This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json) Hash identifier: xXOJrPa/DO1+srzMS+lbyP9r1rHiGmo4wINisImF9zI= Subject key identifier: 44:6D:A3:41:F8:BE:5F:74:00:F9:D6:9D:D3:1B:E3:5A:A0:0D:CD:0A Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40 Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40 Certificate serial: 019B25523CC2576271FB57B721ABF97FF298 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft Manifest number: 1786 Signing time: Tue 16 Dec 2025 04:01:44 +0000 Manifest this update: Tue 16 Dec 2025 04:01:44 +0000 Manifest next update: Wed 17 Dec 2025 04:01:44 +0000 Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: 73V0SdnYrgNdd73z1wbqpjIOoNbOc4EQQEp+xvzeVS0=) 2: UO07512-xyl7tPlxWkeH0XFHtjw.roa (hash: FGw3ypGv9x4G+fHO0s0Uxmz/ZFgsQL9y06qgJnZxgwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:3c:c2:57:62:71:fb:57:b7:21:ab:f9:7f:f2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40 Validity Not Before: Dec 16 04:01:44 2025 GMT Not After : Dec 17 04:01:44 2025 GMT Subject: CN=446da341f8be5f7400f9d69dd31be35aa00dcd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1c:4b:fd:f7:31:a9:c0:58:bc:ef:39:fb:98: 04:b4:6e:1d:fe:af:7f:6b:7d:3b:64:97:63:b7:98: b4:b0:ee:f2:e2:cc:00:02:ad:c7:42:ee:9c:f2:66: a9:0a:5f:71:6b:53:fa:f6:17:66:5f:96:f6:29:54: 8e:be:02:6c:0c:07:81:53:1e:4c:77:98:29:c2:9a: ed:59:de:83:3e:6c:ed:37:77:ba:48:10:7b:96:12: ee:67:bb:97:e6:a6:29:a5:de:16:fe:6a:59:0a:74: f6:7e:ad:06:94:0d:d0:e2:1c:24:f4:79:d5:cd:6b: f9:59:9b:87:47:7b:c9:13:e6:6c:10:74:ef:ba:16: 3c:0d:6f:1a:69:4b:6b:39:15:35:ed:6b:e3:8e:5c: 45:3b:ea:28:22:6b:bb:ef:39:2f:9c:7a:55:f3:2c: 54:f5:07:05:a9:44:0d:02:2f:16:cf:b6:2e:b3:13: 92:1f:62:12:34:a6:0c:17:94:2a:ff:fb:a0:e3:d9: f9:43:a7:6e:2f:35:d3:5f:66:a7:e6:29:b7:d4:cc: ce:97:85:00:9d:d4:4a:0c:2c:39:d8:16:a5:cd:1b: 0d:d8:ee:22:49:33:38:17:16:5b:ad:42:5c:5b:8f: 23:4e:f7:6c:f7:5f:13:f4:39:d7:94:e7:68:fb:dc: 45:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6D:A3:41:F8:BE:5F:74:00:F9:D6:9D:D3:1B:E3:5A:A0:0D:CD:0A X509v3 Authority Key Identifier: keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:23:cf:fc:75:a1:7d:cb:56:4e:70:73:37:e9:bb:2f:4c:0d: 62:20:0e:85:1c:f9:60:26:57:8b:1b:df:00:3a:26:e3:b0:8f: ab:58:7f:ca:bd:b2:55:40:11:81:ed:58:ce:55:ae:4b:80:17: c1:22:73:2b:5a:c4:27:25:90:ad:5d:74:bb:20:8d:80:ca:7a: 0b:6d:03:5b:05:bc:9f:33:de:6a:fe:db:29:ef:82:18:b7:d8: 15:b3:48:62:d6:d0:fb:e6:37:13:40:90:6b:c7:3e:15:d3:92: fe:c0:3c:c5:69:04:4c:1b:fe:d8:9b:93:45:0c:02:d7:e8:82: 82:b6:9e:66:70:48:f4:34:6a:b7:b4:7b:44:ef:ba:70:00:75: e9:c3:4f:11:6c:b1:98:0f:3e:4e:1e:17:3c:f9:ad:b4:a2:2c: c0:79:55:ab:fd:78:a9:63:f2:26:56:bb:75:6d:1b:f8:53:ed: be:f4:c0:d5:10:15:9a:e6:ed:15:4e:81:6f:8e:9c:ef:61:b7: 82:d1:26:80:6c:fe:41:57:55:4b:fa:75:6b:8a:18:34:c0:0b: c3:db:b5:92:53:e5:43:ef:71:b1:89:84:e1:e3:93:e3:e6:d6: 83:6c:13:10:4d:a9:26:3a:bd:1d:a5:e7:9a:23:ac:6b:7d:ae: 84:c5:f8:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUjzCV2Jx+1e3Iav5f/KYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZWY1ODQ5OTMwY2M5ZGQ3NDIxMWZiMzdlMjQxMTgyNDlh MWZjNDAwHhcNMjUxMjE2MDQwMTQ0WhcNMjUxMjE3MDQwMTQ0WjAzMTEwLwYDVQQD Eyg0NDZkYTM0MWY4YmU1Zjc0MDBmOWQ2OWRkMzFiZTM1YWEwMGRjZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xxL/fcxqcBYvO85+5gEtG4d/q9/ a307ZJdjt5i0sO7y4swAAq3HQu6c8mapCl9xa1P69hdmX5b2KVSOvgJsDAeBUx5M d5gpwprtWd6DPmztN3e6SBB7lhLuZ7uX5qYppd4W/mpZCnT2fq0GlA3Q4hwk9HnV zWv5WZuHR3vJE+ZsEHTvuhY8DW8aaUtrORU17WvjjlxFO+ooImu77zkvnHpV8yxU 9QcFqUQNAi8Wz7YusxOSH2ISNKYMF5Qq//ug49n5Q6duLzXTX2an5im31MzOl4UA ndRKDCw52BalzRsN2O4iSTM4FxZbrUJcW48jTvds918T9DnXlOdo+9xFAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERto0H4vl90APnWndMb41qgDc0KMB8GA1UdIwQY MBaAFEDvWEmTDMnddCEfs34kEYJJofxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTIt OWIyYzZiMDhhODRhLzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTItOWIyYzZiMDhhODRh LzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSPP/HWh fctWTnBzN+m7L0wNYiAOhRz5YCZXixvfADom47CPq1h/yr2yVUARge1YzlWuS4AX wSJzK1rEJyWQrV10uyCNgMp6C20DWwW8nzPeav7bKe+CGLfYFbNIYtbQ++Y3E0CQ a8c+FdOS/sA8xWkETBv+2JuTRQwC1+iCgraeZnBI9DRqt7R7RO+6cAB16cNPEWyx mA8+Th4XPPmttKIswHlVq/14qWPyJla7dW0b+FPtvvTA1RAVmubtFU6Bb46c72G3 gtEmgGz+QVdVS/p1a4oYNMALw9u1klPlQ+9xsYmE4eOT4+bWg2wTEE2pJjq9HaXn miOsa32uhMX4JQ== -----END CERTIFICATE-----Generated at Tue Dec 16 14:02:52 2025 by rpki-client