This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json) Hash identifier: G5lc+uz35n88JwZNM1BSKHqop3s009Yw7bUDHkmMAB0= Subject key identifier: FB:CE:C4:58:DE:B7:DA:F8:D9:12:32:93:BB:24:7D:92:5E:57:EE:BB Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21 Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21 Certificate serial: 019B6CC6A6367B4A310C87813890A7B78306 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 01:01:56 +0000 Manifest this update: Tue 30 Dec 2025 01:01:56 +0000 Manifest next update: Wed 31 Dec 2025 01:01:56 +0000 Files and hashes: 1: 1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa (hash: p66SMlwKH8qksSnzyFy8M1MJ9eGvVUlsB0A2v++rXYg=) 2: BO2GxdENWf3nZf4IjS3W9dxIBdA.roa (hash: CoT9/NP4/6nCeDdnm6fFk7HZ3lUZardt1KwDlood7sQ=) 3: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: 578ZgpiJcN4lcIiX/3J1Ojoqa0BR2GPo3zbDiUQVy48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:a6:36:7b:4a:31:0c:87:81:38:90:a7:b7:83:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21 Validity Not Before: Dec 30 01:01:56 2025 GMT Not After : Dec 31 01:01:56 2025 GMT Subject: CN=fbcec458deb7daf8d9123293bb247d925e57eebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7a:11:cb:a1:bf:1f:da:45:30:61:6a:84:ff: 50:be:5d:91:8d:34:08:18:8b:2b:3d:ab:ae:80:4a: 33:90:ee:83:42:9a:92:1e:98:f2:2c:0b:b7:e4:1d: 53:bc:40:1e:c8:92:66:58:ab:f7:ec:76:18:81:97: 4c:31:17:be:47:a5:99:96:5a:bd:fd:2e:b7:82:b7: 9a:02:92:93:ed:c3:eb:57:1a:57:bc:9b:ac:ff:40: 94:3e:e2:c9:5e:98:2d:35:48:e6:67:b4:47:1b:59: 72:ad:31:fe:3c:ec:96:49:15:54:eb:3c:e7:d8:bf: 33:cb:d5:78:7b:03:91:75:a4:51:bd:b6:7c:c5:6e: 0c:49:c0:40:df:36:cb:9d:04:bb:35:fd:e7:e6:39: b2:b8:67:47:0a:73:80:80:8a:7c:51:12:ec:ef:99: 38:c6:83:14:c0:07:ab:43:99:e4:ad:ac:ef:c2:5f: 12:aa:f6:a1:9c:d7:a2:ea:80:17:54:8d:ef:6e:95: ed:28:8e:4a:98:bb:b1:aa:6d:64:3c:3b:f9:d7:12: 3a:9d:9d:c0:04:0c:7f:7f:f6:44:bc:f4:44:8a:44: cd:bc:70:07:52:52:3b:b9:15:12:42:93:e8:0d:be: bf:14:88:46:84:4c:e6:e7:f0:46:f7:e9:61:be:3c: c8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CE:C4:58:DE:B7:DA:F8:D9:12:32:93:BB:24:7D:92:5E:57:EE:BB X509v3 Authority Key Identifier: keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f2:7e:0e:60:46:f2:a2:2a:ca:ce:10:75:28:c0:bd:c0:62: 8f:2a:a1:a1:d8:c7:6e:e2:ec:ec:bb:a8:70:91:0e:a4:c5:6b: 0b:f5:81:62:4c:80:b2:2e:41:e4:0e:f4:2d:0a:31:3e:db:ad: da:2d:c0:24:8a:1d:49:95:af:1a:87:38:b9:c9:63:53:da:af: b6:ee:e6:ee:52:66:2c:9b:4a:09:33:54:78:74:50:5f:b2:db: 14:f3:f5:87:45:d1:05:ce:d6:05:ce:5b:e6:37:eb:11:31:59: 86:9a:13:74:27:38:57:e5:d5:fb:05:b1:41:4b:c7:dc:6e:66: 08:31:c3:6d:f5:9c:69:cd:2c:c8:6d:a7:b4:72:a7:68:89:df: 82:e4:a5:0e:77:e7:6b:66:de:06:ad:6d:e7:c9:b7:3b:b6:ad: 81:82:c1:8c:48:f0:bd:5e:5b:3d:33:1c:c1:27:4a:06:2f:49: 9b:fe:57:e0:1e:cc:be:ae:c3:fd:54:74:03:79:8b:da:70:17: 14:b8:ca:7c:dd:65:39:26:6a:68:21:ca:fc:a9:85:e4:4a:91: 59:59:55:3b:e6:14:89:98:cf:da:cd:0f:4f:bb:28:0d:34:df: cc:ec:17:dd:3e:c1:f4:ad:c3:ab:df:3a:0c:a7:79:3b:4c:12: f7:21:a0:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxqY2e0oxDIeBOJCnt4MGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMjZhYzRhZmFmZDI2OTg4MWMxMGFkMmVjYTJmNGRlZjhl ZGJkMjEwHhcNMjUxMjMwMDEwMTU2WhcNMjUxMjMxMDEwMTU2WjAzMTEwLwYDVQQD EyhmYmNlYzQ1OGRlYjdkYWY4ZDkxMjMyOTNiYjI0N2Q5MjVlNTdlZWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHoRy6G/H9pFMGFqhP9Qvl2RjTQI GIsrPauugEozkO6DQpqSHpjyLAu35B1TvEAeyJJmWKv37HYYgZdMMRe+R6WZllq9 /S63greaApKT7cPrVxpXvJus/0CUPuLJXpgtNUjmZ7RHG1lyrTH+POyWSRVU6zzn 2L8zy9V4ewORdaRRvbZ8xW4MScBA3zbLnQS7Nf3n5jmyuGdHCnOAgIp8URLs75k4 xoMUwAerQ5nkrazvwl8SqvahnNei6oAXVI3vbpXtKI5KmLuxqm1kPDv51xI6nZ3A BAx/f/ZEvPREikTNvHAHUlI7uRUSQpPoDb6/FIhGhEzm5/BG9+lhvjzIrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvOxFjet9r42RIyk7skfZJeV+67MB8GA1UdIwQY MBaAFEEmrEr6/SaYgcEK0uyi9N747b0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEt YzM5OWJlMDMxYjRhLzEvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEtYzM5OWJlMDMxYjRh LzEvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvJ+DmBG 8qIqys4QdSjAvcBijyqhodjHbuLs7LuocJEOpMVrC/WBYkyAsi5B5A70LQoxPtut 2i3AJIodSZWvGoc4ucljU9qvtu7m7lJmLJtKCTNUeHRQX7LbFPP1h0XRBc7WBc5b 5jfrETFZhpoTdCc4V+XV+wWxQUvH3G5mCDHDbfWcac0syG2ntHKnaInfguSlDnfn a2beBq1t58m3O7atgYLBjEjwvV5bPTMcwSdKBi9Jm/5X4B7Mvq7D/VR0A3mL2nAX FLjKfN1lOSZqaCHK/KmF5EqRWVlVO+YUiZjP2s0PT7soDTTfzOwX3T7B9K3Dq986 DKd5O0wS9yGg7g== -----END CERTIFICATE-----Generated at Tue Dec 30 06:22:26 2025 by rpki-client