This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft File: QSewwP58CJNeJYcT_PkP6VjuA-4.mft (raw, json) Hash identifier: 38H0rsEH5lj4M58twBxYoOmredgU76W8RM3mgyE3rDE= Subject key identifier: 28:B4:3C:8F:00:8C:1E:0A:83:D0:1E:7B:CF:37:F1:D1:B3:83:7B:42 Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee Certificate serial: 019B5A883CE7115A500DA84130F1E90FA5C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft Manifest number: 10B5 Signing time: Fri 26 Dec 2025 12:00:36 +0000 Manifest this update: Fri 26 Dec 2025 12:00:36 +0000 Manifest next update: Sat 27 Dec 2025 12:00:36 +0000 Files and hashes: 1: AHAIEOWCHWLKa9JHFINf6irqksg.roa (hash: 0crUb9fChI2AB7u9/en/nHBi9yIJVpozoehFQ2yd02I=) 2: QSewwP58CJNeJYcT_PkP6VjuA-4.crl (hash: B6Z1iwrkZTw26AlicO6D9ewuitX+Iqi6gF2K+KoqSbU=) 3: iuTZJrZ_xqcN--oZzppXYNl2GLY.roa (hash: EaSRmqObnprgwhDFxETI2q5Xy3PnwGKEyMaUX8iySCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:3c:e7:11:5a:50:0d:a8:41:30:f1:e9:0f:a5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee Validity Not Before: Dec 26 12:00:36 2025 GMT Not After : Dec 27 12:00:36 2025 GMT Subject: CN=28b43c8f008c1e0a83d01e7bcf37f1d1b3837b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d0:c5:fd:d4:df:61:ca:f5:bd:5e:55:b6:1f: 10:7c:0b:bf:8c:81:42:58:85:5b:63:23:b8:eb:d9: e3:1d:44:0f:eb:b7:23:5f:38:6c:58:ca:5a:fd:83: ca:f9:fd:30:b2:27:2e:59:4d:05:54:92:62:71:25: c7:28:2e:3c:5c:78:12:e3:05:03:3e:04:35:26:3e: 10:8e:92:94:fe:dc:66:c3:f1:1b:92:76:5c:0a:2e: e5:a2:6e:7b:da:0f:85:bb:dd:ca:cb:4b:2d:f0:bc: 7f:05:e8:9b:30:89:0a:c3:09:55:f4:ca:cb:64:6a: 6c:69:76:8b:92:1e:42:38:bd:7a:e4:fd:90:69:ab: e2:d3:44:2f:f1:bc:f4:1a:fa:a7:fd:33:a5:56:8b: 85:01:b2:be:52:2a:d5:eb:a0:75:a4:fa:f3:5c:8b: 27:57:85:42:45:e1:e6:d7:0d:4d:a8:ed:4f:f4:65: 81:19:ba:59:93:bd:50:87:4e:9f:37:67:d2:1d:99: b4:7d:91:d0:63:cf:b0:5f:d6:5b:03:37:c2:30:72: 53:0d:5c:71:54:7c:63:a0:cb:8f:0f:e4:d5:4b:ab: cd:16:fa:c2:4a:59:30:15:8b:f7:ae:b1:84:72:44: cf:49:a7:30:79:39:3f:f6:5a:ac:e7:60:97:38:4e: 11:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B4:3C:8F:00:8C:1E:0A:83:D0:1E:7B:CF:37:F1:D1:B3:83:7B:42 X509v3 Authority Key Identifier: keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:fd:15:60:50:5e:d8:c4:c0:04:8c:cf:f4:8f:46:d1:fd:e6: 20:a5:85:15:a1:c7:b7:c3:73:af:ff:ac:7c:00:22:4a:99:a1: 7a:6b:7e:7c:b5:17:82:02:27:3f:e0:22:ad:af:ae:c4:d3:82: c6:cd:91:fe:38:9f:b0:ab:85:83:94:b4:33:dc:e5:da:e3:94: f5:5e:c9:fd:0a:6d:32:b5:fa:2b:4d:86:8c:ee:fe:ea:22:0b: 3a:28:8d:3f:b4:07:5b:9d:28:26:e6:0e:b7:3a:a6:40:71:3c: e5:3b:be:35:79:cc:73:b6:84:ca:8b:bd:74:9c:1e:28:1e:27: a2:b3:71:75:5c:c6:e3:df:93:40:1b:5c:e9:45:2b:39:9d:f1: 17:bc:d8:c0:3c:60:12:62:5a:22:e4:c2:93:33:a2:86:c0:8b: 37:6e:39:f6:e1:aa:9b:9a:30:59:e8:fc:3e:b2:49:79:3f:a9: f2:22:4e:c5:d6:af:b0:2c:b3:ea:8d:9f:f6:c3:76:d8:1a:a4: 50:a6:b0:2b:5f:79:47:22:a2:bc:fb:6d:7c:bc:83:5e:56:1d: 4d:01:3c:2a:e9:cd:bb:ca:cb:47:03:df:d6:56:1e:4b:7f:3a: 6e:87:6a:cb:ee:14:2d:b9:36:1e:10:70:4c:1f:38:17:48:9a: 23:8c:9e:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiDznEVpQDahBMPHpD6XFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMjdiMGMwZmU3YzA4OTM1ZTI1ODcxM2ZjZjkwZmU5NThl ZTAzZWUwHhcNMjUxMjI2MTIwMDM2WhcNMjUxMjI3MTIwMDM2WjAzMTEwLwYDVQQD EygyOGI0M2M4ZjAwOGMxZTBhODNkMDFlN2JjZjM3ZjFkMWIzODM3YjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNDF/dTfYcr1vV5Vth8QfAu/jIFC WIVbYyO469njHUQP67cjXzhsWMpa/YPK+f0wsicuWU0FVJJicSXHKC48XHgS4wUD PgQ1Jj4QjpKU/txmw/EbknZcCi7lom572g+Fu93Ky0st8Lx/BeibMIkKwwlV9MrL ZGpsaXaLkh5COL165P2Qaavi00Qv8bz0Gvqn/TOlVouFAbK+UirV66B1pPrzXIsn V4VCReHm1w1NqO1P9GWBGbpZk71Qh06fN2fSHZm0fZHQY8+wX9ZbAzfCMHJTDVxx VHxjoMuPD+TVS6vNFvrCSlkwFYv3rrGEckTPSacweTk/9lqs52CXOE4R7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCi0PI8AjB4Kg9Aee8838dGzg3tCMB8GA1UdIwQY MBaAFEEnsMD+fAiTXiWHE/z5D+lY7gPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQt YmQxZDQ4ZDUxMmNlLzEvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQtYmQxZDQ4ZDUxMmNl LzEvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdP0VYFBe 2MTABIzP9I9G0f3mIKWFFaHHt8Nzr/+sfAAiSpmhemt+fLUXggInP+Aira+uxNOC xs2R/jifsKuFg5S0M9zl2uOU9V7J/QptMrX6K02GjO7+6iILOiiNP7QHW50oJuYO tzqmQHE85Tu+NXnMc7aEyou9dJweKB4norNxdVzG49+TQBtc6UUrOZ3xF7zYwDxg EmJaIuTCkzOihsCLN2459uGqm5owWej8PrJJeT+p8iJOxdavsCyz6o2f9sN22Bqk UKawK195RyKivPttfLyDXlYdTQE8KunNu8rLRwPf1lYeS386bodqy+4ULbk2HhBw TB84F0iaI4yeLA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:34 2025 by rpki-client