This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft File: QntUBuzauOW0DdxUvGFcoqcJIvE.mft (raw, json) Hash identifier: s7cGqME4iAf4xfZQW6b0fgZy7nrDU6mBDTe/McXD2rU= Subject key identifier: 76:B6:1E:E9:2A:DC:80:DA:95:FF:0F:53:F4:CD:BA:72:34:9D:97:68 Authority key identifier: 42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1 Certificate issuer: /CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1 Certificate serial: 019B1A298D6F332725DE658662B0530C3F1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft Manifest number: 1274 Signing time: Sun 14 Dec 2025 00:01:29 +0000 Manifest this update: Sun 14 Dec 2025 00:01:29 +0000 Manifest next update: Mon 15 Dec 2025 00:01:29 +0000 Files and hashes: 1: CF9g-zHrIl6sH7ffAFMheYKTmgE.roa (hash: 8JftFhjM60lS0dv+t4PfyHWDIpIU5Mke1ZAPszJPPn0=) 2: QntUBuzauOW0DdxUvGFcoqcJIvE.crl (hash: RXJF4g553P8g528VvvxPj5nGokmXc7NbYh1AwGk0rgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:8d:6f:33:27:25:de:65:86:62:b0:53:0c:3f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1 Validity Not Before: Dec 14 00:01:29 2025 GMT Not After : Dec 15 00:01:29 2025 GMT Subject: CN=76b61ee92adc80da95ff0f53f4cdba72349d9768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:14:4e:72:f8:04:1f:60:80:3a:21:dd:03:67: b4:7e:16:fe:a9:31:ca:18:ba:69:5d:16:dc:c4:b2: 20:20:85:28:f9:ee:ad:de:d8:2d:ae:c6:0c:88:3d: 50:b6:07:5d:8c:0c:d9:5c:84:a3:86:4a:70:6a:c4: 0d:62:5a:88:be:53:ac:05:c0:0b:eb:e0:d1:da:ce: 34:2a:a2:2d:d5:d9:34:cd:49:19:92:44:72:37:a9: 63:eb:41:aa:02:50:95:fa:da:23:ab:0c:8e:52:9e: 65:33:45:86:0f:6e:34:bd:2f:88:02:d3:14:99:cd: e9:fa:3d:e5:fc:bc:8d:0a:0d:ad:e9:36:8c:7b:60: 75:85:79:59:78:63:d5:11:ce:b3:1d:ab:cc:12:b3: 41:6f:ab:8b:c8:7c:00:69:11:58:c2:3e:7c:ea:d8: 61:a8:22:c3:cf:c0:b8:24:f4:d7:67:9e:ad:aa:c7: 19:c6:e5:f4:e2:b8:3c:4b:ad:50:f4:48:93:0d:d6: f8:14:b2:af:81:4a:0b:48:c8:9d:e9:5e:6a:c0:56: 5d:61:0a:88:75:d5:ea:e5:6e:b0:bb:30:32:8d:41: d0:60:d1:f4:76:60:ff:a4:4e:cd:ea:64:eb:de:9e: 76:3a:e0:92:33:8c:a1:a8:95:3d:a1:85:15:d0:f1: a9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B6:1E:E9:2A:DC:80:DA:95:FF:0F:53:F4:CD:BA:72:34:9D:97:68 X509v3 Authority Key Identifier: keyid:42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:70:21:ad:33:66:79:20:ce:74:1a:a1:34:db:77:65:61:72: fb:0d:c2:31:17:1c:b8:96:8c:d1:48:07:df:d4:1b:02:6c:65: