This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json) Hash identifier: p16TonmLeuu800zEumysExl1VWB3ayQzyLRw4XB3D0o= Subject key identifier: E6:84:12:08:D9:4C:CB:84:E3:C3:6D:04:FE:DF:DE:02:AF:43:B7:74 Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80 Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580 Certificate serial: 019B3C7DEFF144E96F86EBE07D324457C138 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft Manifest number: 0B95 Signing time: Sat 20 Dec 2025 16:00:44 +0000 Manifest this update: Sat 20 Dec 2025 16:00:44 +0000 Manifest next update: Sun 21 Dec 2025 16:00:44 +0000 Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: vh45OUeAtJwA4h6q5waH6kGXQlTdSYEfZzYp4K1owAE=) 2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:ef:f1:44:e9:6f:86:eb:e0:7d:32:44:57:c1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580 Validity Not Before: Dec 20 16:00:44 2025 GMT Not After : Dec 21 16:00:44 2025 GMT Subject: CN=e6841208d94ccb84e3c36d04fedfde02af43b774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:42:bd:e5:40:1d:aa:52:8d:9f:0e:ac:ef:1e: f3:cd:86:4f:14:9c:88:5a:98:89:6b:bc:e0:54:9b: eb:0b:27:ef:de:67:2c:c7:ba:28:5a:7b:a1:12:7c: 45:22:9f:7c:65:03:fd:3e:de:17:36:82:44:91:27: 1d:a7:ac:0a:83:b2:bd:7d:26:3a:f3:f9:b4:5d:35: 67:b5:73:a0:aa:3c:29:b0:49:17:ee:9b:9d:30:55: a5:34:ef:22:35:54:ed:ed:e6:37:15:28:e6:de:e3: 67:cc:c6:38:b7:e7:82:11:f0:03:d9:2d:bb:67:27: 47:7c:1e:ac:53:61:0a:6a:da:46:62:eb:f1:c0:42: 9d:03:e1:df:cc:f2:e8:56:0b:96:99:a4:50:28:a1: ff:7d:bc:65:40:cf:88:95:e5:96:d5:57:84:99:17: 41:7a:6e:e2:ce:d3:e6:12:d0:fe:37:63:a2:8a:e6: 24:e8:2f:45:ae:07:a5:10:3a:aa:2c:88:48:46:40: 78:2b:b3:88:d8:a7:19:d6:ea:a5:73:37:4e:47:72: 85:b4:e5:00:bd:3e:17:52:bb:69:0b:1c:cc:b7:9e: 8e:83:b0:9e:9b:4b:77:c0:87:b2:10:ff:ce:df:0e: f4:7f:4e:18:4c:3e:10:3f:5b:a5:9e:1b:b1:7c:3d: e2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:84:12:08:D9:4C:CB:84:E3:C3:6D:04:FE:DF:DE:02:AF:43:B7:74 X509v3 Authority Key Identifier: keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:13:ea:d3:34:89:1c:50:09:74:90:b6:7f:f1:ad:4e:7f:90: 5c:44:e0:be:8c:95:5c:1e:df:b9:87:b1:7a:b5:e7:68:24:bd: e6:dc:39:a1:e2:c0:e3:bd:bf:2b:a7:6c:b5:45:3d:3f:fa:ea: 57:42:1c:fe:e8:b6:5e:0e:84:71:b9:37:cf:fb:7f:c6:0d:eb: 0f:d1:5d:1e:e5:ca:e9:91:29:9a:cc:3b:27:0a:e3:f5:ef:36: d1:09:31:de:e4:b9:15:b5:86:87:9a:cf:22:87:ab:ab:5e:5d: fa:2d:2e:8a:e3:93:73:0b:cd:6f:1a:d1:2f:64:49:b3:4d:e1: ea:eb:64:22:49:a4:2d:c4:5c:48:3f:84:93:a6:98:4d:e4:ed: 27:97:a9:70:97:d2:48:19:92:2f:9d:83:a2:83:9f:30:47:06: 6b:e8:05:79:1c:33:9b:5e:c1:38:0e:ea:c7:74:69:23:6e:20: 1c:25:3d:0c:68:54:fa:c4:30:56:26:57:72:09:7a:1e:df:d8: 80:ed:eb:ba:d1:a1:72:8b:da:86:8b:84:de:83:17:8f:d0:aa: e1:62:70:df:c3:16:c0:a6:37:2d:8e:85:1f:ea:63:48:15:1a: d9:ab:49:f7:a7:a7:6d:4b:20:c7:ba:f9:7f:43:db:af:d4:45: eb:73:b9:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fe/xROlvhuvgfTJEV8E4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZTA5ZGZiOWRjZWY4YTUzMmZiMjExZDJlOGE2NTQ2Y2Vm OWY1ODAwHhcNMjUxMjIwMTYwMDQ0WhcNMjUxMjIxMTYwMDQ0WjAzMTEwLwYDVQQD EyhlNjg0MTIwOGQ5NGNjYjg0ZTNjMzZkMDRmZWRmZGUwMmFmNDNiNzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0K95UAdqlKNnw6s7x7zzYZPFJyI WpiJa7zgVJvrCyfv3mcsx7ooWnuhEnxFIp98ZQP9Pt4XNoJEkScdp6wKg7K9fSY6 8/m0XTVntXOgqjwpsEkX7pudMFWlNO8iNVTt7eY3FSjm3uNnzMY4t+eCEfAD2S27 ZydHfB6sU2EKatpGYuvxwEKdA+HfzPLoVguWmaRQKKH/fbxlQM+IleWW1VeEmRdB em7iztPmEtD+N2OiiuYk6C9FrgelEDqqLIhIRkB4K7OI2KcZ1uqlczdOR3KFtOUA vT4XUrtpCxzMt56Og7Cem0t3wIeyEP/O3w70f04YTD4QP1ulnhuxfD3ifQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaEEgjZTMuE48NtBP7f3gKvQ7d0MB8GA1UdIwQY MBaAFEHgnfudzvilMvshHS6KZUbO+fWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAt MjBiZmE3OGM5YTFiLzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAtMjBiZmE3OGM5YTFi LzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBPq0zSJ HFAJdJC2f/GtTn+QXETgvoyVXB7fuYexerXnaCS95tw5oeLA472/K6dstUU9P/rq V0Ic/ui2Xg6Ecbk3z/t/xg3rD9FdHuXK6ZEpmsw7Jwrj9e820Qkx3uS5FbWGh5rP Ioerq15d+i0uiuOTcwvNbxrRL2RJs03h6utkIkmkLcRcSD+Ek6aYTeTtJ5epcJfS SBmSL52DooOfMEcGa+gFeRwzm17BOA7qx3RpI24gHCU9DGhU+sQwViZXcgl6Ht/Y gO3rutGhcovahouE3oMXj9Cq4WJw38MWwKY3LY6FH+pjSBUa2atJ96enbUsgx7r5 f0Pbr9RF63O56g== -----END CERTIFICATE-----Generated at Sun Dec 21 00:58:18 2025 by rpki-client