This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft File: QDx-hd5J15JM5Q09ap5S6enC4xI.mft (raw, json) Hash identifier: rh88vK8q01JJg/tSoks9rIQrRE9RXoW8Jml0ySNNsFY= Subject key identifier: EE:56:D8:84:59:A1:00:22:32:DB:6A:8B:FD:F3:F4:C6:E9:B7:BA:5C Authority key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12 Certificate issuer: /CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312 Certificate serial: 019AF352B97FFD67B2763A4D97347ED86D6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft Manifest number: 1528 Signing time: Sat 06 Dec 2025 11:01:16 +0000 Manifest this update: Sat 06 Dec 2025 11:01:16 +0000 Manifest next update: Sun 07 Dec 2025 11:01:16 +0000 Files and hashes: 1: QDx-hd5J15JM5Q09ap5S6enC4xI.crl (hash: 9R8V3lCfJTSiPwUlaoGycJWynFkcPeiqlPNlPX+ZHlk=) 2: zBQLlk6R8SMqXeJs9KlWAq-2zWs.roa (hash: H5Z9T6mivR2DyTqTRYiFtEvpcqAnMQHqnVNqaL10pMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:b9:7f:fd:67:b2:76:3a:4d:97:34:7e:d8:6d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312 Validity Not Before: Dec 6 11:01:16 2025 GMT Not After : Dec 7 11:01:16 2025 GMT Subject: CN=ee56d88459a1002232db6a8bfdf3f4c6e9b7ba5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1b:2a:d0:a8:90:d1:81:7f:5c:94:b0:37:5e: 0e:74:64:4f:eb:d3:a3:07:a7:b5:e1:4c:cb:bd:36: 34:08:e2:af:60:7e:b7:50:4e:b8:e4:1a:da:b8:9c: 9a:30:aa:bd:c4:a2:c5:61:cb:80:05:dc:2b:c6:17: 21:5f:1e:00:88:8c:85:ee:7b:d1:6d:94:99:c6:c6: 8b:cf:a5:f8:3b:3b:39:e0:86:95:bc:b9:ac:aa:91: d3:6a:72:ce:74:7c:d2:e2:71:9f:63:36:15:e2:fc: a1:b9:f6:2c:3e:2e:af:19:b2:10:e5:c9:3d:a6:a6: 6b:88:a0:91:05:ae:23:6a:07:88:87:c3:7e:d2:4e: f1:89:dd:18:00:b6:e9:49:ed:e9:bb:4e:a6:12:20: 36:0b:f1:42:3a:6a:b4:44:b8:40:56:d1:f1:9e:11: 82:8f:39:93:51:a4:c3:c1:99:2e:77:de:58:9f:4a: 36:b4:ad:a5:ab:5d:ad:3c:c4:9f:0c:2b:3b:f2:cd: b2:80:cc:8d:23:8e:d3:8d:6e:43:38:ee:39:11:0c: 1e:2b:64:2b:16:c0:84:75:c0:32:70:a4:53:32:ef: 84:a6:0f:12:67:46:fd:a6:bd:af:0b:81:8f:1d:e9: ca:a6:eb:46:fc:62:19:a4:10:c3:51:af:cc:d1:36: f6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:56:D8:84:59:A1:00:22:32:DB:6A:8B:FD:F3:F4:C6:E9:B7:BA:5C X509v3 Authority Key Identifier: keyid:40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:5c:90:49:2b:00:49:c3:70:11:9f:ef:f7:60:8e:2e:80:07: e4:8d:7e:f0:ee:3b:8b:79:cd:a3:80:36:aa:fb:f0:d9:ab:1d: 