This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft File: QntUBuzauOW0DdxUvGFcoqcJIvE.mft (raw, json) Hash identifier: DwP+CGRhQkIYxOa4iAsRQQWm8PWk8G9yy1hk/nJ2/k8= Subject key identifier: 94:1B:F4:65:90:0F:64:84:6C:B9:46:94:EE:91:DB:16:0F:74:48:A2 Authority key identifier: 42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1 Certificate issuer: /CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1 Certificate serial: 019B25BFB0433C534CF2B52AF170E3F3B573 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft Manifest number: 127A Signing time: Tue 16 Dec 2025 06:01:18 +0000 Manifest this update: Tue 16 Dec 2025 06:01:18 +0000 Manifest next update: Wed 17 Dec 2025 06:01:18 +0000 Files and hashes: 1: CF9g-zHrIl6sH7ffAFMheYKTmgE.roa (hash: 8JftFhjM60lS0dv+t4PfyHWDIpIU5Mke1ZAPszJPPn0=) 2: QntUBuzauOW0DdxUvGFcoqcJIvE.crl (hash: NQC0rbiWPXWPp7H5Ru8tBOMRe9FxYfjrw1oSM7ygCsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:b0:43:3c:53:4c:f2:b5:2a:f1:70:e3:f3:b5:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1 Validity Not Before: Dec 16 06:01:18 2025 GMT Not After : Dec 17 06:01:18 2025 GMT Subject: CN=941bf465900f64846cb94694ee91db160f7448a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:38:b8:b2:72:76:26:d0:44:66:de:e4:5e: 92:d8:8c:7c:68:20:bb:0c:72:23:55:f6:fe:8a:f9: e6:fd:21:49:28:92:67:f5:5f:d4:bc:83:69:30:3f: 9f:c9:c2:ff:ab:44:e9:1d:b0:96:e1:d5:01:0f:88: cb:08:8a:4d:fc:dc:e8:eb:e9:ec:74:20:27:35:06: 71:68:1a:a4:de:9a:ae:78:ce:96:e0:61:c3:72:90: 0f:51:7c:7a:68:01:80:de:c1:01:eb:a2:38:de:68: cc:16:ab:e1:b5:12:58:98:67:ad:77:fd:5d:b5:55: bc:f5:a9:c2:e9:77:f1:0a:7a:58:a2:ca:90:29:e8: 98:32:02:12:29:f0:cd:34:11:9d:f9:eb:fc:f9:18: e9:4f:a9:7d:fb:2f:a2:da:8e:76:3c:32:e0:18:15: ae:d6:65:c4:45:dd:63:33:84:e9:8c:3b:5e:d3:34: 43:f6:c3:31:41:ae:30:5e:f4:eb:31:a9:91:a7:9a: e8:28:3c:23:55:29:20:78:5b:c2:6d:74:e6:58:35: 96:bf:2a:4c:01:c9:c8:ea:87:64:b0:c7:03:19:60: 87:1d:ac:80:b2:b7:dc:41:d3:e7:b9:70:44:d5:26: 6a:c4:4c:f3:0a:75:0c:f6:1c:fe:84:09:4f:9a:67: 82:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1B:F4:65:90:0F:64:84:6C:B9:46:94:EE:91:DB:16:0F:74:48:A2 X509v3 Authority Key Identifier: keyid:42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:92:20:eb:0c:08:58:ba:28:9b:8a:79:07:27:4a:58:ed:2c: de:b7:76:6e:dd:43:d7:45:7a:3d:44:b1:af:cd:c9:35:62:5a: 