This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft File: Quv9iRe1jwaG2T60jeQh7AE3Csk.mft (raw, json) Hash identifier: TaU3/wB/h2HRW7dsLZC003eSNKWUhrI7ma3GIGRDen0= Subject key identifier: 2E:66:06:16:65:C9:AF:3D:DE:5F:9D:CD:DD:85:78:D1:45:CB:00:7A Authority key identifier: 42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9 Certificate issuer: /CN=42ebfd8917b58f0686d93eb48de421ec01370ac9 Certificate serial: 019B25C011F1497BD0848D8077C16F7107FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft Manifest number: 177B Signing time: Tue 16 Dec 2025 06:01:42 +0000 Manifest this update: Tue 16 Dec 2025 06:01:42 +0000 Manifest next update: Wed 17 Dec 2025 06:01:42 +0000 Files and hashes: 1: Dct1KnHlMjQEBf8FzrUaVj8hNPo.roa (hash: GFTblhcJpBtD5bZfbGwg+0xfnKk6qwYm9g5i1rXxbnw=) 2: Quv9iRe1jwaG2T60jeQh7AE3Csk.crl (hash: 4IzcGoCHitPt4NlCrrmyEZLplJ6LjVhsyu2Rrfn0mbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:c0:11:f1:49:7b:d0:84:8d:80:77:c1:6f:71:07:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ebfd8917b58f0686d93eb48de421ec01370ac9 Validity Not Before: Dec 16 06:01:42 2025 GMT Not After : Dec 17 06:01:42 2025 GMT Subject: CN=2e66061665c9af3dde5f9dcddd8578d145cb007a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e6:82:6d:25:71:84:1b:5d:7b:2d:86:1d:0d: cc:a0:16:dc:76:e0:6b:14:1a:af:3b:d8:59:52:89: f3:ea:b1:b4:66:a5:7f:8e:90:54:ba:c8:96:b4:92: 61:a5:5a:f8:94:72:3f:a1:98:1a:8e:e3:0f:eb:aa: 75:58:07:c2:32:0f:95:27:5b:39:f5:0c:bd:f5:06: 71:4c:b8:55:8f:2c:9f:c8:60:18:88:bc:a0:9d:e1: e1:16:3c:1e:48:a2:18:35:b2:66:05:ab:03:86:51: 16:bd:a6:a7:3c:07:c3:fa:fd:35:4e:8a:b6:cb:65: 92:6a:27:9b:88:e5:20:cf:83:30:50:50:32:4e:34: 79:b3:72:07:4e:8a:b8:fd:30:b5:54:e3:2e:87:5f: 6b:3b:68:87:4e:1c:be:53:2c:f3:f7:47:0e:39:d3: 0a:33:10:d6:b8:df:45:06:ac:51:9f:ea:2a:63:00: 83:48:97:65:e3:77:db:5e:e4:28:c0:fd:86:5b:27: 7c:ea:4c:54:7d:5f:e6:77:7a:9e:d7:43:03:bb:1a: 84:4e:94:6d:0b:53:fe:4e:ce:4b:79:aa:2e:52:24: 34:7d:46:c3:fe:7b:58:cc:bc:28:b6:50:5b:11:27: 09:f9:9b:31:18:48:49:2d:b8:d6:a1:c0:db:24:42: 54:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:66:06:16:65:C9:AF:3D:DE:5F:9D:CD:DD:85:78:D1:45:CB:00:7A X509v3 Authority Key Identifier: keyid:42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:5b:93:ac:91:c7:23:91:81:00:8c:ca:51:b7:ed:a3:a6:71: 02:df:2a:22:d4:6c:61:3a:d8:df:45:6c:2f:58:63:f5:cd:a4: 