This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json) Hash identifier: 8jDdSjGqlGcJC6egV2pFW3U/Sdi4xn7xwrNKm/jqsgE= Subject key identifier: 3A:91:A7:C7:5C:C2:09:CD:E3:AC:7E:DE:B1:35:03:9D:A8:A1:D9:BD Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c Certificate serial: 019B1014D6A71DF53EB1582D86C0F87A65E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft Manifest number: 0E92 Signing time: Fri 12 Dec 2025 01:02:39 +0000 Manifest this update: Fri 12 Dec 2025 01:02:39 +0000 Manifest next update: Sat 13 Dec 2025 01:02:39 +0000 Files and hashes: 1: LYrINpBkGiqMBKci7kDEkT4clMM.roa (hash: rpmajg0c6Lkm2tGH4aWf1gD3QwFb6C9vHxZey3xWrlo=) 2: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: IbCa0egsIYfq/jSPbmbNfM8zv/QfsMgafWmx4i/nBm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:d6:a7:1d:f5:3e:b1:58:2d:86:c0:f8:7a:65:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c Validity Not Before: Dec 12 01:02:39 2025 GMT Not After : Dec 13 01:02:39 2025 GMT Subject: CN=3a91a7c75cc209cde3ac7edeb135039da8a1d9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:63:16:20:9a:2b:0a:23:8c:33:67:95:55: 9a:b1:aa:a3:54:12:74:6f:2c:91:a8:a0:69:73:09: d9:53:6f:1c:5f:00:45:77:1e:2a:62:68:fb:d7:62: b1:16:aa:22:29:02:b4:62:7e:68:cb:75:43:4c:00: d7:5f:3c:fa:59:07:ec:b9:fb:4a:40:68:07:06:83: bc:6d:82:61:b0:22:d0:dd:00:fe:66:36:d4:5a:c0: ec:21:23:75:9e:56:63:ea:82:dc:f5:c1:df:3d:de: 7a:4b:d7:fc:a0:c0:23:8c:5b:b2:de:70:6e:c4:27: b7:b4:d1:10:29:60:7b:66:1a:ed:7a:c2:4a:10:f8: a3:69:e2:1f:85:51:44:96:b1:c0:15:dc:07:20:62: 06:55:08:39:96:81:d1:f6:f4:92:68:33:a6:5e:9a: ed:0a:01:7b:63:17:8d:a0:4e:34:0d:6f:4b:c1:c9: a7:82:c5:07:8f:f1:9f:e1:94:4e:72:bd:26:f9:b4: 02:d2:92:2c:a8:3d:ce:0c:0a:2a:7b:9b:9b:16:3e: 89:67:19:6e:ab:fb:de:98:69:e6:f4:ad:73:7d:bd: 82:c1:30:60:48:90:11:4c:15:e9:52:08:29:ed:f6: 33:7d:aa:4c:92:48:c2:1b:1c:04:47:35:e0:ba:a2: e9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:91:A7:C7:5C:C2:09:CD:E3:AC:7E:DE:B1:35:03:9D:A8:A1:D9:BD X509v3 Authority Key Identifier: keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:52:de:04:fb:28:9a:67:65:cd:be:76:3d:a2:95:ff:0d:51: b4:86:4a:16:ab:47:57:3d:35:3f:61:18:39:4d:a3:4e:ac:da: d6:19:ee:98:e1:44:a0:29:fd:84:58:16:c5:2d:26:73:a2:64: 4e:42:7d:03:bf:e7:45:08:59:87:66:42:ee:d1:15:89:b7:22: 31:de:da:7e:33:2e:a1:25:18:a4:e8:d8:6a:95:1b:3b:20:6e: 81:a8:a2:0e:e5:9c:b0:4b:f3:46:d4:bf:30:a3:02:31:af:91: 97:ba:ec:ff:66:b1:09:e6:db:b4:80:1c:c1:08:23:e3:46:67: 38:1a:55:10:01:25:3b:2c:d3:84:0e:21:80:83:57:9e:fd:59: 75:08:32:d8:dc:42:2c:36:d7:fb:22:77:4a:23:34:93:2c:95: 09:46:4d:b5:90:86:7a:b6:67:f5:5b:91:0c:78:06:2a:92:8a: 66:1e:e0:48:07:2b:d3:a2:7b:3e:21:cd:22:36:50:3b:b5:cf: 66:b8:1a:a8:7f:5f:e1:cf:1c:da:19:1f:1c:3a:49:1b:fe:7b: 26:55:a3:e5:67:12:f4:31:c0:3b:68:1e:c1:f4:2a:33:fd:73: 2a:a9:51:6e:96:27:1c:fd:51:c8:fe:f6:18:7f:6f:5a:cd:8c: c6:f6:7b:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFNanHfU+sVgthsD4emXjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMDM4N2M5NDEzNGQ5YTA4ZmZkMzI2MzA5Njc3MDNhZGM1 ODJiNmMwHhcNMjUxMjEyMDEwMjM5WhcNMjUxMjEzMDEwMjM5WjAzMTEwLwYDVQQD EygzYTkxYTdjNzVjYzIwOWNkZTNhYzdlZGViMTM1MDM5ZGE4YTFkOWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWpjFiCaKwojjDNnlVWasaqjVBJ0 byyRqKBpcwnZU28cXwBFdx4qYmj712KxFqoiKQK0Yn5oy3VDTADXXzz6WQfsuftK QGgHBoO8bYJhsCLQ3QD+ZjbUWsDsISN1nlZj6oLc9cHfPd56S9f8oMAjjFuy3nBu xCe3tNEQKWB7ZhrtesJKEPijaeIfhVFElrHAFdwHIGIGVQg5loHR9vSSaDOmXprt CgF7YxeNoE40DW9LwcmngsUHj/Gf4ZROcr0m+bQC0pIsqD3ODAoqe5ubFj6JZxlu q/vemGnm9K1zfb2CwTBgSJARTBXpUggp7fYzfapMkkjCGxwERzXguqLpnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqRp8dcwgnN46x+3rE1A52oodm9MB8GA1UdIwQY MBaAFEIDh8lBNNmgj/0yYwlncDrcWCtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMt Mzc2ZjRiNGQ5ZGE2LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMtMzc2ZjRiNGQ5ZGE2 LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVLeBPso mmdlzb52PaKV/w1RtIZKFqtHVz01P2EYOU2jTqza1hnumOFEoCn9hFgWxS0mc6Jk TkJ9A7/nRQhZh2ZC7tEVibciMd7afjMuoSUYpOjYapUbOyBugaiiDuWcsEvzRtS/ MKMCMa+Rl7rs/2axCebbtIAcwQgj40ZnOBpVEAElOyzThA4hgINXnv1ZdQgy2NxC LDbX+yJ3SiM0kyyVCUZNtZCGerZn9VuRDHgGKpKKZh7gSAcr06J7PiHNIjZQO7XP ZrgaqH9f4c8c2hkfHDpJG/57JlWj5WcS9DHAO2gewfQqM/1zKqlRbpYnHP1RyP72 GH9vWs2MxvZ74g== -----END CERTIFICATE-----Generated at Fri Dec 12 02:58:17 2025 by rpki-client