This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft File: quRIJx2Froeamr8Vs7ypg0cKE0g.mft (raw, json) Hash identifier: 8V1GGmF1aGST0AuzJ2qsu/+DIUB0EU7H4beSdRvISQE= Subject key identifier: 7F:AD:C5:45:C1:6B:C4:7F:94:EF:D3:64:36:02:E9:8C:CD:88:B6:3F Authority key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48 Certificate issuer: /CN=aae448271d85ae879a9abf15b3bca983470a1348 Certificate serial: 019B18DFBB9F6DFD1E02C0659CA35C820487 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft Manifest number: 0671 Signing time: Sat 13 Dec 2025 18:01:14 +0000 Manifest this update: Sat 13 Dec 2025 18:01:14 +0000 Manifest next update: Sun 14 Dec 2025 18:01:14 +0000 Files and hashes: 1: cfA5700Oyp_l8HYxK2rUF9sJFNw.roa (hash: nBkOSSWEqJ7QWBbrB7ANbAxBsvt2sTitoBCV4yvlduo=) 2: quRIJx2Froeamr8Vs7ypg0cKE0g.crl (hash: 9AvFcwMFkpWBmLtCSj+920oBGfNU2qXCPb/eyECF1MI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:bb:9f:6d:fd:1e:02:c0:65:9c:a3:5c:82:04:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae448271d85ae879a9abf15b3bca983470a1348 Validity Not Before: Dec 13 18:01:14 2025 GMT Not After : Dec 14 18:01:14 2025 GMT Subject: CN=7fadc545c16bc47f94efd3643602e98ccd88b63f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:04:94:ca:29:b5:5a:78:3b:bc:e5:65:b0:dd: a2:e1:5c:ea:c2:02:67:e5:a7:c2:e0:d4:78:84:d8: a7:52:bd:c4:9a:f7:89:a9:d3:35:4b:54:aa:40:26: aa:98:0e:63:74:7e:e0:7e:c3:8f:8f:af:e6:71:83: b9:a1:c6:85:e5:88:3e:95:d0:4b:90:61:0d:13:cb: 8e:5e:a6:11:33:8b:29:58:7b:7e:ce:a8:25:85:1b: 73:5c:c2:91:f3:6f:bd:5a:49:2a:7b:62:32:e9:c4: 36:09:65:d2:1a:15:78:dc:3a:19:5f:6c:d6:1c:bd: c8:62:d2:f8:b4:e4:4e:22:01:cc:7f:32:ab:bc:b4: 53:81:46:60:1a:f2:37:b5:f3:f0:69:7b:cd:0b:ee: e3:88:63:bc:82:22:ef:dd:13:a2:ef:60:ee:73:9a: 9b:84:4d:86:7e:97:a3:b9:0e:aa:00:e5:09:29:a1: 9b:41:33:90:c8:92:9f:78:89:55:07:de:bd:4a:15: d5:8d:76:ce:92:23:a9:92:c4:59:87:8f:96:ae:af: f2:8e:1a:b9:f0:9c:2d:b7:7b:9a:9e:da:eb:42:56: 08:8a:2a:2a:3c:6f:09:2f:66:90:f3:09:f6:63:9f: f0:ff:84:9d:e1:22:e8:ba:ba:65:f8:ab:27:2b:19: 94:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AD:C5:45:C1:6B:C4:7F:94:EF:D3:64:36:02:E9:8C:CD:88:B6:3F X509v3 Authority Key Identifier: keyid:AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:66:86:7a:4b:65:3e:8b:b5:55:6c:61:5e:8b:67:3a:6a:7d: 33:44:75:e3:8c:f6:fa:43:00:3c:98:13:0a:bc:d0:3a:a6:4a: e2:b7:21:9e:41:06:f4:b4:f0:b0:49:ad:48:a1:19:26:bb:24: 39:67:ae:61:70:da:8e:b0:1c:bd:67:f8:c9:71:26:b8:9c:b8: 44:0c:38:3c:ed:06:9f:29:c1:42:9b:36:36:6a:90:a0:0f:4d: 47:08:ed:a1:10:2f:51:67:5a:39:b5:83:31:9f:cc:7e:d5:43: 54:5b:75:9b:8a:ac:64:c1:60:c1:1e:86:02:bb:7b:75:f6:5f: e5:27:a7:4e:53:c1:4b:7f:71:97:4a:6a:19:d7:80:61:21:8c: 39:8b:67:cd:34:e8:39:0c:e8:d3:2f:bb:66:47:fb:b9:6f:93: 1f:9e:24:ee:32:f4:a8:93:22:3a:38:b6:cf:cb:24:39:e0:cb: ef:0b:2e:0f:2f:16:23:3b:58:77:ab:d4:cc:6b:e7:d7:8a:be: 0e:40:e0:be:52:d6:81:ea:df:64:d9:e8:7d:74:76:20:f8:21: 6d:58:25:94:f5:69:80:6d:8f:ed:38:58:27:8a:70:88:8d:13: 03:76:fc:b3:80:96:e3:02:be:9e:6e:2b:91:2f:44:d2:3f:7c: ac:df:cc:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY37ufbf0eAsBlnKNcggSHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZTQ0ODI3MWQ4NWFlODc5YTlhYmYxNWIzYmNhOTgzNDcw YTEzNDgwHhcNMjUxMjEzMTgwMTE0WhcNMjUxMjE0MTgwMTE0WjAzMTEwLwYDVQQD Eyg3ZmFkYzU0NWMxNmJjNDdmOTRlZmQzNjQzNjAyZTk4Y2NkODhiNjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQSUyim1Wng7vOVlsN2i4VzqwgJn 5afC4NR4hNinUr3EmveJqdM1S1SqQCaqmA5jdH7gfsOPj6/mcYO5ocaF5Yg+ldBL kGENE8uOXqYRM4spWHt+zqglhRtzXMKR82+9Wkkqe2Iy6cQ2CWXSGhV43DoZX2zW HL3IYtL4tOROIgHMfzKrvLRTgUZgGvI3tfPwaXvNC+7jiGO8giLv3ROi72Duc5qb hE2GfpejuQ6qAOUJKaGbQTOQyJKfeIlVB969ShXVjXbOkiOpksRZh4+Wrq/yjhq5 8Jwtt3uantrrQlYIiioqPG8JL2aQ8wn2Y5/w/4Sd4SLourpl+KsnKxmU4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+txUXBa8R/lO/TZDYC6YzNiLY/MB8GA1UdIwQY MBaAFKrkSCcdha6Hmpq/FbO8qYNHChNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi85ZjI4NWItYTAwYi00MjIyLTllNTUt Nzk5YTE4YzlhYzVhLzEvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi85ZjI4NWItYTAwYi00MjIyLTllNTUtNzk5YTE4YzlhYzVh LzEvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGaGektl Pou1VWxhXotnOmp9M0R144z2+kMAPJgTCrzQOqZK4rchnkEG9LTwsEmtSKEZJrsk OWeuYXDajrAcvWf4yXEmuJy4RAw4PO0GnynBQps2NmqQoA9NRwjtoRAvUWdaObWD MZ/MftVDVFt1m4qsZMFgwR6GArt7dfZf5SenTlPBS39xl0pqGdeAYSGMOYtnzTTo OQzo0y+7Zkf7uW+TH54k7jL0qJMiOji2z8skOeDL7wsuDy8WIztYd6vUzGvn14q+ DkDgvlLWgerfZNnofXR2IPghbVgllPVpgG2P7ThYJ4pwiI0TA3b8s4CW4wK+nm4r kS9E0j98rN/M3Q== -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:31 2025 by rpki-client