45:61:08:3b:2a:02:b7:96:23:b0:cb:61:d9:1a:4f:55:5b:23: dd:e9:ad:4d:a4:e4:36:78:25:e8:5d:6d:21:c3:41:92:b7:5a: ca:f9:19:b3:26:77:8b:7d:06:2d:af:be:b0:54:7f:f7:21:7a: ec:c1:b7:4c:91:0a:90:6a:15:28:4a:56:ea:97:44:b3:ea:c1: 0f:f3:2b:9a:fa:9d:f1:7d:7c:46:77:a2:9a:8f:8b:31:ee:49: 31:11:44:26:04:74:fd:74:11:6f:6a:b4:5e:b3:b2:d0:35:5c: 92:e4:da:fe:19:91:12:03:e6:c1:5b:90:61:81:95:86:05:f5: 62:b5:b2:82:85:8c:99:8b:04:33:7a:5c:32:5a:5c:10:09:68: 74:68:c2:c1:93:7f:97:ea:da:72:3b:4f:5e:b9:e1:d1:3f:c9: 77:2e:09:b1:36:f1:50:27:e9:3f:ce:6f:7e:bd:33:76:b6:ab: 49:31:f8:76:6c:39:46:40:9e:d5:0c:c1:41:01:de:1c:ae:1c: 4b:37:07:c2:2d:13:1d:b1:02:7d:e5:c7:40:a9:66:9a:c1:40: a0:88:95:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv7BDPFNM8rUq8XDj87VzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyN2I1NDA2ZWNkYWI4ZTViNDBkZGM1NGJjNjE1Y2EyYTcw OTIyZjEwHhcNMjUxMjE2MDYwMTE4WhcNMjUxMjE3MDYwMTE4WjAzMTEwLwYDVQQD Eyg5NDFiZjQ2NTkwMGY2NDg0NmNiOTQ2OTRlZTkxZGIxNjBmNzQ0OGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuws4uLJydibQRGbe5F6S2Ix8aCC7 DHIjVfb+ivnm/SFJKJJn9V/UvINpMD+fycL/q0TpHbCW4dUBD4jLCIpN/Nzo6+ns dCAnNQZxaBqk3pqueM6W4GHDcpAPUXx6aAGA3sEB66I43mjMFqvhtRJYmGetd/1d tVW89anC6XfxCnpYosqQKeiYMgISKfDNNBGd+ev8+RjpT6l9+y+i2o52PDLgGBWu 1mXERd1jM4TpjDte0zRD9sMxQa4wXvTrMamRp5roKDwjVSkgeFvCbXTmWDWWvypM AcnI6odksMcDGWCHHayAsrfcQdPnuXBE1SZqxEzzCnUM9hz+hAlPmmeCQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQb9GWQD2SEbLlGlO6R2xYPdEiiMB8GA1UdIwQY MBaAFEJ7VAbs2rjltA3cVLxhXKKnCSLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW50VUJ1emF1T1cwRGR4VXZHRmNvcWNKSXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8yNzhiN2QtY2Y0My00YWMyLWFkNmIt N2JjMTJhNjJhMGQzLzEvUW50VUJ1emF1T1cwRGR4VXZHRmNvcWNKSXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8yNzhiN2QtY2Y0My00YWMyLWFkNmItN2JjMTJhNjJhMGQz LzEvUW50VUJ1emF1T1cwRGR4VXZHRmNvcWNKSXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4pIg6wwI WLoom4p5BydKWO0s3rd2bt1D10V6PUSxr83JNWJaRWEIOyoCt5YjsMth2RpPVVsj 3emtTaTkNngl6F1tIcNBkrdayvkZsyZ3i30GLa++sFR/9yF67MG3TJEKkGoVKEpW 6pdEs+rBD/Mrmvqd8X18Rneimo+LMe5JMRFEJgR0/XQRb2q0XrOy0DVckuTa/hmR EgPmwVuQYYGVhgX1YrWygoWMmYsEM3pcMlpcEAlodGjCwZN/l+racjtPXrnh0T/J dy4JsTbxUCfpP85vfr0zdrarSTH4dmw5RkCe1QzBQQHeHK4cSzcHwi0THbECfeXH QKlmmsFAoIiVvg== -----END CERTIFICATE-----Generated at Tue Dec 16 13:40:22 2025 by rpki-client