This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft File: qzCSHSjHjt6BhC9xLmz3K95aYIA.mft (raw, json) Hash identifier: zq88ShSpgt/lVfxGy3FblwVbkFpP9rnuyvDCgDly1Ss= Subject key identifier: F7:EE:E7:F3:AC:FE:18:B2:99:03:AC:93:DE:5B:6E:EF:73:28:18:F8 Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80 Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080 Certificate serial: 019B47DD3E18B5FAD976F9DBEAAFA01C9BEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft Manifest number: 1254 Signing time: Mon 22 Dec 2025 21:00:40 +0000 Manifest this update: Mon 22 Dec 2025 21:00:40 +0000 Manifest next update: Tue 23 Dec 2025 21:00:40 +0000 Files and hashes: 1: 0YC7qm9CG4pOwh0oTWm4ITQDSnY.roa (hash: EWDr7Bs0H7fnIeWZl0W4PNh2O69SVcVeiWaRqk/8B3k=) 2: WRJMUYeRixw27CAPxZImqPYkDlU.roa (hash: i28cVSRe5f6zxa7/1YaErFOEzE3A0YFcGcdJGku5uCs=) 3: qzCSHSjHjt6BhC9xLmz3K95aYIA.crl (hash: DA5VA8yZIWOB6xBrFS5++9WnB0E9b317e2s5GuxsemY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:dd:3e:18:b5:fa:d9:76:f9:db:ea:af:a0:1c:9b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080 Validity Not Before: Dec 22 21:00:40 2025 GMT Not After : Dec 23 21:00:40 2025 GMT Subject: CN=f7eee7f3acfe18b29903ac93de5b6eef732818f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:8b:7c:52:fe:77:db:e7:e6:2b:7c:c8:25: 7e:49:69:f9:9e:74:6c:a5:fc:e8:20:36:24:0b:90: 0b:c5:93:4b:d1:f9:0c:17:3a:4c:39:6b:b8:06:da: db:eb:51:4c:30:9c:1b:25:5d:47:0c:95:d3:4a:a1: 61:88:1b:61:0c:a1:6b:7b:fe:a0:ee:59:9f:e4:69: 1d:77:5e:17:74:0d:c4:d6:a0:45:cf:a7:b9:8f:c2: d8:4a:8a:30:59:6a:a3:bc:98:1b:26:f7:71:cc:9b: 4e:21:43:27:98:a8:0f:c4:01:f3:f3:f3:d1:03:d1: 17:e9:2d:cd:0a:a3:c5:b6:96:90:9b:29:12:bf:34: 89:a4:5c:58:44:8c:6d:79:b5:f4:b5:40:84:d4:ef: 71:03:24:33:4d:19:d8:72:46:c6:7d:48:be:79:4a: dc:fd:f4:f2:7f:3b:de:71:dc:0e:9b:d7:ae:78:5f: 91:9b:67:24:25:40:c9:a2:6d:6f:a6:72:a8:41:21: 92:d1:7a:f7:30:cb:2b:4a:4b:61:ec:da:a5:00:cb: d7:e3:e4:78:1b:fe:06:55:81:27:88:05:ea:bc:db: 5f:bc:51:17:5f:90:e2:a2:b0:c6:ad:1b:45:d5:ec: 3d:f1:2d:55:fa:59:ae:70:65:07:78:94:5f:4a:57: f4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EE:E7:F3:AC:FE:18:B2:99:03:AC:93:DE:5B:6E:EF:73:28:18:F8 X509v3 Authority Key Identifier: keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:60:af:01:96:dc:59:a0:df:83:bd:9e:89:33:8d:32:9f:3c: