This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft File: Qe4efs0wuAogBvU4_OY7JCDFe-k.mft (raw, json) Hash identifier: U86z5sGySwVx1tc4P32wFnEqc6xrx+8CVmYqiUMCdBg= Subject key identifier: 91:E8:58:A5:6A:03:CA:B7:18:F6:33:C1:E8:2E:D7:69:EE:CB:45:37 Authority key identifier: 41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9 Certificate issuer: /CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9 Certificate serial: 019B45134ABADDB31DC0C630578AD1A7E0F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft Manifest number: 0426 Signing time: Mon 22 Dec 2025 08:00:50 +0000 Manifest this update: Mon 22 Dec 2025 08:00:50 +0000 Manifest next update: Tue 23 Dec 2025 08:00:50 +0000 Files and hashes: 1: Qe4efs0wuAogBvU4_OY7JCDFe-k.crl (hash: KPs12ei5zvYgl2+s8xnnPtOwWRkpAGa/7tBrCh+qygQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:4a:ba:dd:b3:1d:c0:c6:30:57:8a:d1:a7:e0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9 Validity Not Before: Dec 22 08:00:50 2025 GMT Not After : Dec 23 08:00:50 2025 GMT Subject: CN=91e858a56a03cab718f633c1e82ed769eecb4537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:27:2a:43:7a:80:09:1f:85:e1:15:6e:2a:96: 9d:a6:12:8d:90:a7:56:3f:01:ef:cf:98:55:e6:30: f1:ea:e9:01:a5:51:f0:7e:2f:84:72:4c:bf:64:65: 50:70:98:d0:3e:2a:25:54:80:58:f1:a5:4c:99:23: 99:66:90:36:84:60:72:7a:3e:70:20:2d:e9:27:36: 1a:96:4b:ae:71:dd:6f:b8:12:a2:bf:a2:67:03:dc: be:cc:df:c9:86:69:ee:1e:2f:73:d7:b3:72:69:f6: 2b:62:30:6b:66:87:36:7d:bd:4a:55:be:75:cd:44: b9:3f:af:00:63:99:00:a3:cc:05:33:fb:f9:c6:15: c4:02:9e:5e:ed:ef:0c:25:72:fb:00:4a:1e:b4:15: 97:2e:9d:73:7b:6e:11:c4:64:d2:52:5a:ed:80:c3: a6:ce:4c:be:fe:d2:55:71:31:05:78:15:3b:e7:c9: e5:8d:8f:51:c1:c1:d3:35:87:31:2e:69:0d:57:63: c7:ca:c7:34:6e:81:77:30:87:a8:51:5d:d4:de:e0: bd:bf:46:59:9f:0a:b7:37:f0:84:b1:ee:d0:aa:c0: 98:ff:ec:9d:31:53:af:cd:6f:b7:9d:47:f6:20:30: 77:08:a3:3b:6d:0a:f4:34:2a:78:bb:80:7a:a1:22: 97:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E8:58:A5:6A:03:CA:B7:18:F6:33:C1:E8:2E:D7:69:EE:CB:45:37 X509v3 Authority Key Identifier: keyid:41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:94:c3:92:12:16:57:e3:74:12:13:5d:02:00:f9:9e:ed:0a: 6d:32:2d:32:3b:55:f7:01:b5:bb:8c:c3:0e:5e:b7:3d:5a:9c: 70:92:71:66:3b:6f:26:a6:cd:7f:df:4b:80:67:ae:df:89:df: 45:0c:02:44:52:18:16:3a:3f:0e:c5:59:43:85:eb:0a:c7:dd: 19:90:91:79:f9:d1:9b:6d:71:73:f0:6a:96:95:60:9a:90:74: 39:13:f1:49:19:f8:75:17:d4:c1:a5:2e:1d:c8:ab:86:1f:da: dc:a9:f7:8f:8b:4e:b0:a5:cd:54:e5:3b:99:53:93:fd:ab:96: 72:a0:f2:00:4d:9b:8e:a9:e7:17:78:d7:93:44:f5:25:06:fd: 49:b3:17:55:da:b3:95:a1:a6:ac:55:9d:ba:6a:2d:17:71:85: 6a:f9:d3:91:3b:1b:c2:11:cd:ba:27:db:b9:57:ae:d6:97:85: d0:b3:92:c9:42:a3:23:81:71:75:a8:12:23:72:b0:9d:b4:22: 5b:f0:6c:a5:ba:37:7d:1c:33:2f:6d:d6:d1:00:45:d8:84:9c: 38:8e:cf:56:c0:de:52:d6:80:8a:a0:19:dd:d8:9d:93:f6:b1: fc:87:bd:62:9e:e6:02:64:c8:b0:53:c0:98:e0:ee:2d:bd:74: b0:d6:b9:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE0q63bMdwMYwV4rRp+DxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZWUxZTdlY2QzMGI4MGEyMDA2ZjUzOGZjZTYzYjI0MjBj NTdiZTkwHhcNMjUxMjIyMDgwMDUwWhcNMjUxMjIzMDgwMDUwWjAzMTEwLwYDVQQD Eyg5MWU4NThhNTZhMDNjYWI3MThmNjMzYzFlODJlZDc2OWVlY2I0NTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CcqQ3qACR+F4RVuKpadphKNkKdW PwHvz5hV5jDx6ukBpVHwfi+Ecky/ZGVQcJjQPiolVIBY8aVMmSOZZpA2hGByej5w IC3pJzYalkuucd1vuBKiv6JnA9y+zN/JhmnuHi9z17NyafYrYjBrZoc2fb1KVb51 zUS5P68AY5kAo8wFM/v5xhXEAp5e7e8MJXL7AEoetBWXLp1ze24RxGTSUlrtgMOm zky+/tJVcTEFeBU758nljY9RwcHTNYcxLmkNV2PHysc0boF3MIeoUV3U3uC9v0ZZ nwq3N/CEse7QqsCY/+ydMVOvzW+3nUf2IDB3CKM7bQr0NCp4u4B6oSKXjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHoWKVqA8q3GPYzwegu12nuy0U3MB8GA1UdIwQY MBaAFEHuHn7NMLgKIAb1OPzmOyQgxXvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWU0ZWZzMHd1QW9nQnZVNF9PWTdKQ0RGZS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNDc4NWItN2NiNi00Nzc1LWE4YWMt NTcyODhmN2YzMDg4LzEvUWU0ZWZzMHd1QW9nQnZVNF9PWTdKQ0RGZS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hNDc4NWItN2NiNi00Nzc1LWE4YWMtNTcyODhmN2YzMDg4 LzEvUWU0ZWZzMHd1QW9nQnZVNF9PWTdKQ0RGZS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJTDkhIW V+N0EhNdAgD5nu0KbTItMjtV9wG1u4zDDl63PVqccJJxZjtvJqbNf99LgGeu34nf RQwCRFIYFjo/DsVZQ4XrCsfdGZCRefnRm21xc/BqlpVgmpB0ORPxSRn4dRfUwaUu Hcirhh/a3Kn3j4tOsKXNVOU7mVOT/auWcqDyAE2bjqnnF3jXk0T1JQb9SbMXVdqz laGmrFWdumotF3GFavnTkTsbwhHNuifbuVeu1peF0LOSyUKjI4FxdagSI3KwnbQi W/Bspbo3fRwzL23W0QBF2IScOI7PVsDeUtaAiqAZ3didk/ax/Ie9Yp7mAmTIsFPA mODuLb10sNa5rg== -----END CERTIFICATE-----Generated at Mon Dec 22 11:35:57 2025 by rpki-client