This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft File: qxyACqG3ihekPhn9mTg1XQQR6Uo.mft (raw, json) Hash identifier: 8XrkAXVtz4qfk8BZqaVWCyBh+C+sPSfCO+sZ5mwhlVU= Subject key identifier: 41:E3:BD:B1:D9:D6:88:23:32:39:60:BB:D7:36:5A:14:C1:98:42:F2 Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A Certificate issuer: /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a Certificate serial: 019B0FA5CB572E1184592429096A5FCB299B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft Manifest number: 0E2C Signing time: Thu 11 Dec 2025 23:01:22 +0000 Manifest this update: Thu 11 Dec 2025 23:01:22 +0000 Manifest next update: Fri 12 Dec 2025 23:01:22 +0000 Files and hashes: 1: 3vZog35fA7A8208htG6MPJHCfRQ.roa (hash: KjUP3VOXf2M5RM2RNCpzmW1mXhGa52pGMp/lPhjp9fc=) 2: BfHqfkHY1q4ldygRkcfv7XdzqLs.roa (hash: YbMXX/fz76OV1tIhHwhH/SEdCy/PTJDjaV1pgkgaZeE=) 3: CmIDNfzs3bSVgY-dfSu_0KvUwvU.roa (hash: zeJTsFwERYYSCRF2I3KzeFe/yJYCV+YH9obrNhlqeUk=) 4: XaQFQicfhG4nS73QjVCHMUwAPG8.roa (hash: vEWEx+WC0m8X0tM9GZ7AzmWSqkdHKT5bYqE12jvQZ1Y=) 5: qxyACqG3ihekPhn9mTg1XQQR6Uo.crl (hash: GEe+LRAwyh7wZ5uuDlYUOvHQT24SeQvvPwwYaQ8Kx3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:cb:57:2e:11:84:59:24:29:09:6a:5f:cb:29:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a Validity Not Before: Dec 11 23:01:22 2025 GMT Not After : Dec 12 23:01:22 2025 GMT Subject: CN=41e3bdb1d9d68823323960bbd7365a14c19842f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:51:64:6d:fb:cc:54:fd:2a:80:c0:ad:f7:e3: 77:8b:cf:ad:f3:c6:5d:84:38:c1:27:82:7d:00:8e: 68:49:df:b3:35:0a:64:f9:93:b3:10:a6:c0:62:a0: cb:21:e7:ff:bc:49:f3:0d:89:42:f7:06:32:56:bc: 76:17:11:fb:6d:c6:48:c6:48:2a:4a:be:70:79:27: ef:ea:93:d7:3b:1d:4d:eb:df:38:38:8e:c6:d9:73: bd:7a:29:77:46:8b:99:4a:72:d2:02:58:bc:c8:e9: 4a:90:83:16:09:4f:20:66:b9:20:0d:e6:1d:fd:f7: 49:1d:77:a1:67:30:86:42:9f:58:7f:11:ab:f1:b2: 3c:02:39:df:94:de:65:22:ca:f8:72:4d:e0:b0:a9: 81:a4:73:20:d3:30:cf:f0:2b:ec:0a:ae:96:16:40: 36:bc:46:3c:aa:9c:db:15:1b:b5:a6:f2:01:a8:15: a7:1f:42:30:0b:6f:dd:9a:32:26:e4:45:a2:99:85: c3:21:24:fb:22:29:d0:27:1e:db:69:a6:fa:a7:0f: 85:94:14:21:06:82:52:4c:90:88:62:52:48:e9:4f: dc:96:58:8c:5d:ec:8c:42:32:9b:21:2e:71:db:d3: 3a:37:f7:b3:63:06:5e:ba:4b:06:c9:4a:a9:b7:bc: f1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E3:BD:B1:D9:D6:88:23:32:39:60:BB:D7:36:5A:14:C1:98:42:F2 X509v3 