This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft File: QeODxYB-mzL1dtCluO53RMrPtxc.mft (raw, json) Hash identifier: e1dDH/+PqrV4Teu+uJLfHpMlXHM5eBEbYt3iIA9EmXQ= Subject key identifier: EC:F6:E8:C7:F9:8B:C1:C0:28:D6:35:A1:25:CA:F5:32:D5:43:DA:F9 Authority key identifier: 41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17 Certificate issuer: /CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717 Certificate serial: 019B3EDA9F3250D2DC50196817C5D11A2DF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft Manifest number: 0658 Signing time: Sun 21 Dec 2025 03:01:13 +0000 Manifest this update: Sun 21 Dec 2025 03:01:13 +0000 Manifest next update: Mon 22 Dec 2025 03:01:13 +0000 Files and hashes: 1: 03enaQCGw_eqXqIAwZyG-7zrfRA.roa (hash: YhNG/6VofCuK7pQjtVrVurKsTSoyBGAKru+JjLAKpoo=) 2: DUyUlX3xTZHlVnLSKpECvt4NkYU.roa (hash: ZP6huwEf1pdyFLtyz+3lIcMnm1rz3bsZAcR3RQdU+KU=) 3: QeODxYB-mzL1dtCluO53RMrPtxc.crl (hash: sxBRbJCUf6fIJ8B0d0YsivtK+Q/q8jpLW/uKZvUs5uI=) 4: bB3G3EZqBAqArfU6X5zzc1opBME.roa (hash: gPeixOKastqxOj7HlHBp8UwchVAjS4fsBzFCexJl5H8=) 5: lKGyjDcky_IoNZN6qvlaMVTqM58.roa (hash: IiBQAy+zcf79xQNY8RIQMsijGISjsQrLjaoVvIJA9t4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.crl rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:9f:32:50:d2:dc:50:19:68:17:c5:d1:1a:2d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717 Validity Not Before: Dec 21 03:01:13 2025 GMT Not After : Dec 22 03:01:13 2025 GMT Subject: CN=ecf6e8c7f98bc1c028d635a125caf532d543daf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:5c:d4:35:a0:4f:31:c2:d5:c5:0b:6a:a7: f8:c5:9d:31:33:77:09:bd:af:aa:bd:27:dc:17:dd: 9e:bd:46:ca:8c:f3:6f:22:6e:78:cb:63:66:3c:b4: b1:74:b9:56:a5:9d:e0:15:94:81:b4:7c:c2:d4:86: a2:52:32:d6:50:cc:22:c6:27:fc:bc:88:61:39:b8: 93:29:04:6a:7d:18:d9:aa:6c:e1:91:a3:d3:09:d0: 54:c0:1e:7a:06:e4:a6:78:e6:4b:31:30:56:9c:7e: c7:2a:5c:dc:46:d3:fe:6a:f1:2f:af:89:24:dc:fe: a0:89:aa:09:1c:56:a2:57:b3:c5:f5:94:ae:ec:ce: a0:26:c7:ed:38:d2:c3:cb:e7:94:07:3b:f3:5c:77: cd:95:e1:ce:0b:97:e9:f2:2c:c9:44:15:c3:85:e4: ad:f4:90:c3:81:e7:b0:57:b1:fa:2e:71:d0:ff:40: ad:33:9b:f7:f3:a6:46:15:86:bb:25:97:fc:ec:43: 6a:3d:7d:2c:7d:5f:56:eb:25:de:25:7a:f5:b8:10: 43:24:e2:e2:41:cc:a3:65:23:1e:4a:aa:87:c5:50: 04:09:7c:be:0f:7f:c1:f1:e7:20:5f:e1:54:00:98: cd:ad:ae:30:ee:13:af:21:be:f5:a0:07:8a:88:a2: 57:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F6:E8:C7:F9:8B:C1:C0:28:D6:35:A1:25:CA:F5:32:D5:43:DA:F9 X509v3 Authority Key Identifier: