This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json) Hash identifier: gSSpSclrY3Aei+kEM/WQNOdrsmmP4PL30AcZzE5r6to= Subject key identifier: 85:7D:EA:87:7F:29:A1:84:42:BE:B7:A4:15:16:AB:EF:79:92:52:91 Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1 Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1 Certificate serial: 019AF1D1FBDB4C5723DDA63EA3DA65AA665F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: TOk8chPnX01R3tIIJ8H6CuFxIyP7TYPekLZn+rk2CWk=) 2: RWXMqjkV2JSmE_jNgsIntDAZ40E.roa (hash: JlOZyqtU1Xw8rdg1LgiJgni//bw4mMZ1Qt4Pvh5z6tE=) 3: VWg3f0Gbf8sa5f2R-1SRG52r7-8.roa (hash: /HyVmsWd+2rMbD1GgNRa5CoP6uMJQMzjsYwposvYEw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fb:db:4c:57:23:dd:a6:3e:a3:da:65:aa:66:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1 Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=857dea877f29a18442beb7a41516abef79925291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:43:55:ab:49:02:0f:04:0f:2d:07:6e:93: 01:b4:44:87:5c:3d:d4:a1:db:2d:76:e0:48:18:e8: ef:e0:d4:3b:da:63:35:ff:13:ea:66:9e:61:c3:93: 5a:c6:15:6f:80:87:75:1b:74:3b:d0:05:6e:3c:cb: 7a:7e:15:7c:98:cc:4e:22:66:86:08:f2:9e:0b:f8: c7:b2:69:89:f0:11:37:cd:8a:f2:f5:74:e7:fb:2e: c2:ba:b2:bd:d2:4a:4e:ef:d8:1a:81:13:46:f4:9b: 15:42:da:ed:b8:0d:9e:48:f4:27:f3:76:cb:d4:f4: 27:ba:44:c1:c7:dd:a5:19:58:2e:9a:0e:8a:1d:08: 48:b2:fc:81:1e:30:b4:22:09:07:98:77:ef:84:51: 2f:af:02:b8:37:4d:e7:c7:5f:44:ce:a9:1b:e3:3a: fd:f3:53:ac:e3:67:bf:33:29:0b:6b:6d:c3:38:f9: 47:3f:13:74:9c:3c:3d:81:09:68:74:36:bd:fa:f2: 60:da:57:2d:c6:a6:21:6f:26:90:f4:11:c2:b5:fa: 9f:e0:57:f7:d9:ed:94:19:a3:6b:60:27:50:0f:62: 85:2b:53:c6:a8:31:fb:61:20:f5:61:2d:98:ba:e1: 24:10:a1:24:5e:29:43:22:75:b4:4e:05:7c:ac:0d: 2c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7D:EA:87:7F:29:A1:84:42:BE:B7:A4:15:16:AB:EF:79:92:52:91 X509v3 Authority Key Identifier: keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:30:08:16:10:fe:fb:87:ba:e4:b4:72:7f:b6:45:08:e5:8d: 91:20:64:99:36:90:e5:da:81:90:c2:88:eb:70:41:17:6e:07: 80:f6:b8:9e:2f:b9:5c:c9:0a:47:9b:b9:09:a2:26:34:be:02: 71:80:f4:69:28:4c:6c:e4:72:dd:3e:bb:41:ac:63:01:56:f0: 53:b0:f9:f7:3d:90:3a:1c:09:42:bc:75:ed:e3:a5:2b:a7:58: 58:27:80:a2:95:28:bd:46:17:41:4b:57:3c:fb:0c:88:89:cc: 72:71:53:bb:0d:40:c6:40:4e:1b:60:5c:bc:c6:3f:74:6a:4f: 20:5d:c4:28:a9:f2:95:aa:52:26:87:af:be:14:f6:cb:49:10: 28:14:84:e9:d1:f0:38:90:a8:8e:4e:43:76:22:51:84:be:c7: 11:3e:58:6d:52:b5:47:83:b1:d8:94:54:bc:42:e2:79:7a:ad: d2:a3:d0:d7:3a:19:44:7a:83:8d:bf:74:61:5a:34:bb:25:51: 47:76:c3:0e:b1:47:86:dc:df:f0:9c:cf:70:3c:ab:7e:be:9e: 06:55:ee:e1:3b:98:ba:62:ac:9b:ac:13:7c:50:27:b4:5b:8d: d9:79:dd:2e:42:ef:95:f9:32:2c:c4:f7:49:b7:1c:c0:1b:69: 56:f6:19:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fvbTFcj3aY+o9plqmZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjFkZmYzNWVkZjBjZTZlNDI4ZDZhZmZjMjEyYzQ3MTc2 NzllZTEwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD Eyg4NTdkZWE4NzdmMjlhMTg0NDJiZWI3YTQxNTE2YWJlZjc5OTI1MjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXZDVatJAg8EDy0HbpMBtESHXD3U odstduBIGOjv4NQ72mM1/xPqZp5hw5NaxhVvgId1G3Q70AVuPMt6fhV8mMxOImaG CPKeC/jHsmmJ8BE3zYry9XTn+y7CurK90kpO79gagRNG9JsVQtrtuA2eSPQn83bL 1PQnukTBx92lGVgumg6KHQhIsvyBHjC0IgkHmHfvhFEvrwK4N03nx19Ezqkb4zr9 81Os42e/MykLa23DOPlHPxN0nDw9gQlodDa9+vJg2lctxqYhbyaQ9BHCtfqf4Ff3 2e2UGaNrYCdQD2KFK1PGqDH7YSD1YS2YuuEkEKEkXilDInW0TgV8rA0sywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIV96od/KaGEQr63pBUWq+95klKRMB8GA1UdIwQY MBaAFEAh3/Ne3wzm5CjWr/whLEcXZ57hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAt ZWI1M2E1MThjMjYzLzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAtZWI1M2E1MThjMjYz LzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzAIFhD+ +4e65LRyf7ZFCOWNkSBkmTaQ5dqBkMKI63BBF24HgPa4ni+5XMkKR5u5CaImNL4C cYD0aShMbORy3T67QaxjAVbwU7D59z2QOhwJQrx17eOlK6dYWCeAopUovUYXQUtX PPsMiInMcnFTuw1AxkBOG2BcvMY/dGpPIF3EKKnylapSJoevvhT2y0kQKBSE6dHw OJCojk5DdiJRhL7HET5YbVK1R4Ox2JRUvELieXqt0qPQ1zoZRHqDjb90YVo0uyVR R3bDDrFHhtzf8JzPcDyrfr6eBlXu4TuYumKsm6wTfFAntFuN2XndLkLvlfkyLMT3 SbccwBtpVvYZDw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:47 2025 by rpki-client