This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft File: Qqq-41QockWGZCkvpZLj914autQ.mft (raw, json) Hash identifier: RSn1AKwTTYleUuLIJLn6E1WHABGAmAtBt2KeAE1tEHM= Subject key identifier: 5F:C0:DA:14:82:B7:7E:B1:51:C5:49:78:CA:B3:21:B3:CD:09:C1:BA Authority key identifier: 42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4 Certificate issuer: /CN=42aabee3542872458664292fa592e3f75e1abad4 Certificate serial: 019B34C5E266F46B163095912FD7C2F65C89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 04:02:22 +0000 Manifest this update: Fri 19 Dec 2025 04:02:22 +0000 Manifest next update: Sat 20 Dec 2025 04:02:22 +0000 Files and hashes: 1: MSireW0ZSFLXi4hZyDwzhEe__YU.roa (hash: O2aKsS3fIrh6CwQIbUewE6uyCkwWy633kqbyFiBkW04=) 2: Qqq-41QockWGZCkvpZLj914autQ.crl (hash: oEfQsRTYvnmom10/sKwpd/eqtolU/OKEU8dfe2c+5Q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:e2:66:f4:6b:16:30:95:91:2f:d7:c2:f6:5c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42aabee3542872458664292fa592e3f75e1abad4 Validity Not Before: Dec 19 04:02:22 2025 GMT Not After : Dec 20 04:02:22 2025 GMT Subject: CN=5fc0da1482b77eb151c54978cab321b3cd09c1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:ce:55:2f:e3:7d:46:ab:53:58:d3:55:c1: dc:16:2b:48:36:12:0c:dc:48:35:ac:b1:92:4f:fd: 67:08:dc:e0:41:32:d4:e2:9d:25:13:8d:06:1e:32: 7c:9e:42:48:0a:a4:44:a9:80:bc:14:25:a9:08:e3: 5b:e2:7b:f9:e3:b2:25:3a:9c:59:2d:86:c0:68:43: e1:4b:60:38:5b:c9:38:c8:99:37:93:05:9b:ef:34: 4d:2f:8d:f4:94:b2:a4:bf:52:5c:56:91:73:dd:21: 3d:fd:e0:c5:ea:83:e5:00:2f:05:3b:5b:58:05:33: c8:65:45:5a:1c:6e:1a:e1:d7:3d:ba:e6:97:11:cc: 5a:6c:45:00:09:59:04:74:48:21:33:ef:b5:08:b7: 50:2b:63:6e:43:b6:b8:b9:0a:19:5c:eb:61:54:3e: 0e:12:20:f4:d7:32:a8:9c:40:1b:47:61:1c:b4:04: 4e:26:91:70:4d:fe:dd:36:52:de:bf:17:4d:1b:29: 37:35:b5:98:a4:7c:03:a8:ce:96:80:c6:e0:d2:9c: 33:95:ea:42:5b:7b:1a:48:33:e5:21:f8:ca:31:f6: 01:7d:02:0c:9c:82:4b:62:06:88:0b:e5:85:d5:03: 90:2c:98:99:2f:2b:06:a6:3a:99:3a:5f:83:20:94: 18:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C0:DA:14:82:B7:7E:B1:51:C5:49:78:CA:B3:21:B3:CD:09:C1:BA X509v3 Authority Key Identifier: keyid:42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:98:e2:07:b7:28:0c:ef:b6:a8:dd:d9:29:a7:d1:b2:61:16: 6c:17:cd:4f:c3:66:40:83:83:7b:16:f7:17:1b:42:47:bc:10: 