This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json) Hash identifier: JqE/Cl9STCcMqcrTQh8E1KHzyiJHkODIvqWp5OMqX+A= Subject key identifier: 51:C3:EF:03:46:46:45:6F:EA:47:AB:31:D9:F1:AD:6A:C2:3D:65:0B Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78 Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978 Certificate serial: 019B5975B680F296D6F421CC51CB9F7D3076 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 07:00:45 +0000 Manifest this update: Fri 26 Dec 2025 07:00:45 +0000 Manifest next update: Sat 27 Dec 2025 07:00:45 +0000 Files and hashes: 1: N5E83UpLjMoi8mpIjadF8EBEZHc.roa (hash: cZc2s8T64g7zUGVGUfnt3YLhqIDpL+dicIuuj0vLjiE=) 2: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: ZCnB7Z5CrK4b9bn/mSzUy3aZLAQFQ3gyUVq4HFJWk6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:b6:80:f2:96:d6:f4:21:cc:51:cb:9f:7d:30:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978 Validity Not Before: Dec 26 07:00:45 2025 GMT Not After : Dec 27 07:00:45 2025 GMT Subject: CN=51c3ef034646456fea47ab31d9f1ad6ac23d650b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:c6:96:49:bc:0f:9d:91:93:94:dd:99:2d: 03:ca:47:32:af:ff:2b:b0:4e:3c:7f:3b:c3:e4:28: a3:00:6b:eb:7d:a1:fc:92:b8:4c:b0:2f:24:23:39: 62:d3:b0:9d:d8:a3:57:7e:6f:85:ef:5c:40:dd:d5: 6d:49:1d:e7:87:9f:ac:4f:46:00:80:fc:a8:c1:10: 6d:93:b8:e5:cf:01:06:bb:cd:35:48:94:0f:f6:1a: fb:48:ec:a7:62:a9:52:e5:e7:67:2d:59:5b:27:b4: 5e:3f:ac:80:5f:4c:95:6e:e6:6f:6b:c1:a0:62:68: 19:1d:a3:6a:f4:7b:31:62:19:6e:77:16:b7:79:5e: a5:3e:e1:bd:06:63:a4:e8:2e:0c:a0:a7:76:62:8d: c7:e1:8a:1c:2d:a2:3c:27:e0:30:57:e1:a9:8b:3b: 34:ef:05:bc:6d:38:0e:27:df:5a:df:4b:b1:5d:e1: 77:f8:2a:18:64:bb:ea:9d:6d:93:b1:c8:9e:a5:43: bc:3c:0f:85:ca:2e:b7:e7:42:a6:12:29:30:f5:13: 44:fd:21:1b:64:72:c1:76:ae:a2:3f:78:7c:74:79: 68:4a:dc:85:71:54:d5:d1:04:91:61:ff:0d:43:1d: 10:4c:37:ab:02:b7:b3:aa:32:a6:7a:c5:3d:66:02: a9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C3:EF:03:46:46:45:6F:EA:47:AB:31:D9:F1:AD:6A:C2:3D:65:0B X509v3 Authority Key Identifier: keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d6:12:b4:6c:f6:31:79:e5:42:b8:d6:68:18:fc:fc:6f:00: 2a:71:2c:0c:90:fe:3b:e6:cb:97:91:3c:7e:9f:34:8f:0b:dc: 8d:8d:99:ae:e7:1f:ab:9a:64:20:e4:ad:10:24:10:23:3a:4f: af:0d:97:bb:3a:0d:58:5a:31:d1:3c:36:3a:14:3a:95:66:99: f3:4e:fa:b2:f9:27:7e:42:68:af:8b:37:0c:7e:fb:05:72:7e: f9:ba:9a:ad:9d:bb:19:65:9a:6f:54:3d:7f:21:41:5e:3d:a1: 16:af:c8:95:0e:78:ea:f3:4c:41:0f:69:ca:49:c3:ef:e5:b9: a9:6d:cc:3c:62:71:f4:2b:ec:a9:4d:7e:e3:5f:3d:b6:08:4b: 88:4b:ea:94:e3:c0:8c:f7:73:34:78:69:f0:05:8e:1c:40:71: fc:09:9e:61:7b:8a:7b:e6:24:3e:45:45:d9:86:d1:c2:62:7b: bc:bb:45:a5:d3:82:17:93:57:27:d8:a2:09:1c:7f:4e:ef:ab: da:a6:b1:82:a5:b3:74:d2:0a:f6:3a:00:d5:5d:51:42:6a:65: 41:e0:d7:73:84:5b:b4:fd:59:cd:b4:30:67:cf:0b:14:a8:22: 5a:98:96:ba:67:39:22:59:f9:d2:bd:87:ec:e1:d4:f8:2e:e2: bb:2a:85:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdbaA8pbW9CHMUcuffTB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ODQ3ZjY0NTY3ZTRhYTRhZDVjYjdmYzIyZjIyZGY0ZTJi YzY5NzgwHhcNMjUxMjI2MDcwMDQ1WhcNMjUxMjI3MDcwMDQ1WjAzMTEwLwYDVQQD Eyg1MWMzZWYwMzQ2NDY0NTZmZWE0N2FiMzFkOWYxYWQ2YWMyM2Q2NTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL/Glkm8D52Rk5TdmS0Dykcyr/8r sE48fzvD5CijAGvrfaH8krhMsC8kIzli07Cd2KNXfm+F71xA3dVtSR3nh5+sT0YA gPyowRBtk7jlzwEGu801SJQP9hr7SOynYqlS5ednLVlbJ7ReP6yAX0yVbuZva8Gg YmgZHaNq9HsxYhludxa3eV6lPuG9BmOk6C4MoKd2Yo3H4YocLaI8J+AwV+Gpizs0 7wW8bTgOJ99a30uxXeF3+CoYZLvqnW2TsciepUO8PA+Fyi6350KmEikw9RNE/SEb ZHLBdq6iP3h8dHloStyFcVTV0QSRYf8NQx0QTDerArezqjKmesU9ZgKpbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHD7wNGRkVv6kerMdnxrWrCPWULMB8GA1UdIwQY MBaAFKiEf2RWfkqkrVy3/CLyLfTivGl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xN2FmOTQtNzIxNC00YWRiLWIzMDQt MTAyNTU3MThhMTg1LzEvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8xN2FmOTQtNzIxNC00YWRiLWIzMDQtMTAyNTU3MThhMTg1 LzEvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9YStGz2 MXnlQrjWaBj8/G8AKnEsDJD+O+bLl5E8fp80jwvcjY2Zrucfq5pkIOStECQQIzpP rw2XuzoNWFox0Tw2OhQ6lWaZ8076svknfkJor4s3DH77BXJ++bqarZ27GWWab1Q9 fyFBXj2hFq/IlQ546vNMQQ9pyknD7+W5qW3MPGJx9CvsqU1+4189tghLiEvqlOPA jPdzNHhp8AWOHEBx/AmeYXuKe+YkPkVF2YbRwmJ7vLtFpdOCF5NXJ9iiCRx/Tu+r 2qaxgqWzdNIK9joA1V1RQmplQeDXc4RbtP1ZzbQwZ88LFKgiWpiWumc5Iln50r2H 7OHU+C7iuyqFfg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:51 2025 by rpki-client