This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft File: QEeepWLdOn0M8qbpeLa783j3POQ.mft (raw, json) Hash identifier: enWO9qMSIayq73AaKK6nlM04wcsGJFi5Q9LDYAt22FQ= Subject key identifier: 45:C5:95:8D:62:8B:29:70:7A:43:0C:D5:6A:11:79:47:8C:CA:BF:2B Authority key identifier: 40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4 Certificate issuer: /CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4 Certificate serial: 019AF1D2320391C599DAB2B0D0E1AC09B7E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft Manifest number: 14AF Signing time: Sat 06 Dec 2025 04:01:15 +0000 Manifest this update: Sat 06 Dec 2025 04:01:15 +0000 Manifest next update: Sun 07 Dec 2025 04:01:15 +0000 Files and hashes: 1: QEeepWLdOn0M8qbpeLa783j3POQ.crl (hash: Y3RvQM2Ra3ajIsn4h3aojyQNXxE9wIGmnu+xCG+ZHoE=) 2: kDxnmkry6GSjGehsL9ntYXTgGms.roa (hash: wkEfOOZJ9TKbc6rsvn871D/mFlSMnjRucRMB/y4Wzco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:32:03:91:c5:99:da:b2:b0:d0:e1:ac:09:b7:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4 Validity Not Before: Dec 6 04:01:15 2025 GMT Not After : Dec 7 04:01:15 2025 GMT Subject: CN=45c5958d628b29707a430cd56a1179478ccabf2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:13:43:87:33:88:7b:fe:22:db:92:f0:93: be:4f:b0:3b:cb:6e:ef:65:bc:08:67:f1:f9:a2:53: 25:27:54:1a:b6:f8:40:2f:d9:97:f2:f3:ea:aa:97: 98:64:eb:a6:d6:03:7c:7e:97:72:02:e8:02:de:b5: ef:1a:5a:3b:4e:d4:8b:a3:8a:79:06:f8:03:e0:47: 40:d4:82:85:a3:20:65:a9:1c:8b:20:e7:a9:75:e5: 81:cc:f9:a1:cd:9d:73:01:8f:fb:1c:e4:f1:0b:20: 80:11:c9:76:48:30:69:f3:f0:1e:93:3d:9c:3c:b4: de:50:9b:ff:0a:86:05:ef:1f:ed:8b:e9:1a:bf:05: 50:ed:dc:26:11:78:4f:bd:c9:fe:9b:24:a9:8c:b2: e2:7e:c9:8d:1e:9c:b6:be:31:97:e7:46:50:5e:7f: 38:41:bc:53:f4:d1:5a:3a:04:81:fb:16:e8:91:e2: cd:4d:94:77:8d:77:b1:9f:04:33:41:23:ce:74:b5: cb:a4:fc:03:b1:63:cc:fc:4e:4f:85:c0:04:67:d6: a5:44:c6:30:1b:6d:ab:bb:a9:67:cf:60:00:72:d2: 89:c5:d0:66:9b:5e:26:24:47:a9:0d:8b:d4:7a:c2: 6c:ad:3b:dd:ce:61:b7:7c:e5:cb:34:8d:28:9f:32: 1b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C5:95:8D:62:8B:29:70:7A:43:0C:D5:6A:11:79:47:8C:CA:BF:2B X509v3 Authority Key Identifier: keyid:40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:34:5d:be:1b:b6:69:55:a1:89:65:1e:7b:6f:2c:0c:f0:48: 57:cd:7b:d4:ef:d4:32:46:3a:4c:32:50:5a:45:cc:b0:0b:1e: 55:c1:a8:eb:5d:75:e1:1b:c6:54:a0:52:5a:91:d2:e7:75:b1: 12:19:0b:2d:6d:3d:5c:17:93:e7:d4:e2:d3:bd:7f:ac:7c:e1: 70:83:d8:c7:8f:9b:2e:92:7f:33:eb:6b:67:df:ff:2d:98:bd: 17:ab:57:24:76:e1:7e:ae:1f:6f:df:de:0b:aa:67:23:fd:ad: a0:30:29:fd:e3:ec:4d:e9:ac:dd:b0:a9:f7:0f:66:6c:ad:cf: 90:a8:ab:b1:8c:ac:c3:af:11:66:02:35:c5:78:35:a9:88:1d: 6c:5c:7a:9a:ec:37:a8:ae:79:49:05:42:58:93:ea:d2:8d:b6: 6f:8d:2b:65:e5:8e:1c:c0:8b:e1:e4:f0:4b:2a:bf:59:c5:d5: df:55:52:dd:eb:c2:07:6d:98:fb:42:93:e4:42:da:a9:d6:60: 80:c7:40:96:1d:c6:ce:8a:65:e3:49:eb:ed:02:2c:ff:db:39: 60:1d:12:0d:96:0d:86:ac:12:51:28:25:90:cd:f2:25:ec:b4: 16:6d:7a:33:99:9f:4e:27:95:0f:ba:1a:e8:f0:f8:08:9b:fb: 21:bb:4a:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jIDkcWZ2rKw0OGsCbfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNDc5ZWE1NjJkZDNhN2QwY2YyYTZlOTc4YjZiYmYzNzhm NzNjZTQwHhcNMjUxMjA2MDQwMTE1WhcNMjUxMjA3MDQwMTE1WjAzMTEwLwYDVQQD Eyg0NWM1OTU4ZDYyOGIyOTcwN2E0MzBjZDU2YTExNzk0NzhjY2FiZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMMTQ4cziHv+ItuS8JO+T7A7y27v ZbwIZ/H5olMlJ1QatvhAL9mX8vPqqpeYZOum1gN8fpdyAugC3rXvGlo7TtSLo4p5 BvgD4EdA1IKFoyBlqRyLIOepdeWBzPmhzZ1zAY/7HOTxCyCAEcl2SDBp8/Aekz2c PLTeUJv/CoYF7x/ti+kavwVQ7dwmEXhPvcn+mySpjLLifsmNHpy2vjGX50ZQXn84 QbxT9NFaOgSB+xbokeLNTZR3jXexnwQzQSPOdLXLpPwDsWPM/E5PhcAEZ9alRMYw G22ru6lnz2AActKJxdBmm14mJEepDYvUesJsrTvdzmG3fOXLNI0onzIb3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXFlY1iiylwekMM1WoReUeMyr8rMB8GA1UdIwQY MBaAFEBHnqVi3Tp9DPKm6Xi2u/N49zzkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9lNzRhNTgtYmI5ZS00YWU5LWE3NDYt ODkzNmYwOTFmNGY0LzEvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9lNzRhNTgtYmI5ZS00YWU5LWE3NDYtODkzNmYwOTFmNGY0 LzEvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjRdvhu2 aVWhiWUee28sDPBIV8171O/UMkY6TDJQWkXMsAseVcGo61114RvGVKBSWpHS53Wx EhkLLW09XBeT59Ti071/rHzhcIPYx4+bLpJ/M+trZ9//LZi9F6tXJHbhfq4fb9/e C6pnI/2toDAp/ePsTems3bCp9w9mbK3PkKirsYysw68RZgI1xXg1qYgdbFx6muw3 qK55SQVCWJPq0o22b40rZeWOHMCL4eTwSyq/WcXV31VS3evCB22Y+0KT5ELaqdZg gMdAlh3Gzopl40nr7QIs/9s5YB0SDZYNhqwSUSglkM3yJey0Fm16M5mfTieVD7oa 6PD4CJv7IbtKdw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:36 2025 by rpki-client