This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft File: qS25uA37nJVniwfvLJU9YxB_X2I.mft (raw, json) Hash identifier: a8xZKVwt05YBZc3/B5Rh1P4lnylatLhrNOzKJMWvIpk= Subject key identifier: 0E:3B:59:43:B1:70:4F:7E:A4:8F:00:C0:55:80:29:8A:43:72:FE:42 Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62 Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62 Certificate serial: 019B33E8DFB764C0D2D4BE1B508D92523153 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft Manifest number: 09E4 Signing time: Fri 19 Dec 2025 00:00:58 +0000 Manifest this update: Fri 19 Dec 2025 00:00:58 +0000 Manifest next update: Sat 20 Dec 2025 00:00:58 +0000 Files and hashes: 1: qS25uA37nJVniwfvLJU9YxB_X2I.crl (hash: SAHuQSo6jG0PuNf9WXNqHpnrtDFg2bUIWtXtwhq/iCs=) 2: u2PcO0qxdpMSmR6nWgSSQ3nTHEM.roa (hash: hawJL7X7ALdqooYTS/10qneIqHecH3wASpMJDU35WRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:df:b7:64:c0:d2:d4:be:1b:50:8d:92:52:31:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62 Validity Not Before: Dec 19 00:00:58 2025 GMT Not After : Dec 20 00:00:58 2025 GMT Subject: CN=0e3b5943b1704f7ea48f00c05580298a4372fe42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b3:5a:41:ae:2c:37:fe:50:e9:8c:dc:48:1f: 4b:b2:f2:1f:53:08:03:8a:d3:44:8e:7a:b3:e1:b9: 54:06:bb:1b:b9:2e:fd:45:8a:a9:ca:0d:b7:3a:b8: be:5c:97:47:7e:0b:c3:6e:25:27:34:1a:34:40:dc: 56:24:5f:dc:c1:92:46:71:20:a9:e6:ee:f8:f2:da: 46:6c:c2:c2:fb:88:cc:3c:bb:27:6a:8d:d7:37:db: a2:64:5d:c8:ca:35:3a:55:60:6d:a0:15:6d:88:32: f9:18:cb:d8:e1:0e:fc:dd:d7:fa:cd:46:a4:08:d9: ed:e0:64:df:d4:4b:3c:96:39:f6:d9:fd:ac:df:84: 56:ca:82:36:75:a8:98:aa:5d:5c:86:09:07:d2:90: 5d:6b:a4:df:1c:d2:64:fb:20:13:0d:f0:9b:b1:4a: 73:e7:19:2b:eb:44:18:ab:2d:21:01:e0:df:b9:a6: de:44:ac:cc:c0:bd:c9:de:dd:94:16:a5:e5:44:bd: 8b:b6:b0:9b:03:56:25:ca:d9:46:2b:06:4b:76:70: 9d:92:34:72:ca:1f:43:73:e9:ac:32:10:bb:d7:d8: 4b:5d:09:16:60:3e:a2:0d:0a:e6:cf:21:16:91:23: 3b:44:9c:1a:d1:b9:92:b1:28:83:e6:33:65:b4:63: 83:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3B:59:43:B1:70:4F:7E:A4:8F:00:C0:55:80:29:8A:43:72:FE:42 X509v3 Authority Key Identifier: keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:3f:4d:da:ad:d3:bd:08:e9:26:3c:1d:4f:c3:7e:f8:4c:c3: a2:62:e5:a1:b6:27:d9:db:4f:91:34:d2:62:11:2c:0d:9d:51: d4:26:e4:2d:87:70:78:3c:d5:f3:f9:c5:ca:fe:91:3a:89:fb: 77:1c:39:2e:f8:7a:aa:70:8d:b0:87:c9:15:60:19:67:67:e1: c6:a7:0f:79:28:07:fd:22:4f:e3:d0:fa:d5:a7:e6:e4:0e:c0: a5:bb:d9:dd:a5:c3:f1:31:68:44:56:f3:8b:1c:8f:66:cf:ae: 92:fd:06:8e:36:1d:2a:5d:d5:2b:22:fe:55:f1:ba:95:60:a9: 0a:f1:e2:06:f9:42:86:99:56:64:09:a4:91:8a:ab:e8:de:f7: c1:0d:13:a1:51:f9:c5:77:20:55:4b:36:3e:2c:75:e5:5a:fe: 39:41:1e:02:18:07:aa:34:27:ba:33:60:7c:a7:93:de:cc:15: 2f:58:a7:8c:6b:ab:9a:c5:27:aa:81:8b:e8:fd:49:92:96:a5: 4a:e8:bd:98:d8:d0:0d:93:89:39:ea:a9:e9:e7:0d:28:37:bb: 04:f2:9e:ba:c8:8d:4c:bf:c3:6a:ef:6c:65:df:64:65:63:d0: 9a:19:2c:62:99:83:b1:f0:0f:55:d1:c4:e8:bc:fc:81:07:60: 7c:ac:09:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6N+3ZMDS1L4bUI2SUjFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmRiOWI4MGRmYjljOTU2NzhiMDdlZjJjOTUzZDYzMTA3 ZjVmNjIwHhcNMjUxMjE5MDAwMDU4WhcNMjUxMjIwMDAwMDU4WjAzMTEwLwYDVQQD EygwZTNiNTk0M2IxNzA0ZjdlYTQ4ZjAwYzA1NTgwMjk4YTQzNzJmZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rNaQa4sN/5Q6YzcSB9LsvIfUwgD itNEjnqz4blUBrsbuS79RYqpyg23Ori+XJdHfgvDbiUnNBo0QNxWJF/cwZJGcSCp 5u748tpGbMLC+4jMPLsnao3XN9uiZF3IyjU6VWBtoBVtiDL5GMvY4Q783df6zUak CNnt4GTf1Es8ljn22f2s34RWyoI2daiYql1chgkH0pBda6TfHNJk+yATDfCbsUpz 5xkr60QYqy0hAeDfuabeRKzMwL3J3t2UFqXlRL2LtrCbA1YlytlGKwZLdnCdkjRy yh9Dc+msMhC719hLXQkWYD6iDQrmzyEWkSM7RJwa0bmSsSiD5jNltGODeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA47WUOxcE9+pI8AwFWAKYpDcv5CMB8GA1UdIwQY MBaAFKktubgN+5yVZ4sH7yyVPWMQf19iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80MmIzYmItMTkzNS00NzhiLWEzMDIt Y2I3YTVmZDFhYzQ3LzEvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80MmIzYmItMTkzNS00NzhiLWEzMDItY2I3YTVmZDFhYzQ3 LzEvcVMyNXVBMzduSlZuaXdmdkxKVTlZeEJfWDJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApD9N2q3T vQjpJjwdT8N++EzDomLlobYn2dtPkTTSYhEsDZ1R1CbkLYdweDzV8/nFyv6ROon7 dxw5Lvh6qnCNsIfJFWAZZ2fhxqcPeSgH/SJP49D61afm5A7ApbvZ3aXD8TFoRFbz ixyPZs+ukv0GjjYdKl3VKyL+VfG6lWCpCvHiBvlChplWZAmkkYqr6N73wQ0ToVH5 xXcgVUs2Pix15Vr+OUEeAhgHqjQnujNgfKeT3swVL1injGurmsUnqoGL6P1Jkpal Sui9mNjQDZOJOeqp6ecNKDe7BPKeusiNTL/Dau9sZd9kZWPQmhksYpmDsfAPVdHE 6Lz8gQdgfKwJHQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:41:36 2025 by rpki-client