This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json) Hash identifier: 12lB15Y8dTcYI0Y5VNQDMqb35Z/SCgIOPyT/tcRkByg= Subject key identifier: A7:A6:42:9C:FF:C3:33:24:9B:E0:BE:44:F7:AE:37:7F:B5:B2:35:CA Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72 Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72 Certificate serial: 019B1CF2E7340C4299A1BABD443BE994760F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 13:00:39 +0000 Manifest this update: Sun 14 Dec 2025 13:00:39 +0000 Manifest next update: Mon 15 Dec 2025 13:00:39 +0000 Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: /+dzLhhc15p3oDDHvD/FVokQMk4VLI4ML3/Ds9JkVWo=) 2: aIPJ4lm4ZyremkDprutiWRNEZ90.roa (hash: Kp0nR22T2kDefAUNT5QJL0kBQwplOU/6USLq0OiGG/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f2:e7:34:0c:42:99:a1:ba:bd:44:3b:e9:94:76:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72 Validity Not Before: Dec 14 13:00:39 2025 GMT Not After : Dec 15 13:00:39 2025 GMT Subject: CN=a7a6429cffc333249be0be44f7ae377fb5b235ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:04:29:a7:50:90:f7:7d:d1:0b:6d:66:06:f3: 36:b6:13:fc:44:d8:b3:37:c5:44:20:96:9d:55:0a: 14:af:f3:03:9a:95:36:73:76:d3:8b:18:37:87:7c: 70:4b:67:0f:bb:53:13:5f:45:d3:22:05:0e:39:ec: 79:50:5a:a3:25:7f:9c:a6:88:e3:a4:1e:e5:5b:5c: bf:07:3c:c5:60:a1:1c:75:ce:38:08:fb:73:b4:36: 07:3c:91:9e:a0:14:ca:31:1b:35:ce:a1:89:22:80: bb:43:85:80:95:d6:87:34:48:66:e1:b8:c0:64:a9: c5:d3:82:42:ca:9c:e2:38:2a:bc:07:03:33:1b:1d: 99:f9:8e:ea:df:00:22:dd:e7:4c:ef:fa:7d:c9:64: e2:a0:49:7b:61:13:c6:41:61:e9:65:57:70:ef:6a: 15:7d:67:7d:d6:b2:51:d5:08:a2:25:8e:c3:76:1e: 26:69:9e:74:30:ce:d1:79:c1:35:24:b3:42:b3:f9: 32:e0:33:97:85:5e:62:df:1c:52:b3:cb:35:54:5f: 14:d7:a2:89:05:b3:a7:d7:80:c8:4d:33:98:34:24: 50:45:cb:a0:a6:a0:95:9e:45:f1:f4:1d:0e:7d:81: f2:bf:77:b7:c0:03:4d:28:35:8c:91:c6:6c:3d:89: b9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A6:42:9C:FF:C3:33:24:9B:E0:BE:44:F7:AE:37:7F:B5:B2:35:CA X509v3 Authority Key Identifier: keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b3:18:b4:6e:e7:f0:3d:ef:d1:5a:a0:43:45:b0:37:54:84: 9d:bc:25:32:ef:01:c5:3e:13:fd:fe:23:1e:76:90:be:16:ac: 5e:ab:c9:f9:d0:c1:4b:55:84:de:b8:56:c9:2b:d1:d8:7b:dc: 7d:c8:eb:f4:f4:a0:75:c4:85:a6:5d:ee:26:c9:dc:b2:09:7a: 24:c1:26:49:64:7f:4a:46:d0:05:5d:09:5d:cd:c0:89:e8:4f: bc:33:55:a8:5e:e7:a4:45:02:96:d5:d6:88:89:c1:f7:94:4d: 3d:e3:2c:3b:6b:db:c6:ce:0a:7b:56:9c:e7:e0:78:22:e6:0b: 3b:7a:72:a5:21:f6:00:86:fb:bc:26:9c:0e:25:23:ec:09:cf: 5d:69:b5:33:4c:24:28:79:a9:70:b0:e5:b9:5d:11:db:9c:ab: ee:0a:6c:ed:97:3d:51:57:9c:80:5d:b3:50:3f:4c:f6:1b:04: 11:f1:25:01:2d:af:b5:39:3a:1a:32:fd:6b:ab:6c:58:1e:c8: 26:a4:45:0b:72:57:d1:93:44:54:47:56:92:88:5b:9d:90:e6: 68:2d:e2:99:e9:8e:61:b9:8e:75:b5:56:42:34:8c:f0:f5:56: 1f:21:34:59:24:b4:71:60:f2:fe:1e:b5:c3:bd:89:33:03:f0: 73:c9:22:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc8uc0DEKZobq9RDvplHYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNDRmYTU0NDAwYmM2Y2ZjMzBjYjgzMTFhODE5ZDViZGE0 MjFhNzIwHhcNMjUxMjE0MTMwMDM5WhcNMjUxMjE1MTMwMDM5WjAzMTEwLwYDVQQD EyhhN2E2NDI5Y2ZmYzMzMzI0OWJlMGJlNDRmN2FlMzc3ZmI1YjIzNWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwQpp1CQ933RC21mBvM2thP8RNiz N8VEIJadVQoUr/MDmpU2c3bTixg3h3xwS2cPu1MTX0XTIgUOOex5UFqjJX+cpojj pB7lW1y/BzzFYKEcdc44CPtztDYHPJGeoBTKMRs1zqGJIoC7Q4WAldaHNEhm4bjA ZKnF04JCypziOCq8BwMzGx2Z+Y7q3wAi3edM7/p9yWTioEl7YRPGQWHpZVdw72oV fWd91rJR1QiiJY7Ddh4maZ50MM7RecE1JLNCs/ky4DOXhV5i3xxSs8s1VF8U16KJ BbOn14DITTOYNCRQRcugpqCVnkXx9B0OfYHyv3e3wANNKDWMkcZsPYm54wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKemQpz/wzMkm+C+RPeuN3+1sjXKMB8GA1UdIwQY MBaAFEBE+lRAC8bPwwy4MRqBnVvaQhpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEt YmI0MzNiYTQ3NmYyLzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEtYmI0MzNiYTQ3NmYy LzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7MYtG7n 8D3v0VqgQ0WwN1SEnbwlMu8BxT4T/f4jHnaQvhasXqvJ+dDBS1WE3rhWySvR2Hvc fcjr9PSgdcSFpl3uJsncsgl6JMEmSWR/SkbQBV0JXc3AiehPvDNVqF7npEUCltXW iInB95RNPeMsO2vbxs4Ke1ac5+B4IuYLO3pypSH2AIb7vCacDiUj7AnPXWm1M0wk KHmpcLDluV0R25yr7gps7Zc9UVecgF2zUD9M9hsEEfElAS2vtTk6GjL9a6tsWB7I JqRFC3JX0ZNEVEdWkohbnZDmaC3imemOYbmOdbVWQjSM8PVWHyE0WSS0cWDy/h61 w72JMwPwc8kifg== -----END CERTIFICATE-----Generated at Sun Dec 14 15:10:55 2025 by rpki-client