This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft File: QeODxYB-mzL1dtCluO53RMrPtxc.mft (raw, json) Hash identifier: VF9W6uoMof3PhUSiartQIe4RvKds5qn8gKuuGJyXoag= Subject key identifier: 61:16:04:AB:26:C7:F3:31:B4:9F:18:A6:BB:25:85:A5:DE:F6:2C:0E Authority key identifier: 41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17 Certificate issuer: /CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717 Certificate serial: 019B40C87878018DC2FC7C81E25E6A08B5FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft Manifest number: 0659 Signing time: Sun 21 Dec 2025 12:00:38 +0000 Manifest this update: Sun 21 Dec 2025 12:00:38 +0000 Manifest next update: Mon 22 Dec 2025 12:00:38 +0000 Files and hashes: 1: 03enaQCGw_eqXqIAwZyG-7zrfRA.roa (hash: YhNG/6VofCuK7pQjtVrVurKsTSoyBGAKru+JjLAKpoo=) 2: DUyUlX3xTZHlVnLSKpECvt4NkYU.roa (hash: ZP6huwEf1pdyFLtyz+3lIcMnm1rz3bsZAcR3RQdU+KU=) 3: QeODxYB-mzL1dtCluO53RMrPtxc.crl (hash: vAESrr0jFcR8lcXnBe09i+LRiCNfemCHskPbaCruK0I=) 4: bB3G3EZqBAqArfU6X5zzc1opBME.roa (hash: gPeixOKastqxOj7HlHBp8UwchVAjS4fsBzFCexJl5H8=) 5: lKGyjDcky_IoNZN6qvlaMVTqM58.roa (hash: IiBQAy+zcf79xQNY8RIQMsijGISjsQrLjaoVvIJA9t4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.crl rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:78:78:01:8d:c2:fc:7c:81:e2:5e:6a:08:b5:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717 Validity Not Before: Dec 21 12:00:38 2025 GMT Not After : Dec 22 12:00:38 2025 GMT Subject: CN=611604ab26c7f331b49f18a6bb2585a5def62c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:85:e6:d0:95:10:1b:f0:e3:10:de:c5:4c:24: 49:13:6b:8f:0f:c4:4c:ec:30:65:fa:ec:fe:2f:c3: dc:9f:a2:1a:49:28:1f:25:c4:86:e3:b0:a9:a2:21: 56:a1:c9:cb:dd:18:0d:5a:c3:e5:e0:53:fc:f8:ce: 7d:de:d5:91:9d:6e:65:ec:49:a6:49:ad:bc:c2:83: 80:2c:21:89:85:de:84:2a:9f:d9:e8:a4:3f:36:fc: 40:3f:15:85:5f:18:36:5d:2a:87:0c:ca:88:12:ef: 68:f3:fb:ff:44:b6:b9:af:02:50:28:72:d9:d0:c1: d3:1f:21:54:0e:cd:d5:5c:13:3e:2b:6a:25:8d:79: c2:50:c8:ef:60:a7:63:cd:f1:41:2c:2d:ac:e6:e7: 06:ca:e9:a8:ee:43:1e:f3:da:46:84:0c:9a:24:31: 55:82:c8:20:56:a8:4e:47:65:36:a1:1e:d5:86:03: 48:e9:ad:14:ba:29:1b:16:af:6e:12:a5:e7:90:54: aa:a9:94:45:5e:de:aa:03:a9:4c:d9:be:75:13:bd: 3d:2d:2f:cf:19:37:f8:33:4f:04:24:40:6b:1e:e5: 16:1d:b6:80:81:18:a9:25:2d:2d:b3:e3:0e:b4:fa: 7b:b7:df:d8:17:2a:05:49:c5:58:e7:3e:48:4e:5c: 24:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:16:04:AB:26:C7:F3:31:B4:9F:18:A6:BB:25:85:A5:DE:F6:2C:0E X509v3 Authority Key Identifier: