This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json) Hash identifier: pswBuY9/Q43RBfg/szTGbEP/lXkVMSjRqLVWAe3BpVc= Subject key identifier: 2F:16:E7:57:C0:DC:B0:83:1D:E7:6F:F1:D4:D6:E7:96:04:35:3A:1C Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3 Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3 Certificate serial: 019B5975CC283B41325392FA380EE85C34B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft Manifest number: 08A1 Signing time: Fri 26 Dec 2025 07:00:50 +0000 Manifest this update: Fri 26 Dec 2025 07:00:50 +0000 Manifest next update: Sat 27 Dec 2025 07:00:50 +0000 Files and hashes: 1: ZuTxi79Ck2OCXbkDauPT87FQh1E.roa (hash: xuj1se8JvfBc00cfkDYRLRVr3K+o4nQ3N/ymEwvuis8=) 2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: 72LTInT/Pi5DDXMn5BnL4qrjfm3iVwcc4Vkl1K+1m1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:cc:28:3b:41:32:53:92:fa:38:0e:e8:5c:34:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3 Validity Not Before: Dec 26 07:00:50 2025 GMT Not After : Dec 27 07:00:50 2025 GMT Subject: CN=2f16e757c0dcb0831de76ff1d4d6e79604353a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:23:14:93:22:b6:6c:ad:e0:f8:92:80:99: 65:43:42:24:15:30:07:1f:64:a4:4b:fd:d0:b1:b1: da:b7:ef:4b:64:e7:bc:8e:18:b1:d5:d0:2a:3d:2a: ce:6b:40:0b:f2:70:6d:59:ce:22:e0:33:a4:15:94: 49:cc:7c:a1:d7:6d:b8:bd:f9:01:49:1c:0c:1a:a8: 2b:27:56:02:9f:70:1f:72:6f:09:2f:73:a7:fa:ad: b0:c3:38:e1:e7:85:2f:80:25:43:70:ae:8a:45:a6: 08:71:80:5b:ef:3a:7e:66:3f:26:89:15:0f:cc:38: 45:f0:36:8c:2a:b8:9c:60:ee:57:20:72:d4:a0:ef: 4b:4f:a4:6c:4d:7b:fa:c8:c9:db:4b:41:0f:ea:3a: c8:47:ff:44:1e:f0:6f:94:95:7a:32:4c:b0:13:97: 46:ea:5d:6c:56:06:75:38:f2:1e:a7:1d:bd:34:ad: 50:42:d6:bc:b9:3d:8a:36:ae:c8:a4:17:36:e1:f3: 92:f4:76:80:10:18:8b:f8:3a:66:1b:d9:61:7d:69: e5:8a:f6:49:ef:65:19:33:57:c8:9c:9a:38:dd:0f: af:03:99:f5:cc:3e:92:27:9d:8b:fb:12:ba:dd:f8: c9:58:6c:eb:a2:d8:07:01:fd:2b:71:dd:98:06:57: 4b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:16:E7:57:C0:DC:B0:83:1D:E7:6F:F1:D4:D6:E7:96:04:35:3A:1C X509v3 Authority Key Identifier: keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d3:76:28:90:fd:db:a0:e9:93:c9:35:18:d6:1b:92:8c:5a: 11:e5:07:5b:46:fb:8b:29:c8:06:dc:a9:c6:90:4f:21:f6:23: a8:b7:ae:62:33:5c:13:e9:44:f2:2b:94:f1:cf:a7:8a:bb:2e: c9:84:65:94:77:f3:3a:b5:97:84:19:17:a8:c0:81:59:00:7c: a0:ea:62:09:cd:df:22:a0:7a:f1:8c:61:5b:d9:9c:de:b9:23: fd:1c:cf:8e:11:54:f2:fd:25:ae:3d:0d:3c:c1:11:65:89:ca: 55:6d:00:04:af:0b:d2:92:58:45:35:77:7a:50:9d:de:23:5d: 37:a0:38:ca:0e:db:3f:f8:a8:be:41:76:a8:ac:7a:f8:65:b7: b0:10:d6:6a:2b:83:91:c8:5b:3d:50:94:e5:02:33:b2:f8:ad: 1c:36:79:21:3e:19:e2:d7:55:bd:02:a4:48:8b:cb:2b:7d:a1: db:8c:b7:eb:04:11:53:44:e1:ff:73:01:02:0f:e2:6b:95:45: 90:26:2c:ed:4b:b3:3d:0e:3c:70:dd:39:bc:e8:32:98:34:fe: 89:7e:0a:25:d8:62:42:f7:17:dc:26:42:8e:2d:39:33:3d:c7: 0f:d6:80:43:32:d6:ab:8c:13:0d:fe:f5:0e:6e:cc:ef:d0:bf: 5d:6c:14:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdcwoO0EyU5L6OA7oXDSxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZDZiMTcxMjMzZjIwYjM3ZTYxYTNhMWZmNTllYTU1M2Jj ZjIxZDMwHhcNMjUxMjI2MDcwMDUwWhcNMjUxMjI3MDcwMDUwWjAzMTEwLwYDVQQD EygyZjE2ZTc1N2MwZGNiMDgzMWRlNzZmZjFkNGQ2ZTc5NjA0MzUzYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9kjFJMitmyt4PiSgJllQ0IkFTAH H2SkS/3QsbHat+9LZOe8jhix1dAqPSrOa0AL8nBtWc4i4DOkFZRJzHyh1224vfkB SRwMGqgrJ1YCn3Afcm8JL3On+q2wwzjh54UvgCVDcK6KRaYIcYBb7zp+Zj8miRUP zDhF8DaMKricYO5XIHLUoO9LT6RsTXv6yMnbS0EP6jrIR/9EHvBvlJV6MkywE5dG 6l1sVgZ1OPIepx29NK1QQta8uT2KNq7IpBc24fOS9HaAEBiL+DpmG9lhfWnlivZJ 72UZM1fInJo43Q+vA5n1zD6SJ52L+xK63fjJWGzrotgHAf0rcd2YBldL0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8W51fA3LCDHedv8dTW55YENTocMB8GA1UdIwQY MBaAFKnWsXEjPyCzfmGjof9Z6lU7zyHTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84OTY5MTQtNDFiMS00YjY3LTlkYjQt MDk1ZGNlMGUwMTllLzEvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS84OTY5MTQtNDFiMS00YjY3LTlkYjQtMDk1ZGNlMGUwMTll LzEvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9N2KJD9 26Dpk8k1GNYbkoxaEeUHW0b7iynIBtypxpBPIfYjqLeuYjNcE+lE8iuU8c+nirsu yYRllHfzOrWXhBkXqMCBWQB8oOpiCc3fIqB68YxhW9mc3rkj/RzPjhFU8v0lrj0N PMERZYnKVW0ABK8L0pJYRTV3elCd3iNdN6A4yg7bP/iovkF2qKx6+GW3sBDWaiuD kchbPVCU5QIzsvitHDZ5IT4Z4tdVvQKkSIvLK32h24y36wQRU0Th/3MBAg/ia5VF kCYs7UuzPQ48cN05vOgymDT+iX4KJdhiQvcX3CZCji05Mz3HD9aAQzLWq4wTDf71 Dm7M79C/XWwU1w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:19 2025 by rpki-client