This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft File: QEeepWLdOn0M8qbpeLa783j3POQ.mft (raw, json) Hash identifier: VQsf854c1/1J+1u+b29VDNV5kzMhSDjLLQtVyNzvVXY= Subject key identifier: 34:14:A9:53:EF:F0:B5:56:55:45:6B:DA:C0:2A:84:ED:71:4F:D3:D9 Authority key identifier: 40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4 Certificate issuer: /CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4 Certificate serial: 019B5A1ADAA667D79F994A2F2A8AB2C2482B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft Manifest number: 14E5 Signing time: Fri 26 Dec 2025 10:01:07 +0000 Manifest this update: Fri 26 Dec 2025 10:01:07 +0000 Manifest next update: Sat 27 Dec 2025 10:01:07 +0000 Files and hashes: 1: QEeepWLdOn0M8qbpeLa783j3POQ.crl (hash: ViCcfwULrXO+hQTmK2Ebeej6pqIutgxMeV2M+cVJTZw=) 2: kDxnmkry6GSjGehsL9ntYXTgGms.roa (hash: wkEfOOZJ9TKbc6rsvn871D/mFlSMnjRucRMB/y4Wzco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:da:a6:67:d7:9f:99:4a:2f:2a:8a:b2:c2:48:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4 Validity Not Before: Dec 26 10:01:07 2025 GMT Not After : Dec 27 10:01:07 2025 GMT Subject: CN=3414a953eff0b55655456bdac02a84ed714fd3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ea:5f:4b:26:11:fa:29:c8:e2:bb:d0:69:42: 8c:da:e5:e4:18:00:7a:6d:2f:a5:05:bb:a7:2e:f4: b7:f8:ce:32:d9:42:d5:90:a2:c4:e5:2a:cc:d0:de: 8a:de:5c:4f:f0:56:84:61:d3:30:ab:aa:f1:22:6d: c1:93:51:21:5c:21:25:89:df:6b:e7:6f:18:e7:e3: f7:f1:9e:7c:70:05:66:85:ec:3f:9f:d5:6f:55:2c: cb:e7:f1:97:25:aa:37:ff:9e:69:20:8d:4a:8f:96: 57:c4:97:79:0e:cf:86:8d:4e:c9:ec:1a:c6:13:8e: b2:13:b3:92:fd:42:c4:9e:5c:ba:99:00:bd:51:d7: c3:44:d2:c3:ed:1c:a4:3d:55:d9:43:a7:0e:3a:ec: 24:69:e1:a7:cf:72:eb:30:b1:56:bd:15:5f:ec:35: 0c:4e:d0:cb:3b:28:8c:5e:99:aa:3a:39:f2:53:e4: 9b:95:5b:1d:9c:d8:dc:d1:db:fc:c3:72:d9:3a:51: bc:7f:72:d2:9a:35:27:d8:a5:d3:95:36:46:f0:b2: d0:4b:6f:3f:b1:32:96:06:ac:7a:cf:f2:8d:96:b4: ed:71:c5:6f:17:ed:05:42:39:6c:35:e7:88:51:75: ca:72:fa:55:cb:ee:08:38:6a:df:1a:af:c9:ed:22: 9e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:14:A9:53:EF:F0:B5:56:55:45:6B:DA:C0:2A:84:ED:71:4F:D3:D9 X509v3 Authority Key Identifier: keyid:40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e5:13:38:91:f7:33:bf:f7:af:5c:e6:7c:fc:4a:30:8c:95: da:bd:28:da:7d:10:6f:8c:80:7b:bc:8a:ec:34:cc:94:18:41: cf:50:69:2a:86:9e:ad:cb:09:63:51:bd:e7:a2:b3:28:70:1b: 3b:dd:6f:79:39:06:e9:09:22:0c:99:2f:bc:f1:fc:b5:16:c5: 88:d8:31:66:16:fd:42:81:df:4d:bb:67:40:f7:a6:e8:49:ba: 47:a7:a1:94:ef:ea:13:4f:0d:b5:dc:4a:e8:64:c8:61:35:51: 29:c0:93:1e:92:e5:e6:1d:c6:66:48:b0:ed:5b:ac:84:69:2c: 16:1a:4e:41:35:ae:b3:15:01:25:aa:eb:68:c2:69:45:2c:b9: 0b:04:24:0d:99:cc:32:fd:56:b2:16:bb:a4:fd:db:33:4f:8b: c8:34:81:9d:b9:63:63:a3:b8:ee:65:2a:22:ec:8a:43:69:bb: 4a:be:3b:db:08:40:ae:70:00:86:cf:68:29:cc:41:ba:cb:5d: 10:69:5d:ff:f3:8e:54:06:9f:1e:96:e6:5b:95:db:b8:b7:fd: 65:f4:db:b0:77:9e:8e:12:e7:0f:2f:84:d5:78:1b:62:9e:4e: 84:24:cb:51:b2:8f:78:95:9b:91:29:64:c4:11:34:59:36:ae: 72:7b:8f:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGtqmZ9efmUovKoqywkgrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNDc5ZWE1NjJkZDNhN2QwY2YyYTZlOTc4YjZiYmYzNzhm NzNjZTQwHhcNMjUxMjI2MTAwMTA3WhcNMjUxMjI3MTAwMTA3WjAzMTEwLwYDVQQD EygzNDE0YTk1M2VmZjBiNTU2NTU0NTZiZGFjMDJhODRlZDcxNGZkM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArepfSyYR+inI4rvQaUKM2uXkGAB6 bS+lBbunLvS3+M4y2ULVkKLE5SrM0N6K3lxP8FaEYdMwq6rxIm3Bk1EhXCElid9r 528Y5+P38Z58cAVmhew/n9VvVSzL5/GXJao3/55pII1Kj5ZXxJd5Ds+GjU7J7BrG E46yE7OS/ULEnly6mQC9UdfDRNLD7RykPVXZQ6cOOuwkaeGnz3LrMLFWvRVf7DUM TtDLOyiMXpmqOjnyU+SblVsdnNjc0dv8w3LZOlG8f3LSmjUn2KXTlTZG8LLQS28/ sTKWBqx6z/KNlrTtccVvF+0FQjlsNeeIUXXKcvpVy+4IOGrfGq/J7SKe7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQUqVPv8LVWVUVr2sAqhO1xT9PZMB8GA1UdIwQY MBaAFEBHnqVi3Tp9DPKm6Xi2u/N49zzkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9lNzRhNTgtYmI5ZS00YWU5LWE3NDYt ODkzNmYwOTFmNGY0LzEvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9lNzRhNTgtYmI5ZS00YWU5LWE3NDYtODkzNmYwOTFmNGY0 LzEvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKeUTOJH3 M7/3r1zmfPxKMIyV2r0o2n0Qb4yAe7yK7DTMlBhBz1BpKoaercsJY1G956KzKHAb O91veTkG6QkiDJkvvPH8tRbFiNgxZhb9QoHfTbtnQPem6Em6R6ehlO/qE08NtdxK 6GTIYTVRKcCTHpLl5h3GZkiw7VushGksFhpOQTWusxUBJarraMJpRSy5CwQkDZnM Mv1Wsha7pP3bM0+LyDSBnbljY6O47mUqIuyKQ2m7Sr472whArnAAhs9oKcxBustd EGld//OOVAafHpbmW5XbuLf9ZfTbsHeejhLnDy+E1XgbYp5OhCTLUbKPeJWbkSlk xBE0WTaucnuPaQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:02 2025 by rpki-client