This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json) Hash identifier: /5W2ji27x/XDo79nxoKgmDOUnOjO9WLL4SH7cjzp3yI= Subject key identifier: E1:DF:A2:C1:FA:71:D2:82:3B:FA:90:BA:AB:A8:83:C8:13:FF:00:8A Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c Certificate serial: 019B4091A7CE49D98A2F5270C6BE3569860F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 11:00:45 +0000 Manifest this update: Sun 21 Dec 2025 11:00:45 +0000 Manifest next update: Mon 22 Dec 2025 11:00:45 +0000 Files and hashes: 1: ZQzI8pwKz3Y9UFOTdtU4b9ctJXY.roa (hash: m2HxLCCi/fQqzx7YAu5gwnUGUYg0wp/lcNW6PdEdels=) 2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: 9AjVR2jgtAXdN6/r8lw92RCAcwMVgDicNeZbua+X/rA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:a7:ce:49:d9:8a:2f:52:70:c6:be:35:69:86:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c Validity Not Before: Dec 21 11:00:45 2025 GMT Not After : Dec 22 11:00:45 2025 GMT Subject: CN=e1dfa2c1fa71d2823bfa90baaba883c813ff008a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3b:dd:20:df:c5:6a:bb:4e:0d:29:a7:20:d1: a0:55:5c:96:e0:3e:78:94:0b:2a:04:92:be:bb:41: f0:2e:1e:16:a7:85:15:0e:f0:06:c7:2b:2f:43:81: 5c:ae:21:19:f6:74:a1:55:15:20:c9:20:32:4b:35: f9:18:6a:32:98:a5:25:92:59:ce:ef:b6:50:82:5d: a2:31:16:41:93:76:d6:8f:0f:0a:9a:49:fa:ae:68: b1:9e:f7:95:0a:7a:89:7d:6d:15:91:0a:fe:32:58: 35:01:9f:be:1f:c5:b3:d9:5f:08:a5:18:d9:8d:f3: 18:cf:88:28:0b:c7:ad:c6:48:aa:34:2f:77:43:77: 01:10:7c:b2:1e:3e:b4:f7:67:e9:90:7d:0d:d6:e2: 4d:32:88:3b:0b:94:1d:6d:7f:9d:0f:0e:c2:39:e5: da:3d:d9:01:00:31:cd:3f:3e:92:d4:7a:d5:7c:de: 63:09:64:6d:1e:74:4c:2b:d3:24:24:fa:3b:ae:74: be:dc:eb:1e:3f:3c:42:cc:ef:94:eb:f7:0f:06:22: fe:1c:ea:5a:f4:42:64:af:0b:64:86:37:1b:53:03: dd:60:41:e9:b7:d3:a0:a2:b8:d5:c4:72:3a:c3:73: fb:a1:7b:8a:2e:fa:c4:b1:02:95:5c:9f:af:8c:b1: c4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DF:A2:C1:FA:71:D2:82:3B:FA:90:BA:AB:A8:83:C8:13:FF:00:8A X509v3 Authority Key Identifier: keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2c:72:40:f3:85:c1:1e:11:b7:08:13:03:ba:6e:99:27:fc: f4:d1:49:5c:ff:05:e0:ff:17:29:f2:0e:7d:27:cd:1b:4a:15: b0:77:b5:e2:41:79:85:ef:d4:c0:5f:c2:1d:76:01:e2:6d:85: f3:7c:ba:11:20:4b:5d:bf:95:6e:fa:d1:97:68:2c:44:b0:7b: 1f:42:48:83:d5:87:e0:a7:1f:71:e7:ba:26:a4:c5:61:2a:b3: 77:c2:74:df:be:72:fe:8f:6b:61:63:4e:8f:84:eb:56:6f:a1: 0a:e0:b2:79:c0:de:11:93:1f:df:e7:0d:1b:78:d3:cb:70:a4: bd:13:ff:49:d7:f0:55:69:6e:79:a2:86:cb:e1:eb:4c:31:64: e2:35:c9:c3:0f:2e:93:80:97:63:2c:f6:62:a7:04:f2:1b:e6: 69:39:58:c9:aa:bb:ec:fd:e9:6a:8c:5e:3c:9c:84:14:82:14: 04:13:62:96:f3:a2:c2:64:5f:ec:e9:28:02:14:29:3c:6b:c9: c0:ca:fd:76:24:73:23:02:83:36:30:2c:bc:3e:bf:c3:88:61: 7e:3b:58:bf:0a:26:04:09:94:4a:e1:c7:ff:80:99:81:b0:87: 3c:84:5c:a0:a0:d5:ef:9b:f5:7a:51:78:46:3f:e7:f4:e0:13: ab:b5:a3:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkafOSdmKL1Jwxr41aYYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Nzc4MjBlYTYxYjExYjViMzg1OWFiNGE0YmM3ZWMwYTdi NzM4OGMwHhcNMjUxMjIxMTEwMDQ1WhcNMjUxMjIyMTEwMDQ1WjAzMTEwLwYDVQQD EyhlMWRmYTJjMWZhNzFkMjgyM2JmYTkwYmFhYmE4ODNjODEzZmYwMDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzvdIN/FartODSmnINGgVVyW4D54 lAsqBJK+u0HwLh4Wp4UVDvAGxysvQ4FcriEZ9nShVRUgySAySzX5GGoymKUlklnO 77ZQgl2iMRZBk3bWjw8Kmkn6rmixnveVCnqJfW0VkQr+Mlg1AZ++H8Wz2V8IpRjZ jfMYz4goC8etxkiqNC93Q3cBEHyyHj6092fpkH0N1uJNMog7C5QdbX+dDw7COeXa PdkBADHNPz6S1HrVfN5jCWRtHnRMK9MkJPo7rnS+3OsePzxCzO+U6/cPBiL+HOpa 9EJkrwtkhjcbUwPdYEHpt9OgorjVxHI6w3P7oXuKLvrEsQKVXJ+vjLHE3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHfosH6cdKCO/qQuquog8gT/wCKMB8GA1UdIwQY MBaAFKl3gg6mGxG1s4WatKS8fsCntziMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUt YjE4ZDc2YjAxMmU3LzEvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUtYjE4ZDc2YjAxMmU3 LzEvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnixyQPOF wR4RtwgTA7pumSf89NFJXP8F4P8XKfIOfSfNG0oVsHe14kF5he/UwF/CHXYB4m2F 83y6ESBLXb+VbvrRl2gsRLB7H0JIg9WH4Kcfcee6JqTFYSqzd8J0375y/o9rYWNO j4TrVm+hCuCyecDeEZMf3+cNG3jTy3CkvRP/SdfwVWlueaKGy+HrTDFk4jXJww8u k4CXYyz2YqcE8hvmaTlYyaq77P3paoxePJyEFIIUBBNilvOiwmRf7OkoAhQpPGvJ wMr9diRzIwKDNjAsvD6/w4hhfjtYvwomBAmUSuHH/4CZgbCHPIRcoKDV75v1elF4 Rj/n9OATq7WjSg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:20:30 2025 by rpki-client