This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft File: QET9GYC6AXiKNTom_viVTtfBH5Y.mft (raw, json) Hash identifier: 1KhGxcEDBQHF/AcaoXrY0UK2xi0PDy6RHbABIi2ibAY= Subject key identifier: 23:A3:BA:9D:C7:49:9E:2E:13:9B:49:6A:81:F6:6D:20:A4:4C:4A:A1 Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96 Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96 Certificate serial: 019B3DC7DA678C4C82C9D4816C4AC68B3253 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft Manifest number: 0E71 Signing time: Sat 20 Dec 2025 22:01:06 +0000 Manifest this update: Sat 20 Dec 2025 22:01:06 +0000 Manifest next update: Sun 21 Dec 2025 22:01:06 +0000 Files and hashes: 1: QET9GYC6AXiKNTom_viVTtfBH5Y.crl (hash: Iz6Os8PeXNDqRLUGTSa1Kgk4uombZO87UgcZmwVj58k=) 2: VF4oENC3ROv0PkRYyOKz5znS7Lw.roa (hash: VANb10DSIL8eOlHbsJ6So28/QiKbnVdpu6HtPHf6lTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:da:67:8c:4c:82:c9:d4:81:6c:4a:c6:8b:32:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96 Validity Not Before: Dec 20 22:01:06 2025 GMT Not After : Dec 21 22:01:06 2025 GMT Subject: CN=23a3ba9dc7499e2e139b496a81f66d20a44c4aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:19:9d:32:9d:0b:67:80:cc:91:ad:a7:1b:59: fa:44:f0:65:f1:15:8a:69:10:4d:51:21:a7:81:66: 1f:bf:6f:89:30:c7:62:6a:ef:2f:0f:76:5a:a8:16: 51:06:df:3d:fa:b3:fa:bc:57:f5:33:f5:8b:81:f7: d9:01:55:36:ef:12:56:73:ab:c9:ff:25:b0:e9:6d: 71:78:97:26:b1:22:8f:6f:ce:c4:e7:e2:ee:48:ef: b7:a9:2e:88:bd:c5:d2:b9:b5:3b:35:3b:80:0a:11: d1:aa:3e:22:71:e7:10:73:7a:49:88:74:bb:ce:fa: 4d:d6:73:99:30:f6:1b:4e:8b:e3:f8:f7:43:90:c4: 0a:0d:31:12:2d:8e:da:60:dc:2f:8e:58:e4:c7:7e: c7:28:cf:77:de:d9:18:07:0d:55:00:37:8a:81:ea: f7:4a:a2:66:90:dd:2e:dd:8c:a6:0f:ce:06:2c:a8: 12:14:3b:8d:48:ef:e3:0a:28:b2:cd:2f:49:4f:13: c7:e8:d8:40:bb:1a:10:e4:28:89:2b:34:cb:4b:5e: 60:37:5f:eb:63:a1:f7:63:87:fb:69:50:7f:f8:af: 74:ef:cc:1e:ba:e5:d8:da:17:15:3f:81:8b:66:8a: ff:48:37:92:c5:a7:1b:db:ca:4a:3c:4a:8f:3b:10: 3d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A3:BA:9D:C7:49:9E:2E:13:9B:49:6A:81:F6:6D:20:A4:4C:4A:A1 X509v3 Authority Key Identifier: keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:d5:de:17:1c:3a:04:42:d9:c6:04:e9:fc:4c:13:c7:ed:38: 83:2f:be:92:71:b9:57:07:6f:94:40:d3:99:c0:03:d9:91:09: 63:f9:09:92:6e:77:a0:82:a0:4e:31:43:f0:d2:d1:2c:b9:fa: