This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft File: quarBHvHMpbJcVvLrq4ukYMWt4o.mft (raw, json) Hash identifier: J/AzWVpVsCrw5NYmIPslJfI/Y897PN67Q1u3ADr9hrI= Subject key identifier: 83:6F:85:EE:94:42:C8:13:A4:56:65:0C:EB:30:C2:3E:29:AA:33:31 Authority key identifier: AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A Certificate issuer: /CN=aae6ab047bc73296c9715bcbaeae2e918316b78a Certificate serial: 019AF5AEC4B9B1054FF7A61B28862B379BB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft Manifest number: 0731 Signing time: Sat 06 Dec 2025 22:01:02 +0000 Manifest this update: Sat 06 Dec 2025 22:01:02 +0000 Manifest next update: Sun 07 Dec 2025 22:01:02 +0000 Files and hashes: 1: quarBHvHMpbJcVvLrq4ukYMWt4o.crl (hash: VIzR+rmFqLihipNj18SICywJl/ld8QMUCtiCCikvOug=) 2: uYoqxUmmvNO7Wii7YVSG5anWzrY.roa (hash: aA074fRdJxXnyU4wE12JFVrrch97b4B8/lsvIbEFtt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:c4:b9:b1:05:4f:f7:a6:1b:28:86:2b:37:9b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae6ab047bc73296c9715bcbaeae2e918316b78a Validity Not Before: Dec 6 22:01:02 2025 GMT Not After : Dec 7 22:01:02 2025 GMT Subject: CN=836f85ee9442c813a456650ceb30c23e29aa3331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:96:1d:a3:e1:85:36:d6:69:00:46:e1:cc:77: 68:72:a9:83:70:90:25:00:ea:67:99:05:e2:4e:7a: e8:9a:9a:ef:8f:53:b5:16:ba:3d:43:22:ae:32:8c: f5:51:8a:12:46:c3:e5:3f:44:7c:7e:a3:df:48:16: 2a:11:5a:0c:a0:db:8b:ea:c1:9c:ed:11:96:d8:08: 6c:e9:ea:f5:d0:67:a4:99:8a:42:df:99:3b:c5:3d: cb:be:77:1d:0d:0e:59:e9:d9:2a:b3:72:70:2e:02: 5a:5d:5e:dc:e5:36:df:ec:63:20:ee:67:c1:8f:27: 60:97:89:9e:ff:72:0d:9f:43:39:cf:fb:4f:84:fc: d9:ab:3c:1b:46:09:36:d7:06:95:46:ce:49:c7:cf: cf:2c:ec:55:7d:9a:68:32:16:24:85:a0:7c:fe:a9: 0f:d3:85:48:25:41:d6:c9:4b:11:8c:2f:f9:69:0f: a2:64:f1:79:22:59:ec:d1:16:e9:e2:96:d9:d7:c5: 68:9b:0d:e7:05:97:b9:b0:4f:d7:fc:00:9a:fc:b9: ab:28:c9:16:e0:a6:a2:cc:73:dc:31:4e:0a:f5:29: 53:ff:25:a3:ad:a4:d9:62:be:ba:2b:dd:ac:9d:bc: 4b:38:59:e3:4f:61:82:73:6f:3d:d0:e6:a2:dc:d4: 0b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6F:85:EE:94:42:C8:13:A4:56:65:0C:EB:30:C2:3E:29:AA:33:31 X509v3 Authority Key Identifier: keyid:AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2b:74:cb:b0:58:55:c5:c8:c8:17:34:b7:d4:9b:06:31:a1: d5:ab:39:61:7e:81:7f:fb:47:d6:5a:cd:e9:13:2a:36:bd:19: