This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json) Hash identifier: 2Nx7Yit40mXlSuc3xKOoyY8NfpwL3O6SpNgEvLSpypg= Subject key identifier: DC:EB:D6:F1:CE:E2:C9:60:69:09:3A:D6:98:17:8B:9F:CE:06:5C:76 Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42 Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742 Certificate serial: 019B0E92CF6FDC42E3BDE66535F6A4EF0B61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft Manifest number: 0313 Signing time: Thu 11 Dec 2025 18:01:00 +0000 Manifest this update: Thu 11 Dec 2025 18:01:00 +0000 Manifest next update: Fri 12 Dec 2025 18:01:00 +0000 Files and hashes: 1: 0TAMfzKO6y7wTDVfhrp7A0vqejU.roa (hash: 3Yzu9IXvscc/7fQLVXNg8nKXbm7Wf5jZKKVCSByaB5U=) 2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: A/qARqoNg6P+iDFWLNIZWrQtvtHcpam/AcRUdUMRjgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:cf:6f:dc:42:e3:bd:e6:65:35:f6:a4:ef:0b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742 Validity Not Before: Dec 11 18:01:00 2025 GMT Not After : Dec 12 18:01:00 2025 GMT Subject: CN=dcebd6f1cee2c96069093ad698178b9fce065c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e8:c6:fa:1b:de:70:78:a8:80:a5:43:d0:27: 14:e5:ae:57:82:f9:69:75:c8:97:dc:9c:d5:c3:12: e6:af:22:c1:6f:f8:d5:9e:cf:8a:aa:29:4d:ea:e5: dc:95:28:88:64:da:34:e5:3b:6e:d6:ba:48:a2:ae: 6a:68:38:96:39:e4:68:20:00:40:77:d1:d0:f6:f4: 18:60:92:0e:c6:27:67:74:e1:c6:91:7f:1a:a5:d6: 97:c1:ad:71:b2:c5:6c:b4:e1:2d:e2:e3:69:7d:22: 1e:96:6e:0b:20:29:d0:0d:35:fb:30:79:ba:04:69: ea:3f:c4:23:25:11:7f:c5:7f:f7:c5:e5:c4:8e:36: c8:3a:82:fd:1a:7c:8b:ca:22:11:b8:5f:71:3d:51: 62:b2:4b:50:f9:e8:4a:cf:86:6a:00:be:9c:79:19: 7a:4c:a9:59:cb:ae:92:df:ef:b1:b6:2c:e1:c9:88: 21:1d:f1:23:50:66:44:07:d8:23:3e:34:f8:75:95: 7e:ca:72:57:9e:2f:f0:71:82:21:dc:17:24:0f:b5: 48:39:f6:e9:e2:ce:30:4b:3a:0a:a0:50:a0:43:ae: b4:fe:bf:51:86:2c:ef:fe:7e:2f:7f:3b:57:38:22: d1:ab:e0:01:2f:82:36:58:c3:86:b9:6d:78:bd:8f: df:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EB:D6:F1:CE:E2:C9:60:69:09:3A:D6:98:17:8B:9F:CE:06:5C:76 X509v3 Authority Key Identifier: keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d3:12:b6:d8:9e:93:5e:5a:fa:a7:8a:c1:77:ba:5b:2d:ab: b2:a5:e2:87:78:e2:e5:4b:7b:ec:cc:26:90:27:e5:e0:07:be: 6a:21:39:fe:3d:aa:9c:63:34:80:a6:1e:1a:68:67:43:4e:3a: f9:0d:1c:99:f8:50:4f:ff:39:a5:25:cd:c3:62:b1:fb:5e:51: b3:53:65:8d:95:5e:a4:67:aa:82:6c:a0:96:f9:d2:78:da:cd: 73:a2:53:4f:9b:df:7c:f4:c6:8c:f3:63:ab:c9:a2:1e:0a:02: 6c:97:9b:fb:61:61:2c:f8:38:1a:72:c7:41:08:ba:cb:38:35: a5:85:14:56:46:1d:1c:b0:9a:4a:d7:06:bf:d0:9e:e8:31:43: d9:a4:0a:53:3a:f8:00:39:29:6c:4b:2a:a4:d0:38:4e:65:c3: 9a:c8:b7:af:11:73:57:c5:e9:5b:61:97:6f:0a:ce:97:d7:76: d6:25:91:1c:90:5c:7d:9d:5e:65:5e:f2:d6:16:57:66:9b:4f: d4:cc:63:52:c8:59:2a:5c:f9:3a:8e:96:f6:a3:49:8d:59:8f: 10:fa:50:6e:75:15:6c:e0:16:3b:78:9c:5c:80:51:a9:56:10: 5e:84:c7:8c:c4:15:8c:e8:a9:8c:87:d6:83:63:4f:7d:79:89: fb:34:d4:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOks9v3ELjveZlNfak7wthMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhY2E4ZGMwYzBiOTIxYjA4OWYxNjAyNjE4ZTQ1NTM3OTdh NzQ3NDIwHhcNMjUxMjExMTgwMTAwWhcNMjUxMjEyMTgwMTAwWjAzMTEwLwYDVQQD EyhkY2ViZDZmMWNlZTJjOTYwNjkwOTNhZDY5ODE3OGI5ZmNlMDY1Yzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoejG+hvecHiogKVD0CcU5a5Xgvlp dciX3JzVwxLmryLBb/jVns+KqilN6uXclSiIZNo05Ttu1rpIoq5qaDiWOeRoIABA d9HQ9vQYYJIOxidndOHGkX8apdaXwa1xssVstOEt4uNpfSIelm4LICnQDTX7MHm6 BGnqP8QjJRF/xX/3xeXEjjbIOoL9GnyLyiIRuF9xPVFisktQ+ehKz4ZqAL6ceRl6 TKlZy66S3++xtizhyYghHfEjUGZEB9gjPjT4dZV+ynJXni/wcYIh3BckD7VIOfbp 4s4wSzoKoFCgQ660/r9Rhizv/n4vfztXOCLRq+ABL4I2WMOGuW14vY/f8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzr1vHO4slgaQk61pgXi5/OBlx2MB8GA1UdIwQY MBaAFKrKjcDAuSGwifFgJhjkVTeXp0dCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXNxTndNQzVJYkNKOFdBbUdPUlZONWVuUjBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lYjMxZGItZTY1NC00OTFlLWExNDEt OTFkNTA3MzhkMWU4LzEvcXNxTndNQzVJYkNKOFdBbUdPUlZONWVuUjBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9lYjMxZGItZTY1NC00OTFlLWExNDEtOTFkNTA3MzhkMWU4 LzEvcXNxTndNQzVJYkNKOFdBbUdPUlZONWVuUjBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStMSttie k15a+qeKwXe6Wy2rsqXih3ji5Ut77MwmkCfl4Ae+aiE5/j2qnGM0gKYeGmhnQ046 +Q0cmfhQT/85pSXNw2Kx+15Rs1NljZVepGeqgmyglvnSeNrNc6JTT5vffPTGjPNj q8miHgoCbJeb+2FhLPg4GnLHQQi6yzg1pYUUVkYdHLCaStcGv9Ce6DFD2aQKUzr4 ADkpbEsqpNA4TmXDmsi3rxFzV8XpW2GXbwrOl9d21iWRHJBcfZ1eZV7y1hZXZptP 1MxjUshZKlz5Oo6W9qNJjVmPEPpQbnUVbOAWO3icXIBRqVYQXoTHjMQVjOipjIfW g2NPfXmJ+zTUSQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:00:05 2025 by rpki-client