This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: lVsQE/fH+oro2hL7TyuOnTMVIiNn26wS6u5zxhIYEgI= Subject key identifier: 30:D1:96:FD:9A:0F:F2:8F:3D:6A:7F:D7:89:26:0C:F5:CF:A7:47:BE Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019B6D3325371E0FA216B2D795197E57E4E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 17AD Signing time: Tue 30 Dec 2025 03:00:26 +0000 Manifest this update: Tue 30 Dec 2025 03:00:26 +0000 Manifest next update: Wed 31 Dec 2025 03:00:26 +0000 Files and hashes: 1: 1-j_NENm5-sNQNRhoG12DGhts2RA.roa (hash: rxMl58Hpd8I9+Opcjq2WXGHyT2V7qNJ/2GgS8YODf/c=) 2: 4AzaQ00Qbm11xuSZKiEAVdKCvuo.roa (hash: S2of1YjCL3/XCtKNbSiofOIataHuKf+CE34W0v3KCW4=) 3: 8ICMXIH8G4STVhG9LTK8XF1huYU.roa (hash: sFIpNhCbdCmlf97RdiMILKWsK0y4eXG6qnrYkuB08Vw=) 4: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (hash: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=) 5: OCLegx7AAJrXlZwafZY4saWNhbA.roa (hash: e9VTWsNvHN7d5ckNNnCA+CRusyYItjY5AHniHQNomyw=) 6: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (hash: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=) 7: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: OSKrhyaAAE+IJ1SKBO+0MzYePloGs//s7hl00jb2ONw=) 8: RV95HMnGrJSH6R13BYTApcw5VQE.roa (hash: OCGu39xDZSl3EactuFgzu+oeqkGxYuePRbccAhiaclk=) 9: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (hash: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=) 10: iIDxyZI7f69mJkZ2Wv7XkahzbJk.roa (hash: +LiZiCI3CHohIXxSoLr49Tx7ntAiVnERXS5bwyYZ1ps=) 11: j8Z9luk9TH9XzdeKRdbx_0lXU_Q.roa (hash: SQ7pmoz5e7GX+kpjw+HCwdCwB08Ca3taMT0X/4L2FsQ=) 12: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (hash: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=) 13: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (hash: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:25:37:1e:0f:a2:16:b2:d7:95:19:7e:57:e4:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Dec 30 03:00:26 2025 GMT Not After : Dec 31 03:00:26 2025 GMT Subject: CN=30d196fd9a0ff28f3d6a7fd789260cf5cfa747be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ee:77:d6:28:08:a9:8f:68:0b:f7:6d:20:b3: b7:de:71:2a:9e:ae:58:5c:e4:60:76:f4:9c:c3:b0: b6:e0:08:c6:b1:f1:0e:c6:0d:b2:b7:4b:ea:98:52: d2:cd:21:53:99:d9:4a:de:06:fb:f6:6e:57:03:2a: 29:1f:f3:47:65:88:2b:5b:6e:a4:b2:a6:25:6f:e8: 67:75:66:e2:ae:12:de:ad:13:49:98:cd:b8:55:13: 9c:d8:af:03:fc:8e:d5:b3:84:22:72:d1:c4:2e:10: 3c:d7:3d:9e:32:08:f7:7d:70:15:85:1c:a0:49:1b: 7f:20:c0:ba:9e:ad:8c:51:b3:2d:98:bf:69:3f:05: 