This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft File: qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft (raw, json) Hash identifier: ISUXRVpUdah3KcqdN6hUCi+CQBoYb2/Zieqq6h9okm0= Subject key identifier: 69:69:F9:1A:31:DD:15:1F:D6:76:7B:F2:04:60:F7:95:45:E6:AC:F4 Authority key identifier: AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D Certificate issuer: /CN=aaca4f4a737ec09f335ac40633133328213efc3d Certificate serial: 019B70A40AF55418D233FD2AFAFADE87970C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft Manifest number: 0EB4 Signing time: Tue 30 Dec 2025 19:02:37 +0000 Manifest this update: Tue 30 Dec 2025 19:02:37 +0000 Manifest next update: Wed 31 Dec 2025 19:02:37 +0000 Files and hashes: 1: 3FxUxvyalEPW74QSSmy9O2QWzSA.roa (hash: K7i9DvkPZQGo1B9Tr53E+YnX3gzSBh7iAMkmSak9hOM=) 2: qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl (hash: mGLOdcO9vstRTzDaNY3r3vi872Ks4WpXDdK+v2Ebn/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a4:0a:f5:54:18:d2:33:fd:2a:fa:fa:de:87:97:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaca4f4a737ec09f335ac40633133328213efc3d Validity Not Before: Dec 30 19:02:37 2025 GMT Not After : Dec 31 19:02:37 2025 GMT Subject: CN=6969f91a31dd151fd6767bf20460f79545e6acf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:7d:bb:58:25:32:d7:8f:08:2a:17:9a:d2: 92:5e:8a:dd:d7:ed:21:a9:52:56:87:e2:f3:4f:5f: 12:16:04:8a:99:12:f8:58:41:95:8f:7f:5a:49:52: 3d:ae:1d:5c:b7:47:9c:3d:88:5f:43:2c:78:68:51: 66:d4:17:5b:ef:64:57:f1:ad:e1:88:a6:ba:b5:ce: af:e8:0f:f7:e9:a1:23:fe:fc:d0:34:cb:7b:f0:05: 9f:59:cf:8e:5e:72:c9:56:e9:d7:26:4b:ec:b4:75: ca:f0:12:38:6b:57:aa:a8:e4:a2:c7:53:0a:dd:25: 45:71:0a:bf:09:d4:1b:77:1a:e8:3a:24:e2:41:a9: 5c:4a:a8:e4:9b:2e:99:c0:bc:39:dc:f5:27:67:64: f3:bb:3d:9d:65:a2:40:55:8d:0f:4b:7c:a4:b1:43: c8:5e:9f:1c:61:00:1f:c7:09:e8:0d:69:1f:e9:18: 8d:06:34:36:b6:81:65:8c:3d:e2:a3:f9:92:f0:57: f1:5e:10:12:98:34:22:89:74:c0:0f:3d:7a:52:1e: 4f:99:fa:9a:99:82:43:da:4b:c4:e2:9e:32:72:2d: f3:e8:e9:9e:c5:17:7f:36:45:3c:38:87:18:95:d4: 93:37:3b:77:c6:fe:af:67:33:37:3d:56:48:43:81: 2f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:69:F9:1A:31:DD:15:1F:D6:76:7B:F2:04:60:F7:95:45:E6:AC:F4 X509v3 Authority Key Identifier: keyid:AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:53:e6:15:dc:3b:30:cb:dc:5f:fc:72:db:46:9b:de:6e:ea: 