This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
File: qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json)
Hash identifier: 4tsnIU0q6aeZ7v6eYDjog0HZdfG9PzTc1YTc29UEdWs=
Subject key identifier: 5D:0B:52:DB:8D:6C:7B:90:18:F3:C2:9D:F6:DF:88:06:71:56:89:8C
Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
Certificate issuer: /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Certificate serial: 019B3BD96A1784A371A1D1E7D5E52E5621B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
Manifest number: 1788
Signing time: Sat 20 Dec 2025 13:01:02 +0000
Manifest this update: Sat 20 Dec 2025 13:01:02 +0000
Manifest next update: Sun 21 Dec 2025 13:01:02 +0000
Files and hashes: 1: lfJUEj9OpKtkyjj6xaEeSMukOrA.roa (hash: 9AsF2IZpbVSPw/O9UldkVW9AyHlVo6jZ0snpU1eDlm8=)
2: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: m9Uw0QiK3ujrXvE9ttLXxVNSthzNgaqzO8c2zpYymNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 09:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:d9:6a:17:84:a3:71:a1:d1:e7:d5:e5:2e:56:21:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Validity
Not Before: Dec 20 13:01:02 2025 GMT
Not After : Dec 21 13:01:02 2025 GMT
Subject: CN=5d0b52db8d6c7b9018f3c29df6df88067156898c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:3b:55:36:a3:47:80:43:bc:0a:a1:48:66:
e0:d7:4a:49:0e:76:a7:09:99:87:83:fc:c6:f8:0a:
d1:24:38:79:6d:8b:b8:11:62:47:01:53:42:29:48:
1c:65:1c:9b:bd:5c:dd:b2:88:5c:4b:41:2c:6d:45:
2e:5f:73:0c:6a:4a:73:56:9e:13:4f:af:c8:d5:f9:
c3:6f:80:7b:99:b8:f9:79:34:53:40:91:57:33:c7:
13:16:04:d5:b6:ed:95:3e:96:bb:a4:9e:c4:98:a0:
88:6e:1a:39:fd:bb:05:e5:5a:df:9d:d8:cf:92:db:
7c:b4:84:3a:32:54:f8:08:ec:67:08:e7:5c:4e:5d:
4c:19:d2:3f:7e:90:42:aa:54:7f:5a:b3:3e:40:f0:
07:68:cd:b1:21:95:1c:5d:51:36:e1:e1:26:f5:9c:
ad:9a:e7:98:b8:5b:4c:5a:26:27:43:d1:0f:a7:c3:
5e:4d:1c:ca:87:9b:97:a5:8f:6a:ed:67:8e:1f:95:
78:ec:30:1f:22:92:e1:0f:d3:2f:ee:7f:63:9f:44:
a7:92:53:07:85:c0:40:95:d4:14:2b:8a:73:4c:01:
e3:46:ab:17:38:57:af:c8:b2:49:d9:6c:0e:ed:50:
23:b9:4c:b3:e2:72:4c:e9:39:cd:71:1f:25:7f:47:
ed:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0B:52:DB:8D:6C:7B:90:18:F3:C2:9D:F6:DF:88:06:71:56:89:8C
X509v3 Authority Key Identifier:
keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f1:5e:70:df:a8:9e:38:66:ee:49:63:d2:9b:92:7a:d8:1a:
b7:ed:e5:3d:e9:e5:12:8a:f6:f5:af:4f:33:b8:5d:b0:0d:43:
24:02:7a:1e:10:5e:a4:0f:3d:29:14:41:d2:89:9a:dc:b5:e7:
63:7a:a0:07:3e:46:c4:11:30:19:d0:2e:95:a0:66:3b:82:95:
8e:a1:40:10:3b:b3:e4:2e:e1:81:3a:cd:fb:79:70:21:4f:62:
e8:5d:13:e8:ca:e6:51:d0:66:ec:74:61:b2:41:46:49:b6:a0:
28:12:9c:5c:b3:22:3c:57:ed:55:1c:cd:3c:87:3f:cb:fe:67:
2b:d2:62:fb:18:ef:15:38:4b:e7:aa:0f:3c:5c:e7:41:32:a5:
cd:42:e6:6f:92:61:c3:e2:c0:7b:01:4a:35:7c:8b:5d:f2:b0:
c7:8e:a9:dd:92:c5:2c:40:a6:68:44:30:2e:de:98:9d:5d:d3:
07:76:f0:a2:bf:09:8b:05:2b:7e:2b:1e:d8:31:8d:f6:a0:0e:
29:ab:72:6b:22:da:dd:be:a0:49:6d:df:9f:bb:06:5b:6c:f9:
1d:18:b8:b0:a3:ca:06:1f:eb:d4:a1:0a:98:ec:41:fd:50:fc:
4b:f9:72:63:3a:65:b3:84:e3:ac:2f:92:39:e4:f6:b7:cf:16:
6c:5b:dc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:03:58 2025 by rpki-client