This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft File: QWbAb_SeBTSAniNABbqlzKfhRqg.mft (raw, json) Hash identifier: pCVhysspS0pzy5eRKNqmrwZHYvGBou5Y8/ojI3r6lLc= Subject key identifier: 52:F0:DB:46:BD:BF:AE:F3:AB:63:62:95:55:5E:CF:12:39:86:8A:3C Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8 Certificate serial: 019B23A4A01B55EF3A1C69C34205F8DD4911 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft Manifest number: 028C Signing time: Mon 15 Dec 2025 20:12:29 +0000 Manifest this update: Mon 15 Dec 2025 20:12:29 +0000 Manifest next update: Tue 16 Dec 2025 20:12:29 +0000 Files and hashes: 1: 9W9gYghW6_iCN3HlIGpaoOJHZhk.roa (hash: /VOahTPt9Fh6RgLRa78P8pgoK/6N4p3sHujeTUCmYBc=) 2: QWbAb_SeBTSAniNABbqlzKfhRqg.crl (hash: DshZlhVjUlUFLfM13QlALuuAnAZIQEogNws6B593Dzo=) 3: nYXDfUsqe5nmIdb2HF_9W0Oo_vY.roa (hash: Rxp3n+E0mBpZW+sjoLUEVlF4FRUu+OtPU6hBGL/IMhQ=) 4: tgWsqvBvUxCgi8aYF_1r6Pf95x8.roa (hash: iAsKbhwAIaMriFFQqjvhhA1IMlhgJ5DoMkToHGforLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:a4:a0:1b:55:ef:3a:1c:69:c3:42:05:f8:dd:49:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8 Validity Not Before: Dec 15 20:12:29 2025 GMT Not After : Dec 16 20:12:29 2025 GMT Subject: CN=52f0db46bdbfaef3ab636295555ecf1239868a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:9a:79:65:ea:41:27:c5:98:90:34:60:8f: c2:f4:f3:09:6a:d2:59:40:29:19:a0:09:bc:e3:30: d0:a5:72:4c:f5:d4:a9:03:13:b4:ad:d8:8a:07:13: 05:4b:42:76:16:dc:79:c7:ca:f1:5a:79:df:b7:fb: 2a:bb:70:93:2b:4f:48:39:01:a6:20:e6:67:89:8b: 03:66:20:8f:a1:30:2a:a7:bb:69:0c:b0:54:ac:78: 4c:4d:c9:1d:29:f5:f0:fc:2d:33:f7:e7:79:7f:88: 26:a7:94:f6:34:15:32:e9:be:9d:86:7e:6d:61:c4: 2a:a2:b4:39:a6:76:0f:d4:df:d7:d7:01:b7:04:f1: 4b:c6:25:a7:e5:a4:76:52:78:6d:d6:93:45:d1:34: 45:91:e3:1c:dc:68:fe:5b:23:18:35:69:5a:f9:0c: 4c:71:91:2e:9b:e2:43:bc:6d:9a:ab:1c:cb:90:56: 26:f1:f7:19:36:0c:33:67:0d:8d:19:db:f1:25:68: ec:3b:2f:e8:3b:35:0b:7a:33:62:16:f2:5c:ca:c5: a5:f2:a4:a9:4f:88:f4:bf:35:63:60:e4:41:3a:d2: 0e:07:c3:4f:ba:6e:9a:be:84:c9:f9:88:5f:6d:ac: ee:ff:8b:3d:c8:dc:3f:d8:d8:db:c2:79:02:6a:8e: d5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F0:DB:46:BD:BF:AE:F3:AB:63:62:95:55:5E:CF:12:39:86:8A:3C X509v3 Authority Key Identifier: keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:fc:be:33:48:19:dc:20:27:fb:d1:88:a5:59:fb:d0:17:53: 01:6c:79:9e:36:dc:f7:6d:c5:96:81:80:b6:1f:3d:84:48:4c: 15:8b:9b:46:75:9c:bc:8e:73:7b:be:b7:bc:5d:d4:e1:28:6e: 3e:54:53:53:2e:67:f4:9b:c5:03:50:26:55:35:e6:4f:2d:74: af:fc:20:83:f8:e6:04:cb:72:43:3d:53:3d:0d:ff:bb:e5:2a: 7d:78:a8:68:dd:17:ca:8f:ea:ad:f7:98:95:77:60:07:a6:a5: 71:14:99:2c:6e:a5:21:ab:1a:d3:35:76:da:9f:3c:5e:13:a7: df:0a:b6:1c:19:39:97:9c:54:02:78:4f:9c:f4:e1:9b:90:d5: d6:18:9b:22:16:f2:69:37:94:da:42:7e:1b:0c:98:03:93:11: 58:6d:ee:b3:4c:f1:7b:64:4b:05:89:81:24:e1:6f:77:29:23: 4e:f7:dc:a7:2f:d7:4f:15:9c:cf:b7:a5:64:1b:3d:df:52:14: 71:07:dc:cf:dc:d1:4e:cc:4d:8c:c8:24:71:4a:d3:8b:71:6e: e2:46:81:48:5c:55:72:aa:4b:ab:dd:c6:0c:bb:c7:d0:6d:b0: 66:3c:b7:ba:3d:cc:2d:80:00:22:53:27:c5:e2:c1:55:e8:80: 7f:23:05:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjpKAbVe86HGnDQgX43UkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjZjMDZmZjQ5ZTA1MzQ4MDllMjM0MDA1YmFhNWNjYTdl MTQ2YTgwHhcNMjUxMjE1MjAxMjI5WhcNMjUxMjE2MjAxMjI5WjAzMTEwLwYDVQQD Eyg1MmYwZGI0NmJkYmZhZWYzYWI2MzYyOTU1NTVlY2YxMjM5ODY4YTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf+aeWXqQSfFmJA0YI/C9PMJatJZ QCkZoAm84zDQpXJM9dSpAxO0rdiKBxMFS0J2Ftx5x8rxWnnft/squ3CTK09IOQGm IOZniYsDZiCPoTAqp7tpDLBUrHhMTckdKfXw/C0z9+d5f4gmp5T2NBUy6b6dhn5t YcQqorQ5pnYP1N/X1wG3BPFLxiWn5aR2Unht1pNF0TRFkeMc3Gj+WyMYNWla+QxM cZEum+JDvG2aqxzLkFYm8fcZNgwzZw2NGdvxJWjsOy/oOzULejNiFvJcysWl8qSp T4j0vzVjYORBOtIOB8NPum6avoTJ+Yhfbazu/4s9yNw/2NjbwnkCao7VXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLw20a9v67zq2NilVVezxI5hoo8MB8GA1UdIwQY MBaAFEFmwG/0ngU0gJ4jQAW6pcyn4UaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUt ODgyNmU4NzdkMTQzLzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUtODgyNmU4NzdkMTQz LzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfy+M0gZ 3CAn+9GIpVn70BdTAWx5njbc923FloGAth89hEhMFYubRnWcvI5ze763vF3U4Shu PlRTUy5n9JvFA1AmVTXmTy10r/wgg/jmBMtyQz1TPQ3/u+UqfXioaN0Xyo/qrfeY lXdgB6alcRSZLG6lIasa0zV22p88XhOn3wq2HBk5l5xUAnhPnPThm5DV1hibIhby aTeU2kJ+GwyYA5MRWG3us0zxe2RLBYmBJOFvdykjTvfcpy/XTxWcz7elZBs931IU cQfcz9zRTsxNjMgkcUrTi3Fu4kaBSFxVcqpLq93GDLvH0G2wZjy3uj3MLYAAIlMn xeLBVeiAfyMFQg== -----END CERTIFICATE-----Generated at Tue Dec 16 03:40:09 2025 by rpki-client