This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft File: QET9GYC6AXiKNTom_viVTtfBH5Y.mft (raw, json) Hash identifier: ZRqlvqo+96bjFtBDGM1x1yF6PMfFoSok1yh70vofwfE= Subject key identifier: 0D:85:C2:D3:D1:15:9C:72:A7:3B:29:F1:4B:AB:65:C8:79:30:56:69 Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96 Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96 Certificate serial: 019AF276653DA47768E01DE322DA3D472C31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft Manifest number: 0E4A Signing time: Sat 06 Dec 2025 07:00:36 +0000 Manifest this update: Sat 06 Dec 2025 07:00:36 +0000 Manifest next update: Sun 07 Dec 2025 07:00:36 +0000 Files and hashes: 1: QET9GYC6AXiKNTom_viVTtfBH5Y.crl (hash: obD/f9EdET+KfLSeePFIz/aOgXRq1DbsG2UFrW9r13Q=) 2: VF4oENC3ROv0PkRYyOKz5znS7Lw.roa (hash: VANb10DSIL8eOlHbsJ6So28/QiKbnVdpu6HtPHf6lTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:65:3d:a4:77:68:e0:1d:e3:22:da:3d:47:2c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96 Validity Not Before: Dec 6 07:00:36 2025 GMT Not After : Dec 7 07:00:36 2025 GMT Subject: CN=0d85c2d3d1159c72a73b29f14bab65c879305669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:85:b8:c6:ef:62:b9:45:0f:8e:ca:f1:87: fb:59:ba:77:2a:b4:91:f9:03:9b:58:fe:6b:fb:47: 06:32:89:d9:4a:55:b5:fb:79:cc:a7:e5:ec:c8:fb: a3:1d:b0:33:cb:a5:c0:19:e5:a2:1c:37:73:61:a5: db:7e:8e:af:5c:c8:f9:b4:31:be:74:c2:48:d1:fb: 59:33:cf:e6:a5:88:79:94:23:0a:18:ec:28:53:39: 6c:d3:96:b4:9a:6a:fe:8e:56:25:92:6b:c4:95:6e: eb:4e:8a:56:f0:14:1a:be:1c:ab:dd:ad:aa:24:35: 4d:18:79:04:ab:2b:16:ce:13:63:b5:bd:96:10:b4: 83:91:b0:08:f7:75:f1:e3:b3:1e:43:5b:fa:a5:1c: fc:cc:26:6b:05:72:ff:e8:aa:e5:b6:9c:1f:ac:19: 27:72:e4:38:04:7b:14:67:6e:5a:9b:3e:c8:a1:37: 9f:5a:6e:af:de:6f:1c:88:b6:d3:83:cf:08:cd:be: 4b:00:81:a3:dc:b8:9e:2d:f8:5a:d9:fa:cf:bc:11: 1d:b4:78:df:ac:ad:28:19:39:d7:26:e1:3b:91:50: 75:28:4a:0d:d6:d3:c2:79:30:e0:f3:46:62:d3:4c: 8e:3d:50:22:a7:d3:d6:91:c2:d2:7b:22:ba:5c:8e: ec:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:85:C2:D3:D1:15:9C:72:A7:3B:29:F1:4B:AB:65:C8:79:30:56:69 X509v3 Authority Key Identifier: keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f6:12:e9:4e:8c:01:a6:13:ec:90:06:f8:45:79:f1:13:ed: 07:1b:cb:1f:bb:34:b9:1b:a5:7d:ee:a5:0d:f6:1d:05:a0:18: f0:62:f5:fb:89:25:9a:fd:03:d0:cd:05:04:02:d2:4b:28:85: 