This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json) Hash identifier: 4K8lcz+fsx67jWVZZTP4lobXwGSrKjjXmN3AmzH5Zag= Subject key identifier: BB:EC:5B:DF:C7:B7:BB:A3:F0:84:3C:0A:06:41:78:69:AE:CA:C2:9F Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68 Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68 Certificate serial: 019B3343DC2F05625C725D27AABDF4F17544 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft Manifest number: 146A Signing time: Thu 18 Dec 2025 21:00:43 +0000 Manifest this update: Thu 18 Dec 2025 21:00:43 +0000 Manifest next update: Fri 19 Dec 2025 21:00:43 +0000 Files and hashes: 1: 7347cFurkIFVNRTShqXtdTwOLOA.roa (hash: 81GL5pa945jQA5j8/X64fsQyRv+u1Eyr3yERMPF2bKE=) 2: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: WPSNcPudyXbywWyrYYbwgabzEib3hSVD5GQhH9Pttls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:dc:2f:05:62:5c:72:5d:27:aa:bd:f4:f1:75:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68 Validity Not Before: Dec 18 21:00:43 2025 GMT Not After : Dec 19 21:00:43 2025 GMT Subject: CN=bbec5bdfc7b7bba3f0843c0a06417869aecac29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c6:a4:a5:3e:fe:06:d6:82:11:d1:3b:e9:b0: 1b:13:89:ad:8f:ff:4f:87:c2:06:f8:d3:68:c9:f8: 30:33:ac:35:d0:e1:7b:d4:f2:9c:7c:56:d1:4e:1f: 73:65:4b:39:f6:23:b8:62:3c:9c:b8:e3:4a:7e:2b: 70:60:59:7e:5e:2f:f0:e7:7f:1c:e3:93:a4:01:56: 79:eb:d3:57:3e:72:c2:35:e3:57:4e:2e:f6:c2:96: e4:25:43:3f:35:56:aa:82:be:35:96:5d:e2:44:7c: 1c:cd:73:42:a5:7c:6f:ea:36:65:89:d3:06:97:c4: 51:3a:5e:d6:8c:d1:05:90:4a:84:5a:b6:5c:89:4a: 78:3a:f3:e0:90:32:98:c4:21:e9:99:49:22:69:9f: f4:25:af:6f:21:c0:a5:16:48:2b:f5:46:65:ea:c6: 54:5f:87:d7:a0:e9:b7:bb:f0:10:d6:5b:5b:53:82: 45:23:f7:27:81:59:43:78:d0:16:f5:6e:a6:8b:2b: 2e:46:1d:91:f2:19:e5:be:c6:e2:80:3b:5a:75:4b: 41:b8:bc:55:4e:87:63:08:40:2a:4d:12:f4:4f:57: 96:53:d1:fb:e3:cd:6b:d6:2a:77:10:11:dc:bb:3f: 19:5a:1f:d3:70:75:db:63:4f:a9:7b:df:79:1e:15: 32:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EC:5B:DF:C7:B7:BB:A3:F0:84:3C:0A:06:41:78:69:AE:CA:C2:9F X509v3 Authority Key Identifier: keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:64:29:ad:59:87:87:77:08:d1:e7:1b:e0:79:79:ca:e5:01: c0:fe:b7:94:d3:b5:f7:bd:07:45:fd:69:a3:e3:25:22:e8:ee: 7e:e8:a7:c2:9d:3d:93:82:b9:fe:7e:2f:5b:95:42:a7:ba:7b: a3:9a:90:30:2d:37:20:9a:e3:a6:c6:01:04:36:03:8f:d4:76: f8:7b:69:1f:81:c2:60:a6:a3:91:40:a9:3b:4c:81:4c:72:02: 67:5d:1d:c9:d8:49:cb:ef:15:91:91:a2:fb:42:11:71:67:78: 51:d2:e8:a2:dc:c7:fa:0b:71:d1:d4:98:8c:dc:05:af:29:d5: 75:aa:b7:73:2a:64:26:e3:ea:06:e3:44:cb:76:31:47:5e:66: ee:52:40:4a:5e:bd:4c:d2:d3:de:80:e8:d2:11:04:01:a6:de: 48:96:45:7b:31:6b:3d:34:46:51:f7:a2:80:f3:b0:b4:8d:84: a6:74:bb:a7:8e:2f:af:eb:af:23:6d:4f:f0:0b:7f:5f:3e:78: b9:2a:af:a6:61:03:7f:2e:ce:4e:b8:3a:cb:0e:e0:af:cd:fe: aa:bd:08:55:ff:1b:6a:55:f9:4f:14:72:0d:3d:27:8d:15:32: 90:13:74:7d:28:4b:d3:e2:3b:e6:b0:34:d8:08:56:55:9e:a8: df:be:bf:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ9wvBWJccl0nqr308XVEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNDNlM2Y3MDI0NTg5Yjk2MmFkZTgxY2Y0NDU2MzA2ZjRk MzVlNjgwHhcNMjUxMjE4MjEwMDQzWhcNMjUxMjE5MjEwMDQzWjAzMTEwLwYDVQQD EyhiYmVjNWJkZmM3YjdiYmEzZjA4NDNjMGEwNjQxNzg2OWFlY2FjMjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MakpT7+BtaCEdE76bAbE4mtj/9P h8IG+NNoyfgwM6w10OF71PKcfFbRTh9zZUs59iO4YjycuONKfitwYFl+Xi/w538c 45OkAVZ569NXPnLCNeNXTi72wpbkJUM/NVaqgr41ll3iRHwczXNCpXxv6jZlidMG l8RROl7WjNEFkEqEWrZciUp4OvPgkDKYxCHpmUkiaZ/0Ja9vIcClFkgr9UZl6sZU X4fXoOm3u/AQ1ltbU4JFI/cngVlDeNAW9W6miysuRh2R8hnlvsbigDtadUtBuLxV TodjCEAqTRL0T1eWU9H7481r1ip3EBHcuz8ZWh/TcHXbY0+pe995HhUydQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvsW9/Ht7uj8IQ8CgZBeGmuysKfMB8GA1UdIwQY MBaAFEBD4/cCRYm5Yq3oHPRFYwb0015oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUVQajl3SkZpYmxpcmVnYzlFVmpCdlRUWG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9jZTE1MzctMzg5Mi00Njg0LWE2NWUt OGVmODg4N2UyZDFjLzEvUUVQajl3SkZpYmxpcmVnYzlFVmpCdlRUWG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9jZTE1MzctMzg5Mi00Njg0LWE2NWUtOGVmODg4N2UyZDFj LzEvUUVQajl3SkZpYmxpcmVnYzlFVmpCdlRUWG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGQprVmH h3cI0ecb4Hl5yuUBwP63lNO1970HRf1po+MlIujufuinwp09k4K5/n4vW5VCp7p7 o5qQMC03IJrjpsYBBDYDj9R2+HtpH4HCYKajkUCpO0yBTHICZ10dydhJy+8VkZGi +0IRcWd4UdLootzH+gtx0dSYjNwFrynVdaq3cypkJuPqBuNEy3YxR15m7lJASl69 TNLT3oDo0hEEAabeSJZFezFrPTRGUfeigPOwtI2EpnS7p44vr+uvI21P8At/Xz54 uSqvpmEDfy7OTrg6yw7gr83+qr0IVf8balX5TxRyDT0njRUykBN0fShL0+I75rA0 2AhWVZ6o376/3w== -----END CERTIFICATE-----Generated at Thu Dec 18 22:57:49 2025 by rpki-client