keyid:41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:37:af:48:60:19:da:c8:f9:fb:6b:8a:04:6d:bd:3a:12:b7: 27:4d:c5:41:0e:a6:be:82:af:f4:26:31:0c:d7:5a:23:8e:83: 33:65:7e:43:fc:4f:8d:10:12:62:7c:3c:43:df:c0:75:20:84: 22:f8:f4:0a:85:47:9a:f3:2a:23:02:cb:0b:62:9e:a4:b2:9a: 88:ad:81:cc:df:b6:cc:8d:8d:49:2a:8b:dd:72:66:0e:fd:f8: 42:2a:47:b1:37:53:b4:5d:85:92:58:14:69:e6:ed:fe:03:e4: 47:50:8d:11:a4:55:f2:b8:35:62:42:0c:07:c8:d9:53:b3:f9: 96:1c:1a:ca:8c:19:4a:47:9c:41:fe:e2:d0:9e:a8:66:0d:18: ab:87:d3:41:af:e4:d9:31:66:9c:2d:b5:ca:48:e0:86:e9:d2: e1:ad:4e:25:22:02:8d:30:5b:22:f3:c5:ca:5a:25:67:36:a1: 3a:07:69:ec:2d:7b:9d:1e:81:b8:e9:72:bf:f5:b4:14:d6:14: 43:50:94:5a:f7:7e:ba:85:9e:82:fe:8e:17:92:bd:10:9a:0d: 8d:3e:e2:75:41:28:b5:e1:6a:41:12:6c:d3:6c:f6:8a:77:c4: 15:5d:84:23:ce:ee:34:26:a7:3e:13:89:87:5a:bc:bd:8a:64: 1c:d2:49:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyHh4AY3C/HyB4l5qCLX6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZTM4M2M1ODA3ZTliMzJmNTc2ZDBhNWI4ZWU3NzQ0Y2Fj ZmI3MTcwHhcNMjUxMjIxMTIwMDM4WhcNMjUxMjIyMTIwMDM4WjAzMTEwLwYDVQQD Eyg2MTE2MDRhYjI2YzdmMzMxYjQ5ZjE4YTZiYjI1ODVhNWRlZjYyYzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoXm0JUQG/DjEN7FTCRJE2uPD8RM 7DBl+uz+L8Pcn6IaSSgfJcSG47CpoiFWocnL3RgNWsPl4FP8+M593tWRnW5l7Emm Sa28woOALCGJhd6EKp/Z6KQ/NvxAPxWFXxg2XSqHDMqIEu9o8/v/RLa5rwJQKHLZ 0MHTHyFUDs3VXBM+K2oljXnCUMjvYKdjzfFBLC2s5ucGyumo7kMe89pGhAyaJDFV gsggVqhOR2U2oR7VhgNI6a0UuikbFq9uEqXnkFSqqZRFXt6qA6lM2b51E709LS/P GTf4M08EJEBrHuUWHbaAgRipJS0ts+MOtPp7t9/YFyoFScVY5z5ITlwk2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEWBKsmx/MxtJ8YprslhaXe9iwOMB8GA1UdIwQY MBaAFEHjg8WAfpsy9XbQpbjud0TKz7cXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWVPRHhZQi1tekwxZHRDbHVPNTNSTXJQdHhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hZWE0NjUtYmE0NS00OWFjLTljNjgt N2I0MWZhYmM2ZjY3LzEvUWVPRHhZQi1tekwxZHRDbHVPNTNSTXJQdHhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9hZWE0NjUtYmE0NS00OWFjLTljNjgtN2I0MWZhYmM2ZjY3 LzEvUWVPRHhZQi1tekwxZHRDbHVPNTNSTXJQdHhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxzevSGAZ 2sj5+2uKBG29OhK3J03FQQ6mvoKv9CYxDNdaI46DM2V+Q/xPjRASYnw8Q9/AdSCE Ivj0CoVHmvMqIwLLC2KepLKaiK2BzN+2zI2NSSqL3XJmDv34QipHsTdTtF2FklgU aebt/gPkR1CNEaRV8rg1YkIMB8jZU7P5lhwayowZSkecQf7i0J6oZg0Yq4fTQa/k 2TFmnC21ykjghunS4a1OJSICjTBbIvPFylolZzahOgdp7C17nR6BuOlyv/W0FNYU Q1CUWvd+uoWegv6OF5K9EJoNjT7idUEoteFqQRJs02z2infEFV2EI87uNCanPhOJ h1q8vYpkHNJJOw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:22:52 2025 by rpki-client