44:a3:76:78:8f:cf:4b:21:7c:72:ed:e9:8f:9e:6a:55:f7:d3: 0f:73:74:77:5c:99:38:24:bb:ac:eb:61:75:9b:27:a1:58:0a: a8:9b:1f:a2:36:c8:30:2c:81:6f:99:f5:b7:10:9d:cb:73:50: b8:62:dd:48:a5:4d:97:d1:e5:e7:70:af:54:25:08:d4:86:ff: 6e:64:e2:4b:01:41:62:70:b1:bb:6e:06:57:e6:71:2c:76:54: 7f:d5:b7:f7:3b:72:fe:8f:8a:ed:f8:1b:ba:c2:6e:96:75:80: 0f:a1:9b:6b:22:29:80:e0:95:61:54:4e:a0:76:cd:98:30:18: 75:24:e4:ef:37:d5:64:6b:d5:d8:bb:1e:f6:28:c5:ca:a6:e9: 23:47:68:da:a0:61:f8:c8:05:03:3c:27:19:16:56:d5:25:8a: 29:7a:78:0c:2e:90:c2:5f:3d:72:c1:e5:01:2f:e5:40:88:a6: b0:38:38:80:49:20:18:01:67:ca:54:0d:eb:ff:72:87:70:2a: cd:c3:a1:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmU9pHdo4B3jIto9RywxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNDRmZDE5ODBiYTAxNzg4YTM1M2EyNmZlZjg5NTRlZDdj MTFmOTYwHhcNMjUxMjA2MDcwMDM2WhcNMjUxMjA3MDcwMDM2WjAzMTEwLwYDVQQD EygwZDg1YzJkM2QxMTU5YzcyYTczYjI5ZjE0YmFiNjVjODc5MzA1NjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4qFuMbvYrlFD47K8Yf7Wbp3KrSR +QObWP5r+0cGMonZSlW1+3nMp+XsyPujHbAzy6XAGeWiHDdzYaXbfo6vXMj5tDG+ dMJI0ftZM8/mpYh5lCMKGOwoUzls05a0mmr+jlYlkmvElW7rTopW8BQavhyr3a2q JDVNGHkEqysWzhNjtb2WELSDkbAI93Xx47MeQ1v6pRz8zCZrBXL/6KrltpwfrBkn cuQ4BHsUZ25amz7IoTefWm6v3m8ciLbTg88Izb5LAIGj3LieLfha2frPvBEdtHjf rK0oGTnXJuE7kVB1KEoN1tPCeTDg80Zi00yOPVAip9PWkcLSeyK6XI7scwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2FwtPRFZxypzsp8UurZch5MFZpMB8GA1UdIwQY MBaAFEBE/RmAugF4ijU6Jv74lU7XwR+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUVUOUdZQzZBWGlLTlRvbV92aVZUdGZCSDVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8xNWIxNmEtZjc2Yi00MWE0LTg4YmMt OTFjZjYxNmQyYzUyLzEvUUVUOUdZQzZBWGlLTlRvbV92aVZUdGZCSDVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8xNWIxNmEtZjc2Yi00MWE0LTg4YmMtOTFjZjYxNmQyYzUy LzEvUUVUOUdZQzZBWGlLTlRvbV92aVZUdGZCSDVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfYS6U6M AaYT7JAG+EV58RPtBxvLH7s0uRulfe6lDfYdBaAY8GL1+4klmv0D0M0FBALSSyiF RKN2eI/PSyF8cu3pj55qVffTD3N0d1yZOCS7rOthdZsnoVgKqJsfojbIMCyBb5n1 txCdy3NQuGLdSKVNl9Hl53CvVCUI1Ib/bmTiSwFBYnCxu24GV+ZxLHZUf9W39zty /o+K7fgbusJulnWAD6GbayIpgOCVYVROoHbNmDAYdSTk7zfVZGvV2Lse9ijFyqbp I0do2qBh+MgFAzwnGRZW1SWKKXp4DC6Qwl89csHlAS/lQIimsDg4gEkgGAFnylQN 6/9yh3AqzcOhvg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:57 2025 by rpki-client