This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json) Hash identifier: 8f3WnOMWx5OCTM3dPRB8omv440w7lJmoEENz6DmdWwc= Subject key identifier: B8:31:30:62:0C:79:7F:9F:33:6A:2A:D1:E9:2C:76:8F:1A:77:35:02 Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80 Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580 Certificate serial: 019B32D71EAE08C9FB4879E2529F6B363D8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft Manifest number: 0B90 Signing time: Thu 18 Dec 2025 19:01:57 +0000 Manifest this update: Thu 18 Dec 2025 19:01:57 +0000 Manifest next update: Fri 19 Dec 2025 19:01:57 +0000 Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: 9NRf3dVtpYaVbLoM36rh/Qbq2MqBxMlnN+3ebR2RasY=) 2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:1e:ae:08:c9:fb:48:79:e2:52:9f:6b:36:3d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580 Validity Not Before: Dec 18 19:01:57 2025 GMT Not After : Dec 19 19:01:57 2025 GMT Subject: CN=b83130620c797f9f336a2ad1e92c768f1a773502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:b7:c2:17:20:53:56:74:68:c5:39:11:b6: 13:40:78:bf:1c:48:26:f0:a7:52:5f:a2:5a:dc:e5: 2b:7b:43:2c:27:64:cd:59:d7:20:f6:0e:61:7b:4d: 16:60:f6:41:94:37:59:4f:de:b3:a4:df:e4:ce:cb: 8a:80:9b:2b:b0:54:6e:a5:8d:2b:a1:2b:42:1f:e5: 74:49:47:e3:eb:2f:0d:d4:c1:18:45:4d:17:77:72: 5d:59:e6:74:29:e7:97:c2:47:a9:07:3c:83:66:20: 6c:9e:c1:82:ab:f5:cb:b0:50:22:68:6c:4a:a3:22: 7d:8b:1a:46:8e:f3:3d:ad:22:f4:8c:59:00:a2:06: 4a:04:e5:16:bb:68:79:fa:bb:8b:1d:7a:19:a3:d8: b7:59:c3:dc:66:6e:36:e8:0d:34:24:02:6f:fb:17: 0d:92:ff:76:25:38:89:77:17:e0:03:e0:ae:5b:7c: 56:f3:18:37:27:7f:f0:a0:e0:c9:58:e7:e4:fa:b5: de:43:81:5c:1a:84:ad:df:98:90:e3:23:07:fa:25: 0a:37:88:74:74:f4:75:b2:cf:4f:58:71:54:b8:bb: 9a:00:8a:cb:3e:3a:8e:2a:9f:fc:b9:5a:22:cf:e6: 3c:c2:34:50:69:38:21:a2:be:42:89:fa:17:c6:47: 84:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:31:30:62:0C:79:7F:9F:33:6A:2A:D1:E9:2C:76:8F:1A:77:35:02 X509v3 Authority Key Identifier: keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:29:f6:d7:44:c0:b3:47:93:2a:c6:88:05:73:95:fd:a5:e8: 1a:25:22:82:92:02:25:1f:26:15:7f:6e:89:8a:5e:8b:6e:f4: 96:4e:0d:76:24:54:ed:02:02:2b:b1:0e:5d:24:39:e9:a7:9e: 13:68:57:4c:6c:8c:c1:12:ef:a4:71:a6:cb:ce:08:37:c6:77: a8:66:b3:9e:a7:b7:1e:a8:29:c9:01:60:37:0b:cd:f4:72:96: 04:68:c1:2c:42:8e:ec:35:22:e4:3e:cc:a8:db:ac:8c:a2:07: 7c:f8:f7:c2:4e:a2:71:81:f7:d6:45:b7:71:46:c4:08:28:08: c9:87:cc:cb:35:ef:bf:36:10:34:8f:46:cc:93:55:88:4a:05: cc:01:7e:12:0d:b5:af:91:2e:c3:de:a8:92:e5:9d:59:b4:48: 27:b4:1b:e7:91:6b:08:bd:a6:5a:d2:14:08:e4:e1:14:3e:9a: 72:2c:bd:cf:8e:e1:74:eb:10:95:5b:b5:26:8f:13:29:a1:28: 6a:0d:97:2e:78:97:1d:4b:46:d6:95:4f:5c:ca:2c:9f:21:37: 47:1e:c8:2b:69:88:ac:6e:42:ac:fe:fd:3c:b6:cd:0d:e1:23: 33:21:5d:d1:98:98:1f:2c:bf:3e:61:5d:6e:a2:a9:7d:ec:1b: 0d:83:35:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1x6uCMn7SHniUp9rNj2NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZTA5ZGZiOWRjZWY4YTUzMmZiMjExZDJlOGE2NTQ2Y2Vm OWY1ODAwHhcNMjUxMjE4MTkwMTU3WhcNMjUxMjE5MTkwMTU3WjAzMTEwLwYDVQQD EyhiODMxMzA2MjBjNzk3ZjlmMzM2YTJhZDFlOTJjNzY4ZjFhNzczNTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzom3whcgU1Z0aMU5EbYTQHi/HEgm 8KdSX6Ja3OUre0MsJ2TNWdcg9g5he00WYPZBlDdZT96zpN/kzsuKgJsrsFRupY0r oStCH+V0SUfj6y8N1MEYRU0Xd3JdWeZ0KeeXwkepBzyDZiBsnsGCq/XLsFAiaGxK oyJ9ixpGjvM9rSL0jFkAogZKBOUWu2h5+ruLHXoZo9i3WcPcZm426A00JAJv+xcN kv92JTiJdxfgA+CuW3xW8xg3J3/woODJWOfk+rXeQ4FcGoSt35iQ4yMH+iUKN4h0 dPR1ss9PWHFUuLuaAIrLPjqOKp/8uVoiz+Y8wjRQaTghor5CifoXxkeE1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgxMGIMeX+fM2oq0eksdo8adzUCMB8GA1UdIwQY MBaAFEHgnfudzvilMvshHS6KZUbO+fWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAt MjBiZmE3OGM5YTFiLzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAtMjBiZmE3OGM5YTFi LzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSn210TA s0eTKsaIBXOV/aXoGiUigpICJR8mFX9uiYpei270lk4NdiRU7QICK7EOXSQ56aee E2hXTGyMwRLvpHGmy84IN8Z3qGaznqe3HqgpyQFgNwvN9HKWBGjBLEKO7DUi5D7M qNusjKIHfPj3wk6icYH31kW3cUbECCgIyYfMyzXvvzYQNI9GzJNViEoFzAF+Eg21 r5Euw96okuWdWbRIJ7Qb55FrCL2mWtIUCOThFD6aciy9z47hdOsQlVu1Jo8TKaEo ag2XLniXHUtG1pVPXMosnyE3Rx7IK2mIrG5CrP79PLbNDeEjMyFd0ZiYHyy/PmFd bqKpfewbDYM1Ew== -----END CERTIFICATE-----Generated at Fri Dec 19 02:25:04 2025 by rpki-client