This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft File: lo-QT-7x95FiuCGaikg7hY9UC_o.mft (raw, json) Hash identifier: eFO19e2oHZmZysm+4DGnxBFFwQajQGsqxESVJQ/OfPg= Subject key identifier: 57:2D:54:BD:EC:72:D4:8B:D1:B9:CB:6B:08:E4:88:13:85:56:5E:04 Authority key identifier: 96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA Certificate issuer: /CN=968f904feef1f79162b8219a8a483b858f540bfa Certificate serial: 019AF12D8013649AED83FAAB8F8F718DB6DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:01:22 +0000 Manifest this update: Sat 06 Dec 2025 01:01:22 +0000 Manifest next update: Sun 07 Dec 2025 01:01:22 +0000 Files and hashes: 1: lo-QT-7x95FiuCGaikg7hY9UC_o.crl (hash: XIeUSPSYeTF1JSMqGqJr48pXHsIfdkut3l/qdKe/0vE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:80:13:64:9a:ed:83:fa:ab:8f:8f:71:8d:b6:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968f904feef1f79162b8219a8a483b858f540bfa Validity Not Before: Dec 6 01:01:22 2025 GMT Not After : Dec 7 01:01:22 2025 GMT Subject: CN=572d54bdec72d48bd1b9cb6b08e4881385565e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:34:76:27:6e:fd:bb:6d:9b:4d:0e:95:19:43: b1:19:f5:3f:d2:28:fb:6e:2d:04:f5:75:e0:2b:f6: 23:dc:e3:76:06:bd:0f:a4:1d:2d:4a:3e:3c:fc:24: 26:45:63:e3:ea:90:4e:50:2c:1c:d2:b4:59:a9:88: 74:a7:34:dc:d6:9f:33:7b:66:3e:2e:fd:13:11:e4: e5:38:b7:b9:0a:2b:7d:ac:44:65:1a:bc:99:f2:50: 4d:93:1a:14:97:5c:4e:f0:01:53:df:56:90:d2:38: 0b:ec:bc:22:fc:a3:7b:22:0d:4a:71:99:ec:71:15: 59:db:c7:5b:d1:86:4f:f4:ce:14:3c:2b:c9:59:11: ba:1b:a4:e9:a9:22:89:87:06:58:43:0f:ea:dc:17: 24:86:16:cc:ba:4a:f4:5d:d5:03:8a:c0:40:e0:82: ed:63:d6:b0:4e:d4:78:d2:48:c9:e5:fa:77:11:1f: 39:15:ad:20:da:a6:d8:b0:94:4b:7d:a2:42:2d:08: 10:f7:44:ba:e9:ad:5f:87:d3:8f:53:d2:aa:0f:53: ea:8b:c8:6a:5c:a9:45:f7:d8:fc:a6:a5:1e:fb:85: ee:d9:92:ff:7f:5e:19:92:60:ca:cb:c8:aa:86:ea: 24:27:4b:9b:71:b3:3a:6c:9d:58:9f:6f:65:f9:87: b5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2D:54:BD:EC:72:D4:8B:D1:B9:CB:6B:08:E4:88:13:85:56:5E:04 X509v3 Authority Key Identifier: keyid:96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:55:7d:27:94:55:d9:ec:a2:9a:c0:4e:cf:c4:21:2c:90:13: 3d:b7:1b:65:51:22:99:b4:74:90:6e:2c:cf:3c:2d:39:e5:69: a9:23:d4:93:ac:77:65:f4:50:4b:84:70:c7:0a:c2:ab:27:84: 87:71:0f:8e:78:e0:51:e5:6a:8b:ab:14:d4:87:a6:dc:61:a1: 99:cf:13:b5:4d:0f:5b:99:70:ad:74:c7:de:7f:ee:28:b8:12: 5d:b4:34:45:a7:d7:11:bf:01:db:cd:7f:28:81:f1:7d:f9:64: 03:a0:63:12:ce:da:69:37:28:68:66:d6:df:e1:1f:aa:ed:5c: f8:30:33:00:5c:a9:1b:0b:47:81:a5:60:10:06:83:13:56:c4: 8b:42:97:10:dd:95:45:fa:a4:8e:23:04:ac:a4:cd:38:6e:6d: b6:14:59:89:af:24:07:d5:7e:2d:0b:d1:b8:71:af:85:62:00: a8:02:74:ff:0f:2a:6c:ac:b8:18:3a:77:11:e9:41:50:ce:27: c1:ec:6e:42:1e:06:3b:7e:40:ee:2e:f3:e7:04:5e:6e:f9:ea: 5c:cd:e0:81:32:7b:b5:e6:ef:c5:53:89:da:ea:3e:15:d3:33: ab:b5:5f:d6:1d:6d:b2:1e:f7:f0:7b:e1:f5:41:2f:9f:34:6c: f2:47:94:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYATZJrtg/qrj49xjbbfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OGY5MDRmZWVmMWY3OTE2MmI4MjE5YThhNDgzYjg1OGY1 NDBiZmEwHhcNMjUxMjA2MDEwMTIyWhcNMjUxMjA3MDEwMTIyWjAzMTEwLwYDVQQD Eyg1NzJkNTRiZGVjNzJkNDhiZDFiOWNiNmIwOGU0ODgxMzg1NTY1ZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TR2J279u22bTQ6VGUOxGfU/0ij7 bi0E9XXgK/Yj3ON2Br0PpB0tSj48/CQmRWPj6pBOUCwc0rRZqYh0pzTc1p8ze2Y+ Lv0TEeTlOLe5Cit9rERlGryZ8lBNkxoUl1xO8AFT31aQ0jgL7Lwi/KN7Ig1KcZns cRVZ28db0YZP9M4UPCvJWRG6G6TpqSKJhwZYQw/q3BckhhbMukr0XdUDisBA4ILt Y9awTtR40kjJ5fp3ER85Fa0g2qbYsJRLfaJCLQgQ90S66a1fh9OPU9KqD1Pqi8hq XKlF99j8pqUe+4Xu2ZL/f14ZkmDKy8iqhuokJ0ubcbM6bJ1Yn29l+Ye1TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFctVL3sctSL0bnLawjkiBOFVl4EMB8GA1UdIwQY MBaAFJaPkE/u8feRYrghmopIO4WPVAv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kZGRmM2QtZTg4Ny00MjczLWJiN2It NjgxZmEwZDk5ODIxLzEvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kZGRmM2QtZTg4Ny00MjczLWJiN2ItNjgxZmEwZDk5ODIx LzEvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvVV9J5RV 2eyimsBOz8QhLJATPbcbZVEimbR0kG4szzwtOeVpqSPUk6x3ZfRQS4RwxwrCqyeE h3EPjnjgUeVqi6sU1Iem3GGhmc8TtU0PW5lwrXTH3n/uKLgSXbQ0RafXEb8B281/ KIHxfflkA6BjEs7aaTcoaGbW3+Efqu1c+DAzAFypGwtHgaVgEAaDE1bEi0KXEN2V RfqkjiMErKTNOG5tthRZia8kB9V+LQvRuHGvhWIAqAJ0/w8qbKy4GDp3EelBUM4n wexuQh4GO35A7i7z5wRebvnqXM3ggTJ7tebvxVOJ2uo+FdMzq7Vf1h1tsh738Hvh 9UEvnzRs8keUgg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:12 2025 by rpki-client