This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft File: QZs3miRkEoEOioBSpio5aIyjRXk.mft (raw, json) Hash identifier: /prJ1X5vq86Jr9Qd0TYZqteugBwYn1k6E4j/zGRzdzU= Subject key identifier: E8:5F:C1:07:3F:67:3E:41:5A:BB:54:57:77:CA:5A:D3:FD:2C:32:90 Authority key identifier: 41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79 Certificate issuer: /CN=419b379a246412810e8a8052a62a39688ca34579 Certificate serial: 019B34C45F699A31FE8D01C1B6C4949DF12C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft Manifest number: 052F Signing time: Fri 19 Dec 2025 04:00:43 +0000 Manifest this update: Fri 19 Dec 2025 04:00:43 +0000 Manifest next update: Sat 20 Dec 2025 04:00:43 +0000 Files and hashes: 1: 2TZgxnjJF7qDIIxEY-THpPbZMQA.roa (hash: 0yx1MB4qhr47LhIlbMqbHpvd6J1nBsWh1WvKzMD4atk=) 2: QZs3miRkEoEOioBSpio5aIyjRXk.crl (hash: eV+uysjaKYhy2MU+p7H2qsQzMAnbpI4tO6b+7+KtoKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:5f:69:9a:31:fe:8d:01:c1:b6:c4:94:9d:f1:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=419b379a246412810e8a8052a62a39688ca34579 Validity Not Before: Dec 19 04:00:43 2025 GMT Not After : Dec 20 04:00:43 2025 GMT Subject: CN=e85fc1073f673e415abb545777ca5ad3fd2c3290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:53:7f:48:3e:b9:c7:df:d1:e0:7c:59:fb:7c: 3f:5e:c4:a3:c4:d5:6c:13:93:70:8e:de:a9:4f:fa: 27:ff:70:26:0f:56:7f:df:ba:c9:c0:51:09:10:d3: 89:e8:43:90:92:46:f6:dc:02:9e:4b:61:a3:a4:c1: ad:e2:fe:91:ab:ea:25:5a:0e:0e:2f:96:a8:5b:37: 44:16:3f:77:5c:0f:92:cc:89:fd:23:11:c1:83:7b: 5e:25:28:5a:7e:4d:b2:dc:16:47:a6:6c:61:27:8a: 54:d3:c9:7a:b3:45:2c:fd:40:c2:5d:db:c6:52:47: de:53:93:0b:cc:bf:22:3b:5b:e5:0a:96:be:bf:b6: 93:db:9f:77:a1:d6:c3:9b:9f:0c:ad:38:e2:97:42: 55:b0:eb:01:64:1e:25:21:1d:69:5e:eb:70:6c:7f: f2:a4:9a:d9:c2:e4:6c:ee:62:1e:7c:fb:75:5d:24: 8f:17:3b:49:6e:19:fb:09:e0:88:12:eb:0a:46:9a: f9:90:cf:23:5c:b1:79:26:59:4f:bd:99:f0:fe:2f: bf:2b:92:7e:c6:8b:9d:f1:73:d4:6d:27:75:cc:7a: dd:a9:99:30:10:4f:1f:76:5b:06:4f:1d:3e:17:44: 82:9d:62:b1:83:eb:bc:92:28:67:bd:97:b2:09:fc: dd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5F:C1:07:3F:67:3E:41:5A:BB:54:57:77:CA:5A:D3:FD:2C:32:90 X509v3 Authority Key Identifier: keyid:41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:c9:64:46:ee:15:61:ce:26:7f:8d:57:bf:19:9f:ed:54:67: a3:56:70:ec:2c:f3:c1:c6:4a:77:90:d2:36:e7:78:35:10:18: