This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json) Hash identifier: 1TuVT3V6alrn5wlolxezra7QPJ6eVQrqQTnUl4ti8IE= Subject key identifier: A2:9F:74:2D:4F:31:66:0F:F5:C7:9D:DF:69:F8:C0:E3:0A:BD:35:D9 Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75 Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75 Certificate serial: 019B3E6CC087377970264D7E2D7774F1C68C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 01:01:13 +0000 Manifest this update: Sun 21 Dec 2025 01:01:13 +0000 Manifest next update: Mon 22 Dec 2025 01:01:13 +0000 Files and hashes: 1: GdTMSBHmMXNMZFzwt5_uvXtdYsM.roa (hash: /RIp+uP4i74bIeQs1XWyli9bmZacqyl6MLZjDPeo5VM=) 2: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: vaNUMhZ8ATnRvndShP00n8ay0ogGvg3Rmc1JnMPX4AU=) 3: xBlZNvgMRnCf6UrKRvQ5pkUd7xU.roa (hash: i1uwfhxsD9mnwkgjUW+Sjt1kQC/b/5iVv+3Mpx4LXks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:c0:87:37:79:70:26:4d:7e:2d:77:74:f1:c6:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75 Validity Not Before: Dec 21 01:01:13 2025 GMT Not After : Dec 22 01:01:13 2025 GMT Subject: CN=a29f742d4f31660ff5c79ddf69f8c0e30abd35d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ad:99:3a:c5:69:18:57:92:e6:0c:c5:03:cd: 62:53:41:4a:62:97:5f:59:21:89:c3:69:59:2d:fe: 93:20:01:39:50:9f:57:e7:06:b3:bf:c9:5a:8e:fd: c0:aa:91:50:c8:39:ad:27:23:11:52:7a:01:7c:33: 24:77:92:90:c9:0b:33:77:0c:16:14:13:14:69:81: b9:a0:ac:84:9d:d4:41:80:5c:7b:8f:21:04:47:f6: 08:04:83:a5:8a:77:28:f9:a5:a2:59:ba:fd:c6:45: 4f:ce:88:ee:77:55:aa:94:9c:38:7d:07:45:a7:73: d4:60:d6:82:8c:b2:79:df:b2:24:14:96:24:da:52: b7:1f:ae:85:9d:06:64:27:9e:c2:6e:88:98:52:5f: 52:14:b5:5f:65:6f:58:03:92:b5:e6:a6:f9:16:e4: 5d:61:3b:95:56:ac:29:ae:6d:28:18:d2:f7:df:55: bd:db:3e:d6:55:56:00:70:2e:41:38:cd:92:ce:24: a3:2b:eb:33:da:02:63:3d:1b:50:14:2b:9a:e6:67: ec:59:e9:80:59:2a:86:93:50:81:8b:d4:be:a0:31: ad:b6:78:c4:ab:39:1c:95:9e:ae:56:d2:9e:81:fb: 26:5e:2b:6d:83:69:1c:9d:09:4c:27:11:39:0d:ef: 42:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9F:74:2D:4F:31:66:0F:F5:C7:9D:DF:69:F8:C0:E3:0A:BD:35:D9 X509v3 Authority Key Identifier: keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:7b:33:e6:05:af:d3:8b:88:55:41:a5:11:16:d4:d5:80:6a: 51:8e:5a:04:08:31:53:a5:bc:7b:23:79:06:04:97:f8:98:9f: d6:fe:40:ac:5c:76:b7:08:f6:e4:65:bd:ab:e6:5d:8b:0a:91: 57:cc:31:a3:4b:cb:0b:01:27:60:ef:b6:58:89:00:1c:85:68: cb:e3:1e:a4:24:aa:41:d9:7f:c6:b4:12:bf:f8:0b:b4:c1:79: a9:c7:2b:da:15:47:2a:d9:d8:b8:27:e3:85:f8:1d:40:6b:72: 82:f1:4e:7f:dc:31:bd:f1:0e:cf:ee:65:2c:eb:c6:3c:a3:24: 16:3f:8d:67:78:db:41:20:77:a6:fe:43:de:28:d2:2b:bc:01: 28:d9:b3:fe:8c:cb:80:25:73:2d:b5:e7:9f:9f:37:e6:d5:ea: b6:0c:d9:8e:0a:08:dd:57:e2:96:6b:9a:00:27:19:10:e6:ea: 6d:49:71:46:3d:82:cb:57:69:d2:bf:c1:34:0e:14:eb:81:bc: a1:12:b1:a2:f0:0e:b2:44:d9:19:a6:2e:79:bf:ba:04:a6:35: 6a:48:cb:c5:a7:cc:4c:65:c6:2c:36:85:da:7b:d0:f5:24:cf: 81:39:0f:13:a8:c6:20:2a:0a:df:c0:7e:df:15:de:3f:7e:2e: fd:bd:b6:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bMCHN3lwJk1+LXd08caMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZmM1NjMwZDU3YjE5NzFmM2EyNTZlZDZkOTgzYWZhZDZi MjhkNzUwHhcNMjUxMjIxMDEwMTEzWhcNMjUxMjIyMDEwMTEzWjAzMTEwLwYDVQQD EyhhMjlmNzQyZDRmMzE2NjBmZjVjNzlkZGY2OWY4YzBlMzBhYmQzNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5q2ZOsVpGFeS5gzFA81iU0FKYpdf WSGJw2lZLf6TIAE5UJ9X5wazv8lajv3AqpFQyDmtJyMRUnoBfDMkd5KQyQszdwwW FBMUaYG5oKyEndRBgFx7jyEER/YIBIOlinco+aWiWbr9xkVPzojud1WqlJw4fQdF p3PUYNaCjLJ537IkFJYk2lK3H66FnQZkJ57CboiYUl9SFLVfZW9YA5K15qb5FuRd YTuVVqwprm0oGNL331W92z7WVVYAcC5BOM2SziSjK+sz2gJjPRtQFCua5mfsWemA WSqGk1CBi9S+oDGttnjEqzkclZ6uVtKegfsmXittg2kcnQlMJxE5De9CXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKfdC1PMWYP9ced32n4wOMKvTXZMB8GA1UdIwQY MBaAFKn8VjDVexlx86JW7W2YOvrWso11MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMt YzVkNGYwYTAwOTA3LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMtYzVkNGYwYTAwOTA3 LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5nsz5gWv 04uIVUGlERbU1YBqUY5aBAgxU6W8eyN5BgSX+Jif1v5ArFx2twj25GW9q+ZdiwqR V8wxo0vLCwEnYO+2WIkAHIVoy+MepCSqQdl/xrQSv/gLtMF5qccr2hVHKtnYuCfj hfgdQGtygvFOf9wxvfEOz+5lLOvGPKMkFj+NZ3jbQSB3pv5D3ijSK7wBKNmz/ozL gCVzLbXnn5835tXqtgzZjgoI3VfilmuaACcZEObqbUlxRj2Cy1dp0r/BNA4U64G8 oRKxovAOskTZGaYueb+6BKY1akjLxafMTGXGLDaF2nvQ9STPgTkPE6jGICoK38B+ 3xXeP34u/b22OA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:06:59 2025 by rpki-client