This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json) Hash identifier: 5EYGtXiS0c9m6p3sUxA/lAc9qaRcHSSgGJrQgRPtWr4= Subject key identifier: FD:C6:95:04:48:63:E4:D8:AF:33:0B:92:2F:12:89:F7:B4:01:09:73 Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d Certificate serial: 019B36B2E725DB24381F488DD67FE17D4BFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 13:00:52 +0000 Manifest this update: Fri 19 Dec 2025 13:00:52 +0000 Manifest next update: Sat 20 Dec 2025 13:00:52 +0000 Files and hashes: 1: 6fJ4zkF0Wp752Gh82PiGV0cycFs.roa (hash: zmN/ZdPf9fmMKW0I3LZoD4w3jrap740/mP6rHx2Dkzc=) 2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: PrwONHvNtjuz8PYPIFOLPIaT8FK7GRCAA3rlRkK0peY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b2:e7:25:db:24:38:1f:48:8d:d6:7f:e1:7d:4b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d Validity Not Before: Dec 19 13:00:52 2025 GMT Not After : Dec 20 13:00:52 2025 GMT Subject: CN=fdc695044863e4d8af330b922f1289f7b4010973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:fd:93:76:12:5d:6e:23:77:d4:0c:8d:a8: 1c:b5:2f:f7:90:e7:20:3e:7c:05:db:95:97:54:10: 01:13:b5:4b:e6:55:4f:08:72:15:fe:36:38:50:f8: c7:a1:c1:c6:61:7c:22:82:6f:dc:b9:69:ec:8d:9d: 38:b6:4d:fc:4a:cb:92:15:4a:14:59:2b:f4:4a:a8: 06:d1:58:d3:ef:99:2c:74:72:60:40:53:e4:c0:97: d6:ea:7e:f2:39:b2:66:eb:1e:cb:7b:a2:cd:59:b2: 7c:c0:e5:51:c7:c1:33:d2:11:ec:8d:b0:cd:36:0f: 19:a7:16:83:7b:3a:f0:1c:92:3d:9c:d0:92:74:ea: f8:53:a5:5c:a2:99:6a:47:2d:67:dc:66:da:99:55: 48:e7:21:bf:c1:72:7c:ec:79:b0:bb:69:a4:24:85: ea:a7:bc:c3:dc:b1:e3:d9:6b:7a:14:36:75:e8:a2: 3e:7a:7e:3a:48:dd:23:6a:14:33:9d:7d:a3:bd:f1: 9c:a6:9f:29:64:f3:12:b3:bd:32:95:c1:fa:c9:89: 52:aa:d3:3d:7d:cc:00:89:83:37:5b:07:7a:71:94: 8a:8c:83:40:d5:85:07:09:2a:eb:26:d7:0f:1e:58: f3:33:cd:90:67:81:9e:04:e0:f6:28:55:fb:6c:b1: 7a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C6:95:04:48:63:E4:D8:AF:33:0B:92:2F:12:89:F7:B4:01:09:73 X509v3 Authority Key Identifier: keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:00:71:ea:ad:e5:21:bb:26:d1:3f:ac:1f:6b:f4:11:fa:63: 4d:0c:4a:db:21:2e:36:73:99:f7:af:74:3f:4c:4a:dd:ab:73: 69:1f:c6:c9:8b:5e:91:39:17:1a:64:e0:91:29:42:00:c6:15: 92:6a:64:a5:fb:d0:29:01:87:84:13:b6:4c:ff:61:09:f3:df: bd:01:8c:e8:89:61:5c:50:13:20:20:43:89:bb:9d:73:a4:fa: 3c:cf:60:93:be:19:bb:e9:09:b0:5d:1d:ab:ca:4c:ab:28:be: 02:58:46:e4:b5:03:35:72:1e:58:e2:8e:66:9c:9a:42:cb:41: 74:6e:bb:71:b5:3f:a3:4f:ee:a8:a9:4d:d5:2e:f4:2c:47:c1: 29:21:16:91:4d:69:2a:3e:de:15:3c:28:50:aa:a5:e1:59:83: 0a:9f:9d:21:4b:ae:20:9b:6a:30:f4:2f:cf:3a:c1:44:75:bc: 73:fc:13:72:8a:b8:62:aa:55:9f:c0:bc:74:81:5a:35:96:29: 22:26:6b:56:28:77:e9:ef:82:3a:16:56:9e:17:38:a3:08:1a: 9f:ec:cd:8e:1b:4a:e8:6e:7a:cc:4c:a8:cc:8c:8a:20:bd:d1: e2:6d:a6:29:e0:f3:0c:56:2f:10:98:41:4d:83:83:d6:aa:fd: 20:9a:0f:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2sucl2yQ4H0iN1n/hfUv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYzZhZjBjMjliZWJjN2M0ODVjZjgwMDFkYTlmMTk5MzBh Y2U0NWQwHhcNMjUxMjE5MTMwMDUyWhcNMjUxMjIwMTMwMDUyWjAzMTEwLwYDVQQD EyhmZGM2OTUwNDQ4NjNlNGQ4YWYzMzBiOTIyZjEyODlmN2I0MDEwOTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAf9k3YSXW4jd9QMjagctS/3kOcg PnwF25WXVBABE7VL5lVPCHIV/jY4UPjHocHGYXwigm/cuWnsjZ04tk38SsuSFUoU WSv0SqgG0VjT75ksdHJgQFPkwJfW6n7yObJm6x7Le6LNWbJ8wOVRx8Ez0hHsjbDN Ng8ZpxaDezrwHJI9nNCSdOr4U6VcoplqRy1n3GbamVVI5yG/wXJ87Hmwu2mkJIXq p7zD3LHj2Wt6FDZ16KI+en46SN0jahQznX2jvfGcpp8pZPMSs70ylcH6yYlSqtM9 fcwAiYM3Wwd6cZSKjINA1YUHCSrrJtcPHljzM82QZ4GeBOD2KFX7bLF6fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3GlQRIY+TYrzMLki8Sife0AQlzMB8GA1UdIwQY MBaAFKrGrwwpvrx8SFz4AB2p8ZkwrORdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mOGM0NDUtMGFhYi00MDg3LWEwZDMt OTM0NzU5MTkxMGE4LzEvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9mOGM0NDUtMGFhYi00MDg3LWEwZDMtOTM0NzU5MTkxMGE4 LzEvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgBx6q3l Ibsm0T+sH2v0EfpjTQxK2yEuNnOZ9690P0xK3atzaR/GyYtekTkXGmTgkSlCAMYV kmpkpfvQKQGHhBO2TP9hCfPfvQGM6IlhXFATICBDibudc6T6PM9gk74Zu+kJsF0d q8pMqyi+AlhG5LUDNXIeWOKOZpyaQstBdG67cbU/o0/uqKlN1S70LEfBKSEWkU1p Kj7eFTwoUKql4VmDCp+dIUuuIJtqMPQvzzrBRHW8c/wTcoq4YqpVn8C8dIFaNZYp IiZrVih36e+COhZWnhc4owgan+zNjhtK6G56zEyozIyKIL3R4m2mKeDzDFYvEJhB TYOD1qr9IJoPmg== -----END CERTIFICATE-----Generated at Fri Dec 19 15:28:29 2025 by rpki-client