This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft File: qxyACqG3ihekPhn9mTg1XQQR6Uo.mft (raw, json) Hash identifier: ZSxLrRmuV2oyLMTAkW+xLGIrsvKDpvbMwSVGCD9DZFM= Subject key identifier: C9:21:A2:8D:62:B5:E7:C8:EC:6C:D7:0F:AF:19:1B:C9:E9:39:CC:13 Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A Certificate issuer: /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a Certificate serial: 019B3DFEBF248E0D6C428F3E678E4FE1D5FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft Manifest number: 0E44 Signing time: Sat 20 Dec 2025 23:01:03 +0000 Manifest this update: Sat 20 Dec 2025 23:01:03 +0000 Manifest next update: Sun 21 Dec 2025 23:01:03 +0000 Files and hashes: 1: 3vZog35fA7A8208htG6MPJHCfRQ.roa (hash: KjUP3VOXf2M5RM2RNCpzmW1mXhGa52pGMp/lPhjp9fc=) 2: BfHqfkHY1q4ldygRkcfv7XdzqLs.roa (hash: YbMXX/fz76OV1tIhHwhH/SEdCy/PTJDjaV1pgkgaZeE=) 3: CmIDNfzs3bSVgY-dfSu_0KvUwvU.roa (hash: zeJTsFwERYYSCRF2I3KzeFe/yJYCV+YH9obrNhlqeUk=) 4: XaQFQicfhG4nS73QjVCHMUwAPG8.roa (hash: vEWEx+WC0m8X0tM9GZ7AzmWSqkdHKT5bYqE12jvQZ1Y=) 5: qxyACqG3ihekPhn9mTg1XQQR6Uo.crl (hash: m5jnBTedg8YueS6L3+b8vq1uIzKFAXoB4mokU4Vpl4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:bf:24:8e:0d:6c:42:8f:3e:67:8e:4f:e1:d5:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a Validity Not Before: Dec 20 23:01:03 2025 GMT Not After : Dec 21 23:01:03 2025 GMT Subject: CN=c921a28d62b5e7c8ec6cd70faf191bc9e939cc13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:4f:76:2b:45:6c:ab:9f:db:fa:f6:e5:c5: bb:88:1b:01:b6:30:a0:44:e2:12:10:37:43:39:72: ec:b5:46:fc:30:e0:f9:c0:41:ef:a0:79:12:2d:ce: be:dd:3c:75:f3:2b:ad:37:c1:d2:3c:a7:96:37:99: 10:c9:ae:b7:c4:d1:57:27:ba:7e:4d:a0:20:90:59: 14:20:dd:a8:bc:27:39:22:1e:ed:92:a7:3f:6e:54: 66:fd:7d:3e:2c:98:8c:ca:7a:40:af:0f:a7:57:d0: 1d:45:9f:55:8a:e1:d2:c3:ed:49:e8:17:d8:c0:31: ed:cb:26:ac:4f:9a:62:e1:2c:e3:81:7a:b8:9c:b1: 5a:9e:70:3a:b2:fe:fa:ce:f5:ee:f7:56:b9:6f:00: 59:ca:b7:5c:38:8d:93:dc:92:7d:61:f9:ec:68:7c: a4:2a:96:fd:4a:41:d6:1f:01:5a:e0:49:3b:8b:66: 26:3f:28:a9:1f:a5:1c:c2:6c:e8:34:fa:69:b8:31: 3b:0b:6d:88:eb:b5:ff:14:0f:3b:5e:dc:a9:6d:71: 61:72:aa:bb:57:f9:be:91:ec:8e:9a:ec:15:5e:be: e7:ea:46:01:dd:0d:cd:4e:62:e0:31:b0:ac:77:46: 23:24:9b:95:1e:37:be:5b:7a:48:32:4a:bd:8d:26: 4e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:21:A2:8D:62:B5:E7:C8:EC:6C:D7:0F:AF:19:1B:C9:E9:39:CC:13 X509v3 