This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: t8t440/tiJaLh6y6K1OTe4hnme80Wzd9xBSAsdWrOFA= Subject key identifier: DB:34:F6:F5:AC:8E:AB:A1:9C:79:06:4C:F7:A3:F6:19:2B:70:48:6F Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019B1081218B511833BD1A4AC72559C3ABF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 177D Signing time: Fri 12 Dec 2025 03:00:56 +0000 Manifest this update: Fri 12 Dec 2025 03:00:56 +0000 Manifest next update: Sat 13 Dec 2025 03:00:56 +0000 Files and hashes: 1: 1-j_NENm5-sNQNRhoG12DGhts2RA.roa (hash: rxMl58Hpd8I9+Opcjq2WXGHyT2V7qNJ/2GgS8YODf/c=) 2: 4AzaQ00Qbm11xuSZKiEAVdKCvuo.roa (hash: S2of1YjCL3/XCtKNbSiofOIataHuKf+CE34W0v3KCW4=) 3: 8ICMXIH8G4STVhG9LTK8XF1huYU.roa (hash: sFIpNhCbdCmlf97RdiMILKWsK0y4eXG6qnrYkuB08Vw=) 4: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (hash: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=) 5: OCLegx7AAJrXlZwafZY4saWNhbA.roa (hash: e9VTWsNvHN7d5ckNNnCA+CRusyYItjY5AHniHQNomyw=) 6: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (hash: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=) 7: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: x7JDlJ42/zAK5mF7grcixm5nJRHWtIfGLw7v73R6uQw=) 8: RV95HMnGrJSH6R13BYTApcw5VQE.roa (hash: OCGu39xDZSl3EactuFgzu+oeqkGxYuePRbccAhiaclk=) 9: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (hash: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=) 10: iIDxyZI7f69mJkZ2Wv7XkahzbJk.roa (hash: +LiZiCI3CHohIXxSoLr49Tx7ntAiVnERXS5bwyYZ1ps=) 11: j8Z9luk9TH9XzdeKRdbx_0lXU_Q.roa (hash: SQ7pmoz5e7GX+kpjw+HCwdCwB08Ca3taMT0X/4L2FsQ=) 12: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (hash: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=) 13: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (hash: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:21:8b:51:18:33:bd:1a:4a:c7:25:59:c3:ab:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Dec 12 03:00:56 2025 GMT Not After : Dec 13 03:00:56 2025 GMT Subject: CN=db34f6f5ac8eaba19c79064cf7a3f6192b70486f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:77:30:9f:35:1a:20:77:24:b6:0c:9b:b0:c8: 28:d5:0f:c6:54:5a:17:13:82:29:1b:bf:59:5a:3f: 74:0e:49:73:95:7b:8b:86:7b:95:51:76:b4:6d:da: 7a:31:f0:0d:9c:79:63:0d:89:dd:b6:ad:ff:9a:e3: 64:54:a4:35:81:9a:6a:95:18:39:73:fd:0d:4c:e1: e0:0e:af:1f:c5:4f:be:94:63:e5:6b:9b:e3:5b:8f: fd:76:82:8e:54:bd:69:80:fb:bb:8e:64:b3:29:e5: 3b:76:32:e0:4b:a6:48:e9:b7:40:c1:2f:17:da:e7: ad:36:b3:80:27:d8:31:19:b3:58:9b:a3:b1:01:79: