This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json) Hash identifier: UGo3prqc6Q1QcHI1lU7z73NjINwgfEfd3mZ+XZIKErQ= Subject key identifier: 18:C6:E7:60:A6:C4:2C:AD:B0:3A:45:EB:06:60:6E:5C:16:1E:B0:FA Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c Certificate serial: 019AF31CFD190FCB0A8616F050F404138595 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft Manifest number: 0E83 Signing time: Sat 06 Dec 2025 10:02:34 +0000 Manifest this update: Sat 06 Dec 2025 10:02:34 +0000 Manifest next update: Sun 07 Dec 2025 10:02:34 +0000 Files and hashes: 1: LYrINpBkGiqMBKci7kDEkT4clMM.roa (hash: rpmajg0c6Lkm2tGH4aWf1gD3QwFb6C9vHxZey3xWrlo=) 2: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: njbJ0th+kkbuko2Z1T0D0EHl8Xhacnv9XwQnlw31zVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:fd:19:0f:cb:0a:86:16:f0:50:f4:04:13:85:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c Validity Not Before: Dec 6 10:02:34 2025 GMT Not After : Dec 7 10:02:34 2025 GMT Subject: CN=18c6e760a6c42cadb03a45eb06606e5c161eb0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:89:00:ae:75:37:58:f9:90:06:88:95:e7:72: 7d:f5:93:8c:d8:39:03:59:69:97:4e:ad:5c:d1:e2: ad:f4:28:28:93:e4:28:4b:9c:90:63:30:64:c7:32: e4:3e:8b:bf:1c:03:3e:e0:d5:34:a2:96:eb:e4:0f: 13:31:6d:35:e8:e3:f9:a1:6c:e8:bf:4b:b0:88:32: d4:40:fb:ef:46:ee:61:a8:7f:60:3c:0f:c9:e9:0b: 04:e4:d8:57:fa:af:12:65:8b:bc:d3:62:f1:85:df: 44:1c:54:48:83:8d:70:4a:94:a6:d6:72:c7:89:79: 79:3b:7a:14:ef:0d:87:3a:29:ca:64:fe:aa:cb:29: 79:f5:07:85:bc:86:bf:7b:76:62:fe:d8:87:4c:de: 2c:b6:24:fb:85:56:f1:7e:8a:32:c6:47:99:8c:57: 06:10:a3:bd:be:7f:69:65:31:d2:b6:e2:d9:e8:ae: 50:fe:cb:07:bf:f2:4d:02:82:d5:6f:82:97:5d:91: 7b:ea:cf:e0:c8:de:99:e7:19:90:bd:89:83:1a:c2: 83:d7:d8:1c:89:aa:08:50:06:0e:a5:76:ef:dd:ef: 1c:c4:66:4a:8b:65:0a:e8:25:66:be:87:29:16:3d: c3:8e:47:7e:18:74:c8:12:b8:9d:e5:b4:bf:83:b1: 45:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C6:E7:60:A6:C4:2C:AD:B0:3A:45:EB:06:60:6E:5C:16:1E:B0:FA X509v3 Authority Key Identifier: keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b7:6a:59:be:72:a2:66:d1:f6:5b:59:39:2a:12:7f:90:44: 76:d0:c0:be:24:cb:43:e6:3e:a7:b9:15:bf:da:2c:2b:56:d6: d5:ee:86:40:13:2d:e0:86:2b:42:ae:d7:a5:9a:9b:0b:ed:ff: 6c:58:c3:c2:7c:dd:f0:34:89:1e:bb:72:41:4f:87:7c:34:6f: 15:8d:ae:52:54:be:16:28:c4:01:02:2d:1a:09:b2:c6:58:33: 10:15:63:05:2e:59:5e:07:9a:0f:04:b2:d5:b3:0b:ad:47:5a: 1d:0b:e7:c6:7a:db:2e:06:8f:32:a3:87:da:ca:1b:ee:25:a3: a7:b9:24:71:e9:cc:d9:7f:66:d0:07:52:e2:4c:9c:53:2b:0f: 09:55:d1:9c:5a:e1:31:7a:fd:67:90:00:46:e5:23:9c:8a:bc: 4f:e5:26:2f:7f:b9:64:9e:47:be:fd:5e:7f:44:62:1a:db:25: 9e:69:0d:d6:84:88:d8:92:e0:db:a4:1f:b5:bc:48:78:b3:24: 86:fd:41:35:fb:19:e1:ba:8b:eb:bb:e7:55:a5:f2:2d:ac:d3: 2c:73:37:b5:45:91:e3:3b:b9:f8:f3:bb:5f:3d:5e:70:71:c4: 2e:de:8f:2d:7c:10:81:5f:bc:a1:3a:3f:40:0a:ae:b3:50:80: 6a:3d:0f:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHP0ZD8sKhhbwUPQEE4WVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMDM4N2M5NDEzNGQ5YTA4ZmZkMzI2MzA5Njc3MDNhZGM1 ODJiNmMwHhcNMjUxMjA2MTAwMjM0WhcNMjUxMjA3MTAwMjM0WjAzMTEwLwYDVQQD EygxOGM2ZTc2MGE2YzQyY2FkYjAzYTQ1ZWIwNjYwNmU1YzE2MWViMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtokArnU3WPmQBoiV53J99ZOM2DkD WWmXTq1c0eKt9Cgok+QoS5yQYzBkxzLkPou/HAM+4NU0opbr5A8TMW016OP5oWzo v0uwiDLUQPvvRu5hqH9gPA/J6QsE5NhX+q8SZYu802Lxhd9EHFRIg41wSpSm1nLH iXl5O3oU7w2HOinKZP6qyyl59QeFvIa/e3Zi/tiHTN4stiT7hVbxfooyxkeZjFcG EKO9vn9pZTHStuLZ6K5Q/ssHv/JNAoLVb4KXXZF76s/gyN6Z5xmQvYmDGsKD19gc iaoIUAYOpXbv3e8cxGZKi2UK6CVmvocpFj3Djkd+GHTIErid5bS/g7FFMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjG52CmxCytsDpF6wZgblwWHrD6MB8GA1UdIwQY MBaAFEIDh8lBNNmgj/0yYwlncDrcWCtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMt Mzc2ZjRiNGQ5ZGE2LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMtMzc2ZjRiNGQ5ZGE2 LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebdqWb5y ombR9ltZOSoSf5BEdtDAviTLQ+Y+p7kVv9osK1bW1e6GQBMt4IYrQq7XpZqbC+3/ bFjDwnzd8DSJHrtyQU+HfDRvFY2uUlS+FijEAQItGgmyxlgzEBVjBS5ZXgeaDwSy 1bMLrUdaHQvnxnrbLgaPMqOH2sob7iWjp7kkcenM2X9m0AdS4kycUysPCVXRnFrh MXr9Z5AARuUjnIq8T+UmL3+5ZJ5Hvv1ef0RiGtslnmkN1oSI2JLg26QftbxIeLMk hv1BNfsZ4bqL67vnVaXyLazTLHM3tUWR4zu5+PO7Xz1ecHHELt6PLXwQgV+8oTo/ QAqus1CAaj0PZg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:44:50 2025 by rpki-client