This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json) Hash identifier: ymLZeukKubUB7j4pPxcDJxFcNmOk/0bqmrE0tPsYL0s= Subject key identifier: 64:C3:CC:EB:EB:08:CB:32:4C:59:80:91:64:C9:EB:E2:99:1F:26:90 Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c Certificate serial: 019B42800ADDA50A7E87AA1FDE4A3CF16A13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 20:00:46 +0000 Manifest this update: Sun 21 Dec 2025 20:00:46 +0000 Manifest next update: Mon 22 Dec 2025 20:00:46 +0000 Files and hashes: 1: ZQzI8pwKz3Y9UFOTdtU4b9ctJXY.roa (hash: m2HxLCCi/fQqzx7YAu5gwnUGUYg0wp/lcNW6PdEdels=) 2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: KaLxXSbMj2RoUW2EJ8SZ8y7HME3YYXiUFRHmNN1HmAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:0a:dd:a5:0a:7e:87:aa:1f:de:4a:3c:f1:6a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c Validity Not Before: Dec 21 20:00:46 2025 GMT Not After : Dec 22 20:00:46 2025 GMT Subject: CN=64c3ccebeb08cb324c59809164c9ebe2991f2690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:66:e1:f0:0b:54:ee:d0:23:16:75:2f:a6:88: 9e:a9:6f:50:92:a6:36:32:a3:d1:84:b4:8b:90:bf: d1:39:e9:58:68:e4:32:f8:23:11:fc:50:e9:e9:fc: 98:39:fa:c6:3a:f2:1a:85:df:3f:7b:d3:fe:32:2b: 30:5a:ca:18:ff:f1:c8:b3:46:93:a4:62:0d:c2:c1: d5:bc:b1:df:23:5c:1b:a1:79:5e:87:88:a6:8b:d9: d1:8f:55:89:60:ff:43:a4:48:b1:e8:58:96:97:95: d2:61:44:af:34:74:9f:8e:56:a6:d4:f0:b5:26:87: 5a:7d:5b:88:a6:2f:18:91:20:d1:75:db:23:0f:08: e4:f1:22:ad:68:10:98:b5:6b:e2:87:99:50:50:45: a6:f0:84:e0:53:4a:cd:79:dc:b0:5b:7b:60:31:70: 31:fa:91:1c:0e:b9:c8:5f:7d:99:e5:b9:88:0d:7a: 7f:2f:8b:20:10:d3:33:97:6c:5d:aa:11:80:eb:8f: 66:d2:81:53:bc:dc:5b:24:b9:8f:36:22:b9:5e:21: 73:7f:2b:7d:0e:6e:eb:25:d4:96:46:09:95:cc:37: c3:3d:db:1b:d5:ae:32:6b:a4:3d:4d:10:bc:d6:8c: b0:97:03:f8:f2:ef:75:46:24:fc:e5:0f:c7:92:15: fe:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C3:CC:EB:EB:08:CB:32:4C:59:80:91:64:C9:EB:E2:99:1F:26:90 X509v3 Authority Key Identifier: keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e9:51:b7:54:55:fb:0d:01:e0:cd:15:7d:2d:1a:ef:17:1c: 66:8c:76:18:72:03:c7:6f:48:4c:6d:e0:f5:2c:09:2d:97:b5: 54:6c:f3:4d:85:3f:50:bd:95:c2:53:1f:5f:e9:94:00:5d:3f: ca:c2:c9:8e:6d:ad:fb:a3:aa:1f:ad:88:52:a5:d6:27:4b:1d: 4d:34:a4:5f:5b:e3:c2:c5:29:66:09:29:05:d5:85:69:a4:2e: 5f:6a:ff:d1:37:53:e2:42:9a:52:39:f6:7d:12:43:01:15:9c: 73:55:1d:8b:77:d6:e5:8d:4c:8e:55:0c:23:40:c5:68:7a:2e: f2:7b:52:1d:fa:3c:e3:d3:9a:e5:8c:04:08:c1:21:ee:3d:10: ba:0b:92:a6:a6:a7:61:da:79:14:33:e8:85:b0:f1:71:e8:99: 0d:4c:a8:86:37:9f:d0:fe:a3:df:38:66:78:db:60:75:07:18: a8:fb:79:3b:6a:aa:07:4e:3b:3f:dc:7c:cc:35:57:eb:06:71: e8:36:e0:2d:5c:bf:b2:a3:7b:65:d6:cc:51:93:3a:44:9f:ba: 93:dc:74:af:82:ae:1d:3c:83:d0:94:3b:18:58:c7:92:8b:04: 2f:9f:e1:7c:8a:fd:a2:16:d0:fd:e5:7a:4a:a0:94:60:84:c1: 20:5b:65:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgArdpQp+h6of3ko88WoTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Nzc4MjBlYTYxYjExYjViMzg1OWFiNGE0YmM3ZWMwYTdi NzM4OGMwHhcNMjUxMjIxMjAwMDQ2WhcNMjUxMjIyMjAwMDQ2WjAzMTEwLwYDVQQD Eyg2NGMzY2NlYmViMDhjYjMyNGM1OTgwOTE2NGM5ZWJlMjk5MWYyNjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52bh8AtU7tAjFnUvpoieqW9QkqY2 MqPRhLSLkL/ROelYaOQy+CMR/FDp6fyYOfrGOvIahd8/e9P+MiswWsoY//HIs0aT pGINwsHVvLHfI1wboXleh4imi9nRj1WJYP9DpEix6FiWl5XSYUSvNHSfjlam1PC1 JodafVuIpi8YkSDRddsjDwjk8SKtaBCYtWvih5lQUEWm8ITgU0rNedywW3tgMXAx +pEcDrnIX32Z5bmIDXp/L4sgENMzl2xdqhGA649m0oFTvNxbJLmPNiK5XiFzfyt9 Dm7rJdSWRgmVzDfDPdsb1a4ya6Q9TRC81oywlwP48u91RiT85Q/HkhX+nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTDzOvrCMsyTFmAkWTJ6+KZHyaQMB8GA1UdIwQY MBaAFKl3gg6mGxG1s4WatKS8fsCntziMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUt YjE4ZDc2YjAxMmU3LzEvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUtYjE4ZDc2YjAxMmU3 LzEvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+lRt1RV +w0B4M0VfS0a7xccZox2GHIDx29ITG3g9SwJLZe1VGzzTYU/UL2VwlMfX+mUAF0/ ysLJjm2t+6OqH62IUqXWJ0sdTTSkX1vjwsUpZgkpBdWFaaQuX2r/0TdT4kKaUjn2 fRJDARWcc1Udi3fW5Y1MjlUMI0DFaHou8ntSHfo849Oa5YwECMEh7j0QuguSpqan Ydp5FDPohbDxceiZDUyohjef0P6j3zhmeNtgdQcYqPt5O2qqB047P9x8zDVX6wZx 6DbgLVy/sqN7ZdbMUZM6RJ+6k9x0r4KuHTyD0JQ7GFjHkosEL5/hfIr9ohbQ/eV6 SqCUYITBIFtlhg== -----END CERTIFICATE-----Generated at Sun Dec 21 23:13:47 2025 by rpki-client