This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft File: qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json) Hash identifier: R2ogWE+eKdyZ4vY+ed78622DLzbihvwDk8HO3BuYbl0= Subject key identifier: FC:34:AD:AE:E7:4A:79:6C:C9:4B:B9:41:92:72:8A:8B:A4:86:27:C9 Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3 Certificate issuer: /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3 Certificate serial: 019AF276856F326E3C287CB946885B54554B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:44 +0000 Manifest this update: Sat 06 Dec 2025 07:00:44 +0000 Manifest next update: Sun 07 Dec 2025 07:00:44 +0000 Files and hashes: 1: lfJUEj9OpKtkyjj6xaEeSMukOrA.roa (hash: 9AsF2IZpbVSPw/O9UldkVW9AyHlVo6jZ0snpU1eDlm8=) 2: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: m/o5pXj1MonAWbKsI/99TdaUTdgOoRmqB/sxxQ/3e1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:85:6f:32:6e:3c:28:7c:b9:46:88:5b:54:55:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3 Validity Not Before: Dec 6 07:00:44 2025 GMT Not After : Dec 7 07:00:44 2025 GMT Subject: CN=fc34adaee74a796cc94bb94192728a8ba48627c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f7:e0:62:1d:7e:b1:1b:8f:db:56:17:ac:f3: c5:f8:16:41:c7:05:bd:72:de:20:02:04:9f:49:fe: 55:b2:45:26:f9:3b:ec:d9:80:cf:47:10:fc:df:37: 98:ff:6e:79:d7:07:95:22:e3:b0:8e:e3:22:25:97: aa:56:8c:43:a6:9f:8e:f0:af:d5:b3:81:b9:5d:40: 58:88:d6:7b:ff:3e:f8:ed:9a:f2:2e:16:8e:3f:21: 9f:4d:dc:10:de:0c:ae:86:3c:4a:e3:91:14:70:7f: 70:c6:28:43:5c:51:2f:14:19:6b:d2:3d:e7:2a:9f: f4:3c:6c:93:79:3d:0a:ae:0c:4f:03:05:7f:69:92: e3:32:7f:1d:ac:f8:2b:14:0f:0f:b5:9d:42:42:45: 3f:20:56:ae:a4:4e:c7:84:aa:ab:13:5a:05:88:9e: d4:b7:10:b8:e3:71:f5:75:82:db:06:5a:53:e0:fd: 15:9d:f3:17:f6:fe:a6:e6:8c:53:74:8d:d0:06:f7: 4c:96:df:eb:bc:9d:b0:ac:23:01:4a:9b:3c:18:f8: 38:03:6b:92:5c:2b:77:ab:10:b4:f0:74:91:99:83: 5b:dc:5b:40:c8:87:02:56:f7:8d:89:35:36:a7:0e: 06:14:93:24:89:ae:a6:64:47:a3:d3:b8:34:eb:ec: bd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:34:AD:AE:E7:4A:79:6C:C9:4B:B9:41:92:72:8A:8B:A4:86:27:C9 X509v3 Authority Key Identifier: keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:8b:5d:45:d0:b4:a4:84:ee:1f:c6:32:67:9f:9f:96:d2:67: 3f:09:09:2b:a2:dc:17:6c:a0:1f:71:f2:b4:a8:0b:aa:59:b8: 00:35:87:ae:21:80:13:f1:6f:80:ee:9c:7d:4c:57:04:df:a0: 08:35:bd:0b:4e:62:29:fc:7b:8b:04:06:3b:9d:d5:c2:e5:c3: 5d:72:5f:66:4e:8b:f6:3a:50:0c:71:14:76:e7:d9:6f:9e:17: 04:5a:b2:ea:78:55:e9:81:b2:87:81:4f:a5:b3:02:ce:b2:5c: 63:e5:b0:2f:62:10:34:f1:cc:84:d3:80:c1:7d:5e:60:02:11: 40:7c:f0:56:6e:39:8f:b9:74:6e:c0:eb:1e:30:ce:d8:6f:1d: 24:07:9c:40:11:e2:88:ea:c5:a4:c6:20:a6:90:df:31:83:39: 73:9b:f9:e9:ad:3b:24:5d:0f:16:60:81:a2:34:c0:ae:73:b8: ca:17:64:e8:ff:e5:a4:8f:6b:39:81:10:b1:3d:71:ae:61:cb: 1b:f8:e8:6d:0c:be:b0:82:06:25:7e:2e:70:1a:27:80:ad:39: eb:69:15:7b:c7:98:12:69:3d:3f:4b:49:2b:18:66:b2:81:71: fc:87:1b:8b:e6:15:84:d5:2c:00:bd:14:b7:7f:ef:76:67:57: 47:0e:c4:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoVvMm48KHy5RohbVFVLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhOGZkMDVlZWI2ZWEwNWExMWQ2NjdhYmVkZDhlYTEwOTNk MjcxYjMwHhcNMjUxMjA2MDcwMDQ0WhcNMjUxMjA3MDcwMDQ0WjAzMTEwLwYDVQQD EyhmYzM0YWRhZWU3NGE3OTZjYzk0YmI5NDE5MjcyOGE4YmE0ODYyN2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/fgYh1+sRuP21YXrPPF+BZBxwW9 ct4gAgSfSf5VskUm+Tvs2YDPRxD83zeY/2551weVIuOwjuMiJZeqVoxDpp+O8K/V s4G5XUBYiNZ7/z747ZryLhaOPyGfTdwQ3gyuhjxK45EUcH9wxihDXFEvFBlr0j3n Kp/0PGyTeT0KrgxPAwV/aZLjMn8drPgrFA8PtZ1CQkU/IFaupE7HhKqrE1oFiJ7U txC443H1dYLbBlpT4P0VnfMX9v6m5oxTdI3QBvdMlt/rvJ2wrCMBSps8GPg4A2uS XCt3qxC08HSRmYNb3FtAyIcCVveNiTU2pw4GFJMkia6mZEej07g06+y9jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPw0ra7nSnlsyUu5QZJyioukhifJMB8GA1UdIwQY MBaAFKqP0F7rbqBaEdZnq+3Y6hCT0nGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yYmI3MDYtNjZkNC00ZmFlLTkzYTEt Yjk3YzJjNGFkNDM5LzEvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yYmI3MDYtNjZkNC00ZmFlLTkzYTEtYjk3YzJjNGFkNDM5 LzEvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4tdRdC0 pITuH8YyZ5+fltJnPwkJK6LcF2ygH3HytKgLqlm4ADWHriGAE/FvgO6cfUxXBN+g CDW9C05iKfx7iwQGO53VwuXDXXJfZk6L9jpQDHEUdufZb54XBFqy6nhV6YGyh4FP pbMCzrJcY+WwL2IQNPHMhNOAwX1eYAIRQHzwVm45j7l0bsDrHjDO2G8dJAecQBHi iOrFpMYgppDfMYM5c5v56a07JF0PFmCBojTArnO4yhdk6P/lpI9rOYEQsT1xrmHL G/jobQy+sIIGJX4ucBongK0562kVe8eYEmk9P0tJKxhmsoFx/Icbi+YVhNUsAL0U t3/vdmdXRw7EKA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:29 2025 by rpki-client