This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json) Hash identifier: KTpX8vPtO4maK38oCaa5V4Fv1sr4VcEAudYBBUiE/3g= Subject key identifier: 4D:EA:98:93:D0:C9:D7:78:95:4D:B2:28:50:D3:08:BB:BF:68:DD:93 Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97 Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997 Certificate serial: 019AF208A9AABECEAD2570103B0B6B61F32A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:00:45 +0000 Manifest this update: Sat 06 Dec 2025 05:00:45 +0000 Manifest next update: Sun 07 Dec 2025 05:00:45 +0000 Files and hashes: 1: Se8jY-LoM2MVsZ37wmyygWUdZqw.roa (hash: 460xRSiSARjue5TmuazrIkrxiYolcj28Woj0bWcIVJo=) 2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: eMQVj4ZHL2X7G0x5Dc/vkbN0BNpCYEBHZ8+Os4g6pxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a9:aa:be:ce:ad:25:70:10:3b:0b:6b:61:f3:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997 Validity Not Before: Dec 6 05:00:45 2025 GMT Not After : Dec 7 05:00:45 2025 GMT Subject: CN=4dea9893d0c9d778954db22850d308bbbf68dd93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:30:20:b1:6b:92:77:86:23:8e:2e:da:9f:30: 4f:15:c6:63:66:b4:cc:e0:5c:00:d7:0b:42:45:71: ea:01:57:ed:e2:56:11:57:d2:e7:a5:e6:81:fe:db: 23:b6:35:d9:05:32:07:e4:8f:10:2e:61:bb:f9:83: c2:1f:28:1f:3d:f0:43:ae:4b:09:5a:d5:5d:c6:a5: f3:12:6e:4a:05:4e:e0:8c:8f:cf:54:19:0e:0a:1e: b2:d2:85:aa:22:65:fc:7a:a4:1a:37:45:8f:ce:16: f0:fc:e0:33:25:01:36:1c:cf:44:98:e7:65:5b:2e: e9:f5:0d:e6:1f:06:b3:2c:d2:95:f2:9f:e2:04:88: 42:a9:8c:72:13:10:dc:5f:9c:13:c4:e2:2c:b1:bc: 24:11:b2:4a:9f:dd:ec:c6:da:3e:20:69:36:31:cb: fe:9a:a1:d1:38:63:f4:b3:ff:ee:7d:91:a7:8c:26: 25:52:16:e1:7c:35:00:be:1c:c0:e1:e9:b2:8d:ab: 3e:af:9a:14:f2:64:49:90:36:25:cb:09:ec:0d:94: f2:ab:0c:05:36:e2:df:46:33:5d:c0:5f:f9:7d:a0: f1:8f:dc:4c:a2:16:ce:8b:ed:e0:d7:29:de:3c:65: 1d:e8:ad:ae:8b:d8:4a:4f:13:3e:a2:2a:3a:31:2d: 6a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EA:98:93:D0:C9:D7:78:95:4D:B2:28:50:D3:08:BB:BF:68:DD:93 X509v3 Authority Key Identifier: keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:13:7a:d2:46:9a:96:f9:80:21:57:3c:ba:4a:53:e4:13:86: 88:90:e8:cf:32:01:24:73:0e:74:ef:2e:95:63:f3:f0:97:1a: a4:65:0b:31:c4:c6:31:a1:a8:7f:99:1f:86:4b:5d:da:40:38: 79:2a:09:99:50:a0:03:ab:47:b4:a9:a4:39:75:83:9b:5b:5f: fb:eb:3d:0a:ca:95:75:22:0d:9b:bb:00:bc:e2:87:62:a2:b6: 4e:fa:73:4e:69:f9:52:0f:46:ea:51:f7:5e:e6:1e:a1:fa:67: 90:df:ea:1e:58:55:78:a6:d0:21:c8:4c:33:bb:04:87:92:e7: 1d:b8:86:6c:71:ac:b7:e1:49:62:10:84:9f:3e:ca:1f:b4:72: 71:5a:b7:a2:c5:ac:d8:36:9e:b7:01:f8:30:6e:5c:66:16:4c: 8b:d4:fa:9d:04:f4:8d:02:89:44:9b:2d:12:df:a0:59:38:a0: ed:23:6e:04:36:63:be:df:b7:e9:ed:f3:bc:b5:d6:a2:86:9b: 2f:35:78:8e:df:44:9e:94:1f:18:de:82:e7:f4:a6:fa:e0:ed: fd:5d:cb:f4:46:7f:09:74:57:2b:16:9f:25:56:09:f5:09:c2: 2a:b0:63:7f:ad:34:60:ca:42:3e:26:d2:bd:93:4f:37:f0:c3: 86:b1:1e:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKmqvs6tJXAQOwtrYfMqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZTg5YmMzMDk3NzY4YWNkNjdjMmRkNzQ3ZDNiZTFhZGI3 MmU5OTcwHhcNMjUxMjA2MDUwMDQ1WhcNMjUxMjA3MDUwMDQ1WjAzMTEwLwYDVQQD Eyg0ZGVhOTg5M2QwYzlkNzc4OTU0ZGIyMjg1MGQzMDhiYmJmNjhkZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DAgsWuSd4Yjji7anzBPFcZjZrTM 4FwA1wtCRXHqAVft4lYRV9LnpeaB/tsjtjXZBTIH5I8QLmG7+YPCHygfPfBDrksJ WtVdxqXzEm5KBU7gjI/PVBkOCh6y0oWqImX8eqQaN0WPzhbw/OAzJQE2HM9EmOdl Wy7p9Q3mHwazLNKV8p/iBIhCqYxyExDcX5wTxOIssbwkEbJKn93sxto+IGk2Mcv+ mqHROGP0s//ufZGnjCYlUhbhfDUAvhzA4emyjas+r5oU8mRJkDYlywnsDZTyqwwF NuLfRjNdwF/5faDxj9xMohbOi+3g1ynePGUd6K2ui9hKTxM+oio6MS1q4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3qmJPQydd4lU2yKFDTCLu/aN2TMB8GA1UdIwQY MBaAFKrom8MJd2is1nwt10fTvhrbcumXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zMmU2NTAtMGNlYy00MjYyLWJjOTMt ZTNkZDc3NjQ4OWExLzEvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zMmU2NTAtMGNlYy00MjYyLWJjOTMtZTNkZDc3NjQ4OWEx LzEvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuBN60kaa lvmAIVc8ukpT5BOGiJDozzIBJHMOdO8ulWPz8JcapGULMcTGMaGof5kfhktd2kA4 eSoJmVCgA6tHtKmkOXWDm1tf++s9CsqVdSINm7sAvOKHYqK2TvpzTmn5Ug9G6lH3 XuYeofpnkN/qHlhVeKbQIchMM7sEh5LnHbiGbHGst+FJYhCEnz7KH7RycVq3osWs 2DaetwH4MG5cZhZMi9T6nQT0jQKJRJstEt+gWTig7SNuBDZjvt+36e3zvLXWooab LzV4jt9EnpQfGN6C5/Sm+uDt/V3L9EZ/CXRXKxafJVYJ9QnCKrBjf600YMpCPibS vZNPN/DDhrEe9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:34 2025 by rpki-client