This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft File: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft (raw, json) Hash identifier: Yl0CsyY20cwVPrnptQvrfOktbO++sEwx4Xz9U/1Vr5A= Subject key identifier: 00:BC:F4:04:7C:17:DD:6B:10:B0:4C:91:7B:DC:6A:12:BD:9E:FB:20 Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA Certificate issuer: /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba Certificate serial: 019B96D4B20EED158CF1C264FC092CCC90BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft Manifest number: 0818 Signing time: Wed 07 Jan 2026 05:01:20 +0000 Manifest this update: Wed 07 Jan 2026 05:01:20 +0000 Manifest next update: Thu 08 Jan 2026 05:01:20 +0000 Files and hashes: 1: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl (hash: g3QCZM5V2K5iTSdUcYZALRM8rvJSdmQskN9Ts2D3nlU=) 2: VBelpQwcAQaQvThvEwysdwbgrak.roa (hash: UGGt4tB1S8FTbx+5vNuFXFdkEAnx40jxbwqWiMzAMAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:96:d4:b2:0e:ed:15:8c:f1:c2:64:fc:09:2c:cc:90:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba Validity Not Before: Jan 7 05:01:20 2026 GMT Not After : Jan 8 05:01:20 2026 GMT Subject: CN=00bcf4047c17dd6b10b04c917bdc6a12bd9efb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bb:14:9c:5c:76:27:42:6b:50:f7:c3:43:cc: 7a:38:1d:48:6e:37:00:22:0b:05:45:53:ef:80:be: 54:61:9b:59:ff:da:4e:bb:c7:ec:ca:26:31:cd:b6: aa:87:ba:cc:b0:71:d6:82:1c:67:60:de:3c:53:00: 89:c5:42:8b:f0:bb:55:8b:f3:8b:8f:92:33:cb:31: ad:ae:e6:29:65:e8:1d:dd:49:23:07:c2:6a:47:07: be:5d:41:d8:d6:4c:f4:6f:34:ce:66:4e:90:29:d8: ce:68:58:9b:8b:b6:15:df:b3:38:45:7e:84:dd:52: ba:f6:cf:8b:34:f1:d2:e1:b2:c7:57:60:fe:d8:58: 19:4b:4d:e3:bc:ae:0c:95:e9:15:b3:ed:d4:6a:10: 49:05:55:ea:6c:6a:21:2d:f7:b5:84:17:6a:34:07: 7a:2d:cd:68:a2:89:fa:23:57:14:d0:84:21:7a:30: 0f:32:a0:0c:7e:1a:71:d1:79:db:82:d4:a5:29:90: 49:a8:b3:ad:17:24:4c:83:76:f2:d7:63:74:b0:5a: e5:b6:06:b3:93:37:ef:c2:af:84:ef:45:bc:9a:57: e8:3c:7f:ae:18:cd:38:4a:a0:c7:10:eb:7a:b2:ab: 36:11:37:f7:ed:7e:93:65:c4:c7:e9:04:fa:cf:a3: 0c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BC:F4:04:7C:17:DD:6B:10:B0:4C:91:7B:DC:6A:12:BD:9E:FB:20 X509v3 Authority Key Identifier: keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f3:60:0f:a3:5c:f7:a7:34:5b:c8:8d:ab:f6:e0:74:c8:10: 3d:90:19:01:74:fa:6c:d8:bd:0b:64:a8:c3:c1:e6:b8:ef:ab: 