c1:d0:1f:a7:d7:a4:ed:40:62:0f:fe:e7:f2:dd:ea:ad:22:06: db:85:a6:1f:7f:8d:ff:87:e3:9a:04:1c:f3:65:c1:43:a9:75: 58:ed:67:c1:a0:83:3f:ea:99:3a:f4:46:03:4c:5f:15:a2:aa: 73:f0:07:ae:ca:03:f2:69:f3:80:7c:e1:7a:f6:bc:a7:27:af: d9:e8:97:04:83:58:ef:8c:a6:d8:24:63:8f:cd:06:57:6a:6d: 20:01:46:f9:1c:e0:6c:b8:4f:f6:d8:98:3e:49:dd:7d:ef:8b: 4b:f7:1d:15:20:1c:76:ca:b0:2b:3c:7b:44:2b:d5:fc:c1:47: 2c:7f:cd:97:3d:7b:16:5d:12:83:3e:0e:8b:21:e2:ab:24:83: bd:3d:5c:60:f1:3b:1c:5b:65:d5:21:d4:18:9f:a0:fb:f3:d5: 55:5a:90:58:34:56:aa:b2:12:fe:b3:6a:f6:03:74:38:4d:c5: 81:c5:c1:0e:36:72:c4:77:60:3a:b2:d9:cf:dc:50:78:aa:6b: 1e:f9:5a:1b:5a:32:a3:12:a0:2f:1b:a1:28:e7:85:e1:6c:05: cc:f7:9d:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xF9pmjH+jQHBtsSUnfEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOWIzNzlhMjQ2NDEyODEwZThhODA1MmE2MmEzOTY4OGNh MzQ1NzkwHhcNMjUxMjE5MDQwMDQzWhcNMjUxMjIwMDQwMDQzWjAzMTEwLwYDVQQD EyhlODVmYzEwNzNmNjczZTQxNWFiYjU0NTc3N2NhNWFkM2ZkMmMzMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1N/SD65x9/R4HxZ+3w/XsSjxNVs E5Nwjt6pT/on/3AmD1Z/37rJwFEJENOJ6EOQkkb23AKeS2GjpMGt4v6Rq+olWg4O L5aoWzdEFj93XA+SzIn9IxHBg3teJShafk2y3BZHpmxhJ4pU08l6s0Us/UDCXdvG UkfeU5MLzL8iO1vlCpa+v7aT2593odbDm58MrTjil0JVsOsBZB4lIR1pXutwbH/y pJrZwuRs7mIefPt1XSSPFztJbhn7CeCIEusKRpr5kM8jXLF5JllPvZnw/i+/K5J+ xoud8XPUbSd1zHrdqZkwEE8fdlsGTx0+F0SCnWKxg+u8kihnvZeyCfzd7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhfwQc/Zz5BWrtUV3fKWtP9LDKQMB8GA1UdIwQY MBaAFEGbN5okZBKBDoqAUqYqOWiMo0V5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVpzM21pUmtFb0VPaW9CU3BpbzVhSXlqUlhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yMDI1NmUtMWUwMy00MDBhLTk4Nzgt ZmNjODllY2U1OTA2LzEvUVpzM21pUmtFb0VPaW9CU3BpbzVhSXlqUlhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yMDI1NmUtMWUwMy00MDBhLTk4NzgtZmNjODllY2U1OTA2 LzEvUVpzM21pUmtFb0VPaW9CU3BpbzVhSXlqUlhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyclkRu4V Yc4mf41Xvxmf7VRno1Zw7CzzwcZKd5DSNud4NRAYwdAfp9ek7UBiD/7n8t3qrSIG 24WmH3+N/4fjmgQc82XBQ6l1WO1nwaCDP+qZOvRGA0xfFaKqc/AHrsoD8mnzgHzh eva8pyev2eiXBINY74ym2CRjj80GV2ptIAFG+RzgbLhP9tiYPkndfe+LS/cdFSAc dsqwKzx7RCvV/MFHLH/Nlz17Fl0Sgz4OiyHiqySDvT1cYPE7HFtl1SHUGJ+g+/PV VVqQWDRWqrIS/rNq9gN0OE3FgcXBDjZyxHdgOrLZz9xQeKprHvlaG1oyoxKgLxuh KOeF4WwFzPedAQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:38:00 2025 by rpki-client