cb:ab:53:95:fe:bd:dd:81:22:9f:56:69:75:6c:1a:70:df:5b: a1:a8:90:71:e3:4e:2a:67:6d:01:41:7f:8d:18:e8:8f:cd:1b: bb:87:d3:1b:13:c4:21:e0:00:53:a2:01:c4:ef:3f:f3:46:ad: 6a:25:33:c1:f1:77:97:35:d0:be:91:3e:f8:33:b7:be:f9:20: f0:c7:55:8d:bd:e3:cf:56:bd:88:50:0e:12:06:de:fe:1d:f5: 5a:57:1b:b8:7a:d4:37:74:b4:e6:1d:d3:24:d5:36:d3:6a:96: 9d:8d:bf:00:02:54:89:06:90:97:48:6c:89:fa:a4:59:ae:75: a4:0a:4d:1b:e2:ea:a5:0d:62:3b:ba:84:f8:98:8c:89:b5:a1: 28:57:c3:e7:4f:f3:dd:76:12:27:38:b7:d4:b6:a9:78:4c:2b: d1:b2:a5:c0:6f:29:3e:89:a9:60:de:db:e1:96:81:5d:5e:5c: 10:63:97:da:28:00:bb:9f:3b:70:ba:09:f9:77:c6:c1:18:12: d6:a5:79:2e:d4:dd:53:8f:33:56:c4:48:70:72:70:8c:6d:c7: ff:e3:3c:e4:4f:ec:c3:49:28:72:c6:2a:07:f2:1f:72:81:38: ec:e8:6f:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtH3T4YtfrZdvnb6q+gHJvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMzA5MjFkMjhjNzhlZGU4MTg0MmY3MTJlNmNmNzJiZGU1 YTYwODAwHhcNMjUxMjIyMjEwMDQwWhcNMjUxMjIzMjEwMDQwWjAzMTEwLwYDVQQD EyhmN2VlZTdmM2FjZmUxOGIyOTkwM2FjOTNkZTViNmVlZjczMjgxOGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrCLfFL+d9vn5it8yCV+SWn5nnRs pfzoIDYkC5ALxZNL0fkMFzpMOWu4Btrb61FMMJwbJV1HDJXTSqFhiBthDKFre/6g 7lmf5Gkdd14XdA3E1qBFz6e5j8LYSoowWWqjvJgbJvdxzJtOIUMnmKgPxAHz8/PR A9EX6S3NCqPFtpaQmykSvzSJpFxYRIxtebX0tUCE1O9xAyQzTRnYckbGfUi+eUrc /fTyfzvecdwOm9eueF+Rm2ckJUDJom1vpnKoQSGS0Xr3MMsrSkth7NqlAMvX4+R4 G/4GVYEniAXqvNtfvFEXX5DiorDGrRtF1ew98S1V+lmucGUHeJRfSlf0xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfu5/Os/hiymQOsk95bbu9zKBj4MB8GA1UdIwQY MBaAFKswkh0ox47egYQvcS5s9yveWmCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zY2Q3ZmYtMjBkMi00Y2VjLWFlY2Et MzU0Mzk5NzI0YjFlLzEvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zY2Q3ZmYtMjBkMi00Y2VjLWFlY2EtMzU0Mzk5NzI0YjFl LzEvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGCvAZbc WaDfg72eiTONMp88y6tTlf693YEin1ZpdWwacN9boaiQceNOKmdtAUF/jRjoj80b u4fTGxPEIeAAU6IBxO8/80ataiUzwfF3lzXQvpE++DO3vvkg8MdVjb3jz1a9iFAO Egbe/h31WlcbuHrUN3S05h3TJNU202qWnY2/AAJUiQaQl0hsifqkWa51pApNG+Lq pQ1iO7qE+JiMibWhKFfD50/z3XYSJzi31LapeEwr0bKlwG8pPompYN7b4ZaBXV5c EGOX2igAu587cLoJ+XfGwRgS1qV5LtTdU48zVsRIcHJwjG3H/+M85E/sw0kocsYq B/IfcoE47OhvqA== -----END CERTIFICATE-----Generated at Tue Dec 23 05:29:29 2025 by rpki-client