3b:a1:d8:a9:74:45:19:63:79:2c:91:83:8f:90:ff:2f:15:73: 74:9f:7b:b7:01:0f:43:43:69:a6:f7:05:5d:9e:c9:84:15:ef: 8e:ed:b0:8d:95:56:12:8f:5e:30:e5:fb:e3:6e:7e:84:43:ae: e8:d2:60:1d:5b:bd:6f:b9:1a:87:88:ba:89:a7:3b:05:81:a7: ad:c0:1d:2d:81:3c:36:fd:e6:fc:b7:66:7b:6d:89:cf:4f:00: 1e:ce:7f:f4:0e:ab:96:dc:80:79:c6:d1:5d:cd:6d:9d:ac:f0: 48:de:4a:5f:dd:44:e0:57:e0:d4:7f:2d:61:5b:8a:bb:02:9a: 30:6e:8a:85:49:1a:d8:3f:07:ca:0d:28:ca:b5:68:75:28:08: cd:72:6c:1f:66:eb:fe:76:ec:e4:12:17:4b:a5:0e:56:f0:2a: 9a:32:ac:ab:67:2a:cd:a6:33:b7:d3:c0:4e:b0:da:65:95:7b: a6:c1:dc:f2:5e:84:df:23:6a:28:00:de:07:86:a8:72:22:13: b6:36:a1:9b:b7:2f:99:34:02:9e:05:d5:a2:0a:40:5b:f8:24: c6:89:73:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUrl//WeydjpNlzR+2G1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwM2M3ZTg1ZGU0OWQ3OTI0Y2U1MGQzZDZhOWU1MmU5ZTlj MmUzMTIwHhcNMjUxMjA2MTEwMTE2WhcNMjUxMjA3MTEwMTE2WjAzMTEwLwYDVQQD EyhlZTU2ZDg4NDU5YTEwMDIyMzJkYjZhOGJmZGYzZjRjNmU5YjdiYTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xsq0KiQ0YF/XJSwN14OdGRP69Oj B6e14UzLvTY0COKvYH63UE645BrauJyaMKq9xKLFYcuABdwrxhchXx4AiIyF7nvR bZSZxsaLz6X4Ozs54IaVvLmsqpHTanLOdHzS4nGfYzYV4vyhufYsPi6vGbIQ5ck9 pqZriKCRBa4jageIh8N+0k7xid0YALbpSe3pu06mEiA2C/FCOmq0RLhAVtHxnhGC jzmTUaTDwZkud95Yn0o2tK2lq12tPMSfDCs78s2ygMyNI47TjW5DOO45EQweK2Qr FsCEdcAycKRTMu+Epg8SZ0b9pr2vC4GPHenKputG/GIZpBDDUa/M0Tb29wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5W2IRZoQAiMttqi/3z9Mbpt7pcMB8GA1UdIwQY MBaAFEA8foXeSdeSTOUNPWqeUunpwuMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUR4LWhkNUoxNUpNNVEwOWFwNVM2ZW5DNHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wYTAwNzgtNjQ4Zi00MzYwLTk0Yzct MGQ2ZGNiMGVjZmNmLzEvUUR4LWhkNUoxNUpNNVEwOWFwNVM2ZW5DNHhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8wYTAwNzgtNjQ4Zi00MzYwLTk0YzctMGQ2ZGNiMGVjZmNm LzEvUUR4LWhkNUoxNUpNNVEwOWFwNVM2ZW5DNHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVyQSSsA ScNwEZ/v92COLoAH5I1+8O47i3nNo4A2qvvw2asdO6HYqXRFGWN5LJGDj5D/LxVz dJ97twEPQ0NppvcFXZ7JhBXvju2wjZVWEo9eMOX7425+hEOu6NJgHVu9b7kah4i6 iac7BYGnrcAdLYE8Nv3m/Ldme22Jz08AHs5/9A6rltyAecbRXc1tnazwSN5KX91E 4Ffg1H8tYVuKuwKaMG6KhUka2D8Hyg0oyrVodSgIzXJsH2br/nbs5BIXS6UOVvAq mjKsq2cqzaYzt9PATrDaZZV7psHc8l6E3yNqKADeB4aociITtjahm7cvmTQCngXV ogpAW/gkxolzJg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:37 2025 by rpki-client