This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft File: qXjDZVxaYJcS51UQDZiJKuHI5es.mft (raw, json) Hash identifier: xcafDjKxUrtz9cGiEYu64+KxXCsiG4DsI+Fztekf3io= Subject key identifier: BF:F4:F4:A9:92:6D:5A:20:B1:C1:8D:2F:DD:7F:17:35:12:3C:8E:06 Authority key identifier: A9:78:C3:65:5C:5A:60:97:12:E7:55:10:0D:98:89:2A:E1:C8:E5:EB Certificate issuer: /CN=a978c3655c5a609712e755100d98892ae1c8e5eb Certificate serial: 019AF2766D2A0648F82E5A7D5BFD717CF2F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 07:00:38 +0000 Manifest next update: Sun 07 Dec 2025 07:00:38 +0000 Files and hashes: 1: Yumm02n0U4zsJjWwtlYyB2Z-w4U.roa (hash: AJmjRPnoBgkPh5HzaY6seqwxdSiWYHbug0JOYxi/OM8=) 2: qXjDZVxaYJcS51UQDZiJKuHI5es.crl (hash: jRHU86cZsFXQ4o4sghTNRM1auKq9tx0uaJiv7mf+JpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6d:2a:06:48:f8:2e:5a:7d:5b:fd:71:7c:f2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a978c3655c5a609712e755100d98892ae1c8e5eb Validity Not Before: Dec 6 07:00:38 2025 GMT Not After : Dec 7 07:00:38 2025 GMT Subject: CN=bff4f4a9926d5a20b1c18d2fdd7f1735123c8e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dd:fd:07:4d:1e:86:55:d7:a4:8e:ea:2c:21: 60:fb:0c:7c:c3:1f:d6:01:58:0e:4c:c8:6b:bc:a0: a2:32:d6:e5:b8:d0:51:fd:6a:73:44:fc:2e:fc:df: d4:75:49:63:c0:47:5e:07:c9:ae:a0:ec:12:34:6d: 1f:ea:bc:7a:53:c4:0c:02:37:ba:ea:e0:f1:17:2b: 25:7d:18:e5:3a:2c:35:04:0c:e5:80:e7:24:01:61: c8:8a:8c:7b:0e:d4:a2:9b:a9:e5:28:ff:9e:9b:2c: fe:2d:f7:30:3d:1d:34:d8:90:16:be:ab:24:02:a5: 65:45:6c:1b:e8:18:81:17:5f:c4:dd:28:38:ff:87: c5:bb:63:15:b8:05:c5:9b:5b:59:30:59:99:7a:1c: 8a:7d:b3:84:d5:51:ca:1d:20:dd:d6:dc:51:35:57: fd:57:b5:6f:15:8b:40:66:82:1f:cd:97:5c:c6:e4: ce:2d:cf:e1:44:6d:fa:a5:c2:f5:3c:8e:32:1c:1b: 48:21:55:53:de:c0:06:82:5a:4f:c5:3f:50:95:1c: ab:d8:08:65:42:3f:fa:25:28:07:18:f9:a8:a0:53: b0:78:9c:d0:9b:54:95:5e:6c:6f:23:5b:d6:71:33: 8f:9b:e2:4e:b2:c9:7a:e9:b6:60:4b:92:13:29:43: 2f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F4:F4:A9:92:6D:5A:20:B1:C1:8D:2F:DD:7F:17:35:12:3C:8E:06 X509v3 Authority Key Identifier: keyid:A9:78:C3:65:5C:5A:60:97:12:E7:55:10:0D:98:89:2A:E1:C8:E5:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:95:0b:25:c4:68:63:72:f9:ff:c6:c0:2b:f8:02:25:04:bc: d5:c4:ae:f9:0c:30:40:c0:cb:c2:a5:c9:09:52:b2:b2:e7:7f: 