This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft File: quRIJx2Froeamr8Vs7ypg0cKE0g.mft (raw, json) Hash identifier: PHjIdjXX33vdLe8j4+BG8qhLeYaePMtZSIntSJyeafM= Subject key identifier: 94:74:5E:65:FE:6E:63:73:7E:0F:5B:79:8E:F0:76:56:07:EA:94:B2 Authority key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48 Certificate issuer: /CN=aae448271d85ae879a9abf15b3bca983470a1348 Certificate serial: 019B2476180B76076062F3BB72559AE984A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft Manifest number: 0677 Signing time: Tue 16 Dec 2025 00:01:17 +0000 Manifest this update: Tue 16 Dec 2025 00:01:17 +0000 Manifest next update: Wed 17 Dec 2025 00:01:17 +0000 Files and hashes: 1: cfA5700Oyp_l8HYxK2rUF9sJFNw.roa (hash: nBkOSSWEqJ7QWBbrB7ANbAxBsvt2sTitoBCV4yvlduo=) 2: quRIJx2Froeamr8Vs7ypg0cKE0g.crl (hash: aHrB9i3wC1L9OmftPzhhDgBh6Xvv4EucPzqqMbCNJNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:76:18:0b:76:07:60:62:f3:bb:72:55:9a:e9:84:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae448271d85ae879a9abf15b3bca983470a1348 Validity Not Before: Dec 16 00:01:17 2025 GMT Not After : Dec 17 00:01:17 2025 GMT Subject: CN=94745e65fe6e63737e0f5b798ef0765607ea94b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:61:70:dc:27:4b:7f:06:98:de:80:51:48: 5a:f7:6f:13:44:ee:ef:ae:1b:48:c6:ee:0b:d9:52: 94:ce:3a:64:e4:6a:d5:59:f6:4c:33:ff:a2:ae:f9: ea:3b:b7:8b:54:a3:bb:f2:be:d1:95:ac:59:6e:45: 0c:e0:5c:a4:0d:dc:7a:19:5d:85:3a:5f:7b:08:38: 9a:48:1f:44:17:a6:8d:95:c5:67:bb:54:8b:90:1e: 19:e0:f7:e0:fb:e7:d0:2b:35:a6:f2:17:d3:36:c9: 59:c0:fa:51:c7:92:15:4e:61:10:70:98:1c:d2:79: 4b:57:02:15:18:dd:b9:ac:12:cf:4f:59:4d:54:75: bf:33:aa:6b:1c:72:4b:d2:11:54:c4:33:bc:42:14: f0:da:0a:80:8e:1b:e7:04:b9:b4:ee:85:c8:8e:2b: b6:81:23:98:70:95:98:be:34:e8:ea:a2:c7:ae:89: 1e:5c:78:53:e7:43:1e:54:f0:54:2c:75:11:bf:c2: 5f:58:18:89:dc:d4:9a:5d:15:58:d7:a8:60:cf:af: c7:83:a5:77:e2:d6:97:30:14:f7:ee:88:b2:10:fb: 7f:66:b9:73:80:fd:f9:16:37:57:78:11:93:7b:38: 9f:81:93:99:c7:91:c5:6b:46:b4:bd:e9:62:cf:4d: 3e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:74:5E:65:FE:6E:63:73:7E:0F:5B:79:8E:F0:76:56:07:EA:94:B2 X509v3 Authority Key Identifier: keyid:AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:98:31:81:9b:e0:b8:6e:20:dc:01:23:12:87:1f:42:6a:0d: 76:7c:09:04:bd:52:cc:e1:be:a2:63:0c:03:0f:92:f1:cf:8e: 22:9a:a6:b7:a6:27:fd:8c:f8:49:97:ba:bc:70:f2:62:b5:84: fa:ae:e0:41:44:0e:96:8a:76:e2:04:73:f4:49:b0:e1:0f:2a: cd:0d:05:72:1d:a9:88:29:7a:62:e4:cc:e7:03:d0:b8:7e:04: e1:e8:af:ce:92:5b:8b:bc:01:da:03:89:bd:f2:4d:32:b9:a3: d2:23:fe:cf:6c:38:75:6e:52:34:3e:a0:19:20:91:bf:4c:8c: 4e:33:1c:5f:7e:42:e6:e2:a7:5e:d1:cb:35:75:e5:64:0f:8b: 96:95:20:ef:8a:9b:ca:27:2c:fc:1e:c9:60:77:f4:06:51:a0: e7:89:28:c3:8f:4c:c6:a3:c7:30:58:58:4d:7d:95:65:6a:8f: 36:d0:84:da:e7:e1:69:46:1d:2d:bd:48:43:6f:a1:9f:e8:e5: b3:1c:11:63:d8:b4:9e:6d:19:a6:cc:84:da:e1:d2:b2:34:a2: 2f:5c:30:3e:51:6e:18:f2:50:38:f6:2a:d2:b6:26:92:d0:58: 29:a3:d6:b9:a9:37:93:aa:7e:d2:20:80:25:a4:ce:fd:6f:92: 9b:8c:21:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdhgLdgdgYvO7clWa6YSiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZTQ0ODI3MWQ4NWFlODc5YTlhYmYxNWIzYmNhOTgzNDcw YTEzNDgwHhcNMjUxMjE2MDAwMTE3WhcNMjUxMjE3MDAwMTE3WjAzMTEwLwYDVQQD Eyg5NDc0NWU2NWZlNmU2MzczN2UwZjViNzk4ZWYwNzY1NjA3ZWE5NGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIRhcNwnS38GmN6AUUha928TRO7v rhtIxu4L2VKUzjpk5GrVWfZMM/+irvnqO7eLVKO78r7RlaxZbkUM4FykDdx6GV2F Ol97CDiaSB9EF6aNlcVnu1SLkB4Z4Pfg++fQKzWm8hfTNslZwPpRx5IVTmEQcJgc 0nlLVwIVGN25rBLPT1lNVHW/M6prHHJL0hFUxDO8QhTw2gqAjhvnBLm07oXIjiu2 gSOYcJWYvjTo6qLHrokeXHhT50MeVPBULHURv8JfWBiJ3NSaXRVY16hgz6/Hg6V3 4taXMBT37oiyEPt/ZrlzgP35FjdXeBGTezifgZOZx5HFa0a0veliz00+eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJR0XmX+bmNzfg9beY7wdlYH6pSyMB8GA1UdIwQY MBaAFKrkSCcdha6Hmpq/FbO8qYNHChNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi85ZjI4NWItYTAwYi00MjIyLTllNTUt Nzk5YTE4YzlhYzVhLzEvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi85ZjI4NWItYTAwYi00MjIyLTllNTUtNzk5YTE4YzlhYzVh LzEvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZgxgZvg uG4g3AEjEocfQmoNdnwJBL1SzOG+omMMAw+S8c+OIpqmt6Yn/Yz4SZe6vHDyYrWE +q7gQUQOlop24gRz9Emw4Q8qzQ0Fch2piCl6YuTM5wPQuH4E4eivzpJbi7wB2gOJ vfJNMrmj0iP+z2w4dW5SND6gGSCRv0yMTjMcX35C5uKnXtHLNXXlZA+LlpUg74qb yics/B7JYHf0BlGg54kow49MxqPHMFhYTX2VZWqPNtCE2ufhaUYdLb1IQ2+hn+jl sxwRY9i0nm0ZpsyE2uHSsjSiL1wwPlFuGPJQOPYq0rYmktBYKaPWuak3k6p+0iCA JaTO/W+Sm4whiQ== -----END CERTIFICATE-----Generated at Tue Dec 16 10:48:02 2025 by rpki-client