f6:fd:bc:e6:dd:71:09:95:75:17:d2:9d:ca:97:3b:77:50:f5: b6:2e:74:b8:1d:bf:87:c0:72:f3:19:b0:19:a3:40:d0:2f:9b: 67:45:c0:32:65:8b:75:a5:20:e5:0d:45:98:da:ca:dd:07:a9: e9:1b:85:17:6f:9c:b3:ba:72:ae:26:98:2c:54:21:ef:d0:cd: d6:73:a1:fc:9d:5d:9b:87:8c:f0:da:fd:04:6d:3c:ef:10:8c: 22:6e:e3:5f:17:c4:70:61:ae:66:3d:05:a4:4f:a7:52:1d:76: ca:cc:0e:2f:fd:76:74:83:ab:7a:db:1f:1b:1f:d0:2c:50:43: 45:31:e2:b0:f2:93:96:88:0f:e4:81:c4:9f:bf:d4:6a:91:f4: eb:3a:fa:63:06:19:27:26:96:64:ae:0e:7d:76:5e:67:d7:22: cf:b8:b2:65:ad:fd:8e:4a:69:9d:dc:39:1e:e3:d8:84:5d:89: 44:7b:2b:c3:43:8c:b9:d8:c9:fa:aa:a3:a6:5e:65:93:e1:3e: 4a:b8:41:e6:78:a3:04:88:18:9c:47:da:b8:ed:e7:66:ed:65: ac:77:73:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKY1vMycl3mWGYrBTDD8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyN2I1NDA2ZWNkYWI4ZTViNDBkZGM1NGJjNjE1Y2EyYTcw OTIyZjEwHhcNMjUxMjE0MDAwMTI5WhcNMjUxMjE1MDAwMTI5WjAzMTEwLwYDVQQD Eyg3NmI2MWVlOTJhZGM4MGRhOTVmZjBmNTNmNGNkYmE3MjM0OWQ5NzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBROcvgEH2CAOiHdA2e0fhb+qTHK GLppXRbcxLIgIIUo+e6t3tgtrsYMiD1QtgddjAzZXISjhkpwasQNYlqIvlOsBcAL 6+DR2s40KqIt1dk0zUkZkkRyN6lj60GqAlCV+tojqwyOUp5lM0WGD240vS+IAtMU mc3p+j3l/LyNCg2t6TaMe2B1hXlZeGPVEc6zHavMErNBb6uLyHwAaRFYwj586thh qCLDz8C4JPTXZ56tqscZxuX04rg8S61Q9EiTDdb4FLKvgUoLSMid6V5qwFZdYQqI ddXq5W6wuzAyjUHQYNH0dmD/pE7N6mTr3p52OuCSM4yhqJU9oYUV0PGpjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHa2Hukq3IDalf8PU/TNunI0nZdoMB8GA1UdIwQY MBaAFEJ7VAbs2rjltA3cVLxhXKKnCSLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW50VUJ1emF1T1cwRGR4VXZHRmNvcWNKSXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8yNzhiN2QtY2Y0My00YWMyLWFkNmIt N2JjMTJhNjJhMGQzLzEvUW50VUJ1emF1T1cwRGR4VXZHRmNvcWNKSXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8yNzhiN2QtY2Y0My00YWMyLWFkNmItN2JjMTJhNjJhMGQz LzEvUW50VUJ1emF1T1cwRGR4VXZHRmNvcWNKSXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnAhrTNm eSDOdBqhNNt3ZWFy+w3CMRccuJaM0UgH39QbAmxl9v285t1xCZV1F9Kdypc7d1D1 ti50uB2/h8By8xmwGaNA0C+bZ0XAMmWLdaUg5Q1FmNrK3Qep6RuFF2+cs7pyriaY LFQh79DN1nOh/J1dm4eM8Nr9BG087xCMIm7jXxfEcGGuZj0FpE+nUh12yswOL/12 dIOretsfGx/QLFBDRTHisPKTlogP5IHEn7/UapH06zr6YwYZJyaWZK4OfXZeZ9ci z7iyZa39jkppndw5HuPYhF2JRHsrw0OMudjJ+qqjpl5lk+E+SrhB5nijBIgYnEfa uO3nZu1lrHdz2g== -----END CERTIFICATE-----Generated at Sun Dec 14 07:50:24 2025 by rpki-client