b0:d7:5d:a5:a1:c2:15:17:99:23:3e:9e:62:0d:fa:6d:77:48: 59:f2:66:67:dc:24:64:c4:5d:27:fd:9b:10:13:0c:ef:10:ef: c8:4a:eb:8d:ab:cc:71:de:ce:8b:8e:83:fa:2b:77:f2:bc:ee: b0:e9:63:5d:fc:18:95:54:44:e8:48:cc:20:75:31:a0:ea:18: 77:fd:ca:7c:3b:92:0f:67:30:54:84:42:04:89:9b:d5:d9:86: 9b:ce:e1:ae:bd:85:a7:d4:a7:4d:08:4e:5c:74:83:73:21:25: 18:1c:67:d0:cf:ca:d1:bf:f5:50:58:1c:d8:2a:00:a5:39:74: 1f:a7:db:b3:db:24:7d:2d:8a:a9:5d:28:b7:9c:3f:68:24:30: 6e:75:ca:80:13:45:f5:35:e8:9f:d4:30:8e:81:e2:35:d9:eb: 52:e1:b0:f9:32:d2:ae:06:cf:5d:4e:9c:0c:0f:38:d1:e3:d1: 09:6c:2b:86:69:6e:6e:60:67:9b:51:d8:f2:ae:46:a8:1c:9a: b4:9b:a9:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x9pnjEyCydSBbErGizJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNDRmZDE5ODBiYTAxNzg4YTM1M2EyNmZlZjg5NTRlZDdj MTFmOTYwHhcNMjUxMjIwMjIwMTA2WhcNMjUxMjIxMjIwMTA2WjAzMTEwLwYDVQQD EygyM2EzYmE5ZGM3NDk5ZTJlMTM5YjQ5NmE4MWY2NmQyMGE0NGM0YWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhmdMp0LZ4DMka2nG1n6RPBl8RWK aRBNUSGngWYfv2+JMMdiau8vD3ZaqBZRBt89+rP6vFf1M/WLgffZAVU27xJWc6vJ /yWw6W1xeJcmsSKPb87E5+LuSO+3qS6IvcXSubU7NTuAChHRqj4icecQc3pJiHS7 zvpN1nOZMPYbTovj+PdDkMQKDTESLY7aYNwvjljkx37HKM933tkYBw1VADeKger3 SqJmkN0u3YymD84GLKgSFDuNSO/jCiiyzS9JTxPH6NhAuxoQ5CiJKzTLS15gN1/r Y6H3Y4f7aVB/+K9078weuuXY2hcVP4GLZor/SDeSxacb28pKPEqPOxA9nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOjup3HSZ4uE5tJaoH2bSCkTEqhMB8GA1UdIwQY MBaAFEBE/RmAugF4ijU6Jv74lU7XwR+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUVUOUdZQzZBWGlLTlRvbV92aVZUdGZCSDVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8xNWIxNmEtZjc2Yi00MWE0LTg4YmMt OTFjZjYxNmQyYzUyLzEvUUVUOUdZQzZBWGlLTlRvbV92aVZUdGZCSDVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8xNWIxNmEtZjc2Yi00MWE0LTg4YmMtOTFjZjYxNmQyYzUy LzEvUUVUOUdZQzZBWGlLTlRvbV92aVZUdGZCSDVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNXeFxw6 BELZxgTp/EwTx+04gy++knG5VwdvlEDTmcAD2ZEJY/kJkm53oIKgTjFD8NLRLLn6 sNddpaHCFReZIz6eYg36bXdIWfJmZ9wkZMRdJ/2bEBMM7xDvyErrjavMcd7Oi46D +it38rzusOljXfwYlVRE6EjMIHUxoOoYd/3KfDuSD2cwVIRCBImb1dmGm87hrr2F p9SnTQhOXHSDcyElGBxn0M/K0b/1UFgc2CoApTl0H6fbs9skfS2KqV0ot5w/aCQw bnXKgBNF9TXon9QwjoHiNdnrUuGw+TLSrgbPXU6cDA840ePRCWwrhmlubmBnm1HY 8q5GqByatJuprg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:41:57 2025 by rpki-client