This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft File: qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json) Hash identifier: XPONU7ooPIrnZd05pIv0N4i++BoZfwU/GxAhByPk49o= Subject key identifier: 62:08:27:A9:1D:31:41:0D:CA:04:A0:79:F5:2C:19:D8:F0:55:A8:78 Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3 Certificate issuer: /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3 Certificate serial: 019B39EB0751746A9D78489C714B78ACE5A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 04:01:02 +0000 Manifest this update: Sat 20 Dec 2025 04:01:02 +0000 Manifest next update: Sun 21 Dec 2025 04:01:02 +0000 Files and hashes: 1: lfJUEj9OpKtkyjj6xaEeSMukOrA.roa (hash: 9AsF2IZpbVSPw/O9UldkVW9AyHlVo6jZ0snpU1eDlm8=) 2: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: a25VlwxZYR5lDHaVN1g3qDLurIz233JB4a2dz295wRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:07:51:74:6a:9d:78:48:9c:71:4b:78:ac:e5:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3 Validity Not Before: Dec 20 04:01:02 2025 GMT Not After : Dec 21 04:01:02 2025 GMT Subject: CN=620827a91d31410dca04a079f52c19d8f055a878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6c:b2:44:cd:0f:26:95:43:77:f1:ac:93:b6: 06:55:2b:63:88:d9:bc:75:9d:75:de:81:00:9c:cf: c9:fb:9d:6b:d3:db:c0:b8:94:e8:08:d3:74:d6:b1: e8:bc:fa:e2:06:4e:21:cc:d6:6a:1c:a4:60:88:82: 83:7b:39:cb:bc:4c:c8:ef:6c:2e:65:02:dc:dc:e2: a4:17:68:17:d2:74:ef:d6:b4:b2:a9:42:dc:44:64: 0d:37:a5:0c:09:cf:c1:90:0e:f1:ef:fd:cf:7d:1a: c8:b5:68:2b:57:94:46:5c:62:c0:3c:74:74:c7:25: 17:72:c9:97:35:a6:cf:fe:66:22:5c:8d:73:2a:a6: 70:12:5a:ff:24:c1:8e:e4:aa:87:6f:1e:9e:57:e8: 63:4a:d3:1d:03:e7:4c:90:83:5c:b2:7d:72:f6:7b: 5c:ef:f3:07:3f:d2:6a:4a:1d:2e:df:2c:fd:5b:f0: ff:d1:9f:75:6c:0d:d2:3b:ae:db:b1:b4:e8:ff:63: ff:d3:9b:8d:07:90:91:d7:2f:2f:af:6c:99:0c:e4: d9:0d:a6:84:6a:f5:b9:0e:de:22:0a:92:63:09:64: 8b:14:89:22:e2:3b:76:f7:17:6c:df:dd:50:64:5e: f0:8e:2d:89:59:d2:a9:73:47:42:5d:d5:f4:6f:5c: ab:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:08:27:A9:1D:31:41:0D:CA:04:A0:79:F5:2C:19:D8:F0:55:A8:78 X509v3 Authority Key Identifier: keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:71:9e:c3:26:10:41:13:37:91:bd:9b:c5:05:1f:dc:54:73: 84:fe:a3:d9:49:a7:f4:bf:2c:46:f7:1b:91:05:84:86:b9:9f: f2:8c:23:06:45:fb:7d:26:17:2f:5e:62:72:db:0e:6b:74:c4: 27:aa:58:ee:57:c9:9d:ee:12:93:18:11:9f:61:d5:58:dc:7d: cb:ab:ac:fb:42:91:a8:c8:0a:bd:da:f5:2c:6d:a2:3d:f5:88: dd:e5:10:c0:3d:e3:f6:15:70:c7:02:35:19:17:ce:f0:43:a1: cf:6b:89:9c:1b:7e:98:03:47:11:5b:37:25:34:c4:6c:99:1b: 17:20:c3:26:d6:ec:92:9c:9e:cb:ed:30:25:17:d8:b2:59:01: ed:2d:a4:26:c6:9e:1d:4b:9e:7e:f5:90:cb:b9:0f:6b:87:bd: 58:2d:aa:4d:4e:ac:0f:48:8c:23:14:88:84:e7:33:d4:19:c3: 27:6c:86:4b:70:71:0f:22:5d:11:52:51:15:d1:47:28:c6:39: 82:28:e0:28:5a:93:54:95:8e:d9:e3:d8:06:a2:e1:ea:25:12: 9e:a6:d9:a6:f9:76:d6:44:1d:eb:6e:91:52:c2:64:4e:64:b2: 58:aa:e0:55:09:b3:ec:4a:8d:6d:ef:64:2d:c7:54:8a:11:3c: f0:33:0e:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56wdRdGqdeEiccUt4rOWmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhOGZkMDVlZWI2ZWEwNWExMWQ2NjdhYmVkZDhlYTEwOTNk MjcxYjMwHhcNMjUxMjIwMDQwMTAyWhcNMjUxMjIxMDQwMTAyWjAzMTEwLwYDVQQD Eyg2MjA4MjdhOTFkMzE0MTBkY2EwNGEwNzlmNTJjMTlkOGYwNTVhODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2yyRM0PJpVDd/Gsk7YGVStjiNm8 dZ113oEAnM/J+51r09vAuJToCNN01rHovPriBk4hzNZqHKRgiIKDeznLvEzI72wu ZQLc3OKkF2gX0nTv1rSyqULcRGQNN6UMCc/BkA7x7/3PfRrItWgrV5RGXGLAPHR0 xyUXcsmXNabP/mYiXI1zKqZwElr/JMGO5KqHbx6eV+hjStMdA+dMkINcsn1y9ntc 7/MHP9JqSh0u3yz9W/D/0Z91bA3SO67bsbTo/2P/05uNB5CR1y8vr2yZDOTZDaaE avW5Dt4iCpJjCWSLFIki4jt29xds391QZF7wji2JWdKpc0dCXdX0b1yrewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIIJ6kdMUENygSgefUsGdjwVah4MB8GA1UdIwQY MBaAFKqP0F7rbqBaEdZnq+3Y6hCT0nGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yYmI3MDYtNjZkNC00ZmFlLTkzYTEt Yjk3YzJjNGFkNDM5LzEvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yYmI3MDYtNjZkNC00ZmFlLTkzYTEtYjk3YzJjNGFkNDM5 LzEvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHGewyYQ QRM3kb2bxQUf3FRzhP6j2Umn9L8sRvcbkQWEhrmf8owjBkX7fSYXL15ictsOa3TE J6pY7lfJne4SkxgRn2HVWNx9y6us+0KRqMgKvdr1LG2iPfWI3eUQwD3j9hVwxwI1 GRfO8EOhz2uJnBt+mANHEVs3JTTEbJkbFyDDJtbskpyey+0wJRfYslkB7S2kJsae HUuefvWQy7kPa4e9WC2qTU6sD0iMIxSIhOcz1BnDJ2yGS3BxDyJdEVJRFdFHKMY5 gijgKFqTVJWO2ePYBqLh6iUSnqbZpvl21kQd626RUsJkTmSyWKrgVQmz7EqNbe9k LcdUihE88DMO+A== -----END CERTIFICATE-----Generated at Sat Dec 20 11:19:46 2025 by rpki-client