This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft File: qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json) Hash identifier: Mu1/o0Gi3a1h/yF1Tn+m0PrviHxhnBtpEnbzDiGR2nk= Subject key identifier: 82:57:BA:EA:D9:6B:5B:CF:2F:8A:EC:E2:82:FC:1C:0E:F4:D1:F3:68 Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0 Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0 Certificate serial: 019AF276E5F6F6C7CD3AEA1720779D323BDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft Manifest number: 14A4 Signing time: Sat 06 Dec 2025 07:01:09 +0000 Manifest this update: Sat 06 Dec 2025 07:01:09 +0000 Manifest next update: Sun 07 Dec 2025 07:01:09 +0000 Files and hashes: 1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: j9BDzicpppqpQf3H8qy4WkdEE2ivvAI388Jzv28fW5s=) 2: xtTCfWlyctb3-ZIARtvZc7gD2_c.roa (hash: DoO5FfFnFM++vEGajImQDDKEPB+yqs7BrAr2CdTgfGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e5:f6:f6:c7:cd:3a:ea:17:20:77:9d:32:3b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0 Validity Not Before: Dec 6 07:01:09 2025 GMT Not After : Dec 7 07:01:09 2025 GMT Subject: CN=8257baead96b5bcf2f8aece282fc1c0ef4d1f368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7f:67:a0:d8:df:64:a4:d1:a5:36:48:2f:6b: 26:c2:04:9e:2e:cb:01:da:7d:b6:26:31:fc:32:af: 47:7e:0d:e9:7e:35:60:41:13:22:18:8d:cc:e8:fa: 09:c6:84:40:2c:24:98:c8:f3:27:82:b9:c9:77:45: 58:f1:9f:f2:69:92:8c:36:74:09:83:97:99:e6:07: 89:20:1f:59:69:cb:4b:ca:e6:06:bc:40:72:99:c0: 69:6e:cc:52:ef:50:35:74:be:8f:c7:e4:7b:fc:ef: 2c:b6:1b:2c:21:60:f8:5e:fd:0e:7a:35:88:be:3e: 1f:31:04:9f:09:c9:fb:e3:19:27:b7:9d:b6:6a:82: ae:bc:54:b6:34:c8:c1:e8:6f:b7:4d:32:e3:60:e4: 29:07:f2:93:2a:16:24:be:06:3b:a7:e7:39:56:e9: 74:60:fc:ad:89:ba:30:b2:1f:a4:fc:25:d7:f6:31: d4:7b:ae:7d:e0:cc:f6:67:c3:21:e6:c3:66:e8:1c: ac:ad:ce:27:8d:62:5d:4c:14:82:3f:6a:d3:19:81: a2:83:44:a6:b5:d7:30:c6:a3:39:16:63:c7:de:a8: 63:5a:5c:f2:67:73:4f:70:95:0a:02:40:29:a8:ed: bf:ad:07:76:0f:9c:e2:7a:00:c1:02:a6:71:88:a2: d1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:57:BA:EA:D9:6B:5B:CF:2F:8A:EC:E2:82:FC:1C:0E:F4:D1:F3:68 X509v3 Authority Key Identifier: keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:65:f2:80:af:bc:c5:5b:03:3e:96:eb:8d:69:8b:9a:41:fb: 0b:0c:1c:28:b5:64:6f:07:0e:09:a4:24:24:d5:53:f0:b5:d6: b5:7e:9c:84:95:56:fb:8e:3c:68:0c:0d:61:8a:c2:cf:8c:d2: 80:8f:38:2d:ba:ba:03:bf:c6:70:cb:0b:d0:dc:b8:4b:74:13: dd:3a:67:35:18:e8:51:9c:d6:51:79:a6:8e:17:4a:40:20:a9: 47:5d:58:29:61:28:fb:41:a0:00:77:71:3b:05:8e:3c:2c:9a: 38:fc:ed:c6:41:ea:39:57:7b:87:3a:45:7e:57:1e:ee:40:c6: 50:c2:40:a2:3c:d7:29:66:1a:63:1a:22:18:96:3b:fd:4b:5e: 8e:2e:1e:e2:d8:b5:41:fc:03:6e:99:d0:41:d9:1e:aa:4f:77: b3:d8:00:6d:0e:1e:f6:47:cf:c7:03:e9:db:70:31:ef:f9:32: 38:59:eb:18:95:4b:0a:87:41:c0:22:2c:95:c7:cb:f4:7a:0a: 2e:21:0a:c5:42:f8:63:c1:07:55:58:f6:98:ad:69:a1:b1:ce: 55:d8:32:23:26:3c:77:be:5f:17:32:55:ee:a6:c7:92:8b:cb: c0:36:2c:05:f2:e5:ff:d8:6f:24:14:4a:fe:45:89:73:bf:70: de:88:00:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduX29sfNOuoXIHedMjvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ODVjZGJkZGZkN2QxMzE2ODQ1YmViNGY3Mzk4ZjNjZTY0 ZmFjZDAwHhcNMjUxMjA2MDcwMTA5WhcNMjUxMjA3MDcwMTA5WjAzMTEwLwYDVQQD Eyg4MjU3YmFlYWQ5NmI1YmNmMmY4YWVjZTI4MmZjMWMwZWY0ZDFmMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn9noNjfZKTRpTZIL2smwgSeLssB 2n22JjH8Mq9Hfg3pfjVgQRMiGI3M6PoJxoRALCSYyPMngrnJd0VY8Z/yaZKMNnQJ g5eZ5geJIB9ZactLyuYGvEBymcBpbsxS71A1dL6Px+R7/O8sthssIWD4Xv0OejWI vj4fMQSfCcn74xknt522aoKuvFS2NMjB6G+3TTLjYOQpB/KTKhYkvgY7p+c5Vul0 YPytibowsh+k/CXX9jHUe6594Mz2Z8Mh5sNm6Bysrc4njWJdTBSCP2rTGYGig0Sm tdcwxqM5FmPH3qhjWlzyZ3NPcJUKAkApqO2/rQd2D5ziegDBAqZxiKLRXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJXuurZa1vPL4rs4oL8HA700fNoMB8GA1UdIwQY MBaAFKiFzb3f19ExaEW+tPc5jzzmT6zQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iM2E1NzYtNTBjYi00ODY2LWJlODEt ZjQ4Mjc4MDBiMGM4LzEvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9iM2E1NzYtNTBjYi00ODY2LWJlODEtZjQ4Mjc4MDBiMGM4 LzEvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWXygK+8 xVsDPpbrjWmLmkH7CwwcKLVkbwcOCaQkJNVT8LXWtX6chJVW+448aAwNYYrCz4zS gI84Lbq6A7/GcMsL0Ny4S3QT3TpnNRjoUZzWUXmmjhdKQCCpR11YKWEo+0GgAHdx OwWOPCyaOPztxkHqOVd7hzpFflce7kDGUMJAojzXKWYaYxoiGJY7/Uteji4e4ti1 QfwDbpnQQdkeqk93s9gAbQ4e9kfPxwPp23Ax7/kyOFnrGJVLCodBwCIslcfL9HoK LiEKxUL4Y8EHVVj2mK1pobHOVdgyIyY8d75fFzJV7qbHkovLwDYsBfLl/9hvJBRK /kWJc79w3ogA4g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:11:51 2025 by rpki-client