This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json) Hash identifier: W8b5NzEilMpw+b6cS7a9I9C/QhHLw/4Ykq2b3su8XMw= Subject key identifier: FF:31:35:E6:57:86:31:E7:51:8E:5C:A9:A0:1E:F8:E4:43:FB:2C:0A Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77 Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77 Certificate serial: 019AF31C294CE73F0151E926DD2C9DBBB277 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft Manifest number: 0B70 Signing time: Sat 06 Dec 2025 10:01:40 +0000 Manifest this update: Sat 06 Dec 2025 10:01:40 +0000 Manifest next update: Sun 07 Dec 2025 10:01:40 +0000 Files and hashes: 1: KLN2YwTYjPNIaJl1unk5vIz6vqg.roa (hash: MhUIVJHps0H9qbSh6FLkKXTFhSCbjnKxeUmu3XhAiqM=) 2: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: +4XAc2qHAH7mo2VWFjsa04nw/4UaR9iAYWvkSl4qAoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:29:4c:e7:3f:01:51:e9:26:dd:2c:9d:bb:b2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77 Validity Not Before: Dec 6 10:01:40 2025 GMT Not After : Dec 7 10:01:40 2025 GMT Subject: CN=ff3135e6578631e7518e5ca9a01ef8e443fb2c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e8:d7:f3:38:59:65:6b:ef:60:be:21:22:88: 66:a3:92:13:09:15:33:55:2e:87:52:39:77:8d:27: 0f:28:95:88:50:25:86:ab:e2:3b:15:8e:36:e0:7a: d8:f0:03:3e:b0:a4:f2:44:2d:9d:84:1a:6d:d7:41: d7:bc:85:a9:d6:32:1b:e6:be:b7:4c:ff:4f:0c:db: f5:4f:68:4a:55:8b:da:41:41:cc:70:c6:8d:14:1a: 02:2f:78:14:2e:90:61:34:43:28:91:2b:04:31:d8: c7:a9:c4:61:40:46:36:e0:ab:6e:19:90:90:a3:43: 33:f1:82:6b:06:b4:35:e2:78:17:fa:28:76:7e:34: 9f:e7:fb:e4:bb:62:b2:77:e5:f3:c0:86:34:42:a5: be:ed:b1:c4:31:49:74:ef:0f:fd:b0:e1:91:ab:57: 59:86:0c:32:e7:d4:59:ca:67:5b:92:f8:5c:e6:e0: 31:81:85:da:43:c2:9f:2c:3b:c0:2f:ee:e4:d9:a9: 34:aa:f4:d7:b1:35:2a:2d:91:d7:ec:69:b5:08:e8: 38:57:74:44:79:7a:81:5a:e4:7f:74:8e:a4:65:dc: c2:f6:64:5f:e8:57:4e:3e:25:c4:b4:6e:df:b4:60: 61:22:55:d5:da:f4:4e:57:06:71:a1:95:f9:00:c5: 1b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:31:35:E6:57:86:31:E7:51:8E:5C:A9:A0:1E:F8:E4:43:FB:2C:0A X509v3 Authority Key Identifier: keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8e:11:c1:75:93:c7:77:bd:23:ce:33:74:8b:8a:64:62:54: 4b:0d:a9:71:5d:e0:fd:bb:e7:ab:3a:47:83:21:09:81:e7:e0: 63:af:3c:17:54:40:4d:49:98:6e:4d:08:be:a2:d8:cf:d0:fa: c1:d9:92:10:fa:ef:40:11:58:fb:87:db:18:e0:17:29:d0:fe: 8d:aa:33:d1:c5:27:76:de:83:45:5a:24:3b:9e:5a:c9:12:1b: 09:a1:cb:7d:91:8e:a3:85:ab:eb:d9:62:6f:3f:d4:a7:bb:b4: 43:c4:ff:da:a3:bb:e6:70:7b:5b:9a:01:63:05:96:93:d7:00: 9c:7f:fe:fc:f6:9f:bb:51:ac:d6:27:6e:fe:c0:03:57:29:cc: b1:88:20:53:a8:ae:2d:f4:c6:ba:7b:72:f5:d9:18:eb:51:2a: 28:dc:b8:a9:cf:ec:63:e2:04:54:49:62:b9:3b:b5:63:db:12: 8c:03:73:98:21:8d:e7:cd:0e:31:4a:9d:c0:5e:12:d8:19:62: 63:da:92:2a:b7:44:da:69:05:ec:20:5e:c4:bb:8c:e5:f1:47: 45:17:f9:92:bc:00:84:80:22:0d:34:08:3e:db:b9:f5:a4:d2: 57:33:94:a6:81:36:c8:ee:93:c7:0c:29:0e:bc:1d:cc:d1:70: e1:10:bb:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHClM5z8BUekm3Sydu7J3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNjQwMGQ3MWQ3ZWRlYjBlYjMwNWQ0OTgyZWNmNTIwYjBm NDRlNzcwHhcNMjUxMjA2MTAwMTQwWhcNMjUxMjA3MTAwMTQwWjAzMTEwLwYDVQQD EyhmZjMxMzVlNjU3ODYzMWU3NTE4ZTVjYTlhMDFlZjhlNDQzZmIyYzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlujX8zhZZWvvYL4hIohmo5ITCRUz VS6HUjl3jScPKJWIUCWGq+I7FY424HrY8AM+sKTyRC2dhBpt10HXvIWp1jIb5r63 TP9PDNv1T2hKVYvaQUHMcMaNFBoCL3gULpBhNEMokSsEMdjHqcRhQEY24KtuGZCQ o0Mz8YJrBrQ14ngX+ih2fjSf5/vku2Kyd+XzwIY0QqW+7bHEMUl07w/9sOGRq1dZ hgwy59RZymdbkvhc5uAxgYXaQ8KfLDvAL+7k2ak0qvTXsTUqLZHX7Gm1COg4V3RE eXqBWuR/dI6kZdzC9mRf6FdOPiXEtG7ftGBhIlXV2vROVwZxoZX5AMUbNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8xNeZXhjHnUY5cqaAe+ORD+ywKMB8GA1UdIwQY MBaAFEBkANcdft6w6zBdSYLs9SCw9E53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUdRQTF4MS0zckRyTUYxSmd1ejFJTEQwVG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mMDc1MWQtZDdiMy00NzAxLWEzMjYt MjE0ODA4MmMzNTMzLzEvUUdRQTF4MS0zckRyTUYxSmd1ejFJTEQwVG5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9mMDc1MWQtZDdiMy00NzAxLWEzMjYtMjE0ODA4MmMzNTMz LzEvUUdRQTF4MS0zckRyTUYxSmd1ejFJTEQwVG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWI4RwXWT x3e9I84zdIuKZGJUSw2pcV3g/bvnqzpHgyEJgefgY688F1RATUmYbk0IvqLYz9D6 wdmSEPrvQBFY+4fbGOAXKdD+jaoz0cUndt6DRVokO55ayRIbCaHLfZGOo4Wr69li bz/Up7u0Q8T/2qO75nB7W5oBYwWWk9cAnH/+/Pafu1Gs1idu/sADVynMsYggU6iu LfTGunty9dkY61EqKNy4qc/sY+IEVEliuTu1Y9sSjANzmCGN580OMUqdwF4S2Bli Y9qSKrdE2mkF7CBexLuM5fFHRRf5krwAhIAiDTQIPtu59aTSVzOUpoE2yO6Txwwp DrwdzNFw4RC7cg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:03 2025 by rpki-client