ef:ec:16:3d:22:ff:32:8c:00:af:df:ce:0b:f6:d3:61:cc:81: b0:1d:2f:80:0f:05:0c:05:50:39:20:19:18:55:f2:93:14:73: c8:00:13:d1:ff:1f:a0:b0:2b:5e:85:e1:50:db:7b:c3:57:6b: 7a:c4:ca:50:15:2c:95:18:15:0a:03:3f:a0:6e:68:ad:2b:d0: 79:2f:2d:5e:05:c6:46:28:01:cc:8b:b6:ef:f7:56:90:3f:11: 4f:a8:b9:58:94:bc:3d:95:46:05:8a:24:66:20:eb:bb:47:62: c9:e4:71:57:78:cb:74:65:18:d6:5f:36:95:05:9e:0b:f8:f9: 56:1e:12:75:08:2e:23:4c:4b:5a:18:bd:c7:e1:71:1a:c8:34: c9:a8:00:ad:57:cd:5f:bf:b1:5d:e2:db:75:50:f5:9d:9c:56: 85:1f:38:7a:e8:24:a4:70:ec:c3:71:40:e2:c6:d7:2c:7a:b9: e0:9f:8d:f5:47:39:c6:b3:bf:24:c9:aa:6d:78:7e:70:ba:2c: dc:64:51:c4:18:6a:79:48:82:e2:c2:70:41:f0:36:e9:ee:e2: cc:cc:f9:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rsS5sQVP96YbKIYrN5uxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZTZhYjA0N2JjNzMyOTZjOTcxNWJjYmFlYWUyZTkxODMx NmI3OGEwHhcNMjUxMjA2MjIwMTAyWhcNMjUxMjA3MjIwMTAyWjAzMTEwLwYDVQQD Eyg4MzZmODVlZTk0NDJjODEzYTQ1NjY1MGNlYjMwYzIzZTI5YWEzMzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35Ydo+GFNtZpAEbhzHdocqmDcJAl AOpnmQXiTnromprvj1O1Fro9QyKuMoz1UYoSRsPlP0R8fqPfSBYqEVoMoNuL6sGc 7RGW2Ahs6er10GekmYpC35k7xT3LvncdDQ5Z6dkqs3JwLgJaXV7c5Tbf7GMg7mfB jydgl4me/3INn0M5z/tPhPzZqzwbRgk21waVRs5Jx8/PLOxVfZpoMhYkhaB8/qkP 04VIJUHWyUsRjC/5aQ+iZPF5Ilns0Rbp4pbZ18Vomw3nBZe5sE/X/ACa/LmrKMkW 4KaizHPcMU4K9SlT/yWjraTZYr66K92snbxLOFnjT2GCc2890Oai3NQL3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINvhe6UQsgTpFZlDOswwj4pqjMxMB8GA1UdIwQY MBaAFKrmqwR7xzKWyXFby66uLpGDFreKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXVhckJIdkhNcGJKY1Z2THJxNHVrWU1XdDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zZTgwMmUtZmFiOC00NGZjLTk5MWIt MmI1MDY5M2RiZjk1LzEvcXVhckJIdkhNcGJKY1Z2THJxNHVrWU1XdDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8zZTgwMmUtZmFiOC00NGZjLTk5MWItMmI1MDY5M2RiZjk1 LzEvcXVhckJIdkhNcGJKY1Z2THJxNHVrWU1XdDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyt0y7BY VcXIyBc0t9SbBjGh1as5YX6Bf/tH1lrN6RMqNr0Z7+wWPSL/MowAr9/OC/bTYcyB sB0vgA8FDAVQOSAZGFXykxRzyAAT0f8foLArXoXhUNt7w1dresTKUBUslRgVCgM/ oG5orSvQeS8tXgXGRigBzIu27/dWkD8RT6i5WJS8PZVGBYokZiDru0diyeRxV3jL dGUY1l82lQWeC/j5Vh4SdQguI0xLWhi9x+FxGsg0yagArVfNX7+xXeLbdVD1nZxW hR84eugkpHDsw3FA4sbXLHq54J+N9Uc5xrO/JMmqbXh+cLos3GRRxBhqeUiC4sJw QfA26e7izMz5qw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:57 2025 by rpki-client