This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft File: qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json) Hash identifier: 4tsnIU0q6aeZ7v6eYDjog0HZdfG9PzTc1YTc29UEdWs= Subject key identifier: 5D:0B:52:DB:8D:6C:7B:90:18:F3:C2:9D:F6:DF:88:06:71:56:89:8C Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3 Certificate issuer: /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3 Certificate serial: 019B3BD96A1784A371A1D1E7D5E52E5621B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 13:01:02 +0000 Manifest this update: Sat 20 Dec 2025 13:01:02 +0000 Manifest next update: Sun 21 Dec 2025 13:01:02 +0000 Files and hashes: 1: lfJUEj9OpKtkyjj6xaEeSMukOrA.roa (hash: 9AsF2IZpbVSPw/O9UldkVW9AyHlVo6jZ0snpU1eDlm8=) 2: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: m9Uw0QiK3ujrXvE9ttLXxVNSthzNgaqzO8c2zpYymNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:6a:17:84:a3:71:a1:d1:e7:d5:e5:2e:56:21:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3 Validity Not Before: Dec 20 13:01:02 2025 GMT Not After : Dec 21 13:01:02 2025 GMT Subject: CN=5d0b52db8d6c7b9018f3c29df6df88067156898c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:3b:55:36:a3:47:80:43:bc:0a:a1:48:66: e0:d7:4a:49:0e:76:a7:09:99:87:83:fc:c6:f8:0a: d1:24:38:79:6d:8b:b8:11:62:47:01:53:42:29:48: 1c:65:1c:9b:bd:5c:dd:b2:88:5c:4b:41:2c:6d:45: 2e:5f:73:0c:6a:4a:73:56:9e:13:4f:af:c8:d5:f9: c3:6f:80:7b:99:b8:f9:79:34:53:40:91:57:33:c7: 13:16:04:d5:b6:ed:95:3e:96:bb:a4:9e:c4:98:a0: 88:6e:1a:39:fd:bb:05:e5:5a:df:9d:d8:cf:92:db: 7c:b4:84:3a:32:54:f8:08:ec:67:08:e7:5c:4e:5d: 4c:19:d2:3f:7e:90:42:aa:54:7f:5a:b3:3e:40:f0: 07:68:cd:b1:21:95:1c:5d:51:36:e1:e1:26:f5:9c: ad:9a:e7:98:b8:5b:4c:5a:26:27:43:d1:0f:a7:c3: 5e:4d:1c:ca:87:9b:97:a5:8f:6a:ed:67:8e:1f:95: 78:ec:30:1f:22:92:e1:0f:d3:2f:ee:7f:63:9f:44: a7:92:53:07:85:c0:40:95:d4:14:2b:8a:73:4c:01: e3:46:ab:17:38:57:af:c8:b2:49:d9:6c:0e:ed:50: 23:b9:4c:b3:e2:72:4c:e9:39:cd:71:1f:25:7f:47: ed:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0B:52:DB:8D:6C:7B:90:18:F3:C2:9D:F6:DF:88:06:71:56:89:8C X509v3 Authority Key Identifier: keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f1:5e:70:df:a8:9e:38:66:ee:49:63:d2:9b:92:7a:d8:1a: b7:ed:e5:3d:e9:e5:12:8a:f6:f5:af:4f:33:b8:5d:b0:0d:43: 24:02:7a:1e:10:5e:a4:0f:3d:29:14:41:d2:89:9a:dc:b5:e7: 63:7a:a0:07:3e:46:c4:11:30:19:d0:2e:95:a0:66:3b:82:95: 8e:a1:40:10:3b:b3:e4:2e:e1:81:3a:cd:fb:79:70:21:4f:62: e8:5d:13:e8:ca:e6:51:d0:66:ec:74:61:b2:41:46:49:b6:a0: 28:12:9c:5c:b3:22:3c:57:ed:55:1c:cd:3c:87:3f:cb:fe:67: 2b:d2:62:fb:18:ef:15:38:4b:e7:aa:0f:3c:5c:e7:41:32:a5: cd:42:e6:6f:92:61:c3:e2:c0:7b:01:4a:35:7c:8b:5d:f2:b0: c7:8e:a9:dd:92:c5:2c:40:a6:68:44:30:2e:de:98:9d:5d:d3: 07:76:f0:a2:bf:09:8b:05:2b:7e:2b:1e:d8:31:8d:f6:a0:0e: 29:ab:72:6b:22:da:dd:be:a0:49:6d:df:9f:bb:06:5b:6c:f9: 1d:18:b8:b0:a3:ca:06:1f:eb:d4:a1:0a:98:ec:41:fd:50:fc: 4b:f9:72:63:3a:65:b3:84:e3:ac:2f:92:39:e4:f6:b7:cf:16: 6c:5b:dc:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72WoXhKNxodHn1eUuViG2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhOGZkMDVlZWI2ZWEwNWExMWQ2NjdhYmVkZDhlYTEwOTNk MjcxYjMwHhcNMjUxMjIwMTMwMTAyWhcNMjUxMjIxMTMwMTAyWjAzMTEwLwYDVQQD Eyg1ZDBiNTJkYjhkNmM3YjkwMThmM2MyOWRmNmRmODgwNjcxNTY4OThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi47VTajR4BDvAqhSGbg10pJDnan CZmHg/zG+ArRJDh5bYu4EWJHAVNCKUgcZRybvVzdsohcS0EsbUUuX3MMakpzVp4T T6/I1fnDb4B7mbj5eTRTQJFXM8cTFgTVtu2VPpa7pJ7EmKCIbho5/bsF5VrfndjP ktt8tIQ6MlT4COxnCOdcTl1MGdI/fpBCqlR/WrM+QPAHaM2xIZUcXVE24eEm9Zyt mueYuFtMWiYnQ9EPp8NeTRzKh5uXpY9q7WeOH5V47DAfIpLhD9Mv7n9jn0SnklMH hcBAldQUK4pzTAHjRqsXOFevyLJJ2WwO7VAjuUyz4nJM6TnNcR8lf0ft0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0LUtuNbHuQGPPCnfbfiAZxVomMMB8GA1UdIwQY MBaAFKqP0F7rbqBaEdZnq+3Y6hCT0nGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yYmI3MDYtNjZkNC00ZmFlLTkzYTEt Yjk3YzJjNGFkNDM5LzEvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yYmI3MDYtNjZkNC00ZmFlLTkzYTEtYjk3YzJjNGFkNDM5 LzEvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPFecN+o njhm7klj0puSetgat+3lPenlEor29a9PM7hdsA1DJAJ6HhBepA89KRRB0oma3LXn Y3qgBz5GxBEwGdAulaBmO4KVjqFAEDuz5C7hgTrN+3lwIU9i6F0T6MrmUdBm7HRh skFGSbagKBKcXLMiPFftVRzNPIc/y/5nK9Ji+xjvFThL56oPPFznQTKlzULmb5Jh w+LAewFKNXyLXfKwx46p3ZLFLECmaEQwLt6YnV3TB3bwor8JiwUrfise2DGN9qAO KatyayLa3b6gSW3fn7sGW2z5HRi4sKPKBh/r1KEKmOxB/VD8S/lyYzpls4TjrC+S OeT2t88WbFvcQA== -----END CERTIFICATE-----Generated at Sat Dec 20 15:03:58 2025 by rpki-client