This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json) Hash identifier: 6vCGIpTNb7A48NbhzczdHui0CDLksoUywvJ7+ozJNFY= Subject key identifier: 05:A5:E0:5A:B1:B1:22:36:BA:9B:11:3D:83:BC:06:AD:05:FB:EA:49 Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75 Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75 Certificate serial: 019B66FBEB12574A0D270FA868D373269A23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft Manifest number: 17A2 Signing time: Sun 28 Dec 2025 22:02:24 +0000 Manifest this update: Sun 28 Dec 2025 22:02:24 +0000 Manifest next update: Mon 29 Dec 2025 22:02:24 +0000 Files and hashes: 1: GdTMSBHmMXNMZFzwt5_uvXtdYsM.roa (hash: /RIp+uP4i74bIeQs1XWyli9bmZacqyl6MLZjDPeo5VM=) 2: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: kIPtEisXUymnHfk3WhqYLs8HBI06UNPinmuvgwMWN00=) 3: xBlZNvgMRnCf6UrKRvQ5pkUd7xU.roa (hash: i1uwfhxsD9mnwkgjUW+Sjt1kQC/b/5iVv+3Mpx4LXks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:eb:12:57:4a:0d:27:0f:a8:68:d3:73:26:9a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75 Validity Not Before: Dec 28 22:02:24 2025 GMT Not After : Dec 29 22:02:24 2025 GMT Subject: CN=05a5e05ab1b12236ba9b113d83bc06ad05fbea49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7f:55:94:83:2e:7f:e0:eb:1b:2f:d4:ad:55: 94:ba:2c:69:5a:de:9c:3c:ce:a5:3e:3c:e9:34:bb: ef:e6:9d:34:35:4a:70:3f:f1:cd:ac:80:7c:12:f2: 43:4e:2f:4c:49:ff:0a:a6:8e:1f:33:07:6a:b7:0b: cb:1d:d4:9c:f1:3c:2c:66:71:72:90:a9:d0:b2:62: 84:95:d4:46:91:ae:77:80:c8:9e:4e:d3:47:a0:59: 20:ef:a6:32:8e:df:44:69:65:b4:bd:d4:92:c5:a1: 69:34:c6:0e:49:9b:27:09:d9:03:cb:d7:34:16:96: 17:d5:fd:46:26:c8:39:e9:bf:52:11:23:2f:ab:56: 9f:35:85:4e:c0:74:bc:54:5b:48:39:b6:18:c9:d9: 8b:3a:8a:ce:fe:f9:93:11:07:b8:ca:ce:80:b9:85: 39:55:21:39:6b:12:a2:f0:4a:ca:1c:b2:f3:74:df: 73:0e:19:9f:d9:1a:b0:2e:d4:68:b0:07:b2:da:e8: e1:ca:1b:5c:aa:b1:12:31:67:be:84:09:57:b5:68: 83:ac:f0:9f:64:c7:ae:7f:10:68:4c:4a:8b:d3:43: 77:16:0b:eb:2d:c1:58:81:50:4b:01:f3:49:97:3c: 65:20:81:64:74:f0:8d:0a:83:cd:74:57:2f:0e:cc: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A5:E0:5A:B1:B1:22:36:BA:9B:11:3D:83:BC:06:AD:05:FB:EA:49 X509v3 Authority Key Identifier: keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:3e:99:f1:9c:fd:e4:88:69:0c:01:8b:fc:e3:4d:a1:eb:e8: 63:00:b7:5c:c2:c2:7f:ee:bf:a1:f0:cf:be:7d:4b:e5:19:86: e3:33:91:72:8b:27:df:5a:15:62:0f:1e:79:d0:fc:f0:85:09: 0e:c7:b2:2c:64:b4:7d:b8:21:5b:c9:8c:4f:34:49:8e:65:df: d4:de:2d:4c:15:9d:7d:18:27:0b:7e:37:cb:b3:99:ec:94:e8: 1e:69:75:19:48:23:18:ee:66:54:ff:98:05:1a:7a:32:fb:45: 57:c0:3f:d5:fd:47:79:79:81:93:c3:0d:30:81:04:8f:27:78: aa:36:13:56:90:a2:94:b5:1e:91:74:c7:c0:2c:a3:a6:e4:3b: 42:1b:1b:ea:68:60:d9:2e:38:5b:c0:00:ab:c1:9e:61:e1:56: 59:08:26:9c:f5:af:6f:25:0c:3e:0f:17:2a:c4:ea:1c:d2:c4: 4b:44:61:12:6c:4d:e9:7d:86:77:84:28:3a:b4:1d:8e:52:7f: 72:6d:d7:56:f1:4a:75:44:0d:da:b2:ca:51:1f:c3:8c:64:19: bd:c9:b4:87:87:48:94:7a:92:62:42:fe:d5:0e:14:22:7f:5b: 65:99:a3:40:09:99:4b:17:27:bc:bb:4c:46:9e:3b:3c:3f:9b: 77:4b:90:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm++sSV0oNJw+oaNNzJpojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZmM1NjMwZDU3YjE5NzFmM2EyNTZlZDZkOTgzYWZhZDZi MjhkNzUwHhcNMjUxMjI4MjIwMjI0WhcNMjUxMjI5MjIwMjI0WjAzMTEwLwYDVQQD EygwNWE1ZTA1YWIxYjEyMjM2YmE5YjExM2Q4M2JjMDZhZDA1ZmJlYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn9VlIMuf+DrGy/UrVWUuixpWt6c PM6lPjzpNLvv5p00NUpwP/HNrIB8EvJDTi9MSf8Kpo4fMwdqtwvLHdSc8TwsZnFy kKnQsmKEldRGka53gMieTtNHoFkg76Yyjt9EaWW0vdSSxaFpNMYOSZsnCdkDy9c0 FpYX1f1GJsg56b9SESMvq1afNYVOwHS8VFtIObYYydmLOorO/vmTEQe4ys6AuYU5 VSE5axKi8ErKHLLzdN9zDhmf2RqwLtRosAey2ujhyhtcqrESMWe+hAlXtWiDrPCf ZMeufxBoTEqL00N3FgvrLcFYgVBLAfNJlzxlIIFkdPCNCoPNdFcvDsz6qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWl4FqxsSI2upsRPYO8Bq0F++pJMB8GA1UdIwQY MBaAFKn8VjDVexlx86JW7W2YOvrWso11MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMt YzVkNGYwYTAwOTA3LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMtYzVkNGYwYTAwOTA3 LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIz6Z8Zz9 5IhpDAGL/ONNoevoYwC3XMLCf+6/ofDPvn1L5RmG4zORcosn31oVYg8eedD88IUJ DseyLGS0fbghW8mMTzRJjmXf1N4tTBWdfRgnC343y7OZ7JToHml1GUgjGO5mVP+Y BRp6MvtFV8A/1f1HeXmBk8MNMIEEjyd4qjYTVpCilLUekXTHwCyjpuQ7Qhsb6mhg 2S44W8AAq8GeYeFWWQgmnPWvbyUMPg8XKsTqHNLES0RhEmxN6X2Gd4QoOrQdjlJ/ cm3XVvFKdUQN2rLKUR/DjGQZvcm0h4dIlHqSYkL+1Q4UIn9bZZmjQAmZSxcnvLtM Rp47PD+bd0uQMg== -----END CERTIFICATE-----Generated at Mon Dec 29 03:29:48 2025 by rpki-client