This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft File: qg-X5jUIIZuWy7IQY0P14bbcWk8.mft (raw, json) Hash identifier: vi3ySSpj/pzTIArHlpK1XmijzpR3Hto4mCyHvsn3MT0= Subject key identifier: 49:DB:2A:BB:97:7B:46:55:D0:02:E7:62:DF:02:06:23:A7:F4:7A:8D Authority key identifier: AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F Certificate issuer: /CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f Certificate serial: 019AF2099161F1BB1A36CA137203D1425D49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft Manifest number: 0467 Signing time: Sat 06 Dec 2025 05:01:44 +0000 Manifest this update: Sat 06 Dec 2025 05:01:44 +0000 Manifest next update: Sun 07 Dec 2025 05:01:44 +0000 Files and hashes: 1: 9AnxnImjEc49reXZMK2FTMayLmk.roa (hash: 8tldiaw0Efa5JT0iNf3f5fRMFBv7jO6PfNRsCAPI7BY=) 2: qg-X5jUIIZuWy7IQY0P14bbcWk8.crl (hash: CyEik4ta8Zc8aAd5V1mBMntN2XdhYKHnpxMauuOSEKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:91:61:f1:bb:1a:36:ca:13:72:03:d1:42:5d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f Validity Not Before: Dec 6 05:01:44 2025 GMT Not After : Dec 7 05:01:44 2025 GMT Subject: CN=49db2abb977b4655d002e762df020623a7f47a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:27:09:40:22:3d:ff:51:c2:9b:8d:6d:be:ae: cd:3e:77:21:a7:2b:de:75:f3:94:d0:64:51:7c:4b: 67:a8:4c:10:d7:00:98:ae:7a:ee:9a:16:f7:77:ea: 02:d5:7b:6f:d7:07:52:46:be:ad:23:dd:eb:a0:27: 61:9b:48:02:7e:cc:16:12:6f:3a:b1:cd:9b:cd:ef: 89:69:52:a5:82:98:6c:c2:f0:34:f3:ae:7b:c3:65: c3:51:25:b1:96:87:09:4a:5f:fd:6a:0c:14:5b:e9: e4:24:7e:0a:76:62:05:3e:38:76:2e:08:f1:3d:41: 8e:50:34:8e:d7:f6:9e:cf:69:f2:7a:3e:8c:48:82: 70:81:dd:c9:03:27:38:4c:95:6c:85:d6:89:ec:38: ab:5b:3c:e3:07:fc:68:b2:e5:c1:8c:55:1f:0c:59: f5:d8:78:b7:06:80:d3:07:0a:90:b0:45:9c:ac:5c: fc:68:73:72:d4:b2:89:d8:7f:a6:7b:d8:51:42:4c: da:89:a4:e3:24:24:8e:67:6a:20:5c:ec:cf:24:68: 8c:04:12:94:1c:f4:fd:eb:5c:e5:37:11:10:2d:40: da:d7:ed:4e:4b:4c:2c:4e:0c:0a:13:7e:bf:5f:07: 27:63:04:e3:69:20:8d:27:9c:c0:f8:c4:c9:1a:c9: fc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DB:2A:BB:97:7B:46:55:D0:02:E7:62:DF:02:06:23:A7:F4:7A:8D X509v3 Authority Key Identifier: keyid:AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:6c:58:c8:78:b2:7d:4c:3b:58:3d:b6:0d:82:1d:ad:28:42: 88:0a:ec:7b:72:62:ff:a9:00:92:c8:b1:6b:95:90:ea:b1:5f: c0:e4:d4:3d:e4:75:e9:a4:95:61:b1:90:08:7b:ac:05:61:93: 72:14:a0:fc:f0:be:c8:92:61:1a:32:44:e7:72:5d:4d:b0:a7: e9:ca:73:46:09:dc:46:11:09:2a:2a:84:c5:9b:3e:9e:53:cb: 4b:39:f3:98:22:87:5a:57:27:02:f8:c9:0f:de:de:ae:90:66: aa:0b:5f:ea:1f:ca:63:96:cc:34:45:20:f6:c7:32:dc:13:59: b9:73:1d:92:70:3b:85:d9:7a:c6:8f:af:e0:9c:5c:30:15:0c: 2e:47:54:37:e2:08:d1:a6:e4:e8:3f:bd:da:c5:62:25:74:56: 8c:6e:80:d5:4e:52:3f:3a:88:4f:13:7d:3f:21:d0:73:93:8c: 6a:df:78:33:c4:bb:ef:88:7b:95:7e:bd:ce:d7:9e:ba:8d:c9: e4:a1:c9:90:10:47:97:29:c3:4b:99:11:43:3e:7d:17:a1:fc: b4:76:4b:53:63:f4:93:2e:3e:0e:97:32:83:ed:8d:a5:d6:b3: e9:63:09:df:66:b9:54:06:fa:b7:5d:1b:88:e6:a6:1e:40:50: f4:91:c0:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZFh8bsaNsoTcgPRQl1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMGY5N2U2MzUwODIxOWI5NmNiYjIxMDYzNDNmNWUxYjZk YzVhNGYwHhcNMjUxMjA2MDUwMTQ0WhcNMjUxMjA3MDUwMTQ0WjAzMTEwLwYDVQQD Eyg0OWRiMmFiYjk3N2I0NjU1ZDAwMmU3NjJkZjAyMDYyM2E3ZjQ3YThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CcJQCI9/1HCm41tvq7NPnchpyve dfOU0GRRfEtnqEwQ1wCYrnrumhb3d+oC1Xtv1wdSRr6tI93roCdhm0gCfswWEm86 sc2bze+JaVKlgphswvA08657w2XDUSWxlocJSl/9agwUW+nkJH4KdmIFPjh2Lgjx PUGOUDSO1/aez2nyej6MSIJwgd3JAyc4TJVshdaJ7DirWzzjB/xosuXBjFUfDFn1 2Hi3BoDTBwqQsEWcrFz8aHNy1LKJ2H+me9hRQkzaiaTjJCSOZ2ogXOzPJGiMBBKU HPT961zlNxEQLUDa1+1OS0wsTgwKE36/XwcnYwTjaSCNJ5zA+MTJGsn8XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnbKruXe0ZV0ALnYt8CBiOn9HqNMB8GA1UdIwQY MBaAFKoPl+Y1CCGblsuyEGND9eG23FpPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWctWDVqVUlJWnVXeTdJUVkwUDE0YmJjV2s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYjY2ZmUtNjk5YS00MTNiLWEyZmMt ZjUxMWZkNjg4ZWRhLzEvcWctWDVqVUlJWnVXeTdJUVkwUDE0YmJjV2s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8xYjY2ZmUtNjk5YS00MTNiLWEyZmMtZjUxMWZkNjg4ZWRh LzEvcWctWDVqVUlJWnVXeTdJUVkwUDE0YmJjV2s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGxYyHiy fUw7WD22DYIdrShCiArse3Ji/6kAksixa5WQ6rFfwOTUPeR16aSVYbGQCHusBWGT chSg/PC+yJJhGjJE53JdTbCn6cpzRgncRhEJKiqExZs+nlPLSznzmCKHWlcnAvjJ D97erpBmqgtf6h/KY5bMNEUg9scy3BNZuXMdknA7hdl6xo+v4JxcMBUMLkdUN+II 0abk6D+92sViJXRWjG6A1U5SPzqITxN9PyHQc5OMat94M8S774h7lX69zteeuo3J 5KHJkBBHlynDS5kRQz59F6H8tHZLU2P0ky4+Dpcyg+2Npdaz6WMJ32a5VAb6t10b iOamHkBQ9JHA7A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:48 2025 by rpki-client