This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft File: QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft (raw, json) Hash identifier: MljnCfBt9TuFARQPMndRmFKGh4+RhJLN7y8aGBWflmM= Subject key identifier: A2:17:5D:29:17:A0:6C:0B:80:8B:73:85:1D:AB:7D:96:6C:F5:93:AD Authority key identifier: 41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40 Certificate issuer: /CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140 Certificate serial: 019AF5E5765D53A7FB26EBA6E62DFDE50447 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 23:00:47 +0000 Manifest this update: Sat 06 Dec 2025 23:00:47 +0000 Manifest next update: Sun 07 Dec 2025 23:00:47 +0000 Files and hashes: 1: 0qda3zP6aWS1QmMsfKtgTS_B8vw.roa (hash: NDD2ZMdGd4Vw1apZklWLmjHBzI7LGvrNZrE04O9xutU=) 2: QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl (hash: tSkS5WxilF/gOdh+6D+/CSgQyAaUh/qJqc+MaZX+B/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:76:5d:53:a7:fb:26:eb:a6:e6:2d:fd:e5:04:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140 Validity Not Before: Dec 6 23:00:47 2025 GMT Not After : Dec 7 23:00:47 2025 GMT Subject: CN=a2175d2917a06c0b808b73851dab7d966cf593ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:31:88:4f:d4:ee:22:5e:fb:09:fb:7d:73: 88:4a:30:67:b2:ff:40:6d:9f:50:55:e1:21:a2:b2: b8:db:8f:37:03:75:f2:ee:a3:da:de:20:60:eb:b7: 1f:ab:a5:af:6a:f9:5d:fd:1b:55:70:75:0f:f4:45: 05:f7:24:db:62:29:43:07:0e:22:49:9f:58:ab:0b: 81:a7:8a:54:39:26:52:e8:99:b9:80:96:23:98:35: e4:5a:0f:46:ae:2a:40:f9:20:a5:4b:63:0d:80:bc: ba:13:27:0e:10:3d:d0:86:1f:af:52:aa:3e:f1:29: c4:40:ae:ed:58:1c:4e:09:f0:55:62:fc:6a:5a:20: 44:c4:42:c1:25:a2:fd:4d:9f:86:b2:e0:1f:b6:66: dd:3e:f8:c8:ff:af:f5:f2:31:fd:5b:8c:28:2c:db: 06:e9:4d:33:ba:53:ef:08:c4:ec:5e:79:b6:35:bf: 42:08:52:cd:bc:16:c3:7e:ea:5b:b9:fe:38:b3:3f: 50:21:b1:1f:86:e0:82:4b:a6:c6:6c:b5:39:18:f8: e2:95:7e:d8:84:16:7c:3c:f0:11:fb:b7:1a:0f:85: 87:db:f0:82:d0:e3:92:ca:2c:88:3b:ac:ec:87:fd: cd:82:10:e9:a0:36:aa:bb:6f:1e:6f:a2:ac:77:d6: 8a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:17:5D:29:17:A0:6C:0B:80:8B:73:85:1D:AB:7D:96:6C:F5:93:AD X509v3 Authority Key Identifier: keyid:41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:42:34:c5:9d:fd:24:51:1c:75:2a:34:f4:e6:3e:36:5a:9f: 8a:37:af:c2:5a:88:32:91:57:3b:cd:30:78:f9:f7:3a:41:e1: c8:ac:b7:18:d7:6c:c0:0d:6a:38:d9:19:28:8e:51:bb:b4:c8: 1b:40:c0:82:c9:2f:44:2f:cf:a0:79:5e:eb:e1:2c:ca:d1:5c: 2c:d2:2c:bf:9f:4b:6e:b5:0b:fd:2c:58:44:44:9c:9d:13:56: ff:5e:8d:61:50:85:1b:b0:4c:a7:46:c8:83:c3:78:97:0d:30: da:a5:35:6d:47:2b:82:47:16:cb:71:61:00:1a:b1:35:34:a6: 50:c6:d7:18:5b:84:c3:10:75:22:15:19:99:5a:d3:f6:9e:fe: 7e:b7:35:ef:35:94:b8:3c:e0:5c:de:8e:38:05:71:a5:ef:f2: 0b:f7:49:a7:43:05:a7:41:99:ff:38:8c:0d:aa:90:3a:c9:fd: 9a:b5:db:9a:57:52:77:8a:37:23:c9:f4:35:e8:36:10:ad:a0: e0:13:1f:99:e3:2a:37:49:9a:14:45:1d:1a:b0:d2:d5:57:53: 0d:68:75:75:1c:98:50:31:f4:3b:86:b7:86:2d:c9:01:06:f6: 54:a2:55:54:6b:e5:ee:08:a1:6b:56:ae:9f:94:d6:ef:98:b5: fb:55:5d:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15XZdU6f7Juum5i395QRHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxM2ZmYTEwNmFlM2ZlZTZiZTg3YmFjMDZhODdiYTU3ZWQx YzExNDAwHhcNMjUxMjA2MjMwMDQ3WhcNMjUxMjA3MjMwMDQ3WjAzMTEwLwYDVQQD EyhhMjE3NWQyOTE3YTA2YzBiODA4YjczODUxZGFiN2Q5NjZjZjU5M2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2gxiE/U7iJe+wn7fXOISjBnsv9A bZ9QVeEhorK42483A3Xy7qPa3iBg67cfq6Wvavld/RtVcHUP9EUF9yTbYilDBw4i SZ9YqwuBp4pUOSZS6Jm5gJYjmDXkWg9GripA+SClS2MNgLy6EycOED3Qhh+vUqo+ 8SnEQK7tWBxOCfBVYvxqWiBExELBJaL9TZ+GsuAftmbdPvjI/6/18jH9W4woLNsG 6U0zulPvCMTsXnm2Nb9CCFLNvBbDfupbuf44sz9QIbEfhuCCS6bGbLU5GPjilX7Y hBZ8PPAR+7caD4WH2/CC0OOSyiyIO6zsh/3NghDpoDaqu28eb6Ksd9aKawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIXXSkXoGwLgItzhR2rfZZs9ZOtMB8GA1UdIwQY MBaAFEE/+hBq4/7mvoe6wGqHulftHBFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jNzk2MzUtYmVjNC00ZmI1LTg5MmMt ZmEyNmVjMzlmYWJhLzEvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9jNzk2MzUtYmVjNC00ZmI1LTg5MmMtZmEyNmVjMzlmYWJh LzEvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0I0xZ39 JFEcdSo09OY+NlqfijevwlqIMpFXO80wePn3OkHhyKy3GNdswA1qONkZKI5Ru7TI G0DAgskvRC/PoHle6+EsytFcLNIsv59LbrUL/SxYREScnRNW/16NYVCFG7BMp0bI g8N4lw0w2qU1bUcrgkcWy3FhABqxNTSmUMbXGFuEwxB1IhUZmVrT9p7+frc17zWU uDzgXN6OOAVxpe/yC/dJp0MFp0GZ/ziMDaqQOsn9mrXbmldSd4o3I8n0Neg2EK2g 4BMfmeMqN0maFEUdGrDS1VdTDWh1dRyYUDH0O4a3hi3JAQb2VKJVVGvl7giha1au n5TW75i1+1Vdig== -----END CERTIFICATE-----Generated at Sun Dec 7 06:59:43 2025 by rpki-client