This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft File: qcxE1_HQ3Apavyd2SVth3kgZkl8.mft (raw, json) Hash identifier: tJm8mH2CT8clAmFjO9Oa6fAkzL7Pd5kiJ3XGDls1a8o= Subject key identifier: AD:30:5D:23:A6:00:BA:D4:47:F9:A5:91:55:A8:94:22:12:67:EE:15 Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f Certificate serial: 019AF208F7B2D69A57443853129B0D0F3AC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft Manifest number: 12FE Signing time: Sat 06 Dec 2025 05:01:05 +0000 Manifest this update: Sat 06 Dec 2025 05:01:05 +0000 Manifest next update: Sun 07 Dec 2025 05:01:05 +0000 Files and hashes: 1: Jo7QZBDB32wXW0Iw1K7QdXNowZk.roa (hash: K7AhFGZtd/rNskeYTg//KKyYm9N8IOSqZd1eL/nYFI0=) 2: qcxE1_HQ3Apavyd2SVth3kgZkl8.crl (hash: rqv75+0UeGeS5ze3/CYOOiVZoz0gpkzC8VIWW3ql1Rs=) 3: s7SwYsQxw0lQy1OCUyDcPA5nRsQ.roa (hash: oInMskbU1ysq45NZWBKPFPJeOmbD2WauFvK9W3eBwaY=) 4: vFfYVEKCcc2PyT6NhaZHTqsCyRc.roa (hash: IviSD1XdrOD9s0OcxHYtTVilTBOr8uyUO7SjAFCSO3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f7:b2:d6:9a:57:44:38:53:12:9b:0d:0f:3a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f Validity Not Before: Dec 6 05:01:05 2025 GMT Not After : Dec 7 05:01:05 2025 GMT Subject: CN=ad305d23a600bad447f9a59155a894221267ee15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:96:8e:87:23:2a:7e:b7:0e:90:9f:4e:de: 44:60:2a:17:65:67:a0:e9:85:e6:27:a7:53:b3:45: f7:58:58:dc:76:09:63:73:41:3e:e2:a4:d2:4e:09: 99:c9:ce:7a:ed:0b:00:6a:0c:6f:e3:3f:18:b5:52: e5:96:64:1c:4b:10:00:18:55:d9:27:64:f4:8f:e7: 2f:63:59:62:8f:68:be:6a:65:9c:5c:18:15:29:c9: 8c:d4:a5:15:12:19:60:66:1f:61:f5:76:d8:f9:a2: 4a:97:4a:23:d6:b6:b3:0e:cc:3d:28:e9:81:28:66: ea:90:e7:78:93:b9:2d:5b:4d:74:ba:15:c5:07:6c: a3:61:cb:37:63:fc:70:21:74:63:66:2b:c5:81:40: ea:fa:e4:0d:b3:00:be:0d:59:44:52:61:9a:9c:62: 94:c3:a9:d5:2a:56:ee:48:7e:69:a5:16:30:e3:08: 04:7f:56:bf:cd:0c:a2:07:63:9c:ba:29:f6:41:35: 7e:48:28:d5:c8:50:80:83:c9:6a:ee:9d:da:6d:46: 32:b2:d8:a0:ae:bc:81:31:b9:99:7c:28:e9:39:e6: 32:2f:28:ed:60:90:26:2b:e8:39:d3:70:3a:dc:00: a8:99:0f:c1:76:0f:b2:a9:be:bc:9f:ef:b6:61:49: a0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:30:5D:23:A6:00:BA:D4:47:F9:A5:91:55:A8:94:22:12:67:EE:15 X509v3 Authority Key Identifier: keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:f9:71:c1:c1:59:71:3a:b9:75:98:8c:b9:4e:ec:ec:f1:64: aa:8c:8d:59:b8:f8:76:f2:68:3b:9c:7f:5d:0d:0c:aa:9e:0b: 0e:fe:18:ae:0d:51:06:01:69:9d:c7:79:66:31:94:23:cb:31: 52:06:32:9b:fd:05:50:c9:8c:e4:f7:d2:2a:8c:54:9c:04:d4: ee:5a:24:d0:ad:6b:fa:3a:da:a2:be:bb:b9:7f:db:5b:bd:4f: 6e:05:ab:df:01:2c:f6:56:8a:c2:0d:4a:03:47:5e:a1:ae:cc: e0:20:43:47:e6:34:76:73:3c:9b:5c:f1:7e:21:2c:e9:94:fe: fb:3b:47:5a:53:e8:5f:cc:1c:94:69:15:01:e9:bc:c2:31:e9: b8:a1:2f:70:e2:d0:78:88:bb:cf:3c:be:e0:af:db:10:87:42: e1:88:e8:27:90:a1:3c:8d:a4:a7:e4:bd:fd:3e:6a:0c:65:24: 84:d5:99:ff:69:94:f9:a7:76:00:39:82:cc:9a:0a:b6:f7:d8: 47:23:69:83:b6:63:9c:60:e0:aa:1a:ba:ff:5c:eb:d3:15:97: f8:9c:11:b3:f7:6b:47:7e:48:4c:dd:89:99:a0:2f:1b:11:ca: 1f:52:d3:96:fd:d6:b1:96:f1:34:d0:e2:8f:53:bb:43:b4:8e: 5d:cc:f3:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPey1ppXRDhTEpsNDzrIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Y2M0NGQ3ZjFkMGRjMGE1YWJmMjc3NjQ5NWI2MWRlNDgx OTkyNWYwHhcNMjUxMjA2MDUwMTA1WhcNMjUxMjA3MDUwMTA1WjAzMTEwLwYDVQQD EyhhZDMwNWQyM2E2MDBiYWQ0NDdmOWE1OTE1NWE4OTQyMjEyNjdlZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqiWjocjKn63DpCfTt5EYCoXZWeg 6YXmJ6dTs0X3WFjcdgljc0E+4qTSTgmZyc567QsAagxv4z8YtVLllmQcSxAAGFXZ J2T0j+cvY1lij2i+amWcXBgVKcmM1KUVEhlgZh9h9XbY+aJKl0oj1razDsw9KOmB KGbqkOd4k7ktW010uhXFB2yjYcs3Y/xwIXRjZivFgUDq+uQNswC+DVlEUmGanGKU w6nVKlbuSH5ppRYw4wgEf1a/zQyiB2Ocuin2QTV+SCjVyFCAg8lq7p3abUYystig rryBMbmZfCjpOeYyLyjtYJAmK+g503A63AComQ/Bdg+yqb68n++2YUmgXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0wXSOmALrUR/mlkVWolCISZ+4VMB8GA1UdIwQY MBaAFKnMRNfx0NwKWr8ndklbYd5IGZJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjct MTYxN2YzOGE2ZGZjLzEvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjctMTYxN2YzOGE2ZGZj LzEvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvPlxwcFZ cTq5dZiMuU7s7PFkqoyNWbj4dvJoO5x/XQ0Mqp4LDv4Yrg1RBgFpncd5ZjGUI8sx UgYym/0FUMmM5PfSKoxUnATU7lok0K1r+jraor67uX/bW71PbgWr3wEs9laKwg1K A0deoa7M4CBDR+Y0dnM8m1zxfiEs6ZT++ztHWlPoX8wclGkVAem8wjHpuKEvcOLQ eIi7zzy+4K/bEIdC4YjoJ5ChPI2kp+S9/T5qDGUkhNWZ/2mU+ad2ADmCzJoKtvfY RyNpg7ZjnGDgqhq6/1zr0xWX+JwRs/drR35ITN2JmaAvGxHKH1LTlv3WsZbxNNDi j1O7Q7SOXczzJw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:22:45 2025 by rpki-client