This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json) Hash identifier: BxJMURZXlBy273NCNqYd7rxZaY44OGLHKEEn8L3HiTM= Subject key identifier: FD:13:76:22:36:E9:28:22:E3:88:7D:73:10:4D:4A:28:F6:C9:80:1C Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3 Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3 Certificate serial: 019B51BC3E8E71477E103692267E5E6B8687 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft Manifest number: 089D Signing time: Wed 24 Dec 2025 19:00:49 +0000 Manifest this update: Wed 24 Dec 2025 19:00:49 +0000 Manifest next update: Thu 25 Dec 2025 19:00:49 +0000 Files and hashes: 1: ZuTxi79Ck2OCXbkDauPT87FQh1E.roa (hash: xuj1se8JvfBc00cfkDYRLRVr3K+o4nQ3N/ymEwvuis8=) 2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: ft1rg9KA5WCrnqqddkvxRb+2Ky6MAJNincWAHQ55XYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:3e:8e:71:47:7e:10:36:92:26:7e:5e:6b:86:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3 Validity Not Before: Dec 24 19:00:49 2025 GMT Not After : Dec 25 19:00:49 2025 GMT Subject: CN=fd13762236e92822e3887d73104d4a28f6c9801c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:91:8d:ed:06:a9:b9:df:c8:f5:3a:14:99:18: e2:15:a5:9f:3b:3e:a5:4c:5f:ad:89:99:d8:e1:17: 2b:ae:35:e4:9e:68:87:f3:3e:07:e4:5f:84:3e:d9: 4d:b3:3c:2a:d5:8a:d4:90:9b:f7:89:d1:7b:38:8b: 54:83:13:35:f0:c1:68:85:55:d7:df:09:17:53:d8: 63:54:f4:e8:56:6f:38:df:92:16:32:b5:fc:4d:f5: e5:f5:db:25:86:c8:82:2e:44:2b:59:ac:a0:a6:39: de:84:c8:89:29:93:f7:d9:b0:48:75:43:2b:da:ec: 5a:9d:ab:e7:91:81:20:88:8d:24:5a:4c:af:80:65: cb:bd:2f:0b:3e:80:e3:e0:81:b4:8f:f4:ce:36:09: 94:b0:d7:2f:a7:f4:19:08:5b:1d:2f:52:53:68:08: ad:ef:d4:1f:31:27:f3:6b:8b:5b:9c:2b:fc:5e:ec: e9:32:19:18:f3:5f:9d:a8:69:46:67:85:69:e5:d0: 7f:00:a5:b8:a1:f5:35:99:75:69:12:dc:c6:40:e8: 42:dd:b9:70:74:a3:de:5c:ff:65:ab:e1:c3:f9:e4: b6:fd:7f:82:57:e3:2a:ee:ff:0d:a6:a1:a4:77:84: 84:fb:72:48:47:6d:fb:d2:3d:fa:13:7d:ad:ac:0a: 35:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:13:76:22:36:E9:28:22:E3:88:7D:73:10:4D:4A:28:F6:C9:80:1C X509v3 Authority Key Identifier: keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:fa:1b:f3:cb:57:36:10:cf:af:a2:63:41:30:26:f2:20:ba: 4e:5b:58:79:eb:10:db:db:0e:fc:f3:fb:f7:e3:ea:68:f1:ee: 55:5d:7d:f1:2b:e7:71:b4:c4:42:3b:c0:26:05:0c:fd:f6:6a: 2f:26:5e:59:43:60:bf:1d:29:7f:37:73:f3:7f:9c:68:32:fe: fa:cf:c4:5f:49:40:31:31:61:90:62:f0:a6:20:c4:a1:2b:77: 1a:8c:4b:61:2e:3e:fa:d0:a4:55:a3:65:43:e0:3a:94:8f:45: c9:84:52:9a:4f:ac:15:3b:c2:f8:db:ab:4e:6c:85:cd:0e:f4: aa:f1:22:78:2c:84:c3:8e:a2:9e:1a:f2:a5:00:59:ff:5d:d5: d2:83:f5:ce:10:9a:4f:88:59:14:45:e4:7c:31:cf:a0:fc:b9: 9f:2e:07:05:fb:9d:9e:a1:1b:d0:ca:17:39:2b:c8:f4:31:21: 70:9f:00:96:68:c3:61:be:65:da:a9:d4:d8:a4:c8:d8:89:53: 37:30:ed:7f:98:4e:a2:f8:e2:89:0e:df:15:4c:3e:e7:e8:58: ce:ba:14:31:23:84:4a:63:15:47:05:99:d1:3b:14:47:b2:ec: db:b6:d0:bd:5a:21:fa:43:49:f3:8a:31:16:69:37:0e:58:b6: 78:b5:01:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvD6OcUd+EDaSJn5ea4aHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZDZiMTcxMjMzZjIwYjM3ZTYxYTNhMWZmNTllYTU1M2Jj ZjIxZDMwHhcNMjUxMjI0MTkwMDQ5WhcNMjUxMjI1MTkwMDQ5WjAzMTEwLwYDVQQD EyhmZDEzNzYyMjM2ZTkyODIyZTM4ODdkNzMxMDRkNGEyOGY2Yzk4MDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypGN7Qapud/I9ToUmRjiFaWfOz6l TF+tiZnY4RcrrjXknmiH8z4H5F+EPtlNszwq1YrUkJv3idF7OItUgxM18MFohVXX 3wkXU9hjVPToVm8435IWMrX8TfXl9dslhsiCLkQrWaygpjnehMiJKZP32bBIdUMr 2uxanavnkYEgiI0kWkyvgGXLvS8LPoDj4IG0j/TONgmUsNcvp/QZCFsdL1JTaAit 79QfMSfza4tbnCv8XuzpMhkY81+dqGlGZ4Vp5dB/AKW4ofU1mXVpEtzGQOhC3blw dKPeXP9lq+HD+eS2/X+CV+Mq7v8NpqGkd4SE+3JIR2370j36E32trAo1vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0TdiI26Sgi44h9cxBNSij2yYAcMB8GA1UdIwQY MBaAFKnWsXEjPyCzfmGjof9Z6lU7zyHTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84OTY5MTQtNDFiMS00YjY3LTlkYjQt MDk1ZGNlMGUwMTllLzEvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS84OTY5MTQtNDFiMS00YjY3LTlkYjQtMDk1ZGNlMGUwMTll LzEvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzvob88tX NhDPr6JjQTAm8iC6TltYeesQ29sO/PP79+PqaPHuVV198SvncbTEQjvAJgUM/fZq LyZeWUNgvx0pfzdz83+caDL++s/EX0lAMTFhkGLwpiDEoSt3GoxLYS4++tCkVaNl Q+A6lI9FyYRSmk+sFTvC+NurTmyFzQ70qvEieCyEw46inhrypQBZ/13V0oP1zhCa T4hZFEXkfDHPoPy5ny4HBfudnqEb0MoXOSvI9DEhcJ8AlmjDYb5l2qnU2KTI2IlT NzDtf5hOovjiiQ7fFUw+5+hYzroUMSOESmMVRwWZ0TsUR7Ls27bQvVoh+kNJ84ox Fmk3Dli2eLUBrA== -----END CERTIFICATE-----Generated at Thu Dec 25 04:31:50 2025 by rpki-client