This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json) Hash identifier: cY20lLFsn+S5NTYn2mMt/BW7UghUm/i4+uhx+viAids= Subject key identifier: 42:46:2E:92:DC:13:FC:CA:38:45:61:AF:28:6D:ED:96:B0:83:7D:2A Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7 Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7 Certificate serial: 019B3B34BBD3D5FF182F3BD4ACD9913B4B5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 10:01:10 +0000 Manifest this update: Sat 20 Dec 2025 10:01:10 +0000 Manifest next update: Sun 21 Dec 2025 10:01:10 +0000 Files and hashes: 1: nNICaFb7G3xV0xaZvY4tLFZeqjU.roa (hash: 5uzWSjZq0ATl8Nrn/VGx6JZA+5X6g81sHleJ+o0B2vM=) 2: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: zGOfMxNZgY7j083dutJ4c1IuN+AMVIlYic4oByGJR6E=) 3: vlECbF8HkBG6WpBhMBZnOl_AraI.roa (hash: 3UR9pQsXBE1n+38LaDwJGSYsS95ZptnvsHsDatSDo+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:bb:d3:d5:ff:18:2f:3b:d4:ac:d9:91:3b:4b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7 Validity Not Before: Dec 20 10:01:10 2025 GMT Not After : Dec 21 10:01:10 2025 GMT Subject: CN=42462e92dc13fcca384561af286ded96b0837d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7b:80:43:e7:83:26:0b:71:08:f6:ff:ad:fd: 17:c1:f2:0a:19:3e:06:f2:3a:f9:d2:e4:dc:94:ef: 03:c8:99:44:98:5c:fe:e4:bd:86:e1:41:70:ec:6b: fc:5a:f8:42:7d:4e:ab:d1:d0:04:ff:28:a4:47:b6: 33:61:1c:f5:a4:53:19:d7:f1:22:03:79:05:4c:81: 6d:dc:af:32:bf:be:9f:70:b3:bf:f4:5d:28:cc:12: ae:15:3f:40:e9:9e:58:55:9b:f5:6b:ee:bc:0c:27: 12:31:ec:a4:2c:22:28:9d:96:80:99:92:8d:a3:e6: 54:4d:51:21:4b:b9:41:62:41:71:f6:40:7e:1a:72: 47:ff:2d:3f:86:90:36:62:f3:1e:83:d8:51:31:64: 9b:74:1e:77:a1:a6:da:e1:c1:d1:8b:e6:24:04:a9: 82:5a:86:5f:ee:a5:d5:48:97:c0:4f:33:8a:88:c4: f2:c7:46:41:0a:c4:dc:08:7a:95:16:4b:7b:cf:5a: 08:59:3b:99:ba:34:08:fb:32:7f:a7:3d:c5:58:58: b9:63:11:8b:d9:a1:52:2f:bd:7d:95:ad:ee:17:93: c4:d8:db:6f:57:49:e9:81:7a:ee:0a:94:fd:88:01: 01:25:c9:2e:f5:ec:14:37:90:9e:16:ba:21:94:3d: 06:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:46:2E:92:DC:13:FC:CA:38:45:61:AF:28:6D:ED:96:B0:83:7D:2A X509v3 Authority Key Identifier: keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:46:73:47:6b:ce:e8:4b:0b:fd:fd:0f:2f:14:88:d9:8d:0c: e3:1e:85:c4:1f:0b:30:94:15:63:39:64:58:62:1a:b1:67:a6: 4c:89:0f:60:57:09:8b:30:14:47:c0:a9:f4:22:4d:cc:e7:1f: 4d:d6:02:d0:0a:84:af:b8:3d:b0:e0:fe:bf:94:b7:87:ae:f2: 91:a8:a1:12:dc:4e:0d:e3:a4:07:6a:18:36:12:18:e9:dd:56: 81:12:bd:d9:50:24:b3:f6:7f:b7:5a:b6:83:49:7b:fd:9c:a1: 08:ba:10:78:a0:8f:b8:16:70:af:60:f9:83:36:71:1e:a1:1c: a1:ae:0e:15:37:b2:38:b4:6b:60:1d:51:e4:05:2c:b8:11:a4: 74:d9:fd:c6:8f:41:c4:bf:55:89:76:88:38:68:54:6b:52:a9: f4:a0:42:df:17:9b:0d:43:a5:28:1e:0c:bd:7c:ef:a5:42:ad: 5e:05:fa:51:d4:e8:1e:d7:e8:b3:ce:65:2a:92:8e:39:54:f4: 90:33:85:da:5d:9f:1e:d2:b1:68:5b:fb:bc:f9:ca:ff:ca:98: 95:8d:7f:e6:5b:71:2b:db:7e:2c:6a:05:46:b4:a6:74:cb:18: 7c:4b:92:9b:2b:49:b4:dc:12:cf:10:1b:b9:0b:ad:01:4a:6c: c1:0e:e6:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NLvT1f8YLzvUrNmRO0tdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MzRiOGRlYzEyODFiYzU0MzE3YzdmZWQwZTlhY2JjN2I5 N2NhYzcwHhcNMjUxMjIwMTAwMTEwWhcNMjUxMjIxMTAwMTEwWjAzMTEwLwYDVQQD Eyg0MjQ2MmU5MmRjMTNmY2NhMzg0NTYxYWYyODZkZWQ5NmIwODM3ZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HuAQ+eDJgtxCPb/rf0XwfIKGT4G 8jr50uTclO8DyJlEmFz+5L2G4UFw7Gv8WvhCfU6r0dAE/yikR7YzYRz1pFMZ1/Ei A3kFTIFt3K8yv76fcLO/9F0ozBKuFT9A6Z5YVZv1a+68DCcSMeykLCIonZaAmZKN o+ZUTVEhS7lBYkFx9kB+GnJH/y0/hpA2YvMeg9hRMWSbdB53oaba4cHRi+YkBKmC WoZf7qXVSJfATzOKiMTyx0ZBCsTcCHqVFkt7z1oIWTuZujQI+zJ/pz3FWFi5YxGL 2aFSL719la3uF5PE2NtvV0npgXruCpT9iAEBJcku9ewUN5CeFrohlD0GawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJGLpLcE/zKOEVhryht7Zawg30qMB8GA1UdIwQY MBaAFKk0uN7BKBvFQxfH/tDprLx7l8rHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84N2I1NjItY2I3ZC00YTkzLWJkNDMt MjdlZTQyZDkyNWFkLzEvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC84N2I1NjItY2I3ZC00YTkzLWJkNDMtMjdlZTQyZDkyNWFk LzEvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0ZzR2vO 6EsL/f0PLxSI2Y0M4x6FxB8LMJQVYzlkWGIasWemTIkPYFcJizAUR8Cp9CJNzOcf TdYC0AqEr7g9sOD+v5S3h67ykaihEtxODeOkB2oYNhIY6d1WgRK92VAks/Z/t1q2 g0l7/ZyhCLoQeKCPuBZwr2D5gzZxHqEcoa4OFTeyOLRrYB1R5AUsuBGkdNn9xo9B xL9ViXaIOGhUa1Kp9KBC3xebDUOlKB4MvXzvpUKtXgX6UdToHtfos85lKpKOOVT0 kDOF2l2fHtKxaFv7vPnK/8qYlY1/5ltxK9t+LGoFRrSmdMsYfEuSmytJtNwSzxAb uQutAUpswQ7myA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:46 2025 by rpki-client