This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json) Hash identifier: i379oqBpKpXBXXDKSykqb+MOEuURCCQSbS69QIOeDko= Subject key identifier: A5:67:89:2B:08:93:19:F3:26:8D:A8:D5:91:51:DB:AB:F1:A7:79:6B Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02 Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102 Certificate serial: 019B348D4B61F9841A5B9BC75BDFAA5DF8D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 03:00:33 +0000 Manifest this update: Fri 19 Dec 2025 03:00:33 +0000 Manifest next update: Sat 20 Dec 2025 03:00:33 +0000 Files and hashes: 1: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: CGRdheKzZX3dR7HLffDOn6jEOkfrDMHVoShRIWBwLqM=) 2: uU_Epbh4k-iNlfIsi_aGVBuYX3E.roa (hash: oN88HQNaxlS+SnkVrt2tuPqyaZ78GSR116CcNBSWxWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:8d:4b:61:f9:84:1a:5b:9b:c7:5b:df:aa:5d:f8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102 Validity Not Before: Dec 19 03:00:33 2025 GMT Not After : Dec 20 03:00:33 2025 GMT Subject: CN=a567892b089319f3268da8d59151dbabf1a7796b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:af:ef:4a:4b:de:ee:a6:d4:fb:03:7a:99:68: 79:3e:dc:c0:8b:4f:76:2a:37:be:85:31:9f:23:4e: b7:20:db:47:5c:0a:15:05:5e:06:dc:a4:90:eb:00: d9:ca:57:cd:3a:c8:e1:b4:2c:9b:85:8a:7f:7e:0a: 96:58:dd:c9:6e:0f:bc:66:01:ad:2e:7e:6e:54:04: 28:85:2d:98:a2:b7:a9:1a:bf:ec:d1:53:c8:81:bf: 46:82:3d:2e:a0:96:52:80:34:f9:80:6e:c2:42:2e: e9:b5:e0:d7:65:6e:8c:93:4f:3e:da:bd:6a:ef:24: a8:ec:58:62:8f:c1:1b:91:ae:5d:26:34:f9:b0:d8: 5c:d7:d2:a0:4c:cf:e0:f3:74:ff:32:95:24:f2:fd: bd:af:d7:7b:fa:c9:f1:d7:94:c6:f7:7e:d0:21:58: e5:0f:18:14:87:71:a1:8a:3d:f8:fc:96:9b:c9:e6: c5:13:92:86:1f:c6:27:0f:27:5f:16:98:9a:22:40: 0d:f6:53:d5:80:34:63:54:61:40:55:9e:f8:33:e3: f9:61:05:3e:10:92:83:70:27:fb:80:9d:bf:c5:ce: 21:a2:ff:b1:67:34:ee:8d:df:8c:77:fe:2e:71:cf: e5:e1:c4:73:26:23:96:4b:bf:14:c6:cb:de:cf:75: 75:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:67:89:2B:08:93:19:F3:26:8D:A8:D5:91:51:DB:AB:F1:A7:79:6B X509v3 Authority Key Identifier: keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e0:91:44:a0:0e:78:a8:46:a9:30:7b:c0:76:1d:18:5d:ef: d5:57:82:b9:7a:09:e1:a4:64:ac:e1:39:6c:66:5c:33:dd:29: 59:bb:39:63:b7:9d:1b:c2:d5:bb:81:7f:be:85:67:cd:66:4a: d9:60:f3:25:9b:e6:80:6c:de:56:77:ff:dd:1c:cf:74:70:29: d2:c4:dc:e1:b4:4d:42:05:54:a1:9f:28:bb:fe:8e:a0:0c:d6: ec:dc:cd:6a:14:28:e0:cc:78:88:d8:a1:e9:11:0a:cc:af:58: 41:1f:14:55:7c:06:95:73:d9:c0:1f:c9:e4:0e:91:74:19:fb: f3:8a:b5:8d:4f:ea:af:1b:2d:a5:dd:95:9e:28:74:1b:0e:0e: 28:05:59:b9:85:60:3b:73:44:96:89:71:27:af:89:6c:e6:e0: d8:81:51:74:7d:f0:01:3e:aa:37:59:05:11:90:49:5b:97:7a: 75:e5:31:80:13:2a:c9:f9:0b:27:1e:c5:a7:49:91:ae:8e:59: 4f:81:5e:2a:2b:84:58:3a:12:dc:f6:1a:37:41:d8:4c:ad:ba: f4:3d:9a:79:c2:85:aa:51:48:cf:03:03:52:14:38:79:66:fe: 7f:c6:1f:7c:f9:0d:8a:86:10:c4:6e:db:fe:d3:61:5a:a9:f6: db:b3:b0:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0jUth+YQaW5vHW9+qXfjTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOWIxY2YyMWQyMGY4YzZmOTQ2NDFlMzMyN2U0NTU1ZTJl NDExMDIwHhcNMjUxMjE5MDMwMDMzWhcNMjUxMjIwMDMwMDMzWjAzMTEwLwYDVQQD EyhhNTY3ODkyYjA4OTMxOWYzMjY4ZGE4ZDU5MTUxZGJhYmYxYTc3OTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6/vSkve7qbU+wN6mWh5PtzAi092 Kje+hTGfI063INtHXAoVBV4G3KSQ6wDZylfNOsjhtCybhYp/fgqWWN3Jbg+8ZgGt Ln5uVAQohS2YorepGr/s0VPIgb9Ggj0uoJZSgDT5gG7CQi7pteDXZW6Mk08+2r1q 7ySo7Fhij8Ebka5dJjT5sNhc19KgTM/g83T/MpUk8v29r9d7+snx15TG937QIVjl DxgUh3Ghij34/JabyebFE5KGH8YnDydfFpiaIkAN9lPVgDRjVGFAVZ74M+P5YQU+ EJKDcCf7gJ2/xc4hov+xZzTujd+Md/4ucc/l4cRzJiOWS78Uxsvez3V1+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVniSsIkxnzJo2o1ZFR26vxp3lrMB8GA1UdIwQY MBaAFEKbHPIdIPjG+UZB4zJ+RVXi5BECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yMDQ1MDktOGEzMi00YjI4LTk3Yzgt ZTU2ZTczODM4MGRlLzEvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8yMDQ1MDktOGEzMi00YjI4LTk3YzgtZTU2ZTczODM4MGRl LzEvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+CRRKAO eKhGqTB7wHYdGF3v1VeCuXoJ4aRkrOE5bGZcM90pWbs5Y7edG8LVu4F/voVnzWZK 2WDzJZvmgGzeVnf/3RzPdHAp0sTc4bRNQgVUoZ8ou/6OoAzW7NzNahQo4Mx4iNih 6REKzK9YQR8UVXwGlXPZwB/J5A6RdBn784q1jU/qrxstpd2Vnih0Gw4OKAVZuYVg O3NElolxJ6+JbObg2IFRdH3wAT6qN1kFEZBJW5d6deUxgBMqyfkLJx7Fp0mRro5Z T4FeKiuEWDoS3PYaN0HYTK269D2aecKFqlFIzwMDUhQ4eWb+f8YffPkNioYQxG7b /tNhWqn227Owgw== -----END CERTIFICATE-----Generated at Fri Dec 19 11:41:22 2025 by rpki-client