This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: oPoucILzxqbeL2WsPPdRUJnN+MYITuLl+9/ptLD3ZF0= Subject key identifier: 3F:6D:AA:C6:0B:74:FD:29:2E:42:5C:AC:42:82:64:01:1B:C7:6E:83 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019B3CEC078026B07B0E979399E1CBF5CFF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1794 Signing time: Sat 20 Dec 2025 18:00:59 +0000 Manifest this update: Sat 20 Dec 2025 18:00:59 +0000 Manifest next update: Sun 21 Dec 2025 18:00:59 +0000 Files and hashes: 1: 1-j_NENm5-sNQNRhoG12DGhts2RA.roa (hash: rxMl58Hpd8I9+Opcjq2WXGHyT2V7qNJ/2GgS8YODf/c=) 2: 4AzaQ00Qbm11xuSZKiEAVdKCvuo.roa (hash: S2of1YjCL3/XCtKNbSiofOIataHuKf+CE34W0v3KCW4=) 3: 8ICMXIH8G4STVhG9LTK8XF1huYU.roa (hash: sFIpNhCbdCmlf97RdiMILKWsK0y4eXG6qnrYkuB08Vw=) 4: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (hash: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=) 5: OCLegx7AAJrXlZwafZY4saWNhbA.roa (hash: e9VTWsNvHN7d5ckNNnCA+CRusyYItjY5AHniHQNomyw=) 6: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (hash: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=) 7: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: NhPsqq1TYDnrcpZTrxVd5SvfrivDFMaNvGzUIZmLs8s=) 8: RV95HMnGrJSH6R13BYTApcw5VQE.roa (hash: OCGu39xDZSl3EactuFgzu+oeqkGxYuePRbccAhiaclk=) 9: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (hash: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=) 10: iIDxyZI7f69mJkZ2Wv7XkahzbJk.roa (hash: +LiZiCI3CHohIXxSoLr49Tx7ntAiVnERXS5bwyYZ1ps=) 11: j8Z9luk9TH9XzdeKRdbx_0lXU_Q.roa (hash: SQ7pmoz5e7GX+kpjw+HCwdCwB08Ca3taMT0X/4L2FsQ=) 12: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (hash: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=) 13: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (hash: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:07:80:26:b0:7b:0e:97:93:99:e1:cb:f5:cf:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Dec 20 18:00:59 2025 GMT Not After : Dec 21 18:00:59 2025 GMT Subject: CN=3f6daac60b74fd292e425cac428264011bc76e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:56:7c:fd:19:79:3b:a7:67:db:65:f5:d0: c2:f3:4c:bc:4e:fb:d2:9c:3a:b7:a0:4a:1c:95:8b: e2:98:3e:a2:25:08:06:22:93:2e:8f:a7:82:3a:48: c1:fa:48:87:f1:71:85:f6:3e:fa:10:e2:61:53:6c: f0:7d:b0:82:90:32:78:ef:9b:d5:b7:3e:37:fe:4c: 37:d6:56:90:27:31:77:1d:c3:8f:14:13:74:d2:bf: c7:33:fe:46:19:61:08:c8:08:96:4e:25:84:e8:51: de:76:23:b1:e1:93:80:77:86:49:0c:0e:cc:f1:9c: 40:74:ea:23:35:11:59:9d:d0:81:53:79:04:b0:e8: 