19:e8:b3:4a:8a:32:62:98:8a:d4:ce:7d:32:91:7b:09:43:90: f5:33:85:c3:fe:a9:50:d9:ee:7d:5c:d3:b7:1d:b5:13:a5:15: 91:3d:7c:0a:12:fd:6c:b4:45:78:28:06:6c:82:c1:af:d1:b5: e9:a7:66:b1:80:0f:6d:94:1e:c0:25:12:4f:e1:af:e4:d4:3b: 7d:48:c8:a7:43:14:6f:9d:ae:b9:b0:26:96:d4:61:71:47:ab: ad:cf:09:eb:8e:08:2c:f0:ef:0c:28:74:3e:64:55:b4:5d:91: d9:1b:5e:b8:f5:92:bd:c4:5f:a4:66:75:2f:a5:2d:f0:55:05: 03:9d:fc:ba:db:ac:c2:10:ac:5e:3c:39:01:56:83:ad:14:86: 0b:d4:5a:5b:03:68:46:5a:61:40:6e:c8:a9:29:c3:53:cc:e6: 6d:cb:f2:de:c2:a7:1b:13:23:0c:83:5c:61:fe:c2:03:22:ab: cc:3b:d1:ea:a5:33:3c:03:cb:41:b8:43:ef:13:86:c4:88:8d: d2:f4:75:f7:0b:19:00:5c:b0:0b:b7:f5:32:d6:da:53:1e:fc: 89:58:14:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xeJm9GsWMJWRL9fC9lyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYWFiZWUzNTQyODcyNDU4NjY0MjkyZmE1OTJlM2Y3NWUx YWJhZDQwHhcNMjUxMjE5MDQwMjIyWhcNMjUxMjIwMDQwMjIyWjAzMTEwLwYDVQQD Eyg1ZmMwZGExNDgyYjc3ZWIxNTFjNTQ5NzhjYWIzMjFiM2NkMDljMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlszOVS/jfUarU1jTVcHcFitINhIM 3Eg1rLGST/1nCNzgQTLU4p0lE40GHjJ8nkJICqREqYC8FCWpCONb4nv547IlOpxZ LYbAaEPhS2A4W8k4yJk3kwWb7zRNL430lLKkv1JcVpFz3SE9/eDF6oPlAC8FO1tY BTPIZUVaHG4a4dc9uuaXEcxabEUACVkEdEghM++1CLdQK2NuQ7a4uQoZXOthVD4O EiD01zKonEAbR2EctAROJpFwTf7dNlLevxdNGyk3NbWYpHwDqM6WgMbg0pwzlepC W3saSDPlIfjKMfYBfQIMnIJLYgaIC+WF1QOQLJiZLysGpjqZOl+DIJQYUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/A2hSCt36xUcVJeMqzIbPNCcG6MB8GA1UdIwQY MBaAFEKqvuNUKHJFhmQpL6WS4/deGrrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXFxLTQxUW9ja1dHWkNrdnBaTGo5MTRhdXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9jOTg5YWItODQwYy00MDIzLWI4NDIt YWIzYmRmOGU1YzQ4LzEvUXFxLTQxUW9ja1dHWkNrdnBaTGo5MTRhdXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9jOTg5YWItODQwYy00MDIzLWI4NDItYWIzYmRmOGU1YzQ4 LzEvUXFxLTQxUW9ja1dHWkNrdnBaTGo5MTRhdXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5jiB7co DO+2qN3ZKafRsmEWbBfNT8NmQIODexb3FxtCR7wQGeizSooyYpiK1M59MpF7CUOQ 9TOFw/6pUNnufVzTtx21E6UVkT18ChL9bLRFeCgGbILBr9G16admsYAPbZQewCUS T+Gv5NQ7fUjIp0MUb52uubAmltRhcUerrc8J644ILPDvDCh0PmRVtF2R2RteuPWS vcRfpGZ1L6Ut8FUFA538utuswhCsXjw5AVaDrRSGC9RaWwNoRlphQG7IqSnDU8zm bcvy3sKnGxMjDINcYf7CAyKrzDvR6qUzPAPLQbhD7xOGxIiN0vR19wsZAFywC7f1 MtbaUx78iVgUgQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:38 2025 by rpki-client