This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json) Hash identifier: XihdjqmU/ImWGVeibXdWBFGemofpeqmy9sIGyNvIFTY= Subject key identifier: F6:97:61:8C:77:1B:29:B8:68:B4:A2:C8:39:37:DB:67:EF:89:B5:6D Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d Certificate serial: 019B53ABBE659C058B7BB7C678AF89F91134 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft Manifest number: 1798 Signing time: Thu 25 Dec 2025 04:02:02 +0000 Manifest this update: Thu 25 Dec 2025 04:02:02 +0000 Manifest next update: Fri 26 Dec 2025 04:02:02 +0000 Files and hashes: 1: 6fJ4zkF0Wp752Gh82PiGV0cycFs.roa (hash: zmN/ZdPf9fmMKW0I3LZoD4w3jrap740/mP6rHx2Dkzc=) 2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: urwYp+KQECNyVrGNHZOdccFdikDyNNG4zA94noNDNL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:be:65:9c:05:8b:7b:b7:c6:78:af:89:f9:11:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d Validity Not Before: Dec 25 04:02:02 2025 GMT Not After : Dec 26 04:02:02 2025 GMT Subject: CN=f697618c771b29b868b4a2c83937db67ef89b56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:9c:80:66:13:af:72:e3:18:fc:14:98:75: 4d:7c:34:39:ad:19:b2:d8:f0:a5:0f:05:66:3f:c9: 2d:a7:77:63:55:76:45:16:83:ea:f6:ce:48:92:53: b6:e6:ba:a8:73:7b:cc:61:42:26:30:8f:10:7d:fe: cd:e9:67:da:81:05:7a:99:14:f7:fc:17:00:86:f3: e8:d4:bb:5a:ab:20:ba:df:5f:a4:0d:87:33:89:95: 38:85:9f:4d:1c:ac:4b:0d:fd:49:b3:ad:96:10:85: 82:f1:71:da:74:17:b7:0e:49:65:e1:1f:06:d1:bf: c4:9d:9b:56:18:01:fa:3d:77:7d:99:4a:29:0f:a4: d2:89:73:a6:7f:d6:21:ee:e8:3b:4b:7e:8f:07:24: c7:9a:9c:55:29:ee:56:37:16:b2:74:c5:c4:3d:06: 81:f0:8c:4b:80:48:49:4a:be:af:ce:fe:fa:37:03: 3e:d7:a4:9b:18:c3:92:8a:d6:ff:8e:f2:4e:61:17: 45:3b:35:61:0b:2d:30:ef:32:ae:29:6f:c4:3d:01: 17:c4:74:8d:a6:a1:7f:46:16:fd:ef:82:8f:97:f4: 68:36:ba:ab:8e:41:10:1b:fe:fa:62:4b:3d:45:05: 68:78:ed:65:1d:59:99:67:f6:40:5d:d4:12:b2:a7: 1d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:97:61:8C:77:1B:29:B8:68:B4:A2:C8:39:37:DB:67:EF:89:B5:6D X509v3 Authority Key Identifier: keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b0:e4:00:7a:28:b6:46:eb:7e:28:42:3d:96:68:1c:8b:db: 94:b9:07:11:54:0c:84:c1:7a:22:cb:31:0f:83:58:f5:b6:c0: a9:db:2b:ed:00:b6:63:a2:41:42:a8:a2:ce:25:42:ec:4f:ad: b4:88:92:00:ef:39:47:df:6d:2c:9d:77:2a:44:97:e3:fa:5f: 01:b0:1e:3c:c5:54:53:20:c9:5d:97:09:b6:89:71:04:28:b7: b7:f8:cb:c9:32:06:8a:6b:dc:04:b4:cf:80:ca:ef:91:a6:e7: 1b:d7:05:6d:ca:a8:ed:73:4e:74:7a:34:f8:38:fa:a1:e1:d5: cf:c7:9d:cc:63:c0:28:59:10:8c:fd:83:35:0c:e7:20:dc:41: cf:e8:4a:5c:d9:1a:9f:0c:b1:0f:e7:93:cf:b1:af:04:21:da: 3d:cb:9e:87:e5:79:4c:76:f8:10:60:68:01:96:b8:be:43:6e: d7:66:8c:39:30:08:42:77:35:c4:3d:65:3c:f4:89:e4:49:e3: b5:0c:18:b5:2b:cb:a9:0b:23:1a:46:6b:fc:2e:85:86:fe:c7: 92:ed:41:1d:a3:9f:6a:c5:6b:4f:de:f4:ee:ed:97:57:2c:58: e1:79:ed:87:f0:07:e5:5e:09:91:7f:3d:e4:d3:5d:9d:3d:cc: 0e:f7:54:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq75lnAWLe7fGeK+J+RE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYzZhZjBjMjliZWJjN2M0ODVjZjgwMDFkYTlmMTk5MzBh Y2U0NWQwHhcNMjUxMjI1MDQwMjAyWhcNMjUxMjI2MDQwMjAyWjAzMTEwLwYDVQQD EyhmNjk3NjE4Yzc3MWIyOWI4NjhiNGEyYzgzOTM3ZGI2N2VmODliNTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY2cgGYTr3LjGPwUmHVNfDQ5rRmy 2PClDwVmP8ktp3djVXZFFoPq9s5IklO25rqoc3vMYUImMI8Qff7N6WfagQV6mRT3 /BcAhvPo1LtaqyC631+kDYcziZU4hZ9NHKxLDf1Js62WEIWC8XHadBe3Dkll4R8G 0b/EnZtWGAH6PXd9mUopD6TSiXOmf9Yh7ug7S36PByTHmpxVKe5WNxaydMXEPQaB 8IxLgEhJSr6vzv76NwM+16SbGMOSitb/jvJOYRdFOzVhCy0w7zKuKW/EPQEXxHSN pqF/Rhb974KPl/RoNrqrjkEQG/76Yks9RQVoeO1lHVmZZ/ZAXdQSsqcdAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaXYYx3Gym4aLSiyDk322fvibVtMB8GA1UdIwQY MBaAFKrGrwwpvrx8SFz4AB2p8ZkwrORdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mOGM0NDUtMGFhYi00MDg3LWEwZDMt OTM0NzU5MTkxMGE4LzEvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9mOGM0NDUtMGFhYi00MDg3LWEwZDMtOTM0NzU5MTkxMGE4 LzEvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7DkAHoo tkbrfihCPZZoHIvblLkHEVQMhMF6IssxD4NY9bbAqdsr7QC2Y6JBQqiiziVC7E+t tIiSAO85R99tLJ13KkSX4/pfAbAePMVUUyDJXZcJtolxBCi3t/jLyTIGimvcBLTP gMrvkabnG9cFbcqo7XNOdHo0+Dj6oeHVz8edzGPAKFkQjP2DNQznINxBz+hKXNka nwyxD+eTz7GvBCHaPcueh+V5THb4EGBoAZa4vkNu12aMOTAIQnc1xD1lPPSJ5Enj tQwYtSvLqQsjGkZr/C6Fhv7Hku1BHaOfasVrT9707u2XVyxY4Xnth/AH5V4JkX89 5NNdnT3MDvdU0A== -----END CERTIFICATE-----Generated at Thu Dec 25 07:07:58 2025 by rpki-client