This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft File: qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json) Hash identifier: 8lrbbUXEuMIbeAE77EKyU1QpYbEp5R7y+oqY2ImyZb8= Subject key identifier: 12:83:5D:AD:A7:B7:01:53:13:EC:C3:29:39:5A:3A:BD:09:EB:84:D5 Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3 Certificate issuer: /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3 Certificate serial: 019B30434550EA0D2EDD6D22CB3E563C1CE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 07:01:13 +0000 Manifest this update: Thu 18 Dec 2025 07:01:13 +0000 Manifest next update: Fri 19 Dec 2025 07:01:13 +0000 Files and hashes: 1: lfJUEj9OpKtkyjj6xaEeSMukOrA.roa (hash: 9AsF2IZpbVSPw/O9UldkVW9AyHlVo6jZ0snpU1eDlm8=) 2: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: AGHvo8GwIYL/+7adjVdPE7KdEPUXZELYzIUlKZBcOTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:45:50:ea:0d:2e:dd:6d:22:cb:3e:56:3c:1c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3 Validity Not Before: Dec 18 07:01:13 2025 GMT Not After : Dec 19 07:01:13 2025 GMT Subject: CN=12835dada7b7015313ecc329395a3abd09eb84d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:51:64:77:d9:60:73:2c:e9:e8:49:02:8e:6b: 19:27:c9:ff:af:bd:4f:63:b2:b4:26:25:bf:6a:55: c3:e6:91:93:ec:cb:3f:c7:fd:67:c4:81:e7:03:a1: a3:13:f6:9e:b0:48:3b:d1:c6:31:cb:ba:00:df:6d: 7c:cf:99:c7:c0:82:b2:25:04:53:b3:c9:6f:77:5d: da:80:04:a1:99:df:41:32:e5:f6:d4:bd:29:6a:67: c4:60:30:6a:ee:94:16:c4:ae:73:5e:d1:37:93:f7: 53:2e:e9:a5:8b:17:57:08:c0:30:be:6f:71:21:ec: 45:88:f3:76:82:84:98:7a:96:df:9a:b0:a2:01:b7: 74:1e:8c:fd:61:61:63:6e:a9:75:8e:e6:9c:77:2a: 58:48:84:d3:e0:99:b6:74:8b:62:dd:ff:0a:bc:1b: d0:8b:a4:8d:52:dc:a1:43:dd:8c:7b:43:0a:be:0c: ea:01:1c:73:99:3f:d8:2c:9b:d8:df:46:08:75:2d: 2d:0d:5b:64:4e:ee:e7:48:65:90:76:5a:bc:f3:97: a4:c1:03:ed:bb:44:f8:96:96:dc:3b:c7:d6:c5:ab: 8d:2b:a6:ec:ae:51:25:f7:05:a7:04:3e:1e:51:98: 9b:12:fe:37:c1:f5:e4:32:e9:0c:b9:47:7d:94:c0: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:83:5D:AD:A7:B7:01:53:13:EC:C3:29:39:5A:3A:BD:09:EB:84:D5 X509v3 Authority Key Identifier: keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:fa:c3:22:87:67:f4:c3:2d:8c:ec:70:45:1c:d0:63:f3:e5: 8c:ec:c9:13:49:cf:a3:71:c1:59:05:4a:8f:83:2e:7b:af:2d: b3:11:b1:a5:8c:0b:38:76:1d:18:52:e4:df:cc:1d:aa:cc:56: c3:b4:a2:73:55:3b:8e:5e:bd:b0:9d:00:12:83:6b:bb:17:5d: 61:30:23:61:4e:7a:31:45:55:4a:80:d2:f3:be:1e:19:b3:b6: bd:0d:ac:07:51:d3:0d:54:67:f1:22:af:d3:db:41:8a:fe:b2: cb:5f:de:d7:f2:41:33:d3:2e:98:a1:e7:56:8a:cc:08:51:9b: ff:8f:ad:b6:a7:b1:a2:cb:f5:48:58:f5:06:ea:45:55:77:70: be:50:16:00:b1:0c:da:6f:8a:45:32:58:54:64:d9:2a:f5:8a: 4c:8a:f6:f4:ec:ec:e8:2f:91:34:77:7d:e1:43:d7:69:fe:26: 96:c9:e4:b5:84:b3:81:d9:30:23:69:04:a8:ad:e4:62:28:b1: 04:97:15:af:e5:89:94:5f:1d:ed:ea:cf:9c:68:95:91:0e:74: 5e:d5:5a:c9:8a:75:a4:65:e7:60:d2:43:79:c1:7e:47:db:c8: 6d:a6:9a:ee:b8:91:93:ae:24:58:59:cf:fb:ed:40:74:f1:af: ac:4c:3c:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQ0VQ6g0u3W0iyz5WPBzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhOGZkMDVlZWI2ZWEwNWExMWQ2NjdhYmVkZDhlYTEwOTNk MjcxYjMwHhcNMjUxMjE4MDcwMTEzWhcNMjUxMjE5MDcwMTEzWjAzMTEwLwYDVQQD EygxMjgzNWRhZGE3YjcwMTUzMTNlY2MzMjkzOTVhM2FiZDA5ZWI4NGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFFkd9lgcyzp6EkCjmsZJ8n/r71P Y7K0JiW/alXD5pGT7Ms/x/1nxIHnA6GjE/aesEg70cYxy7oA3218z5nHwIKyJQRT s8lvd13agAShmd9BMuX21L0pamfEYDBq7pQWxK5zXtE3k/dTLumlixdXCMAwvm9x IexFiPN2goSYepbfmrCiAbd0Hoz9YWFjbql1juacdypYSITT4Jm2dIti3f8KvBvQ i6SNUtyhQ92Me0MKvgzqARxzmT/YLJvY30YIdS0tDVtkTu7nSGWQdlq885ekwQPt u0T4lpbcO8fWxauNK6bsrlEl9wWnBD4eUZibEv43wfXkMukMuUd9lMCaOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKDXa2ntwFTE+zDKTlaOr0J64TVMB8GA1UdIwQY MBaAFKqP0F7rbqBaEdZnq+3Y6hCT0nGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yYmI3MDYtNjZkNC00ZmFlLTkzYTEt Yjk3YzJjNGFkNDM5LzEvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yYmI3MDYtNjZkNC00ZmFlLTkzYTEtYjk3YzJjNGFkNDM5 LzEvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPrDIodn 9MMtjOxwRRzQY/PljOzJE0nPo3HBWQVKj4Mue68tsxGxpYwLOHYdGFLk38wdqsxW w7Sic1U7jl69sJ0AEoNruxddYTAjYU56MUVVSoDS874eGbO2vQ2sB1HTDVRn8SKv 09tBiv6yy1/e1/JBM9MumKHnVorMCFGb/4+ttqexosv1SFj1BupFVXdwvlAWALEM 2m+KRTJYVGTZKvWKTIr29Ozs6C+RNHd94UPXaf4mlsnktYSzgdkwI2kEqK3kYiix BJcVr+WJlF8d7erPnGiVkQ50XtVayYp1pGXnYNJDecF+R9vIbaaa7riRk64kWFnP ++1AdPGvrEw89g== -----END CERTIFICATE-----Generated at Thu Dec 18 11:26:54 2025 by rpki-client