This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft File: Qs9KEo0J38S4sDWhLNgx-fewFGk.mft (raw, json) Hash identifier: ScDWdQqUEoIlmvvdUuPx18gI2fBvn5D/E71KOx0shEs= Subject key identifier: 54:4A:86:00:DD:28:80:7E:99:DD:2F:EC:84:14:D1:43:96:54:65:39 Authority key identifier: 42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69 Certificate issuer: /CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469 Certificate serial: 019B5BD24F92C083A03E24DC8CB381ECEC99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft Manifest number: 10AF Signing time: Fri 26 Dec 2025 18:01:08 +0000 Manifest this update: Fri 26 Dec 2025 18:01:08 +0000 Manifest next update: Sat 27 Dec 2025 18:01:08 +0000 Files and hashes: 1: 2rG3zP2nsK1WFDdtam1fkefUVec.roa (hash: FYwcLySS6BHsPeqa2YZMNFpU87urYtsqq/j3a/UUmqo=) 2: G4MlXm_89uj6pHE4Hj0jm0JnAPs.roa (hash: IvJvABmtoL2D5H2lLbc36SYTprrxJ3+le+YIp65E/hA=) 3: Qs9KEo0J38S4sDWhLNgx-fewFGk.crl (hash: KPX9LotWBbQ94Jsb+LjQD9fFTxJUY3uDahbVpi3tULI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:4f:92:c0:83:a0:3e:24:dc:8c:b3:81:ec:ec:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469 Validity Not Before: Dec 26 18:01:08 2025 GMT Not After : Dec 27 18:01:08 2025 GMT Subject: CN=544a8600dd28807e99dd2fec8414d14396546539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b9:17:8b:a6:91:43:da:71:59:8b:df:1d:4c: a7:cd:43:97:66:10:84:f9:6f:00:a4:ad:62:8e:b5: 1f:2b:36:14:8b:2b:53:28:2f:87:e4:ce:c7:aa:59: 51:7e:20:5f:ee:ae:49:24:61:9c:7a:b7:89:2c:f0: 6b:f4:c1:0a:e6:81:c8:46:91:14:57:c7:9f:64:a9: ec:67:0d:d6:42:1b:b0:fb:cf:4c:8e:00:d9:58:4b: 5e:c0:d9:49:25:92:c5:94:e4:f8:6c:bf:cd:09:ec: 16:38:1a:84:a6:9b:a2:fe:4a:00:54:a9:17:c9:55: 70:c5:d7:7f:46:70:b5:73:72:13:16:2c:dd:6e:a9: 91:05:45:77:ff:2c:ba:50:81:e2:d5:ce:e4:43:14: 45:d9:72:c9:91:54:d2:9c:98:ae:f8:4b:46:35:f2: 14:6d:a8:27:c3:b9:02:f0:4e:b5:b2:59:f2:ef:b1: fe:b0:8e:e1:9a:b4:2f:52:ba:e1:58:aa:fd:c5:b5: d3:05:78:6c:aa:3b:ba:87:5b:85:64:26:71:d0:36: 1c:80:2b:5e:81:ff:f7:25:f9:76:d8:80:17:09:b8: 96:5e:95:39:28:a8:8a:02:58:69:48:a7:ab:9d:a8: 26:d5:77:02:3d:93:b5:d6:a6:ee:fe:89:22:17:2d: b7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4A:86:00:DD:28:80:7E:99:DD:2F:EC:84:14:D1:43:96:54:65:39 X509v3 Authority Key Identifier: keyid:42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:53:51:09:a3:7d:63:01:06:97:7c:aa:e5:04:81:ab:83:c6: 