This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft File: QEeepWLdOn0M8qbpeLa783j3POQ.mft (raw, json) Hash identifier: HY8FodG6XXE/oavqNxgHSHMg/Kd/09S9Sdl9KN/AhvE= Subject key identifier: 63:AC:8C:38:DC:21:6F:58:D8:12:5A:29:43:84:6F:4D:B2:46:5A:8D Authority key identifier: 40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4 Certificate issuer: /CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4 Certificate serial: 019B2DB05F9CFCF7B65E4BC372E84054501F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft Manifest number: 14CE Signing time: Wed 17 Dec 2025 19:01:31 +0000 Manifest this update: Wed 17 Dec 2025 19:01:31 +0000 Manifest next update: Thu 18 Dec 2025 19:01:31 +0000 Files and hashes: 1: QEeepWLdOn0M8qbpeLa783j3POQ.crl (hash: 4iLmphDyFCgKEJfhugC0ztZ8HAEAbyvOwQiS2qLdi9A=) 2: kDxnmkry6GSjGehsL9ntYXTgGms.roa (hash: wkEfOOZJ9TKbc6rsvn871D/mFlSMnjRucRMB/y4Wzco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:5f:9c:fc:f7:b6:5e:4b:c3:72:e8:40:54:50:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4 Validity Not Before: Dec 17 19:01:31 2025 GMT Not After : Dec 18 19:01:31 2025 GMT Subject: CN=63ac8c38dc216f58d8125a2943846f4db2465a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e6:7b:25:aa:fc:0e:40:eb:6e:25:93:1e:ac: c9:ef:8c:c7:8b:23:87:9c:99:e5:b6:85:e5:09:d6: f0:3c:9d:74:58:b9:23:3e:39:09:71:69:b4:b9:0a: 30:3c:b9:b8:71:8b:36:f7:31:57:ad:7a:4c:f2:d1: 45:fb:69:75:7b:8e:19:66:d3:ec:68:dc:ca:98:85: 4e:51:16:4e:27:48:e6:79:1e:cd:44:45:ed:71:f9: f9:11:86:1c:a1:07:c2:b3:4d:47:65:17:f5:04:cb: 01:91:cc:d7:19:c3:2b:7e:66:6e:bc:7b:85:a1:08: d2:5b:26:4a:ff:51:16:73:fc:86:32:52:37:8a:3e: 10:6d:2e:b4:04:59:6e:9d:45:37:0a:6e:bb:6c:5f: 01:88:30:e0:22:6e:51:f4:30:ab:64:44:4c:82:fb: 5f:b1:08:e4:51:66:a0:8c:30:b2:f0:b9:3b:f3:ee: d3:6d:a3:8f:60:5b:9c:5e:d1:7e:7c:92:dc:f8:d5: ae:f7:fe:f1:77:27:b5:cd:fe:05:ab:f5:c9:83:fd: d2:dc:f3:24:73:1d:94:98:c2:bc:22:c7:91:fb:6e: 7d:ba:75:43:97:7d:dc:e1:99:6f:1d:59:5e:0d:3b: 68:7b:4c:d9:2c:81:0a:ea:da:bb:62:ee:a7:94:33: 7b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AC:8C:38:DC:21:6F:58:D8:12:5A:29:43:84:6F:4D:B2:46:5A:8D X509v3 Authority Key Identifier: keyid:40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:11:75:bc:6a:e3:62:ce:bc:9d:1c:99:8d:9d:36:d3:de:44: 04:76:9b:3d:bd:6d:49:c0:e3:0b:75:b9:f9:28:1f:25:0e:91: 97:1e:47:87:f9:9a:17:04:26:5b:42:0c:fc:ec:0b:4e:a4:f9: 4c:b9:ce:a3:86:0f:80:f3:37:6d:ff:a2:f4:39:4a:be:da:6e: 41:e7:b5:2b:71:0d:a2:40:4e:38:76:47:94:d7:0a:35:23:a2: 8a:f7:2f:86:3c:c4:5a:f9:4e:40:b5:8e:3b:83:0a:fe:1b:c1: 19:5f:1b:f7:7e:45:89:ef:68:d6:e1:ba:69:99:e0:37:b5:99: ae:ca:e8:8b:c2:ac:e7:3c:27:51:14:e6:78:cd:4c:07:a7:63: 4f:e3:33:18:de:0e:f4:bd:30:9e:a3:c6:71:99:31:89:db:ca: 6b:da:c8:37:2b:db:73:31:21:05:23:e4:5e:b9:ec:4a:02:e8: 37:ae:20:5f:ab:67:fd:5f:2a:9d:04:d5:b3:cc:17:2d:16:01: 0d:05:d7:9d:53:1d:a4:21:fd:74:41:79:f5:4c:20:ec:5d:65: 1c:5a:31:1a:27:08:be:94:7c:ce:4a:4d:0d:9c:ce:58:b3:e5: 37:30:68:6c:b9:e3:a4:56:33:86:15:4d:a8:a8:8d:3b:1a:dd: 8e:49:14:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsF+c/Pe2XkvDcuhAVFAfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNDc5ZWE1NjJkZDNhN2QwY2YyYTZlOTc4YjZiYmYzNzhm NzNjZTQwHhcNMjUxMjE3MTkwMTMxWhcNMjUxMjE4MTkwMTMxWjAzMTEwLwYDVQQD Eyg2M2FjOGMzOGRjMjE2ZjU4ZDgxMjVhMjk0Mzg0NmY0ZGIyNDY1YThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+Z7Jar8DkDrbiWTHqzJ74zHiyOH nJnltoXlCdbwPJ10WLkjPjkJcWm0uQowPLm4cYs29zFXrXpM8tFF+2l1e44ZZtPs aNzKmIVOURZOJ0jmeR7NREXtcfn5EYYcoQfCs01HZRf1BMsBkczXGcMrfmZuvHuF oQjSWyZK/1EWc/yGMlI3ij4QbS60BFlunUU3Cm67bF8BiDDgIm5R9DCrZERMgvtf sQjkUWagjDCy8Lk78+7TbaOPYFucXtF+fJLc+NWu9/7xdye1zf4Fq/XJg/3S3PMk cx2UmMK8IseR+259unVDl33c4ZlvHVleDTtoe0zZLIEK6tq7Yu6nlDN72wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOsjDjcIW9Y2BJaKUOEb02yRlqNMB8GA1UdIwQY MBaAFEBHnqVi3Tp9DPKm6Xi2u/N49zzkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9lNzRhNTgtYmI5ZS00YWU5LWE3NDYt ODkzNmYwOTFmNGY0LzEvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9lNzRhNTgtYmI5ZS00YWU5LWE3NDYtODkzNmYwOTFmNGY0 LzEvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBF1vGrj Ys68nRyZjZ02095EBHabPb1tScDjC3W5+SgfJQ6Rlx5Hh/maFwQmW0IM/OwLTqT5 TLnOo4YPgPM3bf+i9DlKvtpuQee1K3ENokBOOHZHlNcKNSOiivcvhjzEWvlOQLWO O4MK/hvBGV8b935Fie9o1uG6aZngN7WZrsroi8Ks5zwnURTmeM1MB6djT+MzGN4O 9L0wnqPGcZkxidvKa9rINyvbczEhBSPkXrnsSgLoN64gX6tn/V8qnQTVs8wXLRYB DQXXnVMdpCH9dEF59Uwg7F1lHFoxGicIvpR8zkpNDZzOWLPlNzBobLnjpFYzhhVN qKiNOxrdjkkUdA== -----END CERTIFICATE-----Generated at Wed Dec 17 23:42:41 2025 by rpki-client