This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json) Hash identifier: 8rDPeaAcI03JDG6yQ7z1pwTT8cCDSBCZaLR4de4+/IM= Subject key identifier: 0A:5A:A6:A6:50:FC:88:98:D3:D3:BE:5A:E5:45:76:4E:C5:56:50:87 Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75 Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75 Certificate serial: 019B236362259BC9F06A0C691DE28B03489E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft Manifest number: 177F Signing time: Mon 15 Dec 2025 19:01:14 +0000 Manifest this update: Mon 15 Dec 2025 19:01:14 +0000 Manifest next update: Tue 16 Dec 2025 19:01:14 +0000 Files and hashes: 1: GdTMSBHmMXNMZFzwt5_uvXtdYsM.roa (hash: /RIp+uP4i74bIeQs1XWyli9bmZacqyl6MLZjDPeo5VM=) 2: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: 10zRCrvAtMGf0STtSj54B4if51E3hmDtzVvPVTMfY/g=) 3: xBlZNvgMRnCf6UrKRvQ5pkUd7xU.roa (hash: i1uwfhxsD9mnwkgjUW+Sjt1kQC/b/5iVv+3Mpx4LXks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:62:25:9b:c9:f0:6a:0c:69:1d:e2:8b:03:48:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75 Validity Not Before: Dec 15 19:01:14 2025 GMT Not After : Dec 16 19:01:14 2025 GMT Subject: CN=0a5aa6a650fc8898d3d3be5ae545764ec5565087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:75:9c:53:fe:f1:bc:ad:d0:01:6a:38:eb:0b: ca:2c:b3:d8:7b:7b:5d:d7:cd:0f:c1:55:56:cf:8a: b5:43:be:64:de:4b:55:a6:80:5b:b6:85:7b:36:5f: 12:9a:27:63:8a:c5:88:e3:82:f3:9c:e1:02:f6:66: e2:29:c6:05:70:52:23:a3:d4:60:a9:23:52:6a:05: e2:29:bc:88:21:a5:6e:d2:12:33:49:d7:f3:07:5d: 26:82:1d:d3:9a:50:56:51:db:c6:9a:7f:18:20:91: c7:ad:54:b0:f7:e6:ad:1b:7b:e4:27:98:32:32:70: 02:03:ac:50:d6:f0:1c:7b:5a:a6:18:56:e8:d6:8d: 86:de:79:65:2c:54:88:6a:4b:83:41:35:e3:ff:b8: 2b:ba:7f:3f:dd:9d:9f:92:6c:9e:aa:da:b3:86:1e: 8d:6c:c0:7d:0a:3e:03:9b:9d:84:fd:68:02:b6:3d: 50:1b:b9:c3:3f:45:00:e7:32:a8:e8:81:16:23:f1: 4a:83:65:ef:f4:f7:ae:68:bb:8e:0e:ec:5c:49:ae: 16:c2:36:4e:96:ff:d3:3c:23:2b:52:c2:46:f8:38: 9b:39:fc:e4:c5:2f:da:7a:91:d0:8e:37:6d:01:f1: e3:de:16:b3:95:51:21:fa:3a:d6:1e:42:b6:ca:2c: 3a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5A:A6:A6:50:FC:88:98:D3:D3:BE:5A:E5:45:76:4E:C5:56:50:87 X509v3 Authority Key Identifier: keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:8d:ac:29:ad:bb:29:94:cb:69:e6:11:76:20:67:27:dd:60: 47:78:84:ad:9f:e7:07:c2:f5:db:36:f1:35:ce:e6:1d:89:a9: 0e:03:93:d1:5d:1a:af:58:a7:59:37:52:71:cb:53:21:42:af: 02:6e:2d:61:3f:03:ac:54:e7:7c:b3:b1:f9:c8:9a:77:d9:ff: 94:59:e6:c4:c6:17:9b:b6:b0:3a:83:58:b9:aa:95:3b:8f:0b: 49:bc:9b:36:66:5a:60:02:b6:c0:c0:d4:c8:7e:01:91:7d:e2: eb:01:9a:75:5c:d9:17:92:8a:ca:79:7e:1c:e8:72:72:95:cf: fe:57:35:51:62:1b:42:6b:6b:19:53:df:9a:10:03:a0:cd:88: 24:c9:fe:b2:67:76:ea:9d:21:7a:f1:b9:0c:b4:6d:e3:74:88: e4:25:db:96:44:f7:af:49:c0:71:56:d1:5e:23:11:68:c2:ec: aa:aa:63:22:68:d3:3a:cd:af:66:c5:f1:60:c6:91:00:6c:38: 03:d4:e4:0d:49:f4:4c:07:a2:9b:e8:33:08:7c:f7:4c:d0:8e: 6f:9b:f4:6f:c4:a9:cd:7d:e7:e8:7d:0c:97:b9:04:70:2d:66: f8:c0:91:58:b9:81:38:de:b1:02:2e:e9:88:13:02:69:c9:d4: e2:9d:ff:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjY2Ilm8nwagxpHeKLA0ieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZmM1NjMwZDU3YjE5NzFmM2EyNTZlZDZkOTgzYWZhZDZi MjhkNzUwHhcNMjUxMjE1MTkwMTE0WhcNMjUxMjE2MTkwMTE0WjAzMTEwLwYDVQQD EygwYTVhYTZhNjUwZmM4ODk4ZDNkM2JlNWFlNTQ1NzY0ZWM1NTY1MDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnWcU/7xvK3QAWo46wvKLLPYe3td 180PwVVWz4q1Q75k3ktVpoBbtoV7Nl8SmidjisWI44LznOEC9mbiKcYFcFIjo9Rg qSNSagXiKbyIIaVu0hIzSdfzB10mgh3TmlBWUdvGmn8YIJHHrVSw9+atG3vkJ5gy MnACA6xQ1vAce1qmGFbo1o2G3nllLFSIakuDQTXj/7grun8/3Z2fkmyeqtqzhh6N bMB9Cj4Dm52E/WgCtj1QG7nDP0UA5zKo6IEWI/FKg2Xv9PeuaLuODuxcSa4WwjZO lv/TPCMrUsJG+DibOfzkxS/aepHQjjdtAfHj3hazlVEh+jrWHkK2yiw6EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApapqZQ/IiY09O+WuVFdk7FVlCHMB8GA1UdIwQY MBaAFKn8VjDVexlx86JW7W2YOvrWso11MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMt YzVkNGYwYTAwOTA3LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMtYzVkNGYwYTAwOTA3 LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXY2sKa27 KZTLaeYRdiBnJ91gR3iErZ/nB8L12zbxNc7mHYmpDgOT0V0ar1inWTdScctTIUKv Am4tYT8DrFTnfLOx+ciad9n/lFnmxMYXm7awOoNYuaqVO48LSbybNmZaYAK2wMDU yH4BkX3i6wGadVzZF5KKynl+HOhycpXP/lc1UWIbQmtrGVPfmhADoM2IJMn+smd2 6p0hevG5DLRt43SI5CXblkT3r0nAcVbRXiMRaMLsqqpjImjTOs2vZsXxYMaRAGw4 A9TkDUn0TAeim+gzCHz3TNCOb5v0b8SpzX3n6H0Ml7kEcC1m+MCRWLmBON6xAi7p iBMCacnU4p3/Cw== -----END CERTIFICATE-----Generated at Mon Dec 15 21:46:57 2025 by rpki-client