This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json) Hash identifier: triMhiXyttm3ac2MMnTYcMoMHhYWSpsChvOIbZrHFI4= Subject key identifier: 26:A6:E7:FF:3C:B6:DA:8D:8B:C1:FE:EC:5A:D8:6A:89:0A:1A:1C:1C Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40 Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40 Certificate serial: 019AF50B6C8B2059006BBF2BA7AF5983D2C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft Manifest number: 176D Signing time: Sat 06 Dec 2025 19:02:37 +0000 Manifest this update: Sat 06 Dec 2025 19:02:37 +0000 Manifest next update: Sun 07 Dec 2025 19:02:37 +0000 Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: rmOmQK/9pNgARRtAXo9coTdZlG70R9nmM40uRieatkg=) 2: UO07512-xyl7tPlxWkeH0XFHtjw.roa (hash: FGw3ypGv9x4G+fHO0s0Uxmz/ZFgsQL9y06qgJnZxgwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:6c:8b:20:59:00:6b:bf:2b:a7:af:59:83:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40 Validity Not Before: Dec 6 19:02:37 2025 GMT Not After : Dec 7 19:02:37 2025 GMT Subject: CN=26a6e7ff3cb6da8d8bc1feec5ad86a890a1a1c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:f1:15:4c:4c:ff:1f:7d:7a:7c:32:38:a4: ad:5e:11:77:07:e9:10:85:45:42:8d:d6:c8:a2:2a: e1:c0:be:e2:3d:2f:6f:bb:2e:d3:e9:15:17:3c:4d: 5e:40:d0:2f:a2:58:e4:f2:2d:04:61:e5:44:b8:d0: c5:3b:04:d2:4c:06:0f:c8:0f:d0:1d:c8:12:9e:47: 6f:9a:c2:1b:67:d3:4d:59:85:7c:4f:4e:c2:e6:6b: ac:65:19:43:12:ad:44:ba:a8:57:bb:cf:75:82:ad: ab:49:45:05:a9:40:a7:fb:fb:11:88:01:78:48:77: 8e:cd:8c:71:40:1a:20:a9:f5:93:d9:df:10:05:d3: fb:50:fb:ba:21:eb:b1:85:9b:8d:86:84:10:ff:d3: 86:fe:df:a9:77:f9:40:be:a3:5e:80:17:74:2e:b8: b9:20:bb:2b:f5:36:c4:ee:bd:bf:27:d1:f8:fc:d3: 93:4f:26:40:0f:69:09:d7:60:75:20:2f:9a:7b:5c: ef:af:4c:dd:03:b4:b0:96:f7:80:75:84:a0:9c:91: e0:ee:77:8b:b9:db:42:02:fd:36:11:ee:4e:c9:d9: 05:2d:a7:5e:34:af:a1:67:6b:c9:bd:8b:71:74:91: f2:f5:d1:b2:80:ea:ae:d6:f0:81:51:8f:26:4b:72: e3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A6:E7:FF:3C:B6:DA:8D:8B:C1:FE:EC:5A:D8:6A:89:0A:1A:1C:1C X509v3 Authority Key Identifier: keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ae:1e:ad:d6:37:a7:f5:af:9f:5a:fd:2d:7d:d2:45:e2:d3: b7:f6:15:f7:39:3e:db:65:28:2c:cd:e4:00:e7:41:92:a6:cc: a3:85:9e:50:ba:3b:78:80:c8:50:41:70:b5:66:d3:57:f4:8c: a7:0b:93:af:1f:38:f8:88:ed:80:a4:b4:4b:42:a4:3a:8c:14: 57:be:d2:56:d0:f7:7c:ec:1f:e1:8b:2b:4d:c1:f5:a9:ea:41: 7d:53:a0:d2:21:26:ce:a8:30:eb:69:a9:88:1b:30:09:55:d9: 13:62:bf:5b:17:10:d9:1a:06:ce:9e:9c:82:0f:f9:73:ab:9c: 3c:f5:4a:5d:c4:ed:25:e3:ba:00:27:2d:ab:0d:4f:82:ed:3c: a1:30:e5:1b:08:bf:19:f9:04:54:ea:e2:3a:17:ad:12:d7:ad: 93:06:83:6e:de:3b:26:b6:4a:2c:84:03:46:c8:36:c8:c2:27: ea:80:9d:20:52:a4:87:d4:cc:39:96:c5:d7:ae:35:6e:cf:ae: e7:67:ba:c0:e3:4e:00:8a:ce:07:23:06:f9:0b:68:f1:e0:fa: 7c:b8:04:50:79:e5:68:0f:7d:b4:51:d7:77:45:de:cc:e4:2a: 06:8c:f9:8a:3f:78:68:a3:5e:3c:fa:f6:28:f5:81:f2:40:de: 49:83:f0:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C2yLIFkAa78rp69Zg9LAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZWY1ODQ5OTMwY2M5ZGQ3NDIxMWZiMzdlMjQxMTgyNDlh MWZjNDAwHhcNMjUxMjA2MTkwMjM3WhcNMjUxMjA3MTkwMjM3WjAzMTEwLwYDVQQD EygyNmE2ZTdmZjNjYjZkYThkOGJjMWZlZWM1YWQ4NmE4OTBhMWExYzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu57xFUxM/x99enwyOKStXhF3B+kQ hUVCjdbIoirhwL7iPS9vuy7T6RUXPE1eQNAvoljk8i0EYeVEuNDFOwTSTAYPyA/Q HcgSnkdvmsIbZ9NNWYV8T07C5musZRlDEq1EuqhXu891gq2rSUUFqUCn+/sRiAF4 SHeOzYxxQBogqfWT2d8QBdP7UPu6IeuxhZuNhoQQ/9OG/t+pd/lAvqNegBd0Lri5 ILsr9TbE7r2/J9H4/NOTTyZAD2kJ12B1IC+ae1zvr0zdA7SwlveAdYSgnJHg7neL udtCAv02Ee5OydkFLadeNK+hZ2vJvYtxdJHy9dGygOqu1vCBUY8mS3LjQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCam5/88ttqNi8H+7FrYaokKGhwcMB8GA1UdIwQY MBaAFEDvWEmTDMnddCEfs34kEYJJofxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTIt OWIyYzZiMDhhODRhLzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTItOWIyYzZiMDhhODRh LzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANa4erdY3 p/Wvn1r9LX3SReLTt/YV9zk+22UoLM3kAOdBkqbMo4WeULo7eIDIUEFwtWbTV/SM pwuTrx84+IjtgKS0S0KkOowUV77SVtD3fOwf4YsrTcH1qepBfVOg0iEmzqgw62mp iBswCVXZE2K/WxcQ2RoGzp6cgg/5c6ucPPVKXcTtJeO6ACctqw1Pgu08oTDlGwi/ GfkEVOriOhetEtetkwaDbt47JrZKLIQDRsg2yMIn6oCdIFKkh9TMOZbF1641bs+u 52e6wONOAIrOByMG+Qto8eD6fLgEUHnlaA99tFHXd0XezOQqBoz5ij94aKNePPr2 KPWB8kDeSYPwDA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:33:39 2025 by rpki-client