This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json) Hash identifier: YajeTDezb6SuWOElHcfayNt9BvD0MR7u08+CJmtf0NQ= Subject key identifier: 60:C1:CE:E5:4D:B9:FB:65:E5:D8:12:71:AF:6B:D3:4D:FE:F5:76:7E Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62 Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462 Certificate serial: 019B0E92A84728B5299FABAAB3E7574A8E23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft Manifest number: 1778 Signing time: Thu 11 Dec 2025 18:00:50 +0000 Manifest this update: Thu 11 Dec 2025 18:00:50 +0000 Manifest next update: Fri 12 Dec 2025 18:00:50 +0000 Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: zUiy2vUypPRusRLZaax8EmEvbH8fSEKywDoNfldtNTs=) 2: mC6qnnktw8ocqw8es0LfRst29xw.roa (hash: ppmb2PFwvp6zlS01nCp0DE/SrZFmg3TuLccALf3DpFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:a8:47:28:b5:29:9f:ab:aa:b3:e7:57:4a:8e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462 Validity Not Before: Dec 11 18:00:50 2025 GMT Not After : Dec 12 18:00:50 2025 GMT Subject: CN=60c1cee54db9fb65e5d81271af6bd34dfef5767e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9c:09:0d:89:42:ac:b8:0a:38:5a:b2:e1:23: de:fc:5f:a6:6e:5d:b3:f5:db:9f:92:fb:ce:31:df: f8:cf:53:ff:d8:bb:eb:a1:b0:76:3d:05:be:eb:1d: 81:e3:bf:25:38:30:f6:a2:20:fd:1b:6f:6c:bc:6a: ae:e1:45:5e:5d:fc:8f:7f:a2:f9:8e:79:ff:87:fa: 4f:44:dd:e9:57:7d:47:f3:69:3d:ee:ce:bf:b3:ac: 28:ed:86:37:e2:b2:35:01:56:7e:27:12:65:47:da: 2f:a4:b5:7f:c0:65:0d:be:e8:99:1c:b3:e9:fc:ac: 55:8e:61:7e:65:36:25:ff:3c:55:73:d2:1f:fe:43: 60:df:53:fe:3b:98:dd:99:56:db:96:e8:7f:5b:3b: 01:f3:86:75:23:6f:4d:a6:03:a4:21:a7:2b:b1:a9: 3c:6e:f3:c6:5c:48:92:02:fc:7d:ad:28:ca:b3:b9: 0e:d1:f7:fb:bd:98:97:cf:5a:0e:c6:f6:0f:8d:fe: 3e:66:08:fe:78:b9:db:ee:18:a9:c3:69:70:41:87: 0d:64:fa:ba:c9:a3:59:8b:01:d7:cb:9d:87:6a:b5: 0f:9f:0f:25:56:a6:1a:be:c1:2b:a4:68:4b:78:ca: 45:ac:81:e1:4e:1b:05:c3:7b:0c:f4:ef:6d:da:8a: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C1:CE:E5:4D:B9:FB:65:E5:D8:12:71:AF:6B:D3:4D:FE:F5:76:7E X509v3 Authority Key Identifier: keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:58:18:20:46:df:d0:ab:80:0f:4e:b7:66:1c:9a:1c:f5:df: 99:3b:d4:1b:1f:29:4e:0f:00:d5:ff:74:80:09:4d:f8:09:73: d0:62:50:27:77:bd:b8:89:b5:ba:1c:9e:c8:11:ff:aa:09:3f: 06:91:5e:84:19:e8:7d:d5:69:92:36:c7:8e:04:6b:bc:31:66: 31:78:a8:62:79:79:47:0f:b5:48:06:b0:57:a1:e7:c2:b8:cf: 86:b9:22:1b:c6:24:2d:64:6f:f7:8e:16:1e:f4:ef:f1:e8:0c: 43:6a:3b:c8:e8:f5:a7:6c:0b:9c:ea:f1:67:34:af:5a:a7:05: c0:d3:9e:2b:42:a5:f2:21:73:a3:7f:30:76:34:5d:b2:46:ea: f3:d1:cf:f2:c5:1b:3b:9e:68:cf:4f:66:b4:06:11:c3:9d:ab: 80:9b:be:44:bd:15:6e:57:78:09:81:10:a0:df:11:e2:99:18: 6b:2c:18:04:8b:63:6a:5b:27:5b:45:99:7f:0d:7d:21:d5:08: 51:a8:c2:9a:e6:35:c1:ba:17:39:06:60:97:ed:1f:1a:8d:e6: a6:8a:88:29:f6:ef:28:59:14:fc:02:03:5d:e9:45:a8:1f:df: bf:5f:ac:1d:39:6e:d1:d9:6a:9b:d7:f9:9a:1a:38:b2:50:be: de:a1:76:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkqhHKLUpn6uqs+dXSo4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2RlMzY1ZDdkMmI1ODUwNmU0ZDRhYmYwYzJlZjdjZDVl M2I0NjIwHhcNMjUxMjExMTgwMDUwWhcNMjUxMjEyMTgwMDUwWjAzMTEwLwYDVQQD Eyg2MGMxY2VlNTRkYjlmYjY1ZTVkODEyNzFhZjZiZDM0ZGZlZjU3NjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5wJDYlCrLgKOFqy4SPe/F+mbl2z 9dufkvvOMd/4z1P/2LvrobB2PQW+6x2B478lODD2oiD9G29svGqu4UVeXfyPf6L5 jnn/h/pPRN3pV31H82k97s6/s6wo7YY34rI1AVZ+JxJlR9ovpLV/wGUNvuiZHLPp /KxVjmF+ZTYl/zxVc9If/kNg31P+O5jdmVbbluh/WzsB84Z1I29NpgOkIacrsak8 bvPGXEiSAvx9rSjKs7kO0ff7vZiXz1oOxvYPjf4+Zgj+eLnb7hipw2lwQYcNZPq6 yaNZiwHXy52HarUPnw8lVqYavsErpGhLeMpFrIHhThsFw3sM9O9t2oqqRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDBzuVNuftl5dgSca9r003+9XZ+MB8GA1UdIwQY MBaAFELN42XX0rWFBuTUq/DC73zV47RiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEt MDJlMWJkNjA1MGU1LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEtMDJlMWJkNjA1MGU1 LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1gYIEbf 0KuAD063ZhyaHPXfmTvUGx8pTg8A1f90gAlN+Alz0GJQJ3e9uIm1uhyeyBH/qgk/ BpFehBnofdVpkjbHjgRrvDFmMXioYnl5Rw+1SAawV6HnwrjPhrkiG8YkLWRv944W HvTv8egMQ2o7yOj1p2wLnOrxZzSvWqcFwNOeK0Kl8iFzo38wdjRdskbq89HP8sUb O55oz09mtAYRw52rgJu+RL0Vbld4CYEQoN8R4pkYaywYBItjalsnW0WZfw19IdUI UajCmuY1wboXOQZgl+0fGo3mpoqIKfbvKFkU/AIDXelFqB/fv1+sHTlu0dlqm9f5 mho4slC+3qF2SQ== -----END CERTIFICATE-----Generated at Fri Dec 12 03:34:31 2025 by rpki-client