This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft File: qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json) Hash identifier: mAnQxu1P0YsmOagXKhesoF4A8t+Juad1EjpM5zTNLm8= Subject key identifier: BC:76:E7:9F:51:43:B3:40:D4:95:14:D6:C1:E6:D3:64:4B:87:8E:95 Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1 Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1 Certificate serial: 019AF19B5C8245F906DA0932CFDE8E9E1B19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft Manifest number: 0B4C Signing time: Sat 06 Dec 2025 03:01:22 +0000 Manifest this update: Sat 06 Dec 2025 03:01:22 +0000 Manifest next update: Sun 07 Dec 2025 03:01:22 +0000 Files and hashes: 1: hofEb4DxTmo8-bHoq5_u1SjHWxg.roa (hash: hCqP+IxiyDQrp0AjJaVxMj1A1H2iMztGikQq20Whf3E=) 2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: LVutM6HmfVz+WdjOmTd+QvmNsvSAm4ZwwB5HwvinohE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:5c:82:45:f9:06:da:09:32:cf:de:8e:9e:1b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1 Validity Not Before: Dec 6 03:01:22 2025 GMT Not After : Dec 7 03:01:22 2025 GMT Subject: CN=bc76e79f5143b340d49514d6c1e6d3644b878e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c7:f0:74:1f:33:73:f1:54:c8:f9:06:4c:34: d3:d4:e9:68:c6:39:7c:36:fd:97:5c:90:b5:21:15: c2:84:24:88:aa:4e:d8:95:3d:5f:82:4f:eb:12:7c: a1:a5:bc:25:0c:fa:57:83:ee:94:41:30:45:45:86: 59:b2:9b:79:ec:9b:59:86:97:78:02:09:5f:f1:f7: a8:6a:fe:b8:77:ad:a5:ee:6c:bd:30:23:e4:85:c8: 26:53:31:09:14:20:53:3d:dc:71:72:29:c9:c6:ee: 9a:3e:29:19:55:9a:c8:a6:0b:89:0b:1f:e3:46:d5: 8f:9b:f3:cc:e6:75:cc:53:df:f0:ec:c5:b2:c2:8d: e7:04:4f:32:fd:d7:59:d1:ba:79:82:0a:3f:e1:8b: 8e:91:51:0a:6a:7d:8e:41:78:a1:b9:0b:24:59:53: aa:26:ca:1b:9c:76:d3:a2:96:16:76:98:de:0f:69: aa:dc:a6:1e:77:2b:ae:56:65:10:d7:79:e3:9a:94: 0b:9e:23:d0:41:ec:28:3c:92:71:02:99:38:05:7e: 91:65:64:21:77:58:0a:46:c2:8c:25:06:0b:46:fa: 37:29:ea:b6:54:86:c1:98:fd:8d:54:ca:14:c1:ca: 3b:0f:8a:55:49:33:14:42:32:bd:74:c4:f7:80:30: 52:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:76:E7:9F:51:43:B3:40:D4:95:14:D6:C1:E6:D3:64:4B:87:8E:95 X509v3 Authority Key Identifier: keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:52:dc:b6:53:04:16:0d:96:ec:6b:88:a7:84:b0:6d:50:12: 62:9a:12:08:0c:51:d4:3c:0a:dc:28:ad:d6:2b:be:77:e0:9f: db:21:88:8e:48:f7:a2:d3:b0:9c:9f:0a:5d:d0:79:8b:2d:f7: 76:e8:ce:bc:c7:3c:25:37:56:95:5d:3b:cf:68:95:6f:68:d3: a1:01:e5:59:ce:01:e5:d8:d3:65:e7:f2:2b:13:5d:f1:0e:1a: 36:df:01:9c:0d:28:d0:f7:b5:41:71:db:0f:b8:a2:65:41:b9: cc:1b:94:d7:1b:fb:e2:a8:55:7c:bb:3a:24:f9:6c:03:fe:22: b2:70:84:36:3d:a7:a1:1f:42:3e:cc:db:55:57:3e:44:3b:65: 00:72:f3:50:8d:a7:04:fe:bc:0d:99:75:cb:c5:2b:8e:b3:84: 76:08:bc:2a:61:d2:57:ee:43:12:15:6e:13:7e:8b:67:74:a7: 9f:dc:16:05:ad:32:1b:9b:64:b1:2f:1d:66:63:41:54:10:72: 4f:d5:68:0d:b7:ea:bc:c6:45:10:12:0d:7a:fe:ca:7f:78:f2: ca:7b:5b:98:40:f7:38:08:a8:33:e0:8a:99:f0:98:07:ed:1c: 5e:9d:da:16:d7:b7:a4:77:d4:b8:82:20:73:11:2d:6a:14:5b: 98:af:b8:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1yCRfkG2gkyz96OnhsZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMWMyOWM5NWQyNDhjYmZmYTc0NGFiMzRlNDdlYWNjYTcz NTUwZDEwHhcNMjUxMjA2MDMwMTIyWhcNMjUxMjA3MDMwMTIyWjAzMTEwLwYDVQQD EyhiYzc2ZTc5ZjUxNDNiMzQwZDQ5NTE0ZDZjMWU2ZDM2NDRiODc4ZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMfwdB8zc/FUyPkGTDTT1Oloxjl8 Nv2XXJC1IRXChCSIqk7YlT1fgk/rEnyhpbwlDPpXg+6UQTBFRYZZspt57JtZhpd4 Aglf8feoav64d62l7my9MCPkhcgmUzEJFCBTPdxxcinJxu6aPikZVZrIpguJCx/j RtWPm/PM5nXMU9/w7MWywo3nBE8y/ddZ0bp5ggo/4YuOkVEKan2OQXihuQskWVOq JsobnHbTopYWdpjeD2mq3KYedyuuVmUQ13njmpQLniPQQewoPJJxApk4BX6RZWQh d1gKRsKMJQYLRvo3Keq2VIbBmP2NVMoUwco7D4pVSTMUQjK9dMT3gDBS3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLx2559RQ7NA1JUU1sHm02RLh46VMB8GA1UdIwQY MBaAFKscKcldJIy/+nRKs05H6synNVDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXh3cHlWMGtqTF82ZEVxelRrZnF6S2MxVU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My85YWVhOGMtMjE5OS00ZDQ2LTkxZWQt ZWE2Njg0NDE0OWVlLzEvcXh3cHlWMGtqTF82ZEVxelRrZnF6S2MxVU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My85YWVhOGMtMjE5OS00ZDQ2LTkxZWQtZWE2Njg0NDE0OWVl LzEvcXh3cHlWMGtqTF82ZEVxelRrZnF6S2MxVU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1LctlME Fg2W7GuIp4SwbVASYpoSCAxR1DwK3Cit1iu+d+Cf2yGIjkj3otOwnJ8KXdB5iy33 dujOvMc8JTdWlV07z2iVb2jToQHlWc4B5djTZefyKxNd8Q4aNt8BnA0o0Pe1QXHb D7iiZUG5zBuU1xv74qhVfLs6JPlsA/4isnCENj2noR9CPszbVVc+RDtlAHLzUI2n BP68DZl1y8UrjrOEdgi8KmHSV+5DEhVuE36LZ3Snn9wWBa0yG5tksS8dZmNBVBBy T9VoDbfqvMZFEBINev7Kf3jyyntbmED3OAioM+CKmfCYB+0cXp3aFte3pHfUuIIg cxEtahRbmK+4mw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:26 2025 by rpki-client