This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json) Hash identifier: AuEpfcS/QA/PVyEbpBBRxOyltBhoYIjh3ml3xTt5u/o= Subject key identifier: 62:93:8D:86:73:94:07:F9:1C:B4:7E:1E:8C:9F:CF:9E:B1:D0:DF:51 Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72 Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72 Certificate serial: 019B3DC770301702170D714604A5972F0833 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 22:00:38 +0000 Manifest this update: Sat 20 Dec 2025 22:00:38 +0000 Manifest next update: Sun 21 Dec 2025 22:00:38 +0000 Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: UCzdMu0fpXRIjXwJZRa/KTx3jXnpwF5WdfDg23OmzJM=) 2: aIPJ4lm4ZyremkDprutiWRNEZ90.roa (hash: Kp0nR22T2kDefAUNT5QJL0kBQwplOU/6USLq0OiGG/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:70:30:17:02:17:0d:71:46:04:a5:97:2f:08:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72 Validity Not Before: Dec 20 22:00:38 2025 GMT Not After : Dec 21 22:00:38 2025 GMT Subject: CN=62938d86739407f91cb47e1e8c9fcf9eb1d0df51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:df:f7:bf:d5:6e:ec:9b:37:4f:43:2e:a5:6b: 02:6b:e5:28:69:31:fe:c4:60:b8:d8:93:33:39:d1: c8:cc:60:3a:08:17:38:6e:be:f1:23:61:e7:22:49: 0f:08:2e:c1:27:c9:63:95:4b:45:44:9f:c3:ce:27: 98:90:db:c8:2c:5f:a4:1a:e6:aa:ec:26:54:f4:dd: c2:7e:bd:56:52:92:41:d2:6f:66:83:85:c8:a3:47: c1:80:18:8c:22:04:03:25:47:8f:f8:53:ac:3e:4f: 1b:98:5e:ec:48:f0:47:cb:93:1c:cc:28:e7:cc:a8: e1:58:fd:40:65:17:a2:5a:74:a3:ea:df:af:3b:69: ab:6d:27:b6:8d:b6:a7:3e:2f:fb:f2:bc:01:dd:d6: c4:50:d4:5e:75:29:ef:63:a3:e2:67:5c:07:25:a0: 6d:da:9b:b3:32:ef:c8:02:ff:d1:39:85:05:96:fc: 53:8b:ab:c8:a7:eb:db:e1:8b:41:33:86:e3:44:99: 1b:02:8b:5b:43:30:a7:96:e3:ae:5a:03:14:82:93: 18:dc:e9:cc:90:0c:36:8a:f0:8d:ba:da:a1:91:29: de:2b:2f:81:33:0b:3d:d6:03:46:54:97:16:ea:0a: 5a:7b:cd:c4:57:b2:45:ca:78:db:98:3d:5e:2f:d1: 9e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:93:8D:86:73:94:07:F9:1C:B4:7E:1E:8C:9F:CF:9E:B1:D0:DF:51 X509v3 Authority Key Identifier: keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ac:55:cc:b6:f0:4c:29:db:fd:12:92:d5:6d:c9:3f:6d:2a: d4:13:be:6f:25:11:be:03:2c:24:49:8a:71:89:a3:c7:0c:a8: f6:31:26:ce:2e:76:32:6f:f3:9c:07:54:b2:bb:7b:e1:81:e4: ca:0f:87:31:ec:52:30:e8:4f:79:63:8b:73:b5:d4:f8:83:f9: 84:46:0b:cc:12:5e:c4:9a:9d:17:87:3d:ea:ef:fc:5a:fe:1d: c3:96:62:12:30:5c:8e:c9:0d:04:44:4e:57:12:b9:3d:0c:a9: 28:a3:bf:8b:43:8d:4f:18:00:32:f3:ab:a9:92:eb:19:12:0f: 62:f1:6d:3c:7a:19:8f:f8:77:ca:7c:ec:ff:49:79:18:e1:ce: c2:a9:8f:64:b2:53:40:4a:cb:f6:18:1b:b2:2d:5a:4d:c1:44: 8a:dd:57:44:88:c9:e1:a7:b0:7f:25:59:08:9d:17:1e:58:79: 6e:37:2d:22:ef:c2:8c:f3:81:af:7a:ea:b6:0e:0b:88:2e:d3: 8e:8a:b8:9d:60:10:2d:88:05:be:0b:40:de:63:48:9c:9c:42: 78:72:0e:43:5a:fc:b9:a4:56:09:37:62:21:cb:83:ec:43:12: dd:ec:c5:6c:42:b4:c4:67:c7:3c:91:84:97:68:e1:91:1c:01: 21:e1:dd:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x3AwFwIXDXFGBKWXLwgzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNDRmYTU0NDAwYmM2Y2ZjMzBjYjgzMTFhODE5ZDViZGE0 MjFhNzIwHhcNMjUxMjIwMjIwMDM4WhcNMjUxMjIxMjIwMDM4WjAzMTEwLwYDVQQD Eyg2MjkzOGQ4NjczOTQwN2Y5MWNiNDdlMWU4YzlmY2Y5ZWIxZDBkZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9/3v9Vu7Js3T0MupWsCa+UoaTH+ xGC42JMzOdHIzGA6CBc4br7xI2HnIkkPCC7BJ8ljlUtFRJ/DzieYkNvILF+kGuaq 7CZU9N3Cfr1WUpJB0m9mg4XIo0fBgBiMIgQDJUeP+FOsPk8bmF7sSPBHy5MczCjn zKjhWP1AZReiWnSj6t+vO2mrbSe2jbanPi/78rwB3dbEUNRedSnvY6PiZ1wHJaBt 2puzMu/IAv/ROYUFlvxTi6vIp+vb4YtBM4bjRJkbAotbQzCnluOuWgMUgpMY3OnM kAw2ivCNutqhkSneKy+BMws91gNGVJcW6gpae83EV7JFynjbmD1eL9GezwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKTjYZzlAf5HLR+Hoyfz56x0N9RMB8GA1UdIwQY MBaAFEBE+lRAC8bPwwy4MRqBnVvaQhpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEt YmI0MzNiYTQ3NmYyLzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEtYmI0MzNiYTQ3NmYy LzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKxVzLbw TCnb/RKS1W3JP20q1BO+byURvgMsJEmKcYmjxwyo9jEmzi52Mm/znAdUsrt74YHk yg+HMexSMOhPeWOLc7XU+IP5hEYLzBJexJqdF4c96u/8Wv4dw5ZiEjBcjskNBERO VxK5PQypKKO/i0ONTxgAMvOrqZLrGRIPYvFtPHoZj/h3ynzs/0l5GOHOwqmPZLJT QErL9hgbsi1aTcFEit1XRIjJ4aewfyVZCJ0XHlh5bjctIu/CjPOBr3rqtg4LiC7T joq4nWAQLYgFvgtA3mNInJxCeHIOQ1r8uaRWCTdiIcuD7EMS3ezFbEK0xGfHPJGE l2jhkRwBIeHdLA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:26:27 2025 by rpki-client