Authority Key Identifier: keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:24:5b:4e:9b:38:ad:1e:88:86:c1:c5:75:46:4a:05:b0:9c: 33:7d:ed:3a:67:ee:e6:82:e0:42:a6:74:30:f0:bf:86:af:a0: c0:92:bf:8d:31:71:6b:53:7b:cd:14:fd:83:11:9a:99:b5:d2: c1:40:09:90:42:17:12:cb:04:e6:7e:72:1b:6c:87:2a:5c:de: 6f:98:c5:08:d1:33:6b:aa:35:f2:ae:f3:19:fc:a6:34:4e:e6: 3e:f0:9e:23:ae:29:6b:92:df:28:57:9a:b3:30:c3:a9:40:a1: 80:01:7f:2f:d0:5a:fa:75:1f:bc:90:a6:35:cd:53:5d:42:90: 2b:5d:cb:7a:23:53:35:8d:83:d6:e8:26:6c:7e:6f:f7:04:64: ce:48:29:f6:ae:f8:9a:f7:68:21:3b:65:11:07:7d:58:71:dc: 1b:84:c1:e0:cf:1d:16:65:fe:fe:80:3e:26:09:65:88:98:d6: 9c:a1:12:09:0b:f9:f2:9c:28:4b:fc:f9:fd:2a:9a:0e:5a:93: 89:08:fe:1c:ff:7e:8f:56:f6:c3:62:b6:25:3d:f1:77:92:5a: e7:ac:61:72:14:d1:38:b4:86:1c:3e:14:4f:2f:32:26:82:dd: d0:f5:ca:83:2f:56:e6:11:c2:4d:6f:8d:b9:61:a1:99:35:75: f3:42:83:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpctXLhGEWSQpCWpfyymbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMWM4MDBhYTFiNzhhMTdhNDNlMTlmZDk5MzgzNTVkMDQx MWU5NGEwHhcNMjUxMjExMjMwMTIyWhcNMjUxMjEyMjMwMTIyWjAzMTEwLwYDVQQD Eyg0MWUzYmRiMWQ5ZDY4ODIzMzIzOTYwYmJkNzM2NWExNGMxOTg0MmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVFkbfvMVP0qgMCt9+N3i8+t88Zd hDjBJ4J9AI5oSd+zNQpk+ZOzEKbAYqDLIef/vEnzDYlC9wYyVrx2FxH7bcZIxkgq Sr5weSfv6pPXOx1N6984OI7G2XO9eil3RouZSnLSAli8yOlKkIMWCU8gZrkgDeYd /fdJHXehZzCGQp9YfxGr8bI8AjnflN5lIsr4ck3gsKmBpHMg0zDP8CvsCq6WFkA2 vEY8qpzbFRu1pvIBqBWnH0IwC2/dmjIm5EWimYXDIST7IinQJx7baab6pw+FlBQh BoJSTJCIYlJI6U/clliMXeyMQjKbIS5x29M6N/ezYwZeuksGyUqpt7zx+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHjvbHZ1ogjMjlgu9c2WhTBmELyMB8GA1UdIwQY MBaAFKscgAqht4oXpD4Z/Zk4NV0EEelKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYjFjYTAtYmJmMi00NDE5LThhMGMt NTBjYmNiNWIxOWMyLzEvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8xYjFjYTAtYmJmMi00NDE5LThhMGMtNTBjYmNiNWIxOWMy LzEvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyRbTps4 rR6IhsHFdUZKBbCcM33tOmfu5oLgQqZ0MPC/hq+gwJK/jTFxa1N7zRT9gxGambXS wUAJkEIXEssE5n5yG2yHKlzeb5jFCNEza6o18q7zGfymNE7mPvCeI64pa5LfKFea szDDqUChgAF/L9Ba+nUfvJCmNc1TXUKQK13LeiNTNY2D1ugmbH5v9wRkzkgp9q74 mvdoITtlEQd9WHHcG4TB4M8dFmX+/oA+JglliJjWnKESCQv58pwoS/z5/SqaDlqT iQj+HP9+j1b2w2K2JT3xd5Ja56xhchTROLSGHD4UTy8yJoLd0PXKgy9W5hHCTW+N uWGhmTV180KDGg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:01:42 2025 by rpki-client