68:a5:96:a9:6f:ad:46:0f:4e:1e:89:0f:8c:4d:15:dc:1b:14: 34:3e:7e:16:79:ff:26:1a:cd:f4:f0:18:a6:d0:b2:72:92:94: 03:9c:4c:12:49:37:b3:c7:db:79:aa:33:71:3a:48:32:49:ac: df:e2:c5:bc:e0:2f:e7:9f:83:48:f5:c5:87:36:e8:c8:be:7d: 11:a8:56:35:b4:58:67:3e:45:47:16:99:d4:2f:39:19:73:65: 7a:51:a8:68:e5:85:46:9a:51:65:c3:fb:17:f7:b1:73:e9:60: b7:30:62:02:9e:a6:3a:7b:50:59:82:05:53:9a:bb:eb:b5:9e: 42:70:98:06:22:bb:c5:88:af:4c:aa:43:80:f6:e7:7b:cb:46: 1a:f4:48:5b:1f:fe:13:97:e9:4c:50:f8:8a:fa:ef:de:c9:61: c1:aa:ca:16:bc:37:80:85:2f:ac:fa:51:13:25:59:1e:dd:92: 92:e0:a0:f0:60:dd:f8:46:3d:1f:7d:4a:13:c2:0c:01:ae:e8: 46:1c:1f:61:18:9c:dd:98:8b:48:92:bb:b7:ab:1f:34:20:ac: c7:50:bc:07:b7:9e:8a:ce:bf:bf:80:38:7b:0f:ff:3f:56:a3: 6b:20:83:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwpAr1VBjSM/0q+vreh5cMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhY2E0ZjRhNzM3ZWMwOWYzMzVhYzQwNjMzMTMzMzI4MjEz ZWZjM2QwHhcNMjUxMjMwMTkwMjM3WhcNMjUxMjMxMTkwMjM3WjAzMTEwLwYDVQQD Eyg2OTY5ZjkxYTMxZGQxNTFmZDY3NjdiZjIwNDYwZjc5NTQ1ZTZhY2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuux9u1glMtePCCoXmtKSXord1+0h qVJWh+LzT18SFgSKmRL4WEGVj39aSVI9rh1ct0ecPYhfQyx4aFFm1Bdb72RX8a3h iKa6tc6v6A/36aEj/vzQNMt78AWfWc+OXnLJVunXJkvstHXK8BI4a1eqqOSix1MK 3SVFcQq/CdQbdxroOiTiQalcSqjkmy6ZwLw53PUnZ2Tzuz2dZaJAVY0PS3yksUPI Xp8cYQAfxwnoDWkf6RiNBjQ2toFljD3io/mS8FfxXhASmDQiiXTADz16Uh5Pmfqa mYJD2kvE4p4yci3z6OmexRd/NkU8OIcYldSTNzt3xv6vZzM3PVZIQ4Ev2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlp+Rox3RUf1nZ78gRg95VF5qz0MB8GA1UdIwQY MBaAFKrKT0pzfsCfM1rEBjMTMyghPvw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXNwUFNuTi13Sjh6V3NRR014TXpLQ0UtX0QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMTg3NmEtZmFlMS00M2NjLWEyZDct MzM0ZTZmMzMyMTgwLzEvcXNwUFNuTi13Sjh6V3NRR014TXpLQ0UtX0QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jMTg3NmEtZmFlMS00M2NjLWEyZDctMzM0ZTZmMzMyMTgw LzEvcXNwUFNuTi13Sjh6V3NRR014TXpLQ0UtX0QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilPmFdw7 MMvcX/xy20ab3m7qaKWWqW+tRg9OHokPjE0V3BsUND5+Fnn/JhrN9PAYptCycpKU A5xMEkk3s8fbeaozcTpIMkms3+LFvOAv55+DSPXFhzboyL59EahWNbRYZz5FRxaZ 1C85GXNlelGoaOWFRppRZcP7F/exc+lgtzBiAp6mOntQWYIFU5q767WeQnCYBiK7 xYivTKpDgPbne8tGGvRIWx/+E5fpTFD4ivrv3slhwarKFrw3gIUvrPpREyVZHt2S kuCg8GDd+EY9H31KE8IMAa7oRhwfYRic3ZiLSJK7t6sfNCCsx1C8B7eeis6/v4A4 ew//P1ajayCDdQ== -----END CERTIFICATE-----Generated at Wed Dec 31 03:43:36 2025 by rpki-client