This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json) Hash identifier: NaNlnfrs+CNSXzNi1FL6gApNsj4NwEhCPcmZaMQW8fY= Subject key identifier: 2E:DC:55:A4:72:60:75:DC:FC:23:E4:00:F1:6B:A7:1F:FB:09:54:48 Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c Certificate serial: 019B1DCF1E6B6F87903FF4F32077DBA7196F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 17:01:11 +0000 Manifest this update: Sun 14 Dec 2025 17:01:11 +0000 Manifest next update: Mon 15 Dec 2025 17:01:11 +0000 Files and hashes: 1: ZQzI8pwKz3Y9UFOTdtU4b9ctJXY.roa (hash: m2HxLCCi/fQqzx7YAu5gwnUGUYg0wp/lcNW6PdEdels=) 2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: wWRJFlpbO6FPo+DNJAwtsBb6Ev/HaBc5d1lfDeb0OOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:cf:1e:6b:6f:87:90:3f:f4:f3:20:77:db:a7:19:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c Validity Not Before: Dec 14 17:01:11 2025 GMT Not After : Dec 15 17:01:11 2025 GMT Subject: CN=2edc55a4726075dcfc23e400f16ba71ffb095448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:99:e9:b5:f2:e3:d4:65:68:3e:9c:47:d9:5a: d1:4b:dd:42:19:82:bc:7e:97:18:91:7f:f2:04:6e: bf:7b:5c:d7:c7:e3:93:ec:e2:78:e5:5e:0e:84:81: 39:a7:b7:70:b5:ec:56:b9:fb:9d:82:83:ab:32:3b: 9b:40:ca:cd:5d:3f:47:49:62:66:19:1f:43:4e:ef: 7e:83:22:ea:af:83:0f:5d:b8:35:87:f1:49:b8:9e: 0a:59:25:19:49:1d:f4:c9:72:3a:01:97:f2:63:ac: c4:5c:6f:f8:dc:fe:b2:96:59:b8:5f:37:3a:6c:2a: d5:f7:3d:dd:fe:7f:75:72:0b:3e:cc:33:1b:43:0c: 84:0a:5a:c7:c2:b6:c0:ae:3b:7e:ea:48:0b:43:fa: 25:43:e0:c4:27:b9:33:5f:bb:bf:43:30:c9:51:11: 04:5d:05:de:d7:04:89:79:bd:a2:ca:84:df:d1:56: df:b9:d1:b2:50:7e:49:a3:85:a5:3e:28:4e:25:16: a5:1b:1a:5a:66:28:0c:a8:30:70:f6:79:88:ee:1a: 4c:d1:2a:c3:5c:03:a2:c7:1c:2a:b8:ac:30:db:b2: a7:f5:90:52:2e:26:ea:07:73:ae:d0:56:80:78:ab: bb:c9:df:6d:78:db:3b:0f:ec:63:8e:16:c4:df:f0: ae:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DC:55:A4:72:60:75:DC:FC:23:E4:00:F1:6B:A7:1F:FB:09:54:48 X509v3 Authority Key Identifier: keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:33:4b:e1:d9:0c:4b:2f:c9:bf:f2:ac:9f:fb:60:fc:8b:cf: e7:dc:8c:4b:d7:6a:1b:fd:cf:90:8c:bb:68:db:be:c6:38:ab: 59:29:67:e4:75:a5:9c:96:6c:b9:e4:42:44:74:37:c5:6f:68: 0e:71:02:bf:5f:68:b2:f1:c9:61:0a:ce:d2:69:3b:3f:32:75: 26:6a:87:90:7d:aa:d3:ba:dd:b8:a0:a3:7c:60:4c:2f:ae:0a: 36:4e:31:01:2a:e5:01:0c:64:d7:8c:73:c8:f5:a8:ca:96:59: 09:2a:15:78:b2:fe:7e:63:bc:9f:2b:b2:cf:f3:51:14:92:03: a1:58:37:78:30:82:9c:46:12:c3:15:5c:6f:dd:93:4b:65:97: ca:48:17:11:98:04:1c:8f:e7:b8:37:2a:91:10:07:bf:95:45: 49:ae:ef:6d:06:2c:75:26:b8:3b:ed:39:69:3f:93:60:d2:e9: 62:34:2e:6d:31:99:ec:0c:d3:29:18:89:63:41:7c:b7:45:c0: eb:4d:f1:dd:77:22:ad:5d:e7:61:cb:91:c7:55:33:e1:37:bc: 1e:ba:25:23:86:14:53:69:cb:f3:da:a6:a5:82:d9:7b:7f:aa: 07:15:f7:0a:45:73:b1:7f:29:24:ea:21:c5:fd:ad:21:e7:56: b3:d3:c1:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdzx5rb4eQP/TzIHfbpxlvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Nzc4MjBlYTYxYjExYjViMzg1OWFiNGE0YmM3ZWMwYTdi NzM4OGMwHhcNMjUxMjE0MTcwMTExWhcNMjUxMjE1MTcwMTExWjAzMTEwLwYDVQQD EygyZWRjNTVhNDcyNjA3NWRjZmMyM2U0MDBmMTZiYTcxZmZiMDk1NDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5nptfLj1GVoPpxH2VrRS91CGYK8 fpcYkX/yBG6/e1zXx+OT7OJ45V4OhIE5p7dwtexWufudgoOrMjubQMrNXT9HSWJm GR9DTu9+gyLqr4MPXbg1h/FJuJ4KWSUZSR30yXI6AZfyY6zEXG/43P6yllm4Xzc6 bCrV9z3d/n91cgs+zDMbQwyEClrHwrbArjt+6kgLQ/olQ+DEJ7kzX7u/QzDJUREE XQXe1wSJeb2iyoTf0VbfudGyUH5Jo4WlPihOJRalGxpaZigMqDBw9nmI7hpM0SrD XAOixxwquKww27Kn9ZBSLibqB3Ou0FaAeKu7yd9teNs7D+xjjhbE3/Cu1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7cVaRyYHXc/CPkAPFrpx/7CVRIMB8GA1UdIwQY MBaAFKl3gg6mGxG1s4WatKS8fsCntziMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUt YjE4ZDc2YjAxMmU3LzEvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUtYjE4ZDc2YjAxMmU3 LzEvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODNL4dkM Sy/Jv/Ksn/tg/IvP59yMS9dqG/3PkIy7aNu+xjirWSln5HWlnJZsueRCRHQ3xW9o DnECv19osvHJYQrO0mk7PzJ1JmqHkH2q07rduKCjfGBML64KNk4xASrlAQxk14xz yPWoypZZCSoVeLL+fmO8nyuyz/NRFJIDoVg3eDCCnEYSwxVcb92TS2WXykgXEZgE HI/nuDcqkRAHv5VFSa7vbQYsdSa4O+05aT+TYNLpYjQubTGZ7AzTKRiJY0F8t0XA 603x3XcirV3nYcuRx1Uz4Te8HrolI4YUU2nL89qmpYLZe3+qBxX3CkVzsX8pJOoh xf2tIedWs9PBjg== -----END CERTIFICATE-----Generated at Sun Dec 14 19:39:44 2025 by rpki-client