Authority Key Identifier: keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:5a:31:20:4c:9a:5c:53:03:15:ab:aa:de:83:42:06:37:bc: e3:21:dc:07:33:eb:9d:26:09:61:4e:83:6d:b4:7a:b5:1c:13: 28:e6:0b:c6:58:f2:0c:1a:4d:d2:a8:98:9c:51:a2:82:e4:60: 02:35:c0:ae:5c:02:7b:23:dd:9d:3f:fc:82:ab:b6:1c:e9:dc: ec:9e:e0:13:83:63:2b:f4:4b:10:53:87:2a:1d:52:51:80:b8: e7:f2:eb:c0:c9:34:1e:80:6d:d5:d2:48:06:aa:91:a7:75:0f: 51:5c:69:68:d0:a8:23:52:49:66:4c:38:be:f9:8a:ae:43:8d: b5:ee:de:3f:ae:20:a5:e2:ee:20:8d:ad:ec:9b:f6:ff:a0:8d: 73:d2:68:e6:3d:a8:e5:61:31:0a:ec:37:b3:c5:07:03:8d:de: 09:dc:64:45:00:dd:e1:9a:90:c0:a6:6d:b5:db:41:4c:7c:5f: b2:f1:63:eb:ed:5a:f5:25:4d:37:57:b2:3e:92:a4:46:a4:4b: 0c:c4:82:8b:ee:f6:ed:b4:d2:6f:fd:de:4c:60:4d:fd:a3:3d: 3c:bc:df:4c:d1:70:84:6c:47:c8:52:1c:e2:e0:06:54:3a:b4: ca:a8:1f:2f:48:7c:50:72:6f:41:a5:92:5c:11:15:de:c3:d7: 3e:10:04:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/r8kjg1sQo8+Z45P4dX6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMWM4MDBhYTFiNzhhMTdhNDNlMTlmZDk5MzgzNTVkMDQx MWU5NGEwHhcNMjUxMjIwMjMwMTAzWhcNMjUxMjIxMjMwMTAzWjAzMTEwLwYDVQQD EyhjOTIxYTI4ZDYyYjVlN2M4ZWM2Y2Q3MGZhZjE5MWJjOWU5MzljYzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmZPditFbKuf2/r25cW7iBsBtjCg ROISEDdDOXLstUb8MOD5wEHvoHkSLc6+3Tx18yutN8HSPKeWN5kQya63xNFXJ7p+ TaAgkFkUIN2ovCc5Ih7tkqc/blRm/X0+LJiMynpArw+nV9AdRZ9ViuHSw+1J6BfY wDHtyyasT5pi4SzjgXq4nLFannA6sv76zvXu91a5bwBZyrdcOI2T3JJ9YfnsaHyk Kpb9SkHWHwFa4Ek7i2YmPyipH6UcwmzoNPppuDE7C22I67X/FA87XtypbXFhcqq7 V/m+keyOmuwVXr7n6kYB3Q3NTmLgMbCsd0YjJJuVHje+W3pIMkq9jSZOrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkhoo1itefI7GzXD68ZG8npOcwTMB8GA1UdIwQY MBaAFKscgAqht4oXpD4Z/Zk4NV0EEelKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYjFjYTAtYmJmMi00NDE5LThhMGMt NTBjYmNiNWIxOWMyLzEvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8xYjFjYTAtYmJmMi00NDE5LThhMGMtNTBjYmNiNWIxOWMy LzEvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1oxIEya XFMDFauq3oNCBje84yHcBzPrnSYJYU6DbbR6tRwTKOYLxljyDBpN0qiYnFGiguRg AjXArlwCeyPdnT/8gqu2HOnc7J7gE4NjK/RLEFOHKh1SUYC45/LrwMk0HoBt1dJI BqqRp3UPUVxpaNCoI1JJZkw4vvmKrkONte7eP64gpeLuII2t7Jv2/6CNc9Jo5j2o 5WExCuw3s8UHA43eCdxkRQDd4ZqQwKZttdtBTHxfsvFj6+1a9SVNN1eyPpKkRqRL DMSCi+727bTSb/3eTGBN/aM9PLzfTNFwhGxHyFIc4uAGVDq0yqgfL0h8UHJvQaWS XBEV3sPXPhAExg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:01:22 2025 by rpki-client