This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft File: RQxYEkixGuKkb1UuXKQ8adZecqg.mft (raw, json) Hash identifier: y3w9devTNySL+XdxTRxEuV/bz++1RaZ5/HPid+tyjzQ= Subject key identifier: 9C:AE:35:AA:BC:E8:E8:75:CE:D9:DE:8D:89:E6:06:C4:B5:59:91:63 Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8 Certificate issuer: /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8 Certificate serial: 019AF23FD033669DAD63A3D94282994D8E1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft Manifest number: 0698 Signing time: Sat 06 Dec 2025 06:00:59 +0000 Manifest this update: Sat 06 Dec 2025 06:00:59 +0000 Manifest next update: Sun 07 Dec 2025 06:00:59 +0000 Files and hashes: 1: 0_1h7wiM0sCkz01y6bDZ2Uk-dbc.roa (hash: Ffwz5CuVaWNGX3f2MIwGg4hQj6U4+om5+V9sWUjyVOQ=) 2: NuPZabEjwj0Zl1ftGcMBtd-pDXA.roa (hash: +dUUuU1kwfnIBk7+1pVXttGVzaNSvBfz3v21l1kMiPM=) 3: RQxYEkixGuKkb1UuXKQ8adZecqg.crl (hash: WsVaUSVcnQNBxhDTwxD9rvqsfly2vhia76b0YvIi+hM=) 4: scTpjmBPVtpmk2iyuFSVq2caLTA.roa (hash: soRiwcgYjvvPsJmPt1LLzDQ901dQXHqAdbvUyjzTo70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d0:33:66:9d:ad:63:a3:d9:42:82:99:4d:8e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8 Validity Not Before: Dec 6 06:00:59 2025 GMT Not After : Dec 7 06:00:59 2025 GMT Subject: CN=9cae35aabce8e875ced9de8d89e606c4b5599163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6b:e0:e1:5c:9a:c8:a0:a4:5a:6c:90:59:96: e5:e0:97:93:47:6a:f7:a4:90:3b:d3:1a:08:c6:4f: 1d:ec:28:09:cf:87:bc:a4:f5:dd:80:b3:56:23:6d: 54:98:82:62:a2:88:36:5a:32:15:0d:c0:28:e7:a8: 61:eb:63:cd:29:a1:2a:7c:66:6d:d0:9a:55:76:87: 18:26:a4:f4:9f:d2:1f:c4:f0:5c:9a:ff:0b:77:3a: 29:f1:6c:7c:f7:9f:d0:15:fd:fb:30:09:cf:23:27: 55:42:58:e6:9d:86:ca:95:29:b6:ab:86:26:01:1a: 3c:80:e7:b0:b2:0d:d8:ce:be:73:92:7a:99:fb:32: 32:5a:d3:c8:11:94:db:82:2b:e4:40:ec:b8:a2:9b: 3b:4f:11:ea:ef:f1:62:1a:48:9b:1c:96:03:72:0e: f8:87:6d:5a:f6:d4:af:4a:af:68:a3:96:0d:5f:36: 43:21:a3:46:72:4f:29:56:6b:c0:57:0d:f4:3f:34: c9:77:3b:39:12:26:4c:27:b4:94:00:66:ac:5d:a2: 47:77:ce:12:77:e0:9e:9f:f7:5d:f0:05:dd:3e:9a: fb:2e:97:9d:cb:19:4d:22:21:45:0c:38:28:1e:38: 55:d6:0e:72:e4:13:bd:11:91:f7:f3:8c:06:33:5c: 31:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AE:35:AA:BC:E8:E8:75:CE:D9:DE:8D:89:E6:06:C4:B5:59:91:63 X509v3 Authority