keyid:41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d1:34:33:43:cd:f7:f1:1f:8a:87:5f:72:16:3f:71:0b:6c: b7:f9:cb:c1:9b:42:29:65:3d:1b:e0:1e:88:98:37:54:e3:ca: c5:45:10:5f:3b:88:eb:c0:f7:d1:63:c0:25:7e:29:ac:2e:f0: 85:89:05:9e:69:dc:f7:48:9e:ae:5b:da:72:7d:44:11:7a:86: a0:bc:0d:b3:6c:f5:ea:7b:84:00:c2:6d:0d:db:4e:ba:4a:c9: 0a:43:2c:fd:38:fd:e8:8e:4c:ad:04:9b:ae:9f:f4:41:fc:a7: b1:cc:9e:fb:ee:b0:0b:f5:db:06:f5:3a:08:4c:2d:d9:62:5f: c1:36:50:a0:31:e9:14:be:29:5d:5f:76:3f:89:07:dd:ff:b6: 8d:12:25:5c:6e:90:71:d6:6a:6c:c2:89:28:7e:24:fe:15:f0: 7e:21:73:26:cb:6d:4f:72:c3:12:03:99:78:a4:ba:fd:6a:c9: 54:79:52:2a:5f:e0:59:1c:0a:d6:0f:67:ac:ec:ec:5d:ba:5c: 2d:d4:f6:25:ae:c6:84:dc:47:a7:1d:5a:3c:13:e2:d2:77:a1: 17:5c:33:24:7d:bb:54:96:35:3c:49:a3:d6:e9:f4:b6:07:bd: de:eb:a0:34:ba:5c:28:d4:7c:08:8c:6f:c9:c8:c4:88:01:06: d6:2d:c4:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2p8yUNLcUBloF8XRGi3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZTM4M2M1ODA3ZTliMzJmNTc2ZDBhNWI4ZWU3NzQ0Y2Fj ZmI3MTcwHhcNMjUxMjIxMDMwMTEzWhcNMjUxMjIyMDMwMTEzWjAzMTEwLwYDVQQD EyhlY2Y2ZThjN2Y5OGJjMWMwMjhkNjM1YTEyNWNhZjUzMmQ1NDNkYWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtFc1DWgTzHC1cULaqf4xZ0xM3cJ va+qvSfcF92evUbKjPNvIm54y2NmPLSxdLlWpZ3gFZSBtHzC1IaiUjLWUMwixif8 vIhhObiTKQRqfRjZqmzhkaPTCdBUwB56BuSmeOZLMTBWnH7HKlzcRtP+avEvr4kk 3P6giaoJHFaiV7PF9ZSu7M6gJsftONLDy+eUBzvzXHfNleHOC5fp8izJRBXDheSt 9JDDgeewV7H6LnHQ/0CtM5v386ZGFYa7JZf87ENqPX0sfV9W6yXeJXr1uBBDJOLi QcyjZSMeSqqHxVAECXy+D3/B8ecgX+FUAJjNra4w7hOvIb71oAeKiKJXSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOz26Mf5i8HAKNY1oSXK9TLVQ9r5MB8GA1UdIwQY MBaAFEHjg8WAfpsy9XbQpbjud0TKz7cXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWVPRHhZQi1tekwxZHRDbHVPNTNSTXJQdHhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hZWE0NjUtYmE0NS00OWFjLTljNjgt N2I0MWZhYmM2ZjY3LzEvUWVPRHhZQi1tekwxZHRDbHVPNTNSTXJQdHhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9hZWE0NjUtYmE0NS00OWFjLTljNjgtN2I0MWZhYmM2ZjY3 LzEvUWVPRHhZQi1tekwxZHRDbHVPNTNSTXJQdHhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltE0M0PN 9/EfiodfchY/cQtst/nLwZtCKWU9G+AeiJg3VOPKxUUQXzuI68D30WPAJX4prC7w hYkFnmnc90ierlvacn1EEXqGoLwNs2z16nuEAMJtDdtOukrJCkMs/Tj96I5MrQSb rp/0Qfynscye++6wC/XbBvU6CEwt2WJfwTZQoDHpFL4pXV92P4kH3f+2jRIlXG6Q cdZqbMKJKH4k/hXwfiFzJsttT3LDEgOZeKS6/WrJVHlSKl/gWRwK1g9nrOzsXbpc LdT2Ja7GhNxHpx1aPBPi0nehF1wzJH27VJY1PEmj1un0tge93uugNLpcKNR8CIxv ycjEiAEG1i3Ekg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:40:20 2025 by rpki-client