This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft File: qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json) Hash identifier: i8GPE0o7Uv57vuWH1IRmtJXBbnQHOTV2/W53+pWOLbA= Subject key identifier: F7:36:E4:3C:6B:61:1D:0F:9C:86:2D:7D:A5:F7:40:F0:95:D8:2A:AE Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80 Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80 Certificate serial: 019B4B82F2827BD8E148DBCAE34C75D04A7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft Manifest number: 0D6C Signing time: Tue 23 Dec 2025 14:00:31 +0000 Manifest this update: Tue 23 Dec 2025 14:00:31 +0000 Manifest next update: Wed 24 Dec 2025 14:00:31 +0000 Files and hashes: 1: ZZqXGnxEBhLfDD9lB7yOqiX8_H0.roa (hash: AmgNgGv8HaEfNgQu4ILsUPklwcafU90+t65Aj2bSX9Y=) 2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: 7+HdxoQ8v+rEZbVgGmH6H2NvNfSua/L/BR51SNy0R+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:82:f2:82:7b:d8:e1:48:db:ca:e3:4c:75:d0:4a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80 Validity Not Before: Dec 23 14:00:31 2025 GMT Not After : Dec 24 14:00:31 2025 GMT Subject: CN=f736e43c6b611d0f9c862d7da5f740f095d82aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c1:86:4c:e0:86:7b:c1:d5:14:58:49:4c:1d: 2a:58:a0:7c:d3:29:22:ed:86:fe:d7:dd:6b:58:b2: f6:61:39:06:fa:b5:c6:28:63:9e:b6:e3:cb:3f:83: 44:67:f6:c1:45:77:62:9b:56:3a:db:e0:28:83:7a: ff:fd:ff:67:0a:5f:13:de:18:1d:d4:9d:40:0f:17: fa:6b:44:7e:39:41:59:a5:c4:ac:1c:bc:c0:7c:ee: 31:b7:f5:02:bf:95:cc:39:54:f1:52:a3:2d:c7:b2: 08:74:64:89:3a:1b:69:41:77:b4:c5:90:27:a0:88: 2a:29:cc:f2:f4:4e:b9:cf:e1:ec:b2:93:ef:b5:f9: 25:7b:74:77:9f:99:96:83:87:2b:bf:18:63:8b:c9: 3f:e4:87:83:f6:48:db:50:7c:11:20:73:6a:b7:b5: 0a:1c:6d:53:dd:ea:6d:63:4a:24:a9:b2:8c:9a:e7: 2f:2c:98:55:e8:a4:44:83:89:f7:b0:37:38:e1:ad: 70:05:e7:e8:cc:b6:58:d1:07:8f:f0:dd:c6:0b:d3: ba:89:87:4b:ce:65:3d:2b:88:38:d1:ec:d6:6f:0e: c7:cc:af:75:58:72:48:78:4c:18:75:b0:27:b4:fd: 3d:6f:38:48:cd:50:38:e7:bc:4f:31:84:7c:11:ab: a1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:36:E4:3C:6B:61:1D:0F:9C:86:2D:7D:A5:F7:40:F0:95:D8:2A:AE X509v3 Authority Key Identifier: keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:bb:65:24:3a:ea:d5:2b:5b:b7:4c:e3:38:72:50:75:a6:52: bc:99:e7:ce:3e:9c:5d:f6:68:2a:70:d0:84:5b:1a:f5:3e:a3: 00:31:25:20:b1:01:31:06:cf:ef:33:f5:de:a6:11:c0:79:9c: cc:fd:07:77:2b:b9:7c:ba:40:2e:a3:24:cc:27:2f:ca:ae:b2: 35:c7:8a:ab:ff:6e:75:55:1f:d2:be:80:be:04:29:ea:de:23: e8:34:52:0c:3f:4e:5c:96:2e:f3:dc:92:cb:1b:8d:e7:f1:90: fb:86:43:91:e5:10:81:2d:c3:ff:5c:e3:b9:52:6b:60:7f:f5: 99:25:47:68:7b:b7:02:08:d5:74:7b:3f:cb:56:77:2d:88:0c: ef:a2:c8:2c:81:23:21:2f:c6:8f:95:0a:3b:d1:ba:e6:9b:f0: c3:13:89:98:63:be:3e:a0:b4:17:62:9e:52:f4:04:1f:ec:e7: 17:f9:e8:52:69:a6:da:3b:ad:7f:a7:b6:e1:d5:dc:6d:14:bd: c2:70:09:d1:65:c7:9c:2f:08:ab:4f:79:eb:bb:10:fa:40:f7: 3a:b9:6f:5f:72:d3:ca:c4:de:1d:47:0f:a4:2c:2f:b0:61:34: f6:15:c4:ac:d3:d2:7f:b7:d3:68:d3:e7:a7:60:7f:f7:26:15: bd:f2:08:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLgvKCe9jhSNvK40x10Ep8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZjQ5MWYyMTBjNTdiZjQ2ZmI1MmQ0YWYyMmU3ZWNmNmY0 Y2RhODAwHhcNMjUxMjIzMTQwMDMxWhcNMjUxMjI0MTQwMDMxWjAzMTEwLwYDVQQD EyhmNzM2ZTQzYzZiNjExZDBmOWM4NjJkN2RhNWY3NDBmMDk1ZDgyYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncGGTOCGe8HVFFhJTB0qWKB80yki 7Yb+191rWLL2YTkG+rXGKGOetuPLP4NEZ/bBRXdim1Y62+Aog3r//f9nCl8T3hgd 1J1ADxf6a0R+OUFZpcSsHLzAfO4xt/UCv5XMOVTxUqMtx7IIdGSJOhtpQXe0xZAn oIgqKczy9E65z+HsspPvtfkle3R3n5mWg4crvxhji8k/5IeD9kjbUHwRIHNqt7UK HG1T3eptY0okqbKMmucvLJhV6KREg4n3sDc44a1wBefozLZY0QeP8N3GC9O6iYdL zmU9K4g40ezWbw7HzK91WHJIeEwYdbAntP09bzhIzVA457xPMYR8EauhrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPc25DxrYR0PnIYtfaX3QPCV2CquMB8GA1UdIwQY MBaAFKj0kfIQxXv0b7UtSvIufs9vTNqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2Et MzMwYjhhZDQyNGJkLzEvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2EtMzMwYjhhZDQyNGJk LzEvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrtlJDrq 1Stbt0zjOHJQdaZSvJnnzj6cXfZoKnDQhFsa9T6jADElILEBMQbP7zP13qYRwHmc zP0Hdyu5fLpALqMkzCcvyq6yNceKq/9udVUf0r6AvgQp6t4j6DRSDD9OXJYu89yS yxuN5/GQ+4ZDkeUQgS3D/1zjuVJrYH/1mSVHaHu3AgjVdHs/y1Z3LYgM76LILIEj IS/Gj5UKO9G65pvwwxOJmGO+PqC0F2KeUvQEH+znF/noUmmm2jutf6e24dXcbRS9 wnAJ0WXHnC8Iq09567sQ+kD3OrlvX3LTysTeHUcPpCwvsGE09hXErNPSf7fTaNPn p2B/9yYVvfII9A== -----END CERTIFICATE-----Generated at Tue Dec 23 20:34:48 2025 by rpki-client