8c:7a:a2:94:90:f2:eb:c9:b4:96:e7:69:17:4a:d9:4b:78:f3: d1:67:08:66:38:b8:df:08:2c:b2:ac:55:01:9d:8f:d2:20:f4: 07:39:8f:7d:e8:f8:be:b3:88:25:50:5d:00:e2:cb:41:31:f7: b6:97:cd:39:1f:3d:ae:ce:e1:8a:cf:61:c7:1f:cc:28:f2:aa: 46:29:6e:ac:ca:e3:58:04:85:c6:c7:5f:90:7a:f6:4f:2d:50: 61:77:b3:f5:d2:2a:7d:ca:e5:ff:e4:f7:38:0c:97:26:a4:38: ef:5a:e7:ce:10:4d:52:2e:99:c3:59:f2:c0:32:f3:ce:e4:b2: a8:27:0b:ee:4a:6e:8a:56:e7:86:22:1e:c9:f0:0a:30:31:17: 2d:9b:b4:02:ea:54:92:9b:e3:74:e9:59:b6:4f:c5:25:f8:c0: 69:07:fb:f0:c6:27:b3:1d:a8:b0:14:0e:0e:dc:9a:90:6f:fe: 43:de:2a:de:89:20:53:1a:ec:8c:76:10:e0:b6:d5:bf:2b:9c: 23:81:9e:73:0e:2c:37:83:8a:c4:d6:32:86:76:d0:49:65:34: 65:48:24:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuW1LIO7RWM8cJk/AkszJC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYTc1ZWY5MDM2ZjVjMTQzZTU3ZGZhZmJjOTJjMDI1NWMz MTU5YmEwHhcNMjYwMTA3MDUwMTIwWhcNMjYwMTA4MDUwMTIwWjAzMTEwLwYDVQQD EygwMGJjZjQwNDdjMTdkZDZiMTBiMDRjOTE3YmRjNmExMmJkOWVmYjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rsUnFx2J0JrUPfDQ8x6OB1IbjcA IgsFRVPvgL5UYZtZ/9pOu8fsyiYxzbaqh7rMsHHWghxnYN48UwCJxUKL8LtVi/OL j5IzyzGtruYpZegd3UkjB8JqRwe+XUHY1kz0bzTOZk6QKdjOaFibi7YV37M4RX6E 3VK69s+LNPHS4bLHV2D+2FgZS03jvK4MlekVs+3UahBJBVXqbGohLfe1hBdqNAd6 Lc1ooon6I1cU0IQhejAPMqAMfhpx0XnbgtSlKZBJqLOtFyRMg3by12N0sFrltgaz kzfvwq+E70W8mlfoPH+uGM04SqDHEOt6sqs2ETf37X6TZcTH6QT6z6MM6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAC89AR8F91rELBMkXvcahK9nvsgMB8GA1UdIwQY MBaAFOKnXvkDb1wUPlffr7ySwCVcMVm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHFkZS1RTnZYQlEtVjktdnZKTEFKVnd4V2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNGQ0MTEtOTk2Ni00MjkxLWFhNTkt ZjkwODUwZTc0Mjk2LzEvNHFkZS1RTnZYQlEtVjktdnZKTEFKVnd4V2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kNGQ0MTEtOTk2Ni00MjkxLWFhNTktZjkwODUwZTc0Mjk2 LzEvNHFkZS1RTnZYQlEtVjktdnZKTEFKVnd4V2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvNgD6Nc 96c0W8iNq/bgdMgQPZAZAXT6bNi9C2Sow8HmuO+rjHqilJDy68m0ludpF0rZS3jz 0WcIZji43wgssqxVAZ2P0iD0BzmPfej4vrOIJVBdAOLLQTH3tpfNOR89rs7his9h xx/MKPKqRilurMrjWASFxsdfkHr2Ty1QYXez9dIqfcrl/+T3OAyXJqQ471rnzhBN Ui6Zw1nywDLzzuSyqCcL7kpuilbnhiIeyfAKMDEXLZu0AupUkpvjdOlZtk/FJfjA aQf78MYnsx2osBQODtyakG/+Q94q3okgUxrsjHYQ4LbVvyucI4Gecw4sN4OKxNYy hnbQSWU0ZUgk5g== -----END CERTIFICATE-----Generated at Wed Jan 7 07:10:01 2026 by rpki-client