This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft File: qqxhl3mf1otuW74LV-ZS_YDdNiE.mft (raw, json) Hash identifier: QpKbV9B0m9b8P44umRzJaO+fXOnHKEm81ANpedydQ48= Subject key identifier: 70:74:43:72:4A:54:3A:9C:E9:67:5D:67:16:27:20:C9:FD:D2:56:DB Authority key identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21 Certificate issuer: /CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621 Certificate serial: 019AF50B6983D0F0B1FD8ED93DDB9BBFF6DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft Manifest number: 0350 Signing time: Sat 06 Dec 2025 19:02:36 +0000 Manifest this update: Sat 06 Dec 2025 19:02:36 +0000 Manifest next update: Sun 07 Dec 2025 19:02:36 +0000 Files and hashes: 1: HW--gyFyIjJfbbNnSxJATPWJGEI.roa (hash: shKJNjvcZlh2Drp2JswFM6L89Fwml75F7pDB0H15/3Q=) 2: qqxhl3mf1otuW74LV-ZS_YDdNiE.crl (hash: JNskzlRVymw6AVitSESxwFFK00wiknuSUbvMr4KskGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:69:83:d0:f0:b1:fd:8e:d9:3d:db:9b:bf:f6:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621 Validity Not Before: Dec 6 19:02:36 2025 GMT Not After : Dec 7 19:02:36 2025 GMT Subject: CN=707443724a543a9ce9675d67162720c9fdd256db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:32:e1:14:82:57:cc:99:58:2d:fd:2b:e1:fc: 08:51:ba:14:8c:0d:c1:80:f4:ed:6c:a6:0e:bb:af: a1:83:63:c4:10:08:97:6c:b1:44:ac:f9:69:80:dd: 23:f1:4f:80:c5:52:98:52:d2:23:db:95:a0:f8:e9: 02:d1:db:4d:5f:82:f3:3d:79:c5:c0:5e:a8:5f:2e: 6f:d4:de:d3:56:21:84:8e:61:c7:86:4c:e6:4d:e6: 8a:b6:ff:ee:41:9a:d1:98:52:60:b0:3e:d3:04:c7: 3c:0e:f4:90:ef:60:17:70:5d:2e:68:f3:1e:da:37: e2:c6:97:3c:8f:d9:fe:9d:6e:51:87:0b:7f:00:33: 17:6f:21:33:41:ad:b1:5d:61:cf:a3:42:8f:9a:ce: 24:08:b6:7b:0c:74:1a:0f:bb:94:ab:87:f9:6e:32: ea:e6:33:58:7b:33:da:fd:47:e9:bd:36:99:ce:18: f8:92:21:59:0b:8a:2b:3e:25:37:84:18:8d:c9:2c: 74:6d:69:00:6d:d0:e9:f4:d2:81:f0:5d:c6:30:fd: b5:45:0b:a8:7a:cb:0a:6c:24:9d:af:77:e3:23:a6: 60:70:5c:f0:51:07:d0:8b:2e:b3:a5:c5:e3:96:45: 6f:17:a5:a4:fe:29:82:4d:cd:4f:c6:be:08:6e:db: d2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:74:43:72:4A:54:3A:9C:E9:67:5D:67:16:27:20:C9:FD:D2:56:DB X509v3 Authority Key Identifier: keyid:AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:13:66:82:63:e0:b5:d0:25:31:ea:c3:33:c6:42:88:e1:0c: 65:78:22:a2:b9:3b:ce:98:7e:dc:8b:0b:9c:04:e0:96:d9:e9: 