51:76:0a:d9:a5:cc:5c:7c:49:aa:6e:ca:e1:2a:42: 05:d1:dd:28:a1:6f:63:08:38:6d:95:ab:7f:02:56: 5b:01:68:aa:69:74:77:c1:7f:a4:36:43:a0:9c:0d: bf:ca:ab:51:37:e1:5a:48:a9:b3:9c:db:95:89:29: 31:f7:3f:cc:40:90:3a:f6:10:c2:9d:92:4d:25:34: 9e:ae:b8:b2:f0:c2:92:66:cf:db:3b:37:b0:15:d7: 53:4e:0c:f5:f5:2f:da:ad:57:c4:0b:28:74:a2:6e: e6:a8:5b:6a:53:dd:da:34:c5:8c:68:94:07:19:82: 4c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D1:96:FD:9A:0F:F2:8F:3D:6A:7F:D7:89:26:0C:F5:CF:A7:47:BE X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ba:0e:e3:4c:2d:e6:ba:9b:2e:37:a0:1f:cf:57:03:d2:52: f7:90:63:bf:c4:12:87:41:54:4b:5e:89:9f:6d:bb:32:b7:ec: fd:cf:df:6f:be:77:f1:17:74:73:62:67:8c:6e:a2:b1:e0:48: 36:bc:43:92:04:59:36:d5:01:6f:21:74:be:85:9d:c1:de:76: ca:32:1b:98:53:f1:5a:bd:ae:63:31:a3:a8:12:64:dd:08:72: d0:59:2b:6d:7e:21:34:d8:6f:53:ba:4f:7c:3c:f6:cb:98:28: 5f:67:7b:78:c8:75:56:8b:6e:09:d4:4c:0a:b3:42:df:30:f2: ee:13:c5:65:77:91:1f:dc:e4:76:c8:8e:4b:57:ca:ef:86:47: a8:61:1a:e0:c4:16:05:ff:de:98:b6:04:8a:a4:df:89:b0:78: 88:36:0d:dc:3d:09:ad:d8:8a:58:c3:95:f9:33:1c:d2:51:e3: 0d:b3:d6:43:a4:30:33:1d:41:b5:a0:38:e6:a6:54:c0:57:45: da:7f:4f:83:1d:0d:6e:e0:83:7a:45:47:b3:5a:e4:f3:fb:b6: 60:4f:92:99:15:a2:23:c0:ce:98:f6:f1:8e:47:93:b5:43:15: 9a:89:a4:1b:d7:b6:b7:2b:26:28:d4:1d:bf:b2:71:c2:61:34: a8:aa:17:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttMyU3Hg+iFrLXlRl+V+TpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjUxMjMwMDMwMDI2WhcNMjUxMjMxMDMwMDI2WjAzMTEwLwYDVQQD EygzMGQxOTZmZDlhMGZmMjhmM2Q2YTdmZDc4OTI2MGNmNWNmYTc0N2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO531igIqY9oC/dtILO33nEqnq5Y XORgdvScw7C24AjGsfEOxg2yt0vqmFLSzSFTmdlK3gb79m5XAyopH/NHZYgrW26k sqYlb+hndWbirhLerRNJmM24VROc2K8D/I7Vs4QictHELhA81z2eMgj3fXAVhRyg SRt/IMC6nq2MUbMtmL9pPwVRdgrZpcxcfEmqbsrhKkIF0d0ooW9jCDhtlat/AlZb AWiqaXR3wX+kNkOgnA2/yqtRN+FaSKmznNuViSkx9z/MQJA69hDCnZJNJTSerriy 8MKSZs/bOzewFddTTgz19S/arVfECyh0om7mqFtqU93aNMWMaJQHGYJMxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDRlv2aD/KPPWp/14kmDPXPp0e+MB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlroO40wt 5rqbLjegH89XA9JS95Bjv8QSh0FUS16Jn227Mrfs/c/fb7538Rd0c2JnjG6iseBI NrxDkgRZNtUBbyF0voWdwd52yjIbmFPxWr2uYzGjqBJk3Qhy0FkrbX4hNNhvU7pP fDz2y5goX2d7eMh1VotuCdRMCrNC3zDy7hPFZXeRH9zkdsiOS1fK74ZHqGEa4MQW Bf/emLYEiqTfibB4iDYN3D0JrdiKWMOV+TMc0lHjDbPWQ6QwMx1BtaA45qZUwFdF 2n9Pgx0NbuCDekVHs1rk8/u2YE+SmRWiI8DOmPbxjkeTtUMVmomkG9e2tysmKNQd v7JxwmE0qKoXOw== -----END CERTIFICATE-----Generated at Tue Dec 30 09:07:33 2025 by rpki-client