This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json) Hash identifier: uyq2vbZZ7PJmiJ9mojtdp3mcE0s5XcbqgQJZ3RjxLi4= Subject key identifier: 7E:86:B6:2B:C2:BD:B1:54:17:27:88:A1:7E:04:F0:5D:2D:BF:D6:53 Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21 Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21 Certificate serial: 019B53AABCA01AED7BF58557DB15B83E855C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 04:00:56 +0000 Manifest this update: Thu 25 Dec 2025 04:00:56 +0000 Manifest next update: Fri 26 Dec 2025 04:00:56 +0000 Files and hashes: 1: 1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa (hash: p66SMlwKH8qksSnzyFy8M1MJ9eGvVUlsB0A2v++rXYg=) 2: BO2GxdENWf3nZf4IjS3W9dxIBdA.roa (hash: CoT9/NP4/6nCeDdnm6fFk7HZ3lUZardt1KwDlood7sQ=) 3: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: VTILUNSZEP2dI/dgEYDTkPHPHBKNq2b0Ci80xC84r6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:bc:a0:1a:ed:7b:f5:85:57:db:15:b8:3e:85:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21 Validity Not Before: Dec 25 04:00:56 2025 GMT Not After : Dec 26 04:00:56 2025 GMT Subject: CN=7e86b62bc2bdb154172788a17e04f05d2dbfd653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:e4:a3:60:44:31:7e:51:40:11:e7:d5:f6: 20:fa:80:49:7d:1e:a9:71:25:59:f2:0d:f3:d2:50: c0:ce:6d:5b:fa:27:4c:82:f0:f7:5f:7f:b8:2e:b4: 95:17:69:25:5e:b4:72:76:37:ca:cf:f1:e4:0f:59: a8:4d:96:93:98:fb:fe:bd:81:cf:f5:97:f9:dd:3c: 02:1b:6b:71:eb:d7:7a:86:e8:45:ba:dd:7a:76:28: 17:7e:4d:77:08:27:ba:65:6a:21:fe:ee:25:76:28: b8:5e:5d:40:6c:51:5f:14:ff:b9:a7:5f:c5:33:24: ce:f8:a9:0d:9a:4d:13:8c:59:eb:dd:f0:61:8f:2b: 18:94:af:08:66:bb:d1:1a:59:f4:f2:b3:90:dc:59: 00:cc:ad:69:ea:39:23:ef:3d:78:25:d9:cc:31:97: ff:3a:78:d7:03:29:77:ff:2a:99:bd:14:59:38:d4: 82:6b:5f:ec:9f:89:23:ed:90:2a:58:e1:80:c5:9b: d2:2a:4e:40:a4:8f:c3:f0:a4:4d:fd:6e:89:14:fb: f5:b0:bc:1f:f5:c3:0d:a7:0e:ba:78:65:a9:cb:26: a8:1b:39:81:84:4c:b8:74:cc:22:a9:bb:0e:3f:5f: 77:c4:af:43:82:d2:5c:ad:97:c7:e0:da:51:55:35: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:86:B6:2B:C2:BD:B1:54:17:27:88:A1:7E:04:F0:5D:2D:BF:D6:53 X509v3 Authority Key Identifier: keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b3:42:de:f4:de:cc:40:e0:d7:49:68:4e:40:cf:5a:61:cd: f0:20:54:87:bf:a5:40:ea:95:2f:18:e9:95:cb:1a:25:0e:c9: 71:ce:9c:6c:c1:e8:1c:ad:36:ee:89:cf:91:1e:17:7f:b3:6e: 0c:b2:a2:3b:c4:1e:0b:97:e6:20:ec:68:13:92:16:86:42:09: 4e:7b:82:e4:5e:e7:65:08:a8:82:b7:2a:3a:a0:f0:c2:a0:9e: 57:71:ad:f3:66:8a:b3:e3:21:c2:cc:97:a4:24:f8:c4:a9:c8: 39:66:bd:54:96:d3:25:c7:ad:3f:fa:9f:e6:b1:2f:72:66:2b: f1:ba:a7:1a:07:17:1c:c1:38:6c:5a:83:23:26:0b:58:2d:3f: 11:df:22:91:9f:d9:92:59:c7:87:08:7d:f2:32:24:ac:b1:65: f7:ae:50:6f:31:72:33:c6:9b:75:4d:4f:3c:a8:8f:3a:cd:b3: 27:b6:b6:fc:fb:82:99:83:25:5a:dc:6c:7b:38:13:3a:24:6c: bf:e6:f2:4e:b6:aa:66:0d:9c:78:06:96:42:f5:c7:6b:01:9f: 45:47:9f:d3:93:a3:5c:e7:fa:cc:8c:1e:c9:dd:7c:f3:d0:10: 1d:4f:6a:25:aa:53:ee:82:70:8c:66:c8:cd:b9:7f:14:4b:c7: 37:d4:1d:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqrygGu179YVX2xW4PoVcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMjZhYzRhZmFmZDI2OTg4MWMxMGFkMmVjYTJmNGRlZjhl ZGJkMjEwHhcNMjUxMjI1MDQwMDU2WhcNMjUxMjI2MDQwMDU2WjAzMTEwLwYDVQQD Eyg3ZTg2YjYyYmMyYmRiMTU0MTcyNzg4YTE3ZTA0ZjA1ZDJkYmZkNjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDTko2BEMX5RQBHn1fYg+oBJfR6p cSVZ8g3z0lDAzm1b+idMgvD3X3+4LrSVF2klXrRydjfKz/HkD1moTZaTmPv+vYHP 9Zf53TwCG2tx69d6huhFut16digXfk13CCe6ZWoh/u4ldii4Xl1AbFFfFP+5p1/F MyTO+KkNmk0TjFnr3fBhjysYlK8IZrvRGln08rOQ3FkAzK1p6jkj7z14JdnMMZf/ OnjXAyl3/yqZvRRZONSCa1/sn4kj7ZAqWOGAxZvSKk5ApI/D8KRN/W6JFPv1sLwf 9cMNpw66eGWpyyaoGzmBhEy4dMwiqbsOP193xK9DgtJcrZfH4NpRVTUZnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6GtivCvbFUFyeIoX4E8F0tv9ZTMB8GA1UdIwQY MBaAFEEmrEr6/SaYgcEK0uyi9N747b0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEt YzM5OWJlMDMxYjRhLzEvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEtYzM5OWJlMDMxYjRh LzEvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7NC3vTe zEDg10loTkDPWmHN8CBUh7+lQOqVLxjplcsaJQ7Jcc6cbMHoHK027onPkR4Xf7Nu DLKiO8QeC5fmIOxoE5IWhkIJTnuC5F7nZQiogrcqOqDwwqCeV3Gt82aKs+MhwsyX pCT4xKnIOWa9VJbTJcetP/qf5rEvcmYr8bqnGgcXHME4bFqDIyYLWC0/Ed8ikZ/Z klnHhwh98jIkrLFl965QbzFyM8abdU1PPKiPOs2zJ7a2/PuCmYMlWtxsezgTOiRs v+byTraqZg2ceAaWQvXHawGfRUef05OjXOf6zIweyd1889AQHU9qJapT7oJwjGbI zbl/FEvHN9QdIg== -----END CERTIFICATE-----Generated at Thu Dec 25 12:49:40 2025 by rpki-client