This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft File: qxyACqG3ihekPhn9mTg1XQQR6Uo.mft (raw, json) Hash identifier: lw3lHsHh60Eu3B2VZ4FGzneO0fMNsS3DMRJidB9itKk= Subject key identifier: 2D:C1:51:3A:7C:D5:18:0A:46:CB:10:9F:E0:2C:D2:BE:32:C3:25:67 Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A Certificate issuer: /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a Certificate serial: 019AF2ADB87B9CB5B166FA416561CF7B4ECB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft Manifest number: 0E1D Signing time: Sat 06 Dec 2025 08:01:02 +0000 Manifest this update: Sat 06 Dec 2025 08:01:02 +0000 Manifest next update: Sun 07 Dec 2025 08:01:02 +0000 Files and hashes: 1: 3vZog35fA7A8208htG6MPJHCfRQ.roa (hash: KjUP3VOXf2M5RM2RNCpzmW1mXhGa52pGMp/lPhjp9fc=) 2: BfHqfkHY1q4ldygRkcfv7XdzqLs.roa (hash: YbMXX/fz76OV1tIhHwhH/SEdCy/PTJDjaV1pgkgaZeE=) 3: CmIDNfzs3bSVgY-dfSu_0KvUwvU.roa (hash: zeJTsFwERYYSCRF2I3KzeFe/yJYCV+YH9obrNhlqeUk=) 4: XaQFQicfhG4nS73QjVCHMUwAPG8.roa (hash: vEWEx+WC0m8X0tM9GZ7AzmWSqkdHKT5bYqE12jvQZ1Y=) 5: qxyACqG3ihekPhn9mTg1XQQR6Uo.crl (hash: pYJJ9yy4ln4Vh9txTDJs0OHKXgcGXGjKNMI4v1E02yk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b8:7b:9c:b5:b1:66:fa:41:65:61:cf:7b:4e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a Validity Not Before: Dec 6 08:01:02 2025 GMT Not After : Dec 7 08:01:02 2025 GMT Subject: CN=2dc1513a7cd5180a46cb109fe02cd2be32c32567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:1e:2d:23:58:42:f9:a2:53:5d:47:ac:8e: 80:ed:3d:17:4e:2e:dd:fa:12:a0:50:6e:18:56:50: 0b:f7:62:50:32:29:70:c6:48:1b:18:86:85:8d:f2: 44:16:37:3e:a8:0c:6d:34:d2:a1:ff:1b:f2:43:ca: b0:87:25:a6:cf:5d:dc:f2:32:74:c3:a8:90:03:dd: 18:45:6e:62:e9:52:51:5f:f8:6f:b8:26:41:db:26: 24:11:a4:31:34:e3:ff:f5:b4:0b:89:ad:36:9d:40: 7c:20:14:61:1d:03:80:91:5b:e0:f9:10:39:53:ef: 46:bf:45:4e:3b:ae:06:af:06:ed:d4:08:b5:d1:59: 55:49:47:64:05:f0:9d:eb:71:00:e6:96:c4:e4:9f: fa:a4:ce:8e:25:27:02:f0:af:59:73:d8:ea:21:e7: 6c:6e:1d:15:bd:dc:f0:9a:82:94:21:a8:8d:3d:27: 79:49:80:d3:c8:32:5e:a5:2d:9f:8b:a1:79:09:b0: 70:59:a5:02:db:ee:3d:bd:b6:e1:cf:dd:89:91:a2: 89:25:06:d2:c7:f3:ea:40:99:46:67:af:a9:26:34: 39:d1:93:cc:d2:1e:92:36:54:d8:e9:8d:22:12:0f: ce:51:72:40:55:7a:15:de:72:9a:3d:f2:12:99:75: ec:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C1:51:3A:7C:D5:18:0A:46:CB:10:9F:E0:2C:D2:BE:32:C3:25:67 X509v3 