This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft File: QZs3miRkEoEOioBSpio5aIyjRXk.mft (raw, json) Hash identifier: qRIBf/RpS5xUxxkiXRMBPdHvVia06GHGSpxCcS7hQSs= Subject key identifier: 4E:CB:CD:33:62:40:5D:03:AE:91:F9:84:BA:AC:2F:50:E2:A9:30:A7 Authority key identifier: 41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79 Certificate issuer: /CN=419b379a246412810e8a8052a62a39688ca34579 Certificate serial: 019B3E6C4DDCC476422B2B375D4DE7663457 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft Manifest number: 0534 Signing time: Sun 21 Dec 2025 01:00:43 +0000 Manifest this update: Sun 21 Dec 2025 01:00:43 +0000 Manifest next update: Mon 22 Dec 2025 01:00:43 +0000 Files and hashes: 1: 2TZgxnjJF7qDIIxEY-THpPbZMQA.roa (hash: 0yx1MB4qhr47LhIlbMqbHpvd6J1nBsWh1WvKzMD4atk=) 2: QZs3miRkEoEOioBSpio5aIyjRXk.crl (hash: lcya8MfDT56zNY5m++2JTzEccM3cyzMDzB/IGV48+V4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:4d:dc:c4:76:42:2b:2b:37:5d:4d:e7:66:34:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=419b379a246412810e8a8052a62a39688ca34579 Validity Not Before: Dec 21 01:00:43 2025 GMT Not After : Dec 22 01:00:43 2025 GMT Subject: CN=4ecbcd3362405d03ae91f984baac2f50e2a930a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:e9:dc:ac:1b:2a:e6:57:2a:59:ba:bd:60: 3f:26:a9:cc:0c:11:50:b1:0a:fb:d7:5f:5c:06:e6: db:32:7d:fb:0a:72:d9:fd:7f:12:cb:7f:d7:77:71: ba:4a:2e:8a:fa:42:8f:25:3f:89:8f:7d:33:58:51: a0:ab:6b:a0:1d:2c:d2:0d:ab:b8:1d:1a:3f:2d:23: d0:62:10:19:51:a2:e9:e5:94:84:8d:8c:6e:21:ef: 82:70:55:58:68:d5:2e:35:6a:32:58:9a:34:38:83: 5e:a9:72:22:af:4a:3d:7a:25:5d:6c:0b:fc:f6:8d: 68:c7:9a:8a:27:f2:6c:77:f0:9a:0c:63:ba:16:cc: 0c:52:dc:93:8c:15:4a:ed:77:74:2f:63:01:dd:25: 65:ed:6a:2e:b7:bd:00:77:f6:20:a5:78:e6:4f:08: 2f:0e:e2:9a:0a:20:bf:b7:ce:b5:26:99:07:14:fc: d8:6e:13:c5:7d:61:0e:c9:19:bd:e5:24:7c:6f:d2: 54:9e:8f:08:d1:b8:f0:a6:3f:27:82:ff:a2:2d:ff: a1:81:66:e0:48:46:c0:68:00:c2:ae:1c:5b:b2:a1: ef:9e:13:d5:27:64:3c:64:a8:69:df:ae:b9:d9:1e: 03:98:6a:be:db:20:4d:29:4a:d9:85:e3:1a:f8:66: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CB:CD:33:62:40:5D:03:AE:91:F9:84:BA:AC:2F:50:E2:A9:30:A7 X509v3 Authority Key Identifier: keyid:41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:80:d0:30:c7:f7:a4:06:e7:80:69:4b:d8:3d:d2:3b:4f:9b: a2:df:8c:5d:d2:28:b6:7a:ef:ac:31:82:d4:4f:07:42:40:01: 