This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft File: qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft (raw, json) Hash identifier: NxSiOfysFQPdjXlZOP3BKakUruZgx9F1nGxmBAFRCok= Subject key identifier: A1:3D:26:F6:85:9B:73:73:15:C3:89:DA:D1:05:57:40:9D:D8:68:37 Authority key identifier: AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D Certificate issuer: /CN=aaca4f4a737ec09f335ac40633133328213efc3d Certificate serial: 019B4A0402EC6004F4E825BAB543911D207A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft Manifest number: 0EA0 Signing time: Tue 23 Dec 2025 07:02:15 +0000 Manifest this update: Tue 23 Dec 2025 07:02:15 +0000 Manifest next update: Wed 24 Dec 2025 07:02:15 +0000 Files and hashes: 1: 3FxUxvyalEPW74QSSmy9O2QWzSA.roa (hash: K7i9DvkPZQGo1B9Tr53E+YnX3gzSBh7iAMkmSak9hOM=) 2: qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl (hash: 9Dv4kVmKSUC/57Bt2kc3KhHf4MJ1rn/IdCEHtDZ9Tbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:02:ec:60:04:f4:e8:25:ba:b5:43:91:1d:20:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaca4f4a737ec09f335ac40633133328213efc3d Validity Not Before: Dec 23 07:02:15 2025 GMT Not After : Dec 24 07:02:15 2025 GMT Subject: CN=a13d26f6859b737315c389dad10557409dd86837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:61:28:56:a3:2a:d2:f7:c0:ce:5e:8c:bc:9d: 7e:bb:24:47:de:09:e6:7a:83:aa:4c:94:d9:5a:bd: 7d:6b:51:23:0b:75:57:80:91:34:43:d9:19:f5:8e: ae:43:b9:c1:53:17:56:7f:89:67:b2:73:41:cd:03: 40:c1:3e:b1:cc:95:76:fb:78:e0:d1:98:12:29:ad: 0b:94:53:e1:ac:b9:eb:fc:6c:b3:c0:eb:33:48:9e: d1:f5:11:b3:b9:f1:cf:fb:5b:b1:8d:d0:9a:30:ff: e3:fd:6d:dd:0d:f8:8a:af:3d:62:8d:9a:80:85:a4: 89:96:c4:43:77:d2:ba:f7:51:2f:1f:6e:ea:4f:3e: 12:2a:c3:d9:08:c9:6f:37:e6:f4:85:23:75:3b:67: cc:3d:6a:78:0e:c5:43:62:f3:bd:d8:f8:8b:d7:47: 97:44:26:7c:e5:2f:cd:8c:4e:a4:5e:2a:29:08:f0: e7:dd:16:41:b2:b5:cf:85:76:90:a0:7d:4d:b5:30: 66:35:7d:b7:9a:77:15:60:24:ea:92:0c:95:c1:10: b2:05:f7:2e:ea:78:6c:78:7a:fb:a6:d3:4a:a6:cb: 8b:ce:b1:67:fa:82:f8:36:39:73:9f:10:4e:7e:cf: f2:53:08:41:bd:cc:18:4a:73:16:81:e5:55:c8:58: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3D:26:F6:85:9B:73:73:15:C3:89:DA:D1:05:57:40:9D:D8:68:37 X509v3 Authority Key Identifier: keyid:AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8f:37:72:9b:fc:46:48:56:da:88:a4:1e:85:fd:90:63:54: bf:8e:c5:71:e7:db:29:65:01:5e:5c:8d:c5:40:72:b9:d7:2d: dd:30:99:a1:74:d1:94:7c:b1:db:b9:6a:04:cf:2f:0a:14:e5: 4a:f5:ce:b0:62:f1:24:39:ab:84:37:26:3a:a1:e2:7f:e8:75: d7:1a:7c:31:15:df:29:16:1a:75:b7:81:d8:59:66:0e:b7:a5: ac:6d:87:55:99:85:79:f0:0c:c5:31:64:46:31:a6:21:cf:a5: ba:f7:68:6e:88:44:87:01:27:21:dd:6d:e8:c4:dd:92:99:0d: 4f:ce:44:94:23:8b:8d:83:a4:a5:f8:7e:b4:5e:8e:44:32:22: eb:e2:cc:86:15:b8:37:89:53:e4:51:48:99:49:21:4a:0d:e8: 91:da:00:58:c6:00:86:e5:41:bc:b4:06:9f:ed:52:bd:67:f9: 5a:28:89:a8:f1:e3:ff:07:d4:0f:f9:be:22:54:71:ca:fc:eb: f2:a7:92:2b:bc:5a:fc:73:6c:9e:cf:03:1b:46:b3:7b:dd:ca: 35:36:25:62:14:f5:e6:50:f1:61:fc:7d:7a:a5:43:04:86:64: a4:ca:e4:71:39:97:9d:e6:df:b4:bb:c9:e0:3c:65:72:d5:c3: 16:84:5d:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBALsYAT06CW6tUORHSB6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhY2E0ZjRhNzM3ZWMwOWYzMzVhYzQwNjMzMTMzMzI4MjEz ZWZjM2QwHhcNMjUxMjIzMDcwMjE1WhcNMjUxMjI0MDcwMjE1WjAzMTEwLwYDVQQD EyhhMTNkMjZmNjg1OWI3MzczMTVjMzg5ZGFkMTA1NTc0MDlkZDg2ODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WEoVqMq0vfAzl6MvJ1+uyRH3gnm eoOqTJTZWr19a1EjC3VXgJE0Q9kZ9Y6uQ7nBUxdWf4lnsnNBzQNAwT6xzJV2+3jg 0ZgSKa0LlFPhrLnr/GyzwOszSJ7R9RGzufHP+1uxjdCaMP/j/W3dDfiKrz1ijZqA haSJlsRDd9K691EvH27qTz4SKsPZCMlvN+b0hSN1O2fMPWp4DsVDYvO92PiL10eX RCZ85S/NjE6kXiopCPDn3RZBsrXPhXaQoH1NtTBmNX23mncVYCTqkgyVwRCyBfcu 6nhseHr7ptNKpsuLzrFn+oL4NjlznxBOfs/yUwhBvcwYSnMWgeVVyFhJywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKE9JvaFm3NzFcOJ2tEFV0Cd2Gg3MB8GA1UdIwQY MBaAFKrKT0pzfsCfM1rEBjMTMyghPvw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXNwUFNuTi13Sjh6V3NRR014TXpLQ0UtX0QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMTg3NmEtZmFlMS00M2NjLWEyZDct MzM0ZTZmMzMyMTgwLzEvcXNwUFNuTi13Sjh6V3NRR014TXpLQ0UtX0QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jMTg3NmEtZmFlMS00M2NjLWEyZDctMzM0ZTZmMzMyMTgw LzEvcXNwUFNuTi13Sjh6V3NRR014TXpLQ0UtX0QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADo83cpv8 RkhW2oikHoX9kGNUv47FcefbKWUBXlyNxUByudct3TCZoXTRlHyx27lqBM8vChTl SvXOsGLxJDmrhDcmOqHif+h11xp8MRXfKRYadbeB2FlmDrelrG2HVZmFefAMxTFk RjGmIc+luvdobohEhwEnId1t6MTdkpkNT85ElCOLjYOkpfh+tF6ORDIi6+LMhhW4 N4lT5FFImUkhSg3okdoAWMYAhuVBvLQGn+1SvWf5WiiJqPHj/wfUD/m+IlRxyvzr 8qeSK7xa/HNsns8DG0aze93KNTYlYhT15lDxYfx9eqVDBIZkpMrkcTmXnebftLvJ 4DxlctXDFoRd4A== -----END CERTIFICATE-----Generated at Tue Dec 23 14:14:49 2025 by rpki-client