This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft File: QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft (raw, json) Hash identifier: HM21CmH2g20Il13+Drfnz2JyzEl5TCnd/120vwLwU20= Subject key identifier: 5F:3A:AD:95:55:36:F2:AD:A6:5A:BD:2B:F9:E0:C7:E0:30:8C:48:DE Authority key identifier: 41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40 Certificate issuer: /CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140 Certificate serial: 019B52985CDA2B87B274C9586E844681389B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 23:01:15 +0000 Manifest this update: Wed 24 Dec 2025 23:01:15 +0000 Manifest next update: Thu 25 Dec 2025 23:01:15 +0000 Files and hashes: 1: 0qda3zP6aWS1QmMsfKtgTS_B8vw.roa (hash: NDD2ZMdGd4Vw1apZklWLmjHBzI7LGvrNZrE04O9xutU=) 2: QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl (hash: bRhd6TjECSXRONkEy7FWTA/UuwIjNS30KUAmNw1eeFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:5c:da:2b:87:b2:74:c9:58:6e:84:46:81:38:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140 Validity Not Before: Dec 24 23:01:15 2025 GMT Not After : Dec 25 23:01:15 2025 GMT Subject: CN=5f3aad955536f2ada65abd2bf9e0c7e0308c48de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:20:01:32:e3:69:9b:62:50:7f:34:53:a0: 6a:ea:bd:7a:92:73:34:8e:62:a9:25:bb:6d:7e:01: 5f:96:72:39:a9:1f:29:34:a3:4a:3d:50:a5:3c:b9: 0d:b9:d4:b9:d7:a2:d5:d7:e0:12:ba:df:9e:3b:90: 10:f6:ed:e7:b1:99:57:ae:fc:e0:3c:c4:d2:1e:83: be:f9:bd:2d:c8:63:5c:c2:97:5b:a9:d5:e7:ce:ac: 3c:d3:37:2b:c0:8b:89:b0:d3:b0:92:25:ea:c0:49: bb:f4:e5:e7:6c:34:8c:89:57:f5:e7:3d:a5:7c:42: 81:25:e6:9e:82:4e:b9:b4:e2:4c:2f:b8:d4:c0:17: 71:c4:d9:f2:dd:71:76:f6:2a:ce:e5:eb:0c:76:2d: 25:c2:19:0f:18:63:46:17:6b:a0:13:4e:06:09:d1: e3:6c:db:81:2e:d7:0a:85:6d:93:6a:89:f1:82:96: 31:00:6b:23:e3:53:dd:a4:71:c5:7d:fd:91:92:09: 56:d9:e1:82:2f:b2:cd:d5:eb:89:96:ed:4f:17:6d: f4:94:d4:e2:fc:13:77:18:7e:be:7a:39:5a:36:88: ec:da:a3:de:b1:ee:f9:b1:e4:ec:64:b0:3c:0c:b7: 88:54:d3:72:0d:d7:f7:20:da:08:44:89:95:a1:4f: 47:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3A:AD:95:55:36:F2:AD:A6:5A:BD:2B:F9:E0:C7:E0:30:8C:48:DE X509v3 Authority Key Identifier: keyid:41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:63:b7:d1:d5:63:cc:83:45:b6:81:87:16:5f:3b:43:c3:1f: 4e:51:fc:f2:d9:34:ed:d3:90:bd:0a:95:ac:62:49:4a:df:fe: 01:77:ca:16:21:f2:84:31:c7:5c:2b:bc:65:5a:83:dd:dc:2b: 0f:52:85:ce:b0:49:3a:0a:57:ba:12:a3:b4:54:03:43:ed:cd: c9:aa:e3:c7:f8:c2:15:69:bf:a5:22:32:38:71:0c:7b:f5:f0: d3:aa:33:37:f0:98:b5:48:32:2b:ff:ff:29:43:d9:16:eb:35: 8d:99:11:e6:62:ff:99:86:6b:04:be:7e:bb:cc:f5:9b:b9:7f: 2e:ba:bf:13:15:7a:01:01:95:fc:a9:41:f2:d4:e4:19:78:1d: a2:b5:2c:2a:ee:7f:9b:4b:5d:91:5d:33:33:d3:29:dd:67:42: 80:2b:36:11:4d:14:30:fd:d3:ea:70:4a:cd:be:89:8a:06:8a: 94:ae:fa:fd:d7:db:dd:a2:2b:e2:60:4e:ee:9c:e1:75:23:d9: 3f:e4:3f:06:96:30:68:a5:67:86:df:c1:21:8a:f0:99:79:b4: fd:1e:3d:ff:55:90:4c:b8:83:66:37:76:d4:d0:c6:a7:16:1a: d4:47:4f:b9:be:2e:93:0c:69:80:de:15:96:c4:0a:d7:d8:76: 65:06:5e:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmFzaK4eydMlYboRGgTibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxM2ZmYTEwNmFlM2ZlZTZiZTg3YmFjMDZhODdiYTU3ZWQx YzExNDAwHhcNMjUxMjI0MjMwMTE1WhcNMjUxMjI1MjMwMTE1WjAzMTEwLwYDVQQD Eyg1ZjNhYWQ5NTU1MzZmMmFkYTY1YWJkMmJmOWUwYzdlMDMwOGM0OGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfsgATLjaZtiUH80U6Bq6r16knM0 jmKpJbttfgFflnI5qR8pNKNKPVClPLkNudS516LV1+ASut+eO5AQ9u3nsZlXrvzg PMTSHoO++b0tyGNcwpdbqdXnzqw80zcrwIuJsNOwkiXqwEm79OXnbDSMiVf15z2l fEKBJeaegk65tOJML7jUwBdxxNny3XF29irO5esMdi0lwhkPGGNGF2ugE04GCdHj bNuBLtcKhW2TaonxgpYxAGsj41PdpHHFff2RkglW2eGCL7LN1euJlu1PF230lNTi /BN3GH6+ejlaNojs2qPese75seTsZLA8DLeIVNNyDdf3INoIRImVoU9HbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF86rZVVNvKtplq9K/ngx+AwjEjeMB8GA1UdIwQY MBaAFEE/+hBq4/7mvoe6wGqHulftHBFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jNzk2MzUtYmVjNC00ZmI1LTg5MmMt ZmEyNmVjMzlmYWJhLzEvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9jNzk2MzUtYmVjNC00ZmI1LTg5MmMtZmEyNmVjMzlmYWJh LzEvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWO30dVj zINFtoGHFl87Q8MfTlH88tk07dOQvQqVrGJJSt/+AXfKFiHyhDHHXCu8ZVqD3dwr D1KFzrBJOgpXuhKjtFQDQ+3Nyarjx/jCFWm/pSIyOHEMe/Xw06ozN/CYtUgyK/// KUPZFus1jZkR5mL/mYZrBL5+u8z1m7l/Lrq/ExV6AQGV/KlB8tTkGXgdorUsKu5/ m0tdkV0zM9Mp3WdCgCs2EU0UMP3T6nBKzb6JigaKlK76/dfb3aIr4mBO7pzhdSPZ P+Q/BpYwaKVnht/BIYrwmXm0/R49/1WQTLiDZjd21NDGpxYa1EdPub4ukwxpgN4V lsQK19h2ZQZefA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:27:20 2025 by rpki-client