This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json) Hash identifier: bLi8itDnEGWujgpAH5uKgGQ+5dsudWo+x00vJxXEEQM= Subject key identifier: 56:AE:70:0F:C3:1D:9E:81:97:34:42:42:F0:78:73:37:B5:01:EA:E0 Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68 Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68 Certificate serial: 019B35D7578E46DAF5158D53AC850D079D9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft Manifest number: 1519 Signing time: Fri 19 Dec 2025 09:01:03 +0000 Manifest this update: Fri 19 Dec 2025 09:01:03 +0000 Manifest next update: Sat 20 Dec 2025 09:01:03 +0000 Files and hashes: 1: PHhq7bUnGcZX4y_ykkmnYZLunMM.roa (hash: LoLkLVHGuU31zRjTVmAdVTtSVPzxLCqr19G9NEBPRqg=) 2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: igLGpskes0kDwyTq5xuwZYERXO1/zHa9WsqUFm+eyek=) 3: ZHuGa1b5EE3BXDt8zUZ6H71dsTI.roa (hash: c5Q65E0/2d2vtEwjuw2BN9yFwucni9qkVj/W8ITRCHA=) 4: mbmOrU1gpeptZI3HpUCwe4-8PxQ.roa (hash: U1SXSUwkwzX7zwHV3CIwtefKowszejuGaOw7kehwc7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 09:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:57:8e:46:da:f5:15:8d:53:ac:85:0d:07:9d:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68 Validity Not Before: Dec 19 09:01:03 2025 GMT Not After : Dec 20 09:01:03 2025 GMT Subject: CN=56ae700fc31d9e8197344242f0787337b501eae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:42:b4:5a:74:6d:1e:81:ee:fc:fa:1b:fe: e1:19:78:ef:40:b6:b6:94:d3:45:17:c7:ea:39:2e: 1c:4c:dd:11:a3:01:c1:bc:e0:66:78:ab:55:2b:c5: bf:06:ea:95:de:23:38:d1:92:2f:c1:62:d3:8a:8e: b1:b6:c0:81:da:be:2c:f4:18:af:8a:14:d3:1c:15: 92:f9:88:c8:cf:c7:0b:b9:ac:4e:0c:48:18:2e:d8: c4:d8:b9:8e:7c:ae:6d:eb:c6:96:d8:97:6b:09:f7: 9e:26:33:61:0a:bb:9b:56:aa:0e:2b:0c:cc:a5:c9: 39:03:a5:b6:a4:aa:6f:ee:c3:e5:3c:19:01:df:0f: 3c:5e:32:18:32:53:31:42:cd:b0:37:94:00:8b:91: 26:84:03:a5:8f:09:5e:1d:4f:33:b7:df:9e:6f:51: 24:47:9b:a3:28:bd:45:f9:c0:b6:8c:ba:d9:96:ba: 5b:3a:8d:68:59:ea:f2:6c:66:6c:ba:53:3e:56:70: b0:40:ab:6a:7f:61:ff:3a:87:6f:66:6a:db:c1:6f: 20:21:f2:c3:c5:40:af:91:17:94:fc:bc:15:b4:8e: b6:91:ca:91:ba:24:48:bc:19:7a:e5:0b:ba:af:97: a4:ba:ae:12:95:04:3e:11:f3:86:07:9e:8f:23:48: e3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AE:70:0F:C3:1D:9E:81:97:34:42:42:F0:78:73:37:B5:01:EA:E0 X509v3 Authority Key Identifier: keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:07:77:6f:6f:d1:6d:fe:d2:10:0a:8c:d3:26:ad:f7:9b:7a: cf:51:96:95:a2:a1:ec:69:50:c0:86:70:0f:85:e5:e9:01:f3: dd:53:24:e6:20:db:ee:81:a7:cb:f0:61:90:01:1a:f8:20:70: 51:57:37:52:36:b0:e5:6b:a5:02:98:aa:db:99:8f:da:c3:2b: 23:23:e7:0a:60:38:57:3d:d1:9b:08:9a:96:93:f1:89:9d:30: 2d:f2:e5:91:66:08:ad:a5:9e:6c:05:f0:f6:3e:e6:02:a4:8f: d6:b5:33:26:75:56:89:e3:76:7f:93:7b:0d:ff:ae:91:b0:6b: cb:6a:fa:d5:c2:a5:29:96:41:51:f2:7f:de:f9:0c:46:97:36: f7:1c:f4:b7:d1:fc:67:c7:9a:b5:1f:4f:c1:69:71:95:0e:8f: b5:fc:84:e0:d3:ab:f7:5a:ba:a3:da:1c:0a:13:d0:d2:36:ea: ab:32:dc:de:27:b3:78:07:08:4f:1a:4a:96:30:0e:ff:e3:de: dd:67:f6:5c:5d:0f:f9:ff:90:b1:40:e6:27:7b:9f:b9:7c:03: b9:6a:97:c2:59:0f:67:c8:c3:92:c3:56:ae:fa:e5:ba:ea:e1: 05:6a:f2:ee:e0:7b:59:c2:0a:1a:74:60:be:13:0b:25:4a:8a: 7b:1e:e6:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs111eORtr1FY1TrIUNB52cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYzRjOTBlZDE2YWEyMGU0OTE3ODQyMGJmYzg0YTg4M2Mx MmFjNjgwHhcNMjUxMjE5MDkwMTAzWhcNMjUxMjIwMDkwMTAzWjAzMTEwLwYDVQQD Eyg1NmFlNzAwZmMzMWQ5ZTgxOTczNDQyNDJmMDc4NzMzN2I1MDFlYWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwtCtFp0bR6B7vz6G/7hGXjvQLa2 lNNFF8fqOS4cTN0RowHBvOBmeKtVK8W/BuqV3iM40ZIvwWLTio6xtsCB2r4s9Biv ihTTHBWS+YjIz8cLuaxODEgYLtjE2LmOfK5t68aW2JdrCfeeJjNhCrubVqoOKwzM pck5A6W2pKpv7sPlPBkB3w88XjIYMlMxQs2wN5QAi5EmhAOljwleHU8zt9+eb1Ek R5ujKL1F+cC2jLrZlrpbOo1oWerybGZsulM+VnCwQKtqf2H/OodvZmrbwW8gIfLD xUCvkReU/LwVtI62kcqRuiRIvBl65Qu6r5ekuq4SlQQ+EfOGB56PI0jj8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaucA/DHZ6BlzRCQvB4cze1AergMB8GA1UdIwQY MBaAFELEyQ7RaqIOSReEIL/ISog8EqxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ODdjMTUtNmY2Zi00MDdmLTk0OWYt YThlNGU3MWJlZTUxLzEvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS80ODdjMTUtNmY2Zi00MDdmLTk0OWYtYThlNGU3MWJlZTUx LzEvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwd3b2/R bf7SEAqM0yat95t6z1GWlaKh7GlQwIZwD4Xl6QHz3VMk5iDb7oGny/BhkAEa+CBw UVc3Ujaw5WulApiq25mP2sMrIyPnCmA4Vz3RmwialpPxiZ0wLfLlkWYIraWebAXw 9j7mAqSP1rUzJnVWieN2f5N7Df+ukbBry2r61cKlKZZBUfJ/3vkMRpc29xz0t9H8 Z8eatR9PwWlxlQ6PtfyE4NOr91q6o9ocChPQ0jbqqzLc3iezeAcITxpKljAO/+Pe 3Wf2XF0P+f+QsUDmJ3ufuXwDuWqXwlkPZ8jDksNWrvrluurhBWry7uB7WcIKGnRg vhMLJUqKex7mzw== -----END CERTIFICATE-----Generated at Fri Dec 19 17:28:53 2025 by rpki-client