This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft File: QEeepWLdOn0M8qbpeLa783j3POQ.mft (raw, json) Hash identifier: CuMwiznD1EJE7U2+/Dw4bukQDePwtO67xovRRUN8npQ= Subject key identifier: 8C:55:81:AE:9E:25:FA:78:66:A7:3A:49:8C:5A:28:DE:09:65:E6:A6 Authority key identifier: 40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4 Certificate issuer: /CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4 Certificate serial: 019B42EEB7AA897AD07B3D3CDBBEF96F610A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft Manifest number: 14D9 Signing time: Sun 21 Dec 2025 22:01:39 +0000 Manifest this update: Sun 21 Dec 2025 22:01:39 +0000 Manifest next update: Mon 22 Dec 2025 22:01:39 +0000 Files and hashes: 1: QEeepWLdOn0M8qbpeLa783j3POQ.crl (hash: UyrTJetOnUbVA+RegclSKgzZ/ddAmBCrXWJj3Ky0C1Y=) 2: kDxnmkry6GSjGehsL9ntYXTgGms.roa (hash: wkEfOOZJ9TKbc6rsvn871D/mFlSMnjRucRMB/y4Wzco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:b7:aa:89:7a:d0:7b:3d:3c:db:be:f9:6f:61:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4 Validity Not Before: Dec 21 22:01:39 2025 GMT Not After : Dec 22 22:01:39 2025 GMT Subject: CN=8c5581ae9e25fa7866a73a498c5a28de0965e6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:d5:cc:40:60:29:d0:78:42:48:b9:42:12: ea:d4:ed:6d:12:a5:c1:86:6c:24:1b:55:73:ba:8a: b7:fd:00:51:d4:f4:49:c1:d3:c2:df:50:37:25:8b: 16:9d:15:40:6e:66:ae:a6:fc:82:43:8d:4b:66:1d: 01:01:85:e0:9f:a1:2f:fc:31:64:09:0f:45:d5:c1: f1:86:e7:67:3b:de:49:a2:ea:a2:3a:f5:a7:98:60: 91:0b:8d:3f:fd:50:e3:d2:ef:f5:92:d2:02:24:c7: ae:44:4d:50:37:03:d0:a5:89:ac:95:96:f1:ad:5a: 31:0e:1e:d1:65:6d:7d:4e:6d:27:5a:5f:3d:dc:a3: 71:3f:b0:21:68:46:7f:99:2b:f2:a0:7a:37:54:ef: 1c:a0:7e:c2:1d:4d:07:02:ef:14:83:00:61:9a:0c: 03:6a:63:6d:af:dc:c8:6f:f6:69:5f:b9:26:58:5e: be:74:75:dd:a9:ce:a6:e4:62:87:8b:e5:cf:4c:8c: f7:36:22:17:5c:29:99:35:ad:e0:f0:ec:9c:31:90: 82:19:14:0e:47:e8:f6:5b:06:70:b2:ca:f5:92:0a: c4:87:d0:79:31:14:ba:79:86:e7:84:4b:df:72:59: 36:7e:f7:98:54:3e:97:45:4c:e2:a3:99:4d:9b:19: fd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:55:81:AE:9E:25:FA:78:66:A7:3A:49:8C:5A:28:DE:09:65:E6:A6 X509v3 Authority Key Identifier: keyid:40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:61:82:6d:92:f0:44:95:1c:92:fb:41:d6:f8:1b:9d:58:2c: ad:41:60:09:52:de:66:66:2f:4d:5b:f6:47:31:65:0d:86:1f: 71:ef:43:bb:15:37:49:c0:5e:ab:ba:ba:dd:f1:1e:f7:00:1c: db:b2:2b:31:62:56:b7:3e:35:00:b0:5a:62:05:aa:16:b4:eb: 5f:18:44:85:00:1f:6e:80:32:0a:27:2f:92:39:50:b9:1c:07: 8c:6d:7f:26:b0:0c:7c:0a:ce:0a:1f:9a:2c:29:43:65:a3:a9: 47:63:63:1f:12:d9:2c:13:18:b2:fd:f0:d7:5e:27:0d:8f:f4: d5:1d:77:f7:53:12:79:de:d2:45:ea:39:a3:5c:ee:c3:a4:e0: 6c:95:0d:c2:4d:30:80:f7:db:22:65:99:a4:8d:58:28:86:16: ce:90:27:44:bb:30:d6:f6:bc:1e:6c:24:5c:47:06:07:4c:88: 26:c4:18:3d:b2:c3:1e:c9:63:d0:f0:13:75:a1:81:47:8d:c0: 30:db:b4:35:d1:2a:6c:29:d7:ce:18:2f:02:2e:f5:0e:03:da: 53:6a:d1:65:ea:16:ef:7b:73:fe:d2:e5:e7:3c:34:22:65:0f: 4e:98:0b:44:c3:1c:2c:b8:64:2a:fd:8d:ab:2a:59:74:81:8b: b3:c2:a6:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7reqiXrQez082775b2EKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNDc5ZWE1NjJkZDNhN2QwY2YyYTZlOTc4YjZiYmYzNzhm NzNjZTQwHhcNMjUxMjIxMjIwMTM5WhcNMjUxMjIyMjIwMTM5WjAzMTEwLwYDVQQD Eyg4YzU1ODFhZTllMjVmYTc4NjZhNzNhNDk4YzVhMjhkZTA5NjVlNmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveHVzEBgKdB4Qki5QhLq1O1tEqXB hmwkG1Vzuoq3/QBR1PRJwdPC31A3JYsWnRVAbmaupvyCQ41LZh0BAYXgn6Ev/DFk CQ9F1cHxhudnO95JouqiOvWnmGCRC40//VDj0u/1ktICJMeuRE1QNwPQpYmslZbx rVoxDh7RZW19Tm0nWl893KNxP7AhaEZ/mSvyoHo3VO8coH7CHU0HAu8UgwBhmgwD amNtr9zIb/ZpX7kmWF6+dHXdqc6m5GKHi+XPTIz3NiIXXCmZNa3g8OycMZCCGRQO R+j2WwZwssr1kgrEh9B5MRS6eYbnhEvfclk2fveYVD6XRUzio5lNmxn9rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxVga6eJfp4Zqc6SYxaKN4JZeamMB8GA1UdIwQY MBaAFEBHnqVi3Tp9DPKm6Xi2u/N49zzkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9lNzRhNTgtYmI5ZS00YWU5LWE3NDYt ODkzNmYwOTFmNGY0LzEvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9lNzRhNTgtYmI5ZS00YWU5LWE3NDYtODkzNmYwOTFmNGY0 LzEvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGGCbZLw RJUckvtB1vgbnVgsrUFgCVLeZmYvTVv2RzFlDYYfce9DuxU3ScBeq7q63fEe9wAc 27IrMWJWtz41ALBaYgWqFrTrXxhEhQAfboAyCicvkjlQuRwHjG1/JrAMfArOCh+a LClDZaOpR2NjHxLZLBMYsv3w114nDY/01R1391MSed7SReo5o1zuw6TgbJUNwk0w gPfbImWZpI1YKIYWzpAnRLsw1va8HmwkXEcGB0yIJsQYPbLDHslj0PATdaGBR43A MNu0NdEqbCnXzhgvAi71DgPaU2rRZeoW73tz/tLl5zw0ImUPTpgLRMMcLLhkKv2N qypZdIGLs8Km8w== -----END CERTIFICATE-----Generated at Mon Dec 22 00:26:27 2025 by rpki-client