5e:55:9f:c2:92:6b:5d:a5:0b:b8:28:71:5b:c8:42:c3:7c:a1: 4a:f2:fd:a7:e8:6e:05:87:e2:dd:7f:da:a2:53:ed:74:0e:ca: a4:79:35:ae:27:1e:9b:64:5f:5f:a8:04:7a:a4:50:ea:d5:93: 02:5c:18:93:69:50:b1:3d:8a:66:32:e0:c2:50:d9:ff:e7:71: 7a:96:89:c6:49:47:92:6b:51:77:5f:f5:57:f9:dd:c3:79:57: 53:64:95:7a:9c:fd:81:59:50:73:d9:7a:d6:a9:d0:d6:92:33: 33:2b:a1:be:a4:fd:15:5c:af:df:97:de:08:51:de:f2:86:ac: 01:09:e9:4e:0d:0a:84:d9:14:75:55:8f:7d:63:a0:bf:08:a8: 4d:8e:46:c9:5c:aa:6f:66:f2:a5:5d:57:a7:ce:88:d5:04:df: 3a:85:29:a2:ee:32:de:00:6b:6e:95:3d:40:8d:c3:49:79:dd: c4:57:40:f1:ca:0d:06:64:bb:b2:f1:e8:51:af:f5:5b:2d:a7: 12:0f:9e:72:51:f6:94:0f:ca:c5:d7:1e:64:81:24:b5:fe:21: d4:6b:98:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydm0qBkj4Llp9W/1xfPL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NzhjMzY1NWM1YTYwOTcxMmU3NTUxMDBkOTg4OTJhZTFj OGU1ZWIwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD EyhiZmY0ZjRhOTkyNmQ1YTIwYjFjMThkMmZkZDdmMTczNTEyM2M4ZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd39B00ehlXXpI7qLCFg+wx8wx/W AVgOTMhrvKCiMtbluNBR/WpzRPwu/N/UdUljwEdeB8muoOwSNG0f6rx6U8QMAje6 6uDxFyslfRjlOiw1BAzlgOckAWHIiox7DtSim6nlKP+emyz+LfcwPR002JAWvqsk AqVlRWwb6BiBF1/E3Sg4/4fFu2MVuAXFm1tZMFmZehyKfbOE1VHKHSDd1txRNVf9 V7VvFYtAZoIfzZdcxuTOLc/hRG36pcL1PI4yHBtIIVVT3sAGglpPxT9QlRyr2Ahl Qj/6JSgHGPmooFOweJzQm1SVXmxvI1vWcTOPm+JOssl66bZgS5ITKUMvjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/09KmSbVogscGNL91/FzUSPI4GMB8GA1UdIwQY MBaAFKl4w2VcWmCXEudVEA2YiSrhyOXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVhqRFpWeGFZSmNTNTFVUURaaUpLdUhJNWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kYTYxNGItZGQxOS00MWUwLWE3YzQt NjZmZDIzZWVjMzRkLzEvcVhqRFpWeGFZSmNTNTFVUURaaUpLdUhJNWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kYTYxNGItZGQxOS00MWUwLWE3YzQtNjZmZDIzZWVjMzRk LzEvcVhqRFpWeGFZSmNTNTFVUURaaUpLdUhJNWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZULJcRo Y3L5/8bAK/gCJQS81cSu+QwwQMDLwqXJCVKysud/XlWfwpJrXaULuChxW8hCw3yh SvL9p+huBYfi3X/aolPtdA7KpHk1ricem2RfX6gEeqRQ6tWTAlwYk2lQsT2KZjLg wlDZ/+dxepaJxklHkmtRd1/1V/ndw3lXU2SVepz9gVlQc9l61qnQ1pIzMyuhvqT9 FVyv35feCFHe8oasAQnpTg0KhNkUdVWPfWOgvwioTY5GyVyqb2bypV1Xp86I1QTf OoUpou4y3gBrbpU9QI3DSXndxFdA8coNBmS7svHoUa/1Wy2nEg+eclH2lA/Kxdce ZIEktf4h1GuYmw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:59:13 2025 by rpki-client