15:50:ad:f6:7a:41:ff:38:6e:17:e3:36:72:de:ac:6e:e7:b4: 19:cf:43:b2:18:b4:8e:90:2d:b9:a8:2f:a0:e8:b1:4c:a8:2f: a8:67:6d:de:b4:3f:f4:68:b6:9a:ee:1a:34:58:fd:dc:bf:b9: 33:18:72:1f:58:0a:17:0e:c7:9c:a3:7e:25:c8:94:a4:3c:71: 9d:b7:db:12:93:0d:ec:0a:b1:1e:cf:24:8d:7e:64:9e:fa:5f: 9b:3d:38:5c:eb:82:ba:45:9d:a1:1f:85:ca:51:db:e6:81:3f: 92:a0:e7:74:85:97:44:f9:d2:8c:43:14:d1:4c:de:ac:15:c5: a9:3f:85:bc:f5:9a:98:88:c9:b3:66:c4:63:1b:82:cb:e8:f3: 48:dd:b2:b1:a2:73:98:e0:39:e0:b5:77:87:29:72:2c:89:9f: a9:06:c7:c8:9d:d4:ed:11:b6:4a:da:80:c8:b1:f0:3b:c2:a6: c1:b1:05:ed:f4:ad:64:a8:25:83:e8:1c:ef:d8:12:cc:99:70: 14:1d:3e:a2:fb:eb:76:da:bc:f3:f0:d3:f0:6f:89:38:8a:b0: c7:47:05:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslwBHxSXvQhI2Ad8FvcQf9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZWJmZDg5MTdiNThmMDY4NmQ5M2ViNDhkZTQyMWVjMDEz NzBhYzkwHhcNMjUxMjE2MDYwMTQyWhcNMjUxMjE3MDYwMTQyWjAzMTEwLwYDVQQD EygyZTY2MDYxNjY1YzlhZjNkZGU1ZjlkY2RkZDg1NzhkMTQ1Y2IwMDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOaCbSVxhBtdey2GHQ3MoBbcduBr FBqvO9hZUonz6rG0ZqV/jpBUusiWtJJhpVr4lHI/oZgajuMP66p1WAfCMg+VJ1s5 9Qy99QZxTLhVjyyfyGAYiLygneHhFjweSKIYNbJmBasDhlEWvaanPAfD+v01Toq2 y2WSaiebiOUgz4MwUFAyTjR5s3IHToq4/TC1VOMuh19rO2iHThy+Uyzz90cOOdMK MxDWuN9FBqxRn+oqYwCDSJdl43fbXuQowP2GWyd86kxUfV/md3qe10MDuxqETpRt C1P+Ts5LeaouUiQ0fUbD/ntYzLwotlBbEScJ+ZsxGEhJLbjWocDbJEJUcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5mBhZlya893l+dzd2FeNFFywB6MB8GA1UdIwQY MBaAFELr/YkXtY8Ghtk+tI3kIewBNwrJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXV2OWlSZTFqd2FHMlQ2MGplUWg3QUUzQ3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNDI4MWUtZTFlYS00ZjY5LWI1M2Qt N2YwMzM4ZTQ5ZWUxLzEvUXV2OWlSZTFqd2FHMlQ2MGplUWg3QUUzQ3NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yNDI4MWUtZTFlYS00ZjY5LWI1M2QtN2YwMzM4ZTQ5ZWUx LzEvUXV2OWlSZTFqd2FHMlQ2MGplUWg3QUUzQ3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVuTrJHH I5GBAIzKUbfto6ZxAt8qItRsYTrY30VsL1hj9c2kFVCt9npB/zhuF+M2ct6sbue0 Gc9Dshi0jpAtuagvoOixTKgvqGdt3rQ/9Gi2mu4aNFj93L+5MxhyH1gKFw7HnKN+ JciUpDxxnbfbEpMN7AqxHs8kjX5knvpfmz04XOuCukWdoR+FylHb5oE/kqDndIWX RPnSjEMU0UzerBXFqT+FvPWamIjJs2bEYxuCy+jzSN2ysaJzmOA54LV3hylyLImf qQbHyJ3U7RG2StqAyLHwO8KmwbEF7fStZKglg+gc79gSzJlwFB0+ovvrdtq88/DT 8G+JOIqwx0cFkA== -----END CERTIFICATE-----Generated at Tue Dec 16 16:07:46 2025 by rpki-client