4a:cd:08:45:b2:ca:32:89:ab:35:2d:10:81:66:33:da:9b:6c: 30:74:8a:62:66:90:7c:c5:ed:43:2f:df:c8:6c:74:9b:0b:04: c0:bd:08:b6:32:75:16:66:40:ec:86:26:35:b4:5d:93:c7:1d: 3c:71:2f:95:7c:d5:58:fb:4b:9e:4b:52:9d:60:f7:19:c0:56: 98:d8:3c:24:ba:6b:9d:cd:af:d9:72:88:08:74:74:52:ee:b0: 4d:80:fe:01:c9:80:da:74:fb:5d:d8:67:84:54:f8:86:aa:ae: 81:b6:2e:21:03:14:b2:9c:41:f1:99:0f:fd:ed:31:14:3c:d3: 96:25:79:b7:89:8c:bd:94:63:74:fc:7f:1a:43:fc:69:08:63: 27:ce:4e:76:54:b6:86:57:68:72:b4:34:82:2e:52:ce:64:a4: 5f:3d:d3:88:90:74:6f:6b:4b:dc:1c:10:c5:0b:18:e0:33:d5: 34:f5:93:ba:11:db:ad:aa:c8:da:1f:04:57:5e:72:12:8d:b1: c9:95:05:03:a4:5a:41:29:bf:08:15:10:cc:bd:e9:79:76:f0: 4b:db:95:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bE3cxHZCKys3XU3nZjRXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOWIzNzlhMjQ2NDEyODEwZThhODA1MmE2MmEzOTY4OGNh MzQ1NzkwHhcNMjUxMjIxMDEwMDQzWhcNMjUxMjIyMDEwMDQzWjAzMTEwLwYDVQQD Eyg0ZWNiY2QzMzYyNDA1ZDAzYWU5MWY5ODRiYWFjMmY1MGUyYTkzMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh/p3KwbKuZXKlm6vWA/JqnMDBFQ sQr7119cBubbMn37CnLZ/X8Sy3/Xd3G6Si6K+kKPJT+Jj30zWFGgq2ugHSzSDau4 HRo/LSPQYhAZUaLp5ZSEjYxuIe+CcFVYaNUuNWoyWJo0OINeqXIir0o9eiVdbAv8 9o1ox5qKJ/Jsd/CaDGO6FswMUtyTjBVK7Xd0L2MB3SVl7Wout70Ad/YgpXjmTwgv DuKaCiC/t861JpkHFPzYbhPFfWEOyRm95SR8b9JUno8I0bjwpj8ngv+iLf+hgWbg SEbAaADCrhxbsqHvnhPVJ2Q8ZKhp36652R4DmGq+2yBNKUrZheMa+Gah5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7LzTNiQF0DrpH5hLqsL1DiqTCnMB8GA1UdIwQY MBaAFEGbN5okZBKBDoqAUqYqOWiMo0V5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVpzM21pUmtFb0VPaW9CU3BpbzVhSXlqUlhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yMDI1NmUtMWUwMy00MDBhLTk4Nzgt ZmNjODllY2U1OTA2LzEvUVpzM21pUmtFb0VPaW9CU3BpbzVhSXlqUlhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yMDI1NmUtMWUwMy00MDBhLTk4NzgtZmNjODllY2U1OTA2 LzEvUVpzM21pUmtFb0VPaW9CU3BpbzVhSXlqUlhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIDQMMf3 pAbngGlL2D3SO0+bot+MXdIotnrvrDGC1E8HQkABSs0IRbLKMomrNS0QgWYz2pts MHSKYmaQfMXtQy/fyGx0mwsEwL0ItjJ1FmZA7IYmNbRdk8cdPHEvlXzVWPtLnktS nWD3GcBWmNg8JLprnc2v2XKICHR0Uu6wTYD+AcmA2nT7XdhnhFT4hqqugbYuIQMU spxB8ZkP/e0xFDzTliV5t4mMvZRjdPx/GkP8aQhjJ85OdlS2hldocrQ0gi5SzmSk Xz3TiJB0b2tL3BwQxQsY4DPVNPWTuhHbrarI2h8EV15yEo2xyZUFA6RaQSm/CBUQ zL3peXbwS9uV7A== -----END CERTIFICATE-----Generated at Sun Dec 21 04:07:53 2025 by rpki-client