This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json) Hash identifier: vLTd1BeF4ekZrlxcDL+gI8/cczTJDWmx7HNoVUzVqp4= Subject key identifier: 92:29:53:5F:82:08:7B:64:EB:8A:C4:79:F0:0D:A2:3A:B3:D1:FD:E7 Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3 Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3 Certificate serial: 019B3E6CEA8AED0C655218876D4D988BB9BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft Manifest number: 0893 Signing time: Sun 21 Dec 2025 01:01:23 +0000 Manifest this update: Sun 21 Dec 2025 01:01:23 +0000 Manifest next update: Mon 22 Dec 2025 01:01:23 +0000 Files and hashes: 1: ZuTxi79Ck2OCXbkDauPT87FQh1E.roa (hash: xuj1se8JvfBc00cfkDYRLRVr3K+o4nQ3N/ymEwvuis8=) 2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: yOwiXN1lDgVz6cXKotvKZbsSR5rfhaKE20Lzvajrl3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:ea:8a:ed:0c:65:52:18:87:6d:4d:98:8b:b9:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3 Validity Not Before: Dec 21 01:01:23 2025 GMT Not After : Dec 22 01:01:23 2025 GMT Subject: CN=9229535f82087b64eb8ac479f00da23ab3d1fde7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a2:ca:d8:1a:b4:ad:7e:f1:ab:86:c0:10:f6: 4e:93:a8:69:3f:dd:96:30:d8:78:7b:ef:e6:2f:85: 78:fe:67:42:ec:11:11:21:0f:ef:5e:0e:c6:92:91: ce:6f:2e:7d:a6:49:35:e4:82:fb:2c:27:0c:a9:15: 49:6c:5a:87:69:6f:f5:0d:7f:15:d5:9c:de:06:3e: 4c:d9:7b:67:ec:65:75:65:d5:7c:c7:82:51:96:d8: 41:02:c2:39:3c:cb:df:1b:5f:69:40:91:ef:fa:00: 34:ae:43:8d:b1:4f:43:eb:b3:85:5e:83:7e:91:0f: 10:0d:4e:b9:1a:62:3e:05:da:93:2b:25:df:f9:95: d7:ba:86:88:60:aa:96:5e:1e:cd:44:fb:a5:89:99: 94:cc:95:55:17:7e:cb:32:01:95:15:a2:db:c7:5e: 93:d0:03:6c:9a:10:37:ad:d5:2e:5d:52:17:59:7f: ce:0a:de:8f:e1:e1:1d:af:71:73:c8:73:d9:ba:af: c5:1b:55:ed:26:96:1e:69:f2:2d:5d:8d:ad:7c:11: 0b:f7:f4:02:da:9c:ad:5b:8c:29:0c:b3:ee:b5:f8: 16:27:82:a7:74:15:09:45:a3:fd:3a:7a:ba:da:82: 31:9c:ea:ce:d7:b1:9e:50:5f:24:50:13:79:0d:ed: fd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:29:53:5F:82:08:7B:64:EB:8A:C4:79:F0:0D:A2:3A:B3:D1:FD:E7 X509v3 Authority Key Identifier: keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bf:3a:11:d0:7e:5b:e0:f7:8a:46:13:85:b8:e1:f9:c1:6e: 18:4d:32:63:d0:d4:52:f5:0c:ce:59:37:a1:1a:bc:7e:80:5a: f6:6c:26:1c:6f:68:8a:bf:05:a6:5e:21:83:06:4b:65:fa:1b: 5f:1b:98:2e:ff:a3:e6:7c:b7:2d:ac:5e:38:ce:9e:ef:97:1e: e7:5f:eb:70:d3:2a:49:13:70:d5:71:9b:ba:0f:91:b3:d8:f8: 97:b1:c7:19:1a:ed:6f:61:09:67:f9:11:ca:c9:62:57:72:da: 63:28:db:36:f2:a8:4e:09:d4:e5:7f:64:f5:47:12:0b:bc:3e: ae:e5:4c:05:85:3b:d2:15:b9:a5:ae:5a:71:d5:65:1d:dc:50: 94:b5:40:be:ea:2a:96:ca:de:85:a4:31:f0:0a:70:e0:0c:d5: e0:66:ad:64:1d:ba:57:2c:ba:73:6d:25:58:eb:8c:5f:84:8c: 23:d2:d3:4b:e0:dc:d4:cd:51:b8:91:40:56:4a:3e:22:9e:37: 04:9d:c2:da:46:8f:7e:a1:0b:9f:e4:41:b0:bd:74:a0:6a:bf: 7c:b2:98:27:c0:9f:4e:6b:5e:90:d5:34:2f:69:b5:fa:09:91: 4e:a2:63:4f:f7:28:96:d1:18:72:3d:07:a8:71:36:14:78:94: 58:38:f9:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bOqK7QxlUhiHbU2Yi7m/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZDZiMTcxMjMzZjIwYjM3ZTYxYTNhMWZmNTllYTU1M2Jj ZjIxZDMwHhcNMjUxMjIxMDEwMTIzWhcNMjUxMjIyMDEwMTIzWjAzMTEwLwYDVQQD Eyg5MjI5NTM1ZjgyMDg3YjY0ZWI4YWM0NzlmMDBkYTIzYWIzZDFmZGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qLK2Bq0rX7xq4bAEPZOk6hpP92W MNh4e+/mL4V4/mdC7BERIQ/vXg7GkpHOby59pkk15IL7LCcMqRVJbFqHaW/1DX8V 1ZzeBj5M2Xtn7GV1ZdV8x4JRlthBAsI5PMvfG19pQJHv+gA0rkONsU9D67OFXoN+ kQ8QDU65GmI+BdqTKyXf+ZXXuoaIYKqWXh7NRPuliZmUzJVVF37LMgGVFaLbx16T 0ANsmhA3rdUuXVIXWX/OCt6P4eEdr3FzyHPZuq/FG1XtJpYeafItXY2tfBEL9/QC 2pytW4wpDLPutfgWJ4KndBUJRaP9Onq62oIxnOrO17GeUF8kUBN5De39dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIpU1+CCHtk64rEefANojqz0f3nMB8GA1UdIwQY MBaAFKnWsXEjPyCzfmGjof9Z6lU7zyHTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84OTY5MTQtNDFiMS00YjY3LTlkYjQt MDk1ZGNlMGUwMTllLzEvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS84OTY5MTQtNDFiMS00YjY3LTlkYjQtMDk1ZGNlMGUwMTll LzEvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALL86EdB+ W+D3ikYThbjh+cFuGE0yY9DUUvUMzlk3oRq8foBa9mwmHG9oir8Fpl4hgwZLZfob XxuYLv+j5ny3LaxeOM6e75ce51/rcNMqSRNw1XGbug+Rs9j4l7HHGRrtb2EJZ/kR ysliV3LaYyjbNvKoTgnU5X9k9UcSC7w+ruVMBYU70hW5pa5acdVlHdxQlLVAvuoq lsrehaQx8Apw4AzV4GatZB26Vyy6c20lWOuMX4SMI9LTS+Dc1M1RuJFAVko+Ip43 BJ3C2kaPfqELn+RBsL10oGq/fLKYJ8CfTmtekNU0L2m1+gmRTqJjT/coltEYcj0H qHE2FHiUWDj5Cw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:42:15 2025 by rpki-client