This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft File: qsV1yvoAvEHVfElKwfXbz-54My4.mft (raw, json) Hash identifier: uhcbxhnehASgTs4YKicNmuPKLbd4s8C2Reg5mMWuXKc= Subject key identifier: A1:EC:6D:BE:EA:7A:72:B0:F8:B1:68:79:37:64:88:08:BF:B4:9C:B7 Authority key identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E Certificate issuer: /CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e Certificate serial: 019B5606E8B9A0C1B9AFC7B1B2602234E73C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 15:00:51 +0000 Manifest this update: Thu 25 Dec 2025 15:00:51 +0000 Manifest next update: Fri 26 Dec 2025 15:00:51 +0000 Files and hashes: 1: XtPvNkbtFvkSrn1XGkdkM55xfJ4.roa (hash: XvdvDvnaLffIXutFMAXtL47S87Pb9dwgFS/EYsDxu5Q=) 2: qsV1yvoAvEHVfElKwfXbz-54My4.crl (hash: Ia74Kv9FgvJVXAq0qfO+KvQ5UWz0OEt0a+YAyAp5A0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:06:e8:b9:a0:c1:b9:af:c7:b1:b2:60:22:34:e7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e Validity Not Before: Dec 25 15:00:51 2025 GMT Not After : Dec 26 15:00:51 2025 GMT Subject: CN=a1ec6dbeea7a72b0f8b1687937648808bfb49cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:18:fa:27:1e:95:42:a7:fd:73:d5:99:63:47: cd:5b:6b:e4:7d:25:cb:66:0f:0b:1d:5b:77:33:aa: 18:be:e3:27:09:40:1f:ab:5e:10:aa:59:97:0d:8a: c2:2c:c7:7d:d0:f1:45:b6:0f:d7:ff:05:10:55:4e: e9:d6:a2:81:ce:e1:96:ad:85:87:b3:90:95:50:e5: 7d:45:2c:d4:0a:0b:53:70:6d:6b:a4:ba:e4:6f:2e: 05:18:1a:5c:4f:02:89:59:96:aa:0a:47:c0:93:cf: 97:5b:8e:72:5e:75:27:40:9b:6f:17:9f:31:f2:bc: ed:6e:23:a5:03:db:52:27:ca:34:e9:69:10:90:03: b7:f1:0e:b8:fc:f9:bb:89:b6:3c:5c:22:ef:f1:d7: 60:6c:d1:9f:4e:04:29:fe:f8:4d:32:96:7e:10:ca: ec:fe:c4:80:5c:a7:9f:69:3f:ca:ca:24:1c:5c:73: 3a:dc:3b:14:d9:b3:af:56:74:a2:67:ef:3b:88:bc: 48:e2:22:ba:1b:33:37:7c:e7:60:21:d3:b4:f0:3a: 12:07:7d:42:82:ab:54:70:d7:b6:f9:cb:6e:c9:48: df:08:b3:b5:8c:17:c6:3f:03:3d:25:5f:2b:71:7a: bd:eb:b8:5b:90:e0:5e:f3:d8:a0:ac:ab:1c:43:09: 54:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EC:6D:BE:EA:7A:72:B0:F8:B1:68:79:37:64:88:08:BF:B4:9C:B7 X509v3 Authority Key Identifier: keyid:AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:b9:8a:2a:5c:6f:88:7e:02:00:87:a7:87:7a:06:7f:ed:33: ad:32:ff:43:09:6d:dc:1c:66:75:f7:8e:9b:e4:ee:a4:8f:5a: 53:d0:b1:fe:e4:04:85:b4:46:db:7f:4f:ea:89:dc:a3:af:69: