This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json) Hash identifier: yAxCVHHRGJtD3N6juKejRMRWItikEVwikj+yxDpkWH8= Subject key identifier: 7C:49:88:34:0C:4D:19:84:ED:EF:BB:4F:FE:55:A9:38:2D:B1:F9:4F Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80 Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580 Certificate serial: 019AF31C86FA35CF3EA5CF7A8513F80DC3F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft Manifest number: 0B6F Signing time: Sat 06 Dec 2025 10:02:04 +0000 Manifest this update: Sat 06 Dec 2025 10:02:04 +0000 Manifest next update: Sun 07 Dec 2025 10:02:04 +0000 Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: 8sTaJIOsg5FP6rrQh8CVs8p+NMNcIfBsrvTzUvNwnl0=) 2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:86:fa:35:cf:3e:a5:cf:7a:85:13:f8:0d:c3:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580 Validity Not Before: Dec 6 10:02:04 2025 GMT Not After : Dec 7 10:02:04 2025 GMT Subject: CN=7c4988340c4d1984edefbb4ffe55a9382db1f94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e9:1f:54:e9:1b:02:3f:86:eb:67:40:dc:da: b2:2a:e0:23:38:a5:d2:d3:89:5f:61:30:69:4f:5c: 3d:11:73:94:fc:44:2a:32:c6:c3:3e:81:68:44:28: 77:c3:d5:6d:f2:76:01:fd:c7:94:8d:7a:dd:b5:37: a9:01:c2:b7:b6:9c:38:cf:95:b2:40:07:90:33:7b: a4:d7:7a:9e:47:5e:62:5b:da:28:e6:a3:eb:a0:2e: d9:a1:02:31:68:8f:2f:67:c8:36:7d:68:c0:5e:b1: 5b:62:1e:99:a2:86:ee:c6:57:72:94:10:39:f3:78: a2:95:aa:d6:ba:c7:ed:62:81:9f:59:ee:a8:ff:08: f4:63:e8:93:d1:9c:9b:77:f9:c8:64:0a:c2:69:09: 68:8b:5c:d2:ab:3a:8e:23:00:8d:01:b6:84:d0:b5: 55:04:30:be:ba:d8:dc:a8:18:c3:51:34:5b:ed:21: ac:ba:38:6b:18:aa:eb:ab:36:62:28:fe:b9:1e:02: a3:c8:de:a5:a9:6d:9c:49:a1:79:94:6d:e4:a3:64: 11:13:c6:f7:53:59:25:d6:34:cd:65:da:d1:c0:ae: 32:d3:96:9f:89:d9:11:70:74:4b:4a:54:2b:a2:4e: db:18:c5:20:0f:b6:b1:ad:d6:29:a5:1c:38:13:85: 90:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:49:88:34:0C:4D:19:84:ED:EF:BB:4F:FE:55:A9:38:2D:B1:F9:4F X509v3 Authority Key Identifier: keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:36:64:fd:cd:c7:28:7c:97:c5:f6:37:f9:7d:c2:98:9b:5c: 7b:42:33:97:80:69:6e:0e:4b:ad:89:af:4c:41:3d:a3:1b:92: d1:7a:4c:bc:c6:c6:49:7f:d8:1e:7f:80:ea:99:38:44:14:76: b5:c9:be:6e:4e:fa:24:19:65:a8:fb:f7:02:ed:96:1c:29:2f: a3:1a:8e:86:f4:87:b3:6b:41:9b:1c:6a:f4:bb:dd:a1:df:e1: b2:12:49:30:97:e5:11:8c:ac:77:be:24:13:89:57:ad:00:e5: d8:f7:b9:69:5e:9c:89:3d:1b:3e:31:44:cd:9d:08:69:7a:93: 06:c9:cc:c6:ab:d1:9e:0a:53:7f:22:f1:22:48:6b:3a:3d:fb: 69:ad:0c:0d:9e:3a:eb:a8:4c:ad:55:3f:8b:7d:0b:12:a3:87: 2f:5d:63:83:37:a6:18:07:58:52:de:2e:3e:66:e6:ad:b5:ae: b1:8f:45:ef:62:8a:79:b5:70:16:0f:07:dd:c4:49:bf:1b:d7: ff:e9:c4:2c:8e:4e:47:97:f8:22:49:7c:3e:b3:71:a3:1a:88: 0d:27:e7:58:d6:85:d8:95:7c:a2:48:e7:6a:7e:6d:d7:d5:e1: 41:a1:2b:a5:de:dd:b4:46:78:d8:53:72:1a:23:92:35:45:25: bd:aa:d9:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHIb6Nc8+pc96hRP4DcP0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZTA5ZGZiOWRjZWY4YTUzMmZiMjExZDJlOGE2NTQ2Y2Vm OWY1ODAwHhcNMjUxMjA2MTAwMjA0WhcNMjUxMjA3MTAwMjA0WjAzMTEwLwYDVQQD Eyg3YzQ5ODgzNDBjNGQxOTg0ZWRlZmJiNGZmZTU1YTkzODJkYjFmOTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxukfVOkbAj+G62dA3NqyKuAjOKXS 04lfYTBpT1w9EXOU/EQqMsbDPoFoRCh3w9Vt8nYB/ceUjXrdtTepAcK3tpw4z5Wy QAeQM3uk13qeR15iW9oo5qProC7ZoQIxaI8vZ8g2fWjAXrFbYh6ZoobuxldylBA5 83iilarWusftYoGfWe6o/wj0Y+iT0Zybd/nIZArCaQloi1zSqzqOIwCNAbaE0LVV BDC+utjcqBjDUTRb7SGsujhrGKrrqzZiKP65HgKjyN6lqW2cSaF5lG3ko2QRE8b3 U1kl1jTNZdrRwK4y05afidkRcHRLSlQrok7bGMUgD7axrdYppRw4E4WQ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxJiDQMTRmE7e+7T/5VqTgtsflPMB8GA1UdIwQY MBaAFEHgnfudzvilMvshHS6KZUbO+fWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAt MjBiZmE3OGM5YTFiLzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAtMjBiZmE3OGM5YTFi LzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjZk/c3H KHyXxfY3+X3CmJtce0Izl4Bpbg5LrYmvTEE9oxuS0XpMvMbGSX/YHn+A6pk4RBR2 tcm+bk76JBllqPv3Au2WHCkvoxqOhvSHs2tBmxxq9Lvdod/hshJJMJflEYysd74k E4lXrQDl2Pe5aV6ciT0bPjFEzZ0IaXqTBsnMxqvRngpTfyLxIkhrOj37aa0MDZ46 66hMrVU/i30LEqOHL11jgzemGAdYUt4uPmbmrbWusY9F72KKebVwFg8H3cRJvxvX /+nELI5OR5f4Ikl8PrNxoxqIDSfnWNaF2JV8okjnan5t19XhQaErpd7dtEZ42FNy GiOSNUUlvarZTg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:10 2025 by rpki-client