Key Identifier: keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a4:5d:16:ab:5f:10:fd:77:93:3b:0d:3b:04:b9:98:7f:c1: 37:52:32:9a:b6:e7:b7:5f:b6:98:02:f8:b6:11:44:25:56:a4: ad:70:ad:67:6c:6f:c9:1e:24:ff:0c:de:4d:8c:26:f5:ea:f1: 10:a7:73:e0:81:60:18:58:89:21:29:02:20:be:fc:a7:66:cd: 36:10:7e:d6:80:ed:dc:3b:ef:c6:55:70:57:f7:8b:22:df:df: bf:6e:fb:b7:e5:c3:c6:46:40:e6:6f:3f:27:e1:42:42:e1:15: 2f:d3:88:2f:b9:68:1a:c4:1b:1f:06:ba:8d:93:65:b1:4e:8b: cb:3f:d7:a2:bf:4c:5f:0b:1c:7a:1c:97:dc:22:ea:b0:36:df: 29:17:d4:63:5d:f6:7a:18:f8:39:9a:84:ce:24:1c:d2:3f:d3: 73:01:e0:eb:d8:86:26:56:32:e3:a3:89:f4:36:37:7f:50:d5: 80:42:35:6b:54:13:d8:ca:f3:65:f2:e9:19:26:f6:87:61:a2: de:f5:1e:2b:7e:47:b6:4e:93:9f:d8:74:97:76:9b:75:e2:76: e6:b6:33:3d:6c:34:1d:12:ef:89:0f:12:60:67:24:f0:bc:d1: 7a:cd:ba:26:ef:46:fc:42:5f:14:8d:75:1c:88:77:2a:4b:ff: a0:82:8c:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9AzZp2tY6PZQoKZTY4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MGM1ODEyNDhiMTFhZTJhNDZmNTUyZTVjYTQzYzY5ZDY1 ZTcyYTgwHhcNMjUxMjA2MDYwMDU5WhcNMjUxMjA3MDYwMDU5WjAzMTEwLwYDVQQD Eyg5Y2FlMzVhYWJjZThlODc1Y2VkOWRlOGQ4OWU2MDZjNGI1NTk5MTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2vg4VyayKCkWmyQWZbl4JeTR2r3 pJA70xoIxk8d7CgJz4e8pPXdgLNWI21UmIJioog2WjIVDcAo56hh62PNKaEqfGZt 0JpVdocYJqT0n9IfxPBcmv8Ldzop8Wx895/QFf37MAnPIydVQljmnYbKlSm2q4Ym ARo8gOewsg3Yzr5zknqZ+zIyWtPIEZTbgivkQOy4ops7TxHq7/FiGkibHJYDcg74 h21a9tSvSq9oo5YNXzZDIaNGck8pVmvAVw30PzTJdzs5EiZMJ7SUAGasXaJHd84S d+Cen/dd8AXdPpr7LpedyxlNIiFFDDgoHjhV1g5y5BO9EZH384wGM1wxqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyuNaq86Oh1ztnejYnmBsS1WZFjMB8GA1UdIwQY MBaAFEUMWBJIsRripG9VLlykPGnWXnKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMt NzQ5OWE4MjMxZjU2LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMtNzQ5OWE4MjMxZjU2 LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6RdFqtf EP13kzsNOwS5mH/BN1Iymrbnt1+2mAL4thFEJVakrXCtZ2xvyR4k/wzeTYwm9erx EKdz4IFgGFiJISkCIL78p2bNNhB+1oDt3DvvxlVwV/eLIt/fv277t+XDxkZA5m8/ J+FCQuEVL9OIL7loGsQbHwa6jZNlsU6Lyz/Xor9MXwscehyX3CLqsDbfKRfUY132 ehj4OZqEziQc0j/TcwHg69iGJlYy46OJ9DY3f1DVgEI1a1QT2MrzZfLpGSb2h2Gi 3vUeK35Htk6Tn9h0l3abdeJ25rYzPWw0HRLviQ8SYGck8LzRes26Ju9G/EJfFI11 HIh3Kkv/oIKMDA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:05 2025 by rpki-client