:fe:c2:de:66:fa:3b:8e:a2:f7: e7:1a:8a:25:39:2e:5e:fc:58:8e:b6:25:af:8e:3c:85:ed:29: 21:05:01:2b:a7:60:5b:c9:fa:7d:0a:a7:7b:9b:d4:d3:8d:be: 1f:87:82:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Ix1+c0Iks0l4k+397ZhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MzRiOGRlYzEyODFiYzU0MzE3YzdmZWQwZTlhY2JjN2I5 N2NhYzcwHhcNMjUxMjIwMTkwMTA5WhcNMjUxMjIxMTkwMTA5WjAzMTEwLwYDVQQD Eyg0NmRjMDNkN2VmM2MxMDQ0MTUxZjA1ZmI1YmI5YWUwZjk5YjFiZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG7iaUw1xkKEgjO7hoNpwgpfxrsw pjly/yqN30oEBor7EvYwodvOwraNr2hbWhhesaRtUY9+MZKbz/0y3qUx0VM0Ax6+ 8ZMwVEZcewe4egcWV0V3qyaejeBvZZ0P1kY3W5nNKEiQ3kA20YknwyGrMQMqLcHU UphqWZ/PGdeoD1IVLrYx949UlNqyyk3sIjQF2kyH9KgDVubkJcGn10O3DxHMNnGk h/TmC2ps3rBsuPgQJtvUFjAoKBV/Vqk5Gd/7J8QAyrHNfZv4rrXEvh9SDchKOi5U C08aUkqmNVOYZwgYameaccIJ9DjfFy4VIkQbqFuVpA/mBAn9lzOV6sirFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbcA9fvPBBEFR8F+1u5rg+Zsb5TMB8GA1UdIwQY MBaAFKk0uN7BKBvFQxfH/tDprLx7l8rHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84N2I1NjItY2I3ZC00YTkzLWJkNDMt MjdlZTQyZDkyNWFkLzEvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC84N2I1NjItY2I3ZC00YTkzLWJkNDMtMjdlZTQyZDkyNWFk LzEvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3FyUbMl zHXh/4B6+lz+QRTpBusOCGT5uTFHLYWr6S4G67nacwYg8h59UI5L8iJMxEGmJoLh pQi4CtJilyAWJm4RDw+lxUspOCKS9k43aV7Tol38reRxzs6KEaDjDwUdPzAX8yf9 xYblyBBY//izU0chU6SMzmJdu+m4cFyxAJUMRy5wBPL9a4Hb/2vy+lm/0Pc5ETvw CnU+10d3B5HNn0rzXnsDM5tpk6HB5OjVVzr7V2ONg27bMIotavEREJA+ttzndzR9 iS5Y1VUTlVql/sLeZvo7jqL35xqKJTkuXvxYjrYlr448he0pIQUBK6dgW8n6fQqn e5vU042+H4eCyg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:41:58 2025 by rpki-client