This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft File: quRIJx2Froeamr8Vs7ypg0cKE0g.mft (raw, json) Hash identifier: xWdRQ2YX4V2zXnTUDeUa+Aet5ppoBVOsVF+f0fQ6a2U= Subject key identifier: 0F:13:B3:D6:62:6E:85:D9:45:B7:E7:77:BF:92:83:6C:0F:A8:65:1F Authority key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48 Certificate issuer: /CN=aae448271d85ae879a9abf15b3bca983470a1348 Certificate serial: 019AF23FD81FC52E85A606794F813EB86F6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft Manifest number: 065D Signing time: Sat 06 Dec 2025 06:01:01 +0000 Manifest this update: Sat 06 Dec 2025 06:01:01 +0000 Manifest next update: Sun 07 Dec 2025 06:01:01 +0000 Files and hashes: 1: cfA5700Oyp_l8HYxK2rUF9sJFNw.roa (hash: nBkOSSWEqJ7QWBbrB7ANbAxBsvt2sTitoBCV4yvlduo=) 2: quRIJx2Froeamr8Vs7ypg0cKE0g.crl (hash: 3qynlwNwEYrilUUHbylowkYVueyf/fjkbI22jJkNxUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d8:1f:c5:2e:85:a6:06:79:4f:81:3e:b8:6f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae448271d85ae879a9abf15b3bca983470a1348 Validity Not Before: Dec 6 06:01:01 2025 GMT Not After : Dec 7 06:01:01 2025 GMT Subject: CN=0f13b3d6626e85d945b7e777bf92836c0fa8651f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fb:e7:0a:0e:06:48:4c:5f:eb:49:c3:e2:69: 7d:c4:56:4d:c1:6a:a4:4c:d3:54:9a:dc:41:cf:e7: 63:55:88:ee:7e:99:f4:a5:f3:90:c0:8d:7c:31:a8: 5a:2f:a9:54:fb:28:a5:bd:ac:7f:bd:e1:ff:b6:e2: 3f:6b:dd:57:8f:e7:29:9b:cf:da:f4:c8:df:28:79: 8a:ae:01:c5:ea:67:f9:28:f2:96:d2:1a:c2:8e:8f: 64:05:a5:8c:ad:7c:a0:c3:a3:8d:3c:19:d2:ca:20: 15:40:c5:d3:ae:f3:c6:6e:f8:2f:26:d9:e0:e0:33: d2:f3:15:c9:64:8c:78:6d:83:15:2b:eb:13:c2:46: 4d:ef:50:57:79:69:64:f7:cf:b0:fb:c7:d3:11:c8: 43:31:f1:36:af:16:cb:b6:f3:32:65:0e:7e:58:24: 79:e4:b1:6b:ae:a8:4f:a6:15:b3:78:d1:d7:e1:87: 8a:14:6c:37:d7:d9:3e:c2:8c:58:b3:22:24:8e:88: 7c:7c:91:09:52:51:95:af:32:ff:c1:e2:23:20:36: cc:ad:b0:fc:b8:2b:2d:7b:33:ba:11:b4:f8:45:c9: 6b:f9:59:36:85:a4:0b:89:b9:62:78:e4:45:3b:4c: 1b:e7:63:78:e5:ee:1f:0d:b6:64:28:f2:8d:a6:60: 2a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:13:B3:D6:62:6E:85:D9:45:B7:E7:77:BF:92:83:6C:0F:A8:65:1F X509v3 Authority Key Identifier: keyid:AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3e:65:36:55:31:c5:27:e2:20:95:c6:6f:9a:f9:85:0d:9f: 4d:7c:48:28:53:9c:2e:a0:3f:4f:10:c2:18:eb:b0:be:a7:b4: 09:3c:dc:75:f9:c3:d4:38:0a:23:47:e4:ea:60:09:b0:16:5d: f9:2f:c0:c5:4a:50:2a:ae:62:26:8b:04:7a:6a:d2:a8:e9:c7: f3:90:c0:81:05:36:c5:ff:58:57:4f:8e:cc:2b:84:36:70:44: 4a:06:3d:8e:a1:4b:06:ae:aa:28:e3:ed:06:49:c8:c5:59:e0: 8a:c6:97:3b:ee:1a:37:33:6d:b4:1b:86:1a:ce:01:ca:c3:cb: ab:ef:36:1c:41:94:d6:4f:61:eb:8c:01:26:03:3b:38:41:e3: c8:e2:90:68:e9:7b:c7:3a:35:47:86:d6:ec:56:98:86:d6:03: 28:82:39:0e:f1:79:ba:10:e1:d5:f3:00:8d:1e:cf:a1:f2:f8: aa:18:eb:e3:61:4c:ac:3e:b7:b4:ff:6e:40:bd:75:75:c6:3b: 4f:ca:24:70:90:44:ba:64:2b:e6:fb:cd:2e:81:a4:a7:79:7d: 13:fd:45:d3:b7:cc:85:35:96:fa:be:00:bd:b1:74:db:07:d3: 0e:84:45:6a:cd:c0:6f:b6:32:99:9a:b7:a9:70:98:05:0c:89: 8c:16:f0:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9gfxS6FpgZ5T4E+uG9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZTQ0ODI3MWQ4NWFlODc5YTlhYmYxNWIzYmNhOTgzNDcw YTEzNDgwHhcNMjUxMjA2MDYwMTAxWhcNMjUxMjA3MDYwMTAxWjAzMTEwLwYDVQQD EygwZjEzYjNkNjYyNmU4NWQ5NDViN2U3NzdiZjkyODM2YzBmYTg2NTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvvnCg4GSExf60nD4ml9xFZNwWqk TNNUmtxBz+djVYjufpn0pfOQwI18MahaL6lU+yilvax/veH/tuI/a91Xj+cpm8/a 9MjfKHmKrgHF6mf5KPKW0hrCjo9kBaWMrXygw6ONPBnSyiAVQMXTrvPGbvgvJtng 4DPS8xXJZIx4bYMVK+sTwkZN71BXeWlk98+w+8fTEchDMfE2rxbLtvMyZQ5+WCR5 5LFrrqhPphWzeNHX4YeKFGw319k+woxYsyIkjoh8fJEJUlGVrzL/weIjIDbMrbD8 uCstezO6EbT4Rclr+Vk2haQLiblieORFO0wb52N45e4fDbZkKPKNpmAqgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8Ts9ZiboXZRbfnd7+Sg2wPqGUfMB8GA1UdIwQY MBaAFKrkSCcdha6Hmpq/FbO8qYNHChNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi85ZjI4NWItYTAwYi00MjIyLTllNTUt Nzk5YTE4YzlhYzVhLzEvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi85ZjI4NWItYTAwYi00MjIyLTllNTUtNzk5YTE4YzlhYzVh LzEvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbz5lNlUx xSfiIJXGb5r5hQ2fTXxIKFOcLqA/TxDCGOuwvqe0CTzcdfnD1DgKI0fk6mAJsBZd +S/AxUpQKq5iJosEemrSqOnH85DAgQU2xf9YV0+OzCuENnBESgY9jqFLBq6qKOPt BknIxVngisaXO+4aNzNttBuGGs4BysPLq+82HEGU1k9h64wBJgM7OEHjyOKQaOl7 xzo1R4bW7FaYhtYDKII5DvF5uhDh1fMAjR7PofL4qhjr42FMrD63tP9uQL11dcY7 T8okcJBEumQr5vvNLoGkp3l9E/1F07fMhTWW+r4AvbF02wfTDoRFas3Ab7YymZq3 qXCYBQyJjBbwRA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:55:55 2025 by rpki-client