87:3d:02:7c:09:a1:bc:36:b7:49:3b:d2:08:14:7f:ea:f4:30: 7a:4d:d7:43:e7:d2:be:b1:69:c0:d3:f7:93:6d:cf:38:d6:b6: 63:f7:65:f5:d5:3f:e6:80:20:54:82:15:b0:3e:dd:bb:ec:e1: 71:1a:16:d3:09:4e:20:53:bc:c1:72:26:a9:1a:19:b1:03:ca: e9:1d:9e:35:fc:9b:04:b5:43:b7:76:83:8d:14:29:98:64:82: 98:2d:d3:5a:62:69:4b:3e:6c:d7:5c:e5:5d:b7:e8:56:18:4f: e3:07:4a:39:e3:5b:41:5e:24:53:de:05:4c:fc:72:ed:f7:0c: f1:d3:51:74:f4:12:47:fb:64:7e:71:ee:2a:00:f2:bb:46:f3: b5:22:b9:d6:0e:9b:a8:cf:e8:e4:19:0e:c5:dc:a1:f2:82:45: fe:a8:b4:dc:45:0d:31:27:dc:17:6a:33:3c:31:b3:09:07:f9: 20:ba:05:db:00:0f:f1:5c:09:f0:26:92:46:a8:eb:7e:c9:66: 9c:aa:fa:75:16:da:b0:f0:38:d9:a9:cd:a8:b2:45:45:f2:48: e8:05:70:34:78:8e:92:6d:55:c2:96:91:ce:7f:66:cc:ab:e9: 99:60:d2:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0k+SwIOgPiTcjLOB7OyZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2Y0YTEyOGQwOWRmYzRiOGIwMzVhMTJjZDgzMWY5Zjdi MDE0NjkwHhcNMjUxMjI2MTgwMTA4WhcNMjUxMjI3MTgwMTA4WjAzMTEwLwYDVQQD Eyg1NDRhODYwMGRkMjg4MDdlOTlkZDJmZWM4NDE0ZDE0Mzk2NTQ2NTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrkXi6aRQ9pxWYvfHUynzUOXZhCE +W8ApK1ijrUfKzYUiytTKC+H5M7HqllRfiBf7q5JJGGcereJLPBr9MEK5oHIRpEU V8efZKnsZw3WQhuw+89MjgDZWEtewNlJJZLFlOT4bL/NCewWOBqEppui/koAVKkX yVVwxdd/RnC1c3ITFizdbqmRBUV3/yy6UIHi1c7kQxRF2XLJkVTSnJiu+EtGNfIU bagnw7kC8E61slny77H+sI7hmrQvUrrhWKr9xbXTBXhsqju6h1uFZCZx0DYcgCte gf/3Jfl22IAXCbiWXpU5KKiKAlhpSKernagm1XcCPZO11qbu/okiFy23VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRKhgDdKIB+md0v7IQU0UOWVGU5MB8GA1UdIwQY MBaAFELPShKNCd/EuLA1oSzYMfn3sBRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM5S0VvMEozOFM0c0RXaExOZ3gtZmV3RkdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81ZGE3MjktYmEyNi00ZmRhLTkwMTEt MGIwNDM3NWY5YjM2LzEvUXM5S0VvMEozOFM0c0RXaExOZ3gtZmV3RkdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC81ZGE3MjktYmEyNi00ZmRhLTkwMTEtMGIwNDM3NWY5YjM2 LzEvUXM5S0VvMEozOFM0c0RXaExOZ3gtZmV3RkdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilNRCaN9 YwEGl3yq5QSBq4PGhz0CfAmhvDa3STvSCBR/6vQwek3XQ+fSvrFpwNP3k23PONa2 Y/dl9dU/5oAgVIIVsD7du+zhcRoW0wlOIFO8wXImqRoZsQPK6R2eNfybBLVDt3aD jRQpmGSCmC3TWmJpSz5s11zlXbfoVhhP4wdKOeNbQV4kU94FTPxy7fcM8dNRdPQS R/tkfnHuKgDyu0bztSK51g6bqM/o5BkOxdyh8oJF/qi03EUNMSfcF2ozPDGzCQf5 ILoF2wAP8VwJ8CaSRqjrfslmnKr6dRbasPA42anNqLJFRfJI6AVwNHiOkm1VwpaR zn9mzKvpmWDShQ== -----END CERTIFICATE-----Generated at Fri Dec 26 23:00:14 2025 by rpki-client