55:25:70:ef:27:d2:ea:c3:a4:a7:45:a9:f6:6a:85: b2:4e:04:72:0c:55:50:be:3c:6a:14:ef:f1:96:30: 9a:9c:18:00:32:5a:14:48:79:05:fc:5e:c1:17:5f: 44:cf:cf:db:73:c2:76:f4:76:bf:28:0d:ba:21:e5: 38:63:a9:92:ad:4e:5a:58:06:eb:f6:4f:fa:87:42: 5a:b1:bb:92:7b:6a:ca:68:4d:28:75:3c:d6:eb:c1: 6d:59:31:77:cc:6d:aa:17:ff:33:ec:48:40:4a:ef: 8c:d8:4d:d6:94:3c:86:96:67:34:ed:9b:64:c0:00: b9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6D:AA:C6:0B:74:FD:29:2E:42:5C:AC:42:82:64:01:1B:C7:6E:83 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a8:c3:07:d8:90:ce:05:b8:a3:ee:5c:95:1c:ec:1b:f3:69: dc:61:c2:f1:dd:63:50:75:5d:01:0d:b7:0b:81:88:56:ed:53: 9e:0c:f0:77:7d:41:06:bb:6f:d1:c1:ea:4f:9d:ef:04:bf:d4: 13:60:ed:ae:f6:8e:e3:31:50:28:51:20:34:63:88:bf:7b:50: ed:87:68:c3:ac:69:bf:65:1e:84:c3:24:3d:1b:c9:2c:38:dd: 36:2a:76:b6:f6:16:64:3e:5b:73:32:47:e5:ed:55:20:b2:3a: 04:bc:da:da:1f:90:82:b9:3e:32:67:64:5b:2d:33:0a:d4:56: 57:a8:cf:4a:25:90:b7:ac:cb:f0:64:8e:02:1c:44:79:39:0e: 2e:26:b3:f8:f2:28:53:c9:2e:a6:00:ce:86:a1:23:51:d3:af: 8a:7f:86:4a:47:cb:3b:8b:8c:c9:3a:24:0e:a1:f3:24:ba:83: 5f:e5:50:5a:5f:ee:95:34:80:20:68:e5:11:29:7f:b3:2a:d7: c0:c5:cb:b8:76:bc:29:7f:db:f8:78:54:56:99:5d:26:23:8d: 86:b9:c9:28:da:9d:21:5b:17:3b:c7:ee:ed:fa:1e:33:2c:ac: 99:79:5f:f0:7c:a2:36:7d:ea:2b:75:c8:bb:a8:d3:7b:3e:38: fe:c8:0d:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87AeAJrB7DpeTmeHL9c/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjUxMjIwMTgwMDU5WhcNMjUxMjIxMTgwMDU5WjAzMTEwLwYDVQQD EygzZjZkYWFjNjBiNzRmZDI5MmU0MjVjYWM0MjgyNjQwMTFiYzc2ZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyflWfP0ZeTunZ9tl9dDC80y8TvvS nDq3oEoclYvimD6iJQgGIpMuj6eCOkjB+kiH8XGF9j76EOJhU2zwfbCCkDJ475vV tz43/kw31laQJzF3HcOPFBN00r/HM/5GGWEIyAiWTiWE6FHediOx4ZOAd4ZJDA7M 8ZxAdOojNRFZndCBU3kEsOhVJXDvJ9Lqw6SnRan2aoWyTgRyDFVQvjxqFO/xljCa nBgAMloUSHkF/F7BF19Ez8/bc8J29Ha/KA26IeU4Y6mSrU5aWAbr9k/6h0JasbuS e2rKaE0odTzW68FtWTF3zG2qF/8z7EhASu+M2E3WlDyGlmc07ZtkwAC51wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9tqsYLdP0pLkJcrEKCZAEbx26DMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqjDB9iQ zgW4o+5clRzsG/Np3GHC8d1jUHVdAQ23C4GIVu1Tngzwd31BBrtv0cHqT53vBL/U E2DtrvaO4zFQKFEgNGOIv3tQ7Ydow6xpv2UehMMkPRvJLDjdNip2tvYWZD5bczJH 5e1VILI6BLza2h+Qgrk+MmdkWy0zCtRWV6jPSiWQt6zL8GSOAhxEeTkOLiaz+PIo U8kupgDOhqEjUdOvin+GSkfLO4uMyTokDqHzJLqDX+VQWl/ulTSAIGjlESl/syrX wMXLuHa8KX/b+HhUVpldJiONhrnJKNqdIVsXO8fu7foeMyysmXlf8HyiNn3qK3XI u6jTez44/sgNWw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:40:07 2025 by rpki-client