This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft File: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft (raw, json) Hash identifier: +nlqaa/NqBXzUGHSA7H1Ss0E8vgrgA9C3x5aZd0kDDU= Subject key identifier: F2:58:F0:78:86:4D:30:84:EE:C9:53:49:86:5B:99:57:4B:24:BC:9E Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA Certificate issuer: /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba Certificate serial: 019B42B75B55C7FF4F8EFADB7C1831A0A660 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft Manifest number: 07EC Signing time: Sun 21 Dec 2025 21:01:11 +0000 Manifest this update: Sun 21 Dec 2025 21:01:11 +0000 Manifest next update: Mon 22 Dec 2025 21:01:11 +0000 Files and hashes: 1: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl (hash: wvEk4xWJ8kpl64ma1rmnWiCSLdi4YfyLmTCnkEqwdPw=) 2: _Yxsd0eiDHHGuFhmQURGYrs_Tng.roa (hash: nE0pyzNZgsvFiQ/2XuRBIkiIZVx/tCbJehUAtaFFq7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:5b:55:c7:ff:4f:8e:fa:db:7c:18:31:a0:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba Validity Not Before: Dec 21 21:01:11 2025 GMT Not After : Dec 22 21:01:11 2025 GMT Subject: CN=f258f078864d3084eec95349865b99574b24bc9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:19:0b:21:b8:c2:bf:e7:a0:aa:e2:10:c5: 39:17:38:ce:32:15:6c:4c:37:61:c5:a0:60:ec:4a: ca:0e:f9:3f:7f:90:a8:ab:12:41:45:0e:30:9a:25: b8:d8:84:b6:93:27:63:9a:cd:55:b6:d7:3b:69:a8: 84:8f:bc:ce:91:89:73:f3:5f:2f:fd:96:10:24:66: 6f:01:52:aa:fa:07:51:1c:a8:58:dc:fb:89:41:1f: ca:73:ce:62:08:6b:30:91:1b:c5:b0:2e:9b:5a:f5: 9f:59:3e:43:d7:d3:39:dc:e3:a7:ab:33:fa:02:14: 30:bb:97:df:4a:e8:1f:82:13:86:83:d2:ce:55:03: 57:ac:b4:7e:91:9b:83:c6:98:97:90:ec:64:9b:da: 96:b3:27:d4:eb:44:b1:c7:de:eb:4b:b4:ea:ed:b5: 98:e3:31:30:52:ad:36:24:b1:aa:06:75:3a:fa:ce: dc:59:f4:52:cf:f0:53:e7:60:76:84:66:f6:95:a2: 79:a1:83:2f:82:0e:56:5d:a4:95:23:49:dc:f8:34: 4e:26:6c:ff:d2:41:4a:b1:88:96:61:da:bd:eb:3b: 92:19:f3:ec:86:82:d3:da:0f:df:19:5f:7a:06:05: 0f:a8:11:c0:d2:80:17:fd:c2:65:a6:6f:d1:64:f9: 5e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:58:F0:78:86:4D:30:84:EE:C9:53:49:86:5B:99:57:4B:24:BC:9E X509v3 Authority Key Identifier: keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:31:92:be:42:55:7a:76:ab:d4:4f:e1:8a:9c:7d:3a:7d:ed: 3b:8b:50:35:bf:b4:5b:a3:a9:a2:db:b1:d6:31:10:d9:43:c5: 32:9b:40:8b:8f:f5:cb:1e:80:26:f9:6c:1a:43:6d:5d:a5:8b: 01:3f:c8:a7:fe:09:6b:3f:49:09:d6:4f:4d:72:40:ce:c2:b2: bd:7f:5c:98:4b:e3:93:1e:2c:fe:9a:b1:77:b1:50:08:7b:e2: 73:9e:4e:e6:28:f7:24:43:f1:8b:ce:be:ab:85:c7:3d:a9:24: b5:78:6d:ea:6e:5d:d8:7b:48:1b:b2:53:9a:1d:f7:03:7e:19: 67:41:0c:8e:e9:82:98:60:bf:1f:d8:56:f3:00:8d:73:13:04: f3:d9:98:0d:89:32:71:1c:01:64:e8:f6:f9:b5:c4:2d:61:ce: 40:dc:2a:4b:90:00:fa:44:4e:06:f3:6e:3b:e0:4e:29:a0:48: 47:1c:cf:3d:78:6d:0c:b2:3e:18:ae:43:f1:86:c9:55:1f:ae: df:ff:16:f4:c6:33:0d:1e:f2:ab:bc:11:f6:d1:fd:42:94:1e: 05:ec:b9:70:de:66:21:c9:03:8c:c3:3d:d0:73:15:89:46:35: 1d:4d:98:29:b6:00:cd:58:9b:4c:e1:f0:17:b8:1a:16:72:48: c1:3d:e8:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt1tVx/9PjvrbfBgxoKZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYTc1ZWY5MDM2ZjVjMTQzZTU3ZGZhZmJjOTJjMDI1NWMz MTU5YmEwHhcNMjUxMjIxMjEwMTExWhcNMjUxMjIyMjEwMTExWjAzMTEwLwYDVQQD EyhmMjU4ZjA3ODg2NGQzMDg0ZWVjOTUzNDk4NjViOTk1NzRiMjRiYzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DkZCyG4wr/noKriEMU5FzjOMhVs TDdhxaBg7ErKDvk/f5CoqxJBRQ4wmiW42IS2kydjms1Vttc7aaiEj7zOkYlz818v /ZYQJGZvAVKq+gdRHKhY3PuJQR/Kc85iCGswkRvFsC6bWvWfWT5D19M53OOnqzP6 AhQwu5ffSugfghOGg9LOVQNXrLR+kZuDxpiXkOxkm9qWsyfU60Sxx97rS7Tq7bWY 4zEwUq02JLGqBnU6+s7cWfRSz/BT52B2hGb2laJ5oYMvgg5WXaSVI0nc+DROJmz/ 0kFKsYiWYdq96zuSGfPshoLT2g/fGV96BgUPqBHA0oAX/cJlpm/RZPleswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJY8HiGTTCE7slTSYZbmVdLJLyeMB8GA1UdIwQY MBaAFOKnXvkDb1wUPlffr7ySwCVcMVm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHFkZS1RTnZYQlEtVjktdnZKTEFKVnd4V2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNGQ0MTEtOTk2Ni00MjkxLWFhNTkt ZjkwODUwZTc0Mjk2LzEvNHFkZS1RTnZYQlEtVjktdnZKTEFKVnd4V2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kNGQ0MTEtOTk2Ni00MjkxLWFhNTktZjkwODUwZTc0Mjk2 LzEvNHFkZS1RTnZYQlEtVjktdnZKTEFKVnd4V2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTGSvkJV enar1E/hipx9On3tO4tQNb+0W6Opotux1jEQ2UPFMptAi4/1yx6AJvlsGkNtXaWL AT/Ip/4Jaz9JCdZPTXJAzsKyvX9cmEvjkx4s/pqxd7FQCHvic55O5ij3JEPxi86+ q4XHPakktXht6m5d2HtIG7JTmh33A34ZZ0EMjumCmGC/H9hW8wCNcxME89mYDYky cRwBZOj2+bXELWHOQNwqS5AA+kROBvNuO+BOKaBIRxzPPXhtDLI+GK5D8YbJVR+u 3/8W9MYzDR7yq7wR9tH9QpQeBey5cN5mIckDjMM90HMViUY1HU2YKbYAzVibTOHw F7gaFnJIwT3ogw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:56:30 2025 by rpki-client