Authority Key Identifier: keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ec:79:77:8d:bd:64:38:14:f5:e2:00:3c:70:f8:67:df:08: 85:7a:a8:61:6b:ee:9d:79:07:e1:9e:23:a8:9a:93:fa:a3:6f: 85:f1:fe:e9:bc:75:99:79:ee:6b:ec:13:05:48:c2:9c:99:f5: a9:86:97:14:d5:38:c5:53:1d:d9:8d:d6:ca:46:55:08:99:34: 7b:d4:ea:65:ec:0d:2f:2e:3e:11:df:8d:a9:5a:3e:6b:d5:8a: bf:b4:67:74:b8:57:3b:39:75:9c:7d:a9:70:c1:05:7c:e6:b3: 6c:3e:7d:f9:da:1c:d8:09:ae:a3:57:4e:cf:df:f9:34:5a:63: 0a:12:8d:7a:b0:73:dc:fa:03:9d:50:f6:94:b2:e5:36:d3:7a: 1f:55:4d:77:fe:29:53:6f:7f:b5:d8:f5:bc:ca:0b:8f:c5:29: 33:a6:6e:a6:bb:44:8f:91:96:a5:d5:87:9e:88:05:20:67:fd: 43:d8:6f:0c:28:83:e9:1c:93:6a:8a:ab:ae:54:76:f9:67:91: 50:1f:73:de:fd:44:fb:4d:e2:53:e8:f9:ab:18:b3:e6:b9:bc: 12:d5:b1:07:c4:d4:c0:4b:c8:cd:ac:be:e4:55:32:31:f2:4d: 08:9e:cd:06:d8:5a:dc:e0:62:ef:50:0d:bd:f7:f4:36:3e:cc: f1:d5:6a:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbh7nLWxZvpBZWHPe07LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMWM4MDBhYTFiNzhhMTdhNDNlMTlmZDk5MzgzNTVkMDQx MWU5NGEwHhcNMjUxMjA2MDgwMTAyWhcNMjUxMjA3MDgwMTAyWjAzMTEwLwYDVQQD EygyZGMxNTEzYTdjZDUxODBhNDZjYjEwOWZlMDJjZDJiZTMyYzMyNTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbweLSNYQvmiU11HrI6A7T0XTi7d +hKgUG4YVlAL92JQMilwxkgbGIaFjfJEFjc+qAxtNNKh/xvyQ8qwhyWmz13c8jJ0 w6iQA90YRW5i6VJRX/hvuCZB2yYkEaQxNOP/9bQLia02nUB8IBRhHQOAkVvg+RA5 U+9Gv0VOO64Grwbt1Ai10VlVSUdkBfCd63EA5pbE5J/6pM6OJScC8K9Zc9jqIeds bh0VvdzwmoKUIaiNPSd5SYDTyDJepS2fi6F5CbBwWaUC2+49vbbhz92JkaKJJQbS x/PqQJlGZ6+pJjQ50ZPM0h6SNlTY6Y0iEg/OUXJAVXoV3nKaPfISmXXsRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3BUTp81RgKRssQn+As0r4ywyVnMB8GA1UdIwQY MBaAFKscgAqht4oXpD4Z/Zk4NV0EEelKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYjFjYTAtYmJmMi00NDE5LThhMGMt NTBjYmNiNWIxOWMyLzEvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8xYjFjYTAtYmJmMi00NDE5LThhMGMtNTBjYmNiNWIxOWMy LzEvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOx5d429 ZDgU9eIAPHD4Z98IhXqoYWvunXkH4Z4jqJqT+qNvhfH+6bx1mXnua+wTBUjCnJn1 qYaXFNU4xVMd2Y3WykZVCJk0e9TqZewNLy4+Ed+NqVo+a9WKv7RndLhXOzl1nH2p cMEFfOazbD59+doc2Amuo1dOz9/5NFpjChKNerBz3PoDnVD2lLLlNtN6H1VNd/4p U29/tdj1vMoLj8UpM6ZuprtEj5GWpdWHnogFIGf9Q9hvDCiD6RyTaoqrrlR2+WeR UB9z3v1E+03iU+j5qxiz5rm8EtWxB8TUwEvIzay+5FUyMfJNCJ7NBtha3OBi71AN vff0Nj7M8dVqXA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:16:21 2025 by rpki-client