This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json) Hash identifier: 2SBftZPg6QLKmzlXy3JKja2GTlbZHxsrtQYLT1X6NcE= Subject key identifier: A5:83:91:E7:DC:CD:65:1D:62:A4:CB:6C:21:E2:66:ED:2F:46:21:CA Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c Certificate serial: 019B3D90AB545F91CB566F2548DBCB43BF8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 21:00:49 +0000 Manifest this update: Sat 20 Dec 2025 21:00:49 +0000 Manifest next update: Sun 21 Dec 2025 21:00:49 +0000 Files and hashes: 1: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: cjJ1814tz4vYyIhww6l6IRzcCSW8N6A5tRG25itqOMU=) 2: c1mJTzKq1m2EBAr92I-nges1Di4.roa (hash: i1n9Y7VZ80hK4Lc1aErif8j8W+hz5/EhhxzfXPDeEMQ=) 3: rvgAs6WmoB_QmrlMgSgm7khV-4U.roa (hash: ByaVeRT7BxyoGgwxavoqH/EHW9rBtmtZSrveuw0KL1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:ab:54:5f:91:cb:56:6f:25:48:db:cb:43:bf:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c Validity Not Before: Dec 20 21:00:49 2025 GMT Not After : Dec 21 21:00:49 2025 GMT Subject: CN=a58391e7dccd651d62a4cb6c21e266ed2f4621ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3a:0e:af:eb:0d:55:f7:85:86:29:28:e0:a2: c0:52:ed:df:4c:f2:e8:30:6b:93:dc:b6:fb:4f:c4: e3:bc:94:aa:78:ca:15:ec:4b:de:08:6d:37:ac:3b: 1e:6c:cd:0b:9d:4c:ac:3c:bc:e5:b7:dc:a6:c1:74: ea:3b:5c:11:51:2e:3b:49:6c:87:ea:db:66:2b:13: ba:da:af:e2:82:83:a9:f0:5b:16:63:61:05:5d:c8: be:67:1a:2a:d7:12:3d:8a:aa:45:04:6e:47:e5:65: 94:23:8d:f0:a2:88:53:e2:07:31:a5:cc:82:c0:26: 8d:6e:9c:38:ac:0b:2b:35:df:e2:42:4f:e7:22:cc: 91:7b:d0:9b:50:7b:20:f4:f3:2c:bc:8a:80:44:44: a8:a1:7d:04:50:83:58:9d:d6:ba:ea:70:28:32:bd: 7e:fc:8d:7e:82:10:3c:49:7a:97:2a:1e:cc:ae:ff: bc:5f:9e:91:7c:d4:6f:c3:c6:73:05:c1:3d:4e:c9: 46:8e:8a:13:f5:c9:a1:92:6d:cb:d4:52:04:5d:f1: 5c:60:9f:23:fc:6b:a8:96:27:0c:29:9d:68:1b:7c: 37:dc:7f:d0:b6:2a:17:90:14:3d:e0:c1:fa:db:e0: d8:06:c6:b1:e0:96:ba:c0:1b:5a:54:72:f5:c3:60: 6f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:83:91:E7:DC:CD:65:1D:62:A4:CB:6C:21:E2:66:ED:2F:46:21:CA X509v3 Authority Key Identifier: keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a4:a0:67:be:7d:05:d7:59:5a:59:c4:14:86:7a:f3:60:2a: 4b:42:d8:20:0a:f0:e7:40:cf:53:f0:03:7d:c1:7d:0d:b3:9b: b4:7a:b1:58:78:43:7f:09:ad:85:c7:d0:93:67:4c:4a:47:98: 0a:24:0c:c9:6a:eb:1b:e8:51:9c:c1:b5:96:eb:78:d1:2f:ff: de:1c:b7:57:44:8e:c1:43:1a:9f:ac:e3:19:e2:78:cb:93:07: fd:44:d1:04:5b:79:e8:e0:91:ca:75:db:1a:0c:b3:72:25:4b: 9f:a6:b3:7c:3d:77:0d:e8:97:fa:d4:7c:89:20:b5:5e:d7:23: 8d:bd:85:d3:2d:ca:e7:ef:f4:41:f8:2e:a6:f2:b2:d2:82:5c: 5a:08:0c:b1:7a:c6:60:3d:5f:11:a5:c0:f6:ec:fb:4d:93:d6: 82:94:3d:b8:87:da:17:29:34:0b:b4:ea:c8:01:e1:cc:82:92: c6:c3:ea:47:7f:88:24:3d:e6:71:b7:79:88:8a:24:ce:20:4c: e3:c3:11:5d:58:9f:3a:0a:09:e6:f9:c4:19:ae:5d:1b:57:a0: 0a:03:c1:e5:d5:db:a0:7b:04:76:06:af:df:f3:4d:52:8a:c9: 10:56:24:28:bb:e1:7a:d9:d8:b2:0f:aa:e7:ce:69:8c:95:e9: f1:e0:f0:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kKtUX5HLVm8lSNvLQ7+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYzQyNzIzYzFmNzViYTBiZTg5MzVjNzJmNjFiZmU1YzVm NGNlM2MwHhcNMjUxMjIwMjEwMDQ5WhcNMjUxMjIxMjEwMDQ5WjAzMTEwLwYDVQQD EyhhNTgzOTFlN2RjY2Q2NTFkNjJhNGNiNmMyMWUyNjZlZDJmNDYyMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5joOr+sNVfeFhiko4KLAUu3fTPLo MGuT3Lb7T8TjvJSqeMoV7EveCG03rDsebM0LnUysPLzlt9ymwXTqO1wRUS47SWyH 6ttmKxO62q/igoOp8FsWY2EFXci+Zxoq1xI9iqpFBG5H5WWUI43woohT4gcxpcyC wCaNbpw4rAsrNd/iQk/nIsyRe9CbUHsg9PMsvIqARESooX0EUINYnda66nAoMr1+ /I1+ghA8SXqXKh7Mrv+8X56RfNRvw8ZzBcE9TslGjooT9cmhkm3L1FIEXfFcYJ8j /GuolicMKZ1oG3w33H/QtioXkBQ94MH62+DYBsax4Ja6wBtaVHL1w2BvfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWDkefczWUdYqTLbCHiZu0vRiHKMB8GA1UdIwQY MBaAFELEJyPB91ugvok1xy9hv+XF9M48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAt Yjk4YTY5MDFlYTEwLzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAtYjk4YTY5MDFlYTEw LzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaSgZ759 BddZWlnEFIZ682AqS0LYIArw50DPU/ADfcF9DbObtHqxWHhDfwmthcfQk2dMSkeY CiQMyWrrG+hRnMG1lut40S//3hy3V0SOwUMan6zjGeJ4y5MH/UTRBFt56OCRynXb GgyzciVLn6azfD13DeiX+tR8iSC1Xtcjjb2F0y3K5+/0QfgupvKy0oJcWggMsXrG YD1fEaXA9uz7TZPWgpQ9uIfaFyk0C7TqyAHhzIKSxsPqR3+IJD3mcbd5iIokziBM 48MRXVifOgoJ5vnEGa5dG1egCgPB5dXboHsEdgav3/NNUorJEFYkKLvhetnYsg+q 585pjJXp8eDwIw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:53:10 2025 by rpki-client