This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json) Hash identifier: AHKArFfvnuBZ+P8+DR54MtjSVSOc7D0Otx551m/T3nE= Subject key identifier: CA:7F:94:34:B0:6D:83:C2:D2:12:25:0D:FC:BC:44:BE:CC:50:48:62 Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c Certificate serial: 019B2B1D7ED2306DE170C5FA44EBDC4C73C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft Manifest number: 0EA0 Signing time: Wed 17 Dec 2025 07:01:51 +0000 Manifest this update: Wed 17 Dec 2025 07:01:51 +0000 Manifest next update: Thu 18 Dec 2025 07:01:51 +0000 Files and hashes: 1: LYrINpBkGiqMBKci7kDEkT4clMM.roa (hash: rpmajg0c6Lkm2tGH4aWf1gD3QwFb6C9vHxZey3xWrlo=) 2: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: xcTqrWueONCutjnDJMx2a4/Q8LPpe5O/jP2nUE/6NV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:7e:d2:30:6d:e1:70:c5:fa:44:eb:dc:4c:73:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c Validity Not Before: Dec 17 07:01:51 2025 GMT Not After : Dec 18 07:01:51 2025 GMT Subject: CN=ca7f9434b06d83c2d212250dfcbc44becc504862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d6:d6:da:d7:a3:87:1c:0f:c0:74:70:ea:1d: 34:43:a2:7c:3b:be:55:3f:55:65:8d:4a:a7:59:ea: 88:29:09:58:69:60:dc:2a:35:57:28:7c:e9:3e:55: 2d:59:58:a3:f8:ca:5e:0d:2e:fa:30:19:51:d1:fb: 12:19:4c:d3:6c:ef:5e:99:29:cb:cd:31:06:44:a1: 0c:3d:14:e5:e3:77:62:d4:96:75:c5:2b:71:8b:24: a4:69:f2:a7:a0:ec:fb:4a:76:e3:78:84:97:94:06: 51:85:ee:3b:06:a3:a6:d7:08:80:56:96:b0:06:83: e7:f2:2c:10:e5:06:17:fb:de:54:8c:40:39:c0:7b: 95:42:c6:4e:32:37:4f:d1:cf:7d:31:7c:2c:45:c8: de:12:c8:31:c0:c3:d2:3d:1a:32:74:ea:11:ca:c3: 81:58:8f:f8:cb:08:fc:51:3a:cc:06:b2:94:c8:10: 72:5a:e3:c2:7c:53:aa:03:78:86:93:1f:30:c0:e1: 09:59:7d:86:14:a6:0c:47:16:df:32:93:fb:b6:27: 9b:00:dd:45:6f:76:93:17:91:de:8e:7a:bb:2d:2c: bc:a2:7a:97:e2:d2:a9:f7:b4:f2:12:f9:0c:ab:b1: e7:4e:3b:52:16:fd:47:28:19:4f:9f:10:97:03:3d: e5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7F:94:34:B0:6D:83:C2:D2:12:25:0D:FC:BC:44:BE:CC:50:48:62 X509v3 Authority Key Identifier: keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:bd:9b:94:17:27:c4:fb:90:14:48:64:5a:36:bf:0f:ea:c6: bf:29:43:4a:91:32:bc:09:ac:4d:14:c4:55:7a:16:a6:ff:20: 2e:5b:b0:f2:44:9d:4e:f1:78:3d:77:96:91:8d:c2:53:fd:d7: b6:89:da:91:00:09:94:85:dd:ba:ee:d6:f2:fa:f0:4e:c7:81: 7d:af:76:f2:db:94:50:de:68:a9:59:8a:19:fe:cd:fd:c0:ed: 44:41:a8:a3:3c:ff:90:ab:6f:e2:19:e0:ca:41:80:d4:e1:41: 0a:7b:91:d2:4e:5e:b2:7a:4a:c2:5a:c3:a1:94:72:17:7b:cc: 17:b8:fc:e2:35:cb:f9:12:aa:8d:9a:e0:03:3b:b4:c6:38:c5: 0d:22:a2:bb:23:b3:9b:6b:83:6d:d0:ae:75:ea:0b:18:ec:e4: 65:d3:19:15:1a:1a:e4:3b:d4:64:c5:b3:20:40:cc:90:6a:e4: 63:9c:42:25:d3:c2:f3:cf:77:5c:13:1c:50:e4:1d:29:06:3a: 58:cf:7e:58:cc:8d:a9:9e:a8:f6:62:c0:0f:02:5a:02:5c:e0: 3b:fb:ab:aa:e0:3f:a4:3d:f1:57:3a:4a:07:8e:3a:4c:a7:de: 95:0e:04:fb:d7:07:eb:50:eb:24:be:67:79:4f:fb:67:f5:77: 3a:a8:72:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHX7SMG3hcMX6ROvcTHPJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMDM4N2M5NDEzNGQ5YTA4ZmZkMzI2MzA5Njc3MDNhZGM1 ODJiNmMwHhcNMjUxMjE3MDcwMTUxWhcNMjUxMjE4MDcwMTUxWjAzMTEwLwYDVQQD EyhjYTdmOTQzNGIwNmQ4M2MyZDIxMjI1MGRmY2JjNDRiZWNjNTA0ODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdbW2tejhxwPwHRw6h00Q6J8O75V P1VljUqnWeqIKQlYaWDcKjVXKHzpPlUtWVij+MpeDS76MBlR0fsSGUzTbO9emSnL zTEGRKEMPRTl43di1JZ1xStxiySkafKnoOz7SnbjeISXlAZRhe47BqOm1wiAVpaw BoPn8iwQ5QYX+95UjEA5wHuVQsZOMjdP0c99MXwsRcjeEsgxwMPSPRoydOoRysOB WI/4ywj8UTrMBrKUyBByWuPCfFOqA3iGkx8wwOEJWX2GFKYMRxbfMpP7tiebAN1F b3aTF5Hejnq7LSy8onqX4tKp97TyEvkMq7HnTjtSFv1HKBlPnxCXAz3lgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMp/lDSwbYPC0hIlDfy8RL7MUEhiMB8GA1UdIwQY MBaAFEIDh8lBNNmgj/0yYwlncDrcWCtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMt Mzc2ZjRiNGQ5ZGE2LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMtMzc2ZjRiNGQ5ZGE2 LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZb2blBcn xPuQFEhkWja/D+rGvylDSpEyvAmsTRTEVXoWpv8gLluw8kSdTvF4PXeWkY3CU/3X tonakQAJlIXduu7W8vrwTseBfa928tuUUN5oqVmKGf7N/cDtREGoozz/kKtv4hng ykGA1OFBCnuR0k5esnpKwlrDoZRyF3vMF7j84jXL+RKqjZrgAzu0xjjFDSKiuyOz m2uDbdCudeoLGOzkZdMZFRoa5DvUZMWzIEDMkGrkY5xCJdPC8893XBMcUOQdKQY6 WM9+WMyNqZ6o9mLADwJaAlzgO/urquA/pD3xVzpKB446TKfelQ4E+9cH61DrJL5n eU/7Z/V3OqhyEw== -----END CERTIFICATE-----Generated at Wed Dec 17 16:36:20 2025 by rpki-client