68:6b:d7:34:8c:af:d5:4e:70:05:a0:d6:e9:7d:a3:86:d2:7c: 8b:7b:c8:66:ab:62:f0:4f:87:4a:4b:52:bd:cb:45:cd:d2:33: 92:c2:c7:81:ec:20:b8:d7:31:5d:6e:33:42:a5:2d:18:b3:4a: 0e:f7:2b:58:c8:82:cd:2e:36:38:a4:a7:c5:71:de:f0:4b:b0: cf:d1:d3:c9:5e:c3:f0:fa:9a:67:48:5a:17:5c:4b:1e:3c:c3: 5d:85:6c:c8:fa:3e:27:3d:47:50:39:83:69:5a:9a:d8:a4:1d: c6:47:50:27:76:0a:fd:07:54:3f:36:6c:d6:93:0d:15:bb:99: 8e:9d:21:11:83:90:3e:31:3d:ab:a2:02:18:cc:10:f7:87:fe: 6d:1b:34:1c:d1:7e:77:0b:82:29:03:b9:f9:8a:31:c5:53:56: eb:7b:ea:f5:40:eb:9d:6e:31:81:85:c4:0d:eb:ba:2f:a2:5a: d6:d5:f0:91:18:6a:29:0d:24:54:50:93:8b:fd:f1:d4:b8:13: 80:2a:65:54:95:ee:ab:4b:a7:c4:ef:e9:f1:5a:ad:79:20:9f: 1f:bd:eb:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C2mD0PCx/Y7ZPdubv/beMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYWM2MTk3Nzk5ZmQ2OGI2ZTViYmUwYjU3ZTY1MmZkODBk ZDM2MjEwHhcNMjUxMjA2MTkwMjM2WhcNMjUxMjA3MTkwMjM2WjAzMTEwLwYDVQQD Eyg3MDc0NDM3MjRhNTQzYTljZTk2NzVkNjcxNjI3MjBjOWZkZDI1NmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDLhFIJXzJlYLf0r4fwIUboUjA3B gPTtbKYOu6+hg2PEEAiXbLFErPlpgN0j8U+AxVKYUtIj25Wg+OkC0dtNX4LzPXnF wF6oXy5v1N7TViGEjmHHhkzmTeaKtv/uQZrRmFJgsD7TBMc8DvSQ72AXcF0uaPMe 2jfixpc8j9n+nW5Rhwt/ADMXbyEzQa2xXWHPo0KPms4kCLZ7DHQaD7uUq4f5bjLq 5jNYezPa/UfpvTaZzhj4kiFZC4orPiU3hBiNySx0bWkAbdDp9NKB8F3GMP21RQuo essKbCSdr3fjI6ZgcFzwUQfQiy6zpcXjlkVvF6Wk/imCTc1Pxr4IbtvSdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHB0Q3JKVDqc6WddZxYnIMn90lbbMB8GA1UdIwQY MBaAFKqsYZd5n9aLblu+C1fmUv2A3TYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXF4aGwzbWYxb3R1Vzc0TFYtWlNfWURkTmlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC84ODMwMWMtYWM3OS00MDgzLTkyOGYt NWI0OWRiNjVjNTQ1LzEvcXF4aGwzbWYxb3R1Vzc0TFYtWlNfWURkTmlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC84ODMwMWMtYWM3OS00MDgzLTkyOGYtNWI0OWRiNjVjNTQ1 LzEvcXF4aGwzbWYxb3R1Vzc0TFYtWlNfWURkTmlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahNmgmPg tdAlMerDM8ZCiOEMZXgiork7zph+3IsLnATgltnpaGvXNIyv1U5wBaDW6X2jhtJ8 i3vIZqti8E+HSktSvctFzdIzksLHgewguNcxXW4zQqUtGLNKDvcrWMiCzS42OKSn xXHe8Euwz9HTyV7D8PqaZ0haF1xLHjzDXYVsyPo+Jz1HUDmDaVqa2KQdxkdQJ3YK /QdUPzZs1pMNFbuZjp0hEYOQPjE9q6ICGMwQ94f+bRs0HNF+dwuCKQO5+YoxxVNW 63vq9UDrnW4xgYXEDeu6L6Ja1tXwkRhqKQ0kVFCTi/3x1LgTgCplVJXuq0unxO/p 8VqteSCfH73rXA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:20:11 2025 by rpki-client