e4:83:f4:d5:24:6f:ed:bf:a0:ea:3f:2d:d5:71:6e:f5:18:eb: aa:b7:9d:32:22:f8:07:ba:7a:e2:b5:db:fd:77:a0:dd:15:d9: 76:1f:85:2b:03:42:a3:50:98:b0:0a:fe:ad:4f:63:e6:1f:5c: 0b:ef:69:57:f9:da:7b:e4:12:f5:84:56:b7:9c:63:34:db:ac: 60:3c:08:3b:16:5d:9c:51:cc:51:ff:24:e5:7b:0e:c2:71:f6: d2:33:0e:98:88:38:ed:69:06:e3:73:fe:18:4f:6e:28:27:54: 8e:b8:76:52:4a:da:34:54:f5:ce:61:38:ae:aa:aa:a4:79:15: 41:27:93:80:12:f2:21:13:4e:bb:20:11:5c:6f:6a:20:61:83: 41:44:2e:5f:59:c7:b2:70:81:d5:d4:4d:92:8c:54:d1:80:1f: 9f:93:73:a4:2b:23:62:5e:82:a2:80:35:85:b4:6f:c5:ab:01: a3:66:3e:7a:13:60:18:f5:fb:fd:3e:b1:3d:2b:f7:51:34:8e: 42:60:5f:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWBui5oMG5r8exsmAiNOc8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYzU3NWNhZmEwMGJjNDFkNTdjNDk0YWMxZjVkYmNmZWU3 ODMzMmUwHhcNMjUxMjI1MTUwMDUxWhcNMjUxMjI2MTUwMDUxWjAzMTEwLwYDVQQD EyhhMWVjNmRiZWVhN2E3MmIwZjhiMTY4NzkzNzY0ODgwOGJmYjQ5Y2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBj6Jx6VQqf9c9WZY0fNW2vkfSXL Zg8LHVt3M6oYvuMnCUAfq14QqlmXDYrCLMd90PFFtg/X/wUQVU7p1qKBzuGWrYWH s5CVUOV9RSzUCgtTcG1rpLrkby4FGBpcTwKJWZaqCkfAk8+XW45yXnUnQJtvF58x 8rztbiOlA9tSJ8o06WkQkAO38Q64/Pm7ibY8XCLv8ddgbNGfTgQp/vhNMpZ+EMrs /sSAXKefaT/KyiQcXHM63DsU2bOvVnSiZ+87iLxI4iK6GzM3fOdgIdO08DoSB31C gqtUcNe2+ctuyUjfCLO1jBfGPwM9JV8rcXq967hbkOBe89igrKscQwlUBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHsbb7qenKw+LFoeTdkiAi/tJy3MB8GA1UdIwQY MBaAFKrFdcr6ALxB1XxJSsH128/ueDMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXNWMXl2b0F2RUhWZkVsS3dmWGJ6LTU0TXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zNWQ1OTgtYzMyYy00OWE3LWIxZjYt OGY5MTNlMjY5NmU1LzEvcXNWMXl2b0F2RUhWZkVsS3dmWGJ6LTU0TXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8zNWQ1OTgtYzMyYy00OWE3LWIxZjYtOGY5MTNlMjY5NmU1 LzEvcXNWMXl2b0F2RUhWZkVsS3dmWGJ6LTU0TXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwrmKKlxv iH4CAIenh3oGf+0zrTL/Qwlt3BxmdfeOm+TupI9aU9Cx/uQEhbRG239P6onco69p 5IP01SRv7b+g6j8t1XFu9RjrqredMiL4B7p64rXb/Xeg3RXZdh+FKwNCo1CYsAr+ rU9j5h9cC+9pV/nae+QS9YRWt5xjNNusYDwIOxZdnFHMUf8k5XsOwnH20jMOmIg4 7WkG43P+GE9uKCdUjrh2UkraNFT1zmE4rqqqpHkVQSeTgBLyIRNOuyARXG9qIGGD QUQuX1nHsnCB1dRNkoxU0YAfn5NzpCsjYl6CooA1hbRvxasBo2Y+ehNgGPX7/T6x PSv3UTSOQmBfug== -----END CERTIFICATE-----Generated at Thu Dec 25 22:15:39 2025 by rpki-client