f1:91:b4:4c:46:a9:0b:82:07:4b:e7:44:2e:14:ef: b9:8f:04:53:6e:34:1a:3d:a1:3b:f6:a5:5f:8e:7b: 5b:1a:40:df:e5:72:80:8a:00:64:6b:06:1f:80:8d: 05:ba:b8:76:91:64:c2:24:b3:45:62:5d:60:0b:a9: 3c:46:bd:0a:4c:96:aa:21:13:04:80:87:27:29:40: 09:d2:99:e4:b0:10:3d:46:72:2d:46:df:72:c9:c7: 03:4d:fe:19:62:04:fb:56:e5:73:b2:c8:e8:fa:9b: 9a:c2:97:4a:e2:17:a2:90:fc:6d:4e:34:53:b5:a2: 3a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:34:F6:F5:AC:8E:AB:A1:9C:79:06:4C:F7:A3:F6:19:2B:70:48:6F X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e6:a3:0c:9b:83:31:52:d5:a6:f6:41:66:ee:39:a0:85:66: ab:b2:d1:33:94:6b:ac:1c:88:90:fd:e7:4e:39:69:ec:67:7f: c3:16:7f:07:be:ab:56:60:ab:30:09:b4:91:75:05:68:3e:35: 40:84:26:f2:ac:9f:4e:cf:93:48:c5:2a:38:ff:d6:e5:d9:28: 7b:99:0b:04:f2:f1:e7:a4:0a:5b:c7:f1:9b:3a:5c:a4:3b:2f: 2f:54:07:f5:09:bb:c0:33:b5:fc:34:cd:a4:2e:ab:9d:79:33: d1:2b:4c:14:08:56:2d:ba:fa:15:c6:a6:7a:eb:53:73:8d:f2: 3c:30:fa:43:c0:22:03:4f:4e:7f:31:a1:cb:b8:80:ed:02:cd: 3c:79:4a:c5:10:fe:41:f7:8d:30:e6:7d:9e:94:ad:a0:50:f2: 9a:ec:2e:6b:b2:5a:32:b1:ca:fa:b9:94:32:80:5e:cf:4b:57: b4:bf:74:e9:10:43:26:6a:1d:73:2e:aa:47:de:fd:5f:6c:e6: 7f:af:7e:ec:3e:bd:93:40:cf:71:23:26:64:07:79:01:9e:4f: 22:29:5e:e1:b8:66:27:14:21:36:ff:71:e8:4d:21:1d:9f:df: 1a:66:45:77:28:ae:fb:22:87:02:57:b7:5d:93:8c:5d:5e:4d: 3a:5c:06:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgSGLURgzvRpKxyVZw6vzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjUxMjEyMDMwMDU2WhcNMjUxMjEzMDMwMDU2WjAzMTEwLwYDVQQD EyhkYjM0ZjZmNWFjOGVhYmExOWM3OTA2NGNmN2EzZjYxOTJiNzA0ODZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3cwnzUaIHcktgybsMgo1Q/GVFoX E4IpG79ZWj90DklzlXuLhnuVUXa0bdp6MfANnHljDYndtq3/muNkVKQ1gZpqlRg5 c/0NTOHgDq8fxU++lGPla5vjW4/9doKOVL1pgPu7jmSzKeU7djLgS6ZI6bdAwS8X 2uetNrOAJ9gxGbNYm6OxAXnxkbRMRqkLggdL50QuFO+5jwRTbjQaPaE79qVfjntb GkDf5XKAigBkawYfgI0Furh2kWTCJLNFYl1gC6k8Rr0KTJaqIRMEgIcnKUAJ0pnk sBA9RnItRt9yyccDTf4ZYgT7VuVzssjo+puawpdK4heikPxtTjRTtaI6mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNs09vWsjquhnHkGTPej9hkrcEhvMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuajDJuD MVLVpvZBZu45oIVmq7LRM5RrrByIkP3nTjlp7Gd/wxZ/B76rVmCrMAm0kXUFaD41 QIQm8qyfTs+TSMUqOP/W5dkoe5kLBPLx56QKW8fxmzpcpDsvL1QH9Qm7wDO1/DTN pC6rnXkz0StMFAhWLbr6FcameutTc43yPDD6Q8AiA09OfzGhy7iA7QLNPHlKxRD+ QfeNMOZ9npStoFDymuwua7JaMrHK+rmUMoBez0tXtL906RBDJmodcy6qR979X2zm f69+7D69k0DPcSMmZAd5AZ5PIile4bhmJxQhNv9x6E0hHZ/fGmZFdyiu+yKHAle3 XZOMXV5NOlwGXA== -----END CERTIFICATE-----Generated at Fri Dec 12 06:40:52 2025 by rpki-client