This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft File: QntUBuzauOW0DdxUvGFcoqcJIvE.mft (raw, json) Hash identifier: dpWuiX+CTB7j22gkFfEhZK1zKNv8WNYxVOwpt7WjZMg= Subject key identifier: 4C:E0:AB:E5:B6:7F:FF:63:36:29:30:B6:89:F1:4A:03:31:8E:A7:C3 Authority key identifier: 42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1 Certificate issuer: /CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1 Certificate serial: 019B2F678445070F57955372468E16CFDCF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft Manifest number: 127F Signing time: Thu 18 Dec 2025 03:01:11 +0000 Manifest this update: Thu 18 Dec 2025 03:01:11 +0000 Manifest next update: Fri 19 Dec 2025 03:01:11 +0000 Files and hashes: 1: CF9g-zHrIl6sH7ffAFMheYKTmgE.roa (hash: 8JftFhjM60lS0dv+t4PfyHWDIpIU5Mke1ZAPszJPPn0=) 2: QntUBuzauOW0DdxUvGFcoqcJIvE.crl (hash: Z1CVQm5q6zzJyIxIeQ18RVYvTchZaDnzoLHP0eGtVIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:84:45:07:0f:57:95:53:72:46:8e:16:cf:dc:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1 Validity Not Before: Dec 18 03:01:11 2025 GMT Not After : Dec 19 03:01:11 2025 GMT Subject: CN=4ce0abe5b67fff63362930b689f14a03318ea7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:4a:eb:d8:b3:a2:e4:b1:fe:82:19:86:2d: 3b:d8:7e:55:1a:fe:c3:69:c8:38:06:84:75:cc:ca: 84:34:c2:86:9c:6b:9f:ae:2f:f5:8b:37:5d:19:4b: 0d:1b:56:1b:fd:be:08:f7:fb:de:0e:4d:9b:20:9c: 29:ca:7e:84:10:e1:f0:a5:d1:f0:e7:a4:d4:7c:2b: 9c:50:4b:0a:04:cf:76:7f:59:f8:43:10:0e:19:7d: 08:e0:60:dc:7a:ce:47:58:b5:5d:33:2a:fd:bb:0e: 3f:2d:29:2a:1c:1f:c4:d1:d0:f8:bd:e9:09:e1:af: 81:26:c0:67:bd:ff:ea:0c:3b:af:10:c8:0d:37:bc: da:66:95:5d:d5:34:3e:b0:ef:d0:57:12:77:8a:6e: fe:35:7e:96:27:29:53:2f:33:da:f2:3f:14:54:04: 9e:a4:fe:71:90:ed:a2:51:ed:84:0f:f0:50:95:ca: 8b:c0:8f:36:9a:b9:41:2b:d3:dc:37:da:7d:96:99: a7:2e:ae:9d:10:07:a4:01:e4:5c:1e:64:08:7b:22: ea:fc:6a:f4:d0:44:5e:f1:19:05:1a:e6:51:04:d9: 05:a4:e0:d9:f5:9e:67:40:80:80:8a:ee:b2:11:0e: 59:d0:bd:c6:d9:74:2d:5e:3e:fd:15:16:3d:93:79: 73:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E0:AB:E5:B6:7F:FF:63:36:29:30:B6:89:F1:4A:03:31:8E:A7:C3 X509v3 Authority Key Identifier: keyid:42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:a2:46:56:24:37:61:f3:4b:25:23:f4:e6:4a:3f:84:37:4c: 8e:b2:fc:a3:32:96:d9:9f:c4:e8:cf:11:cc:89:d5:83:54:d3: d6:6e:3b:30:4c:ea:db:9a:bc:c2:2a:3d:34:f9:22:a5:08:a2: 6a:0b:6b:c2:20:3f:3b:e0:21:dc:cb:19:fc:a0:52:e7:d0:b8: 47:a4:b9:3d:18:51:f5:59:85:62:91:79:99:1a:a8:dd:ee:fe: 25:d5:c0:f0:62:dd:ca:5d:5c:2b:99:fd:7c:0b:13:13:a2:97: bb:a2:74:d5:35:ea:8d:e4:45:c4:95:38:34:fd:f0:47:a6:26: c8:0f:1a:b6:39:55:b5:b8:b5:12:45:79:a6:64:ea:98:e4:76: 84:d3:47:75:54:5b:03:1f:be:21:f2:8f:ad:46:38:01:99:01: b0:90:88:43:b7:c9:1a:16:63:81:2e:cf:15:1c:45:55:dc:de: f5:61:6c:97:43:8f:d6:ae:e6:94:ef:cf:06:f5:64:39:0b:39: 60:df:20:e5:ce:50:3a:5f:31:18:76:f2:5f:6b:d4:81:ef:b5: 16:8c:d6:fa:84:92:d6:16:5f:43:4f:f5:f6:e5:7b:86:a5:0a: dc:1a:ae:70:cf:4c:63:ca:bd:63:14:08:b7:0d:95:d8:f5:68: d8:72:5e:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ4RFBw9XlVNyRo4Wz9z3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyN2I1NDA2ZWNkYWI4ZTViNDBkZGM1NGJjNjE1Y2EyYTcw OTIyZjEwHhcNMjUxMjE4MDMwMTExWhcNMjUxMjE5MDMwMTExWjAzMTEwLwYDVQQD Eyg0Y2UwYWJlNWI2N2ZmZjYzMzYyOTMwYjY4OWYxNGEwMzMxOGVhN2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDNK69izouSx/oIZhi072H5VGv7D acg4BoR1zMqENMKGnGufri/1izddGUsNG1Yb/b4I9/veDk2bIJwpyn6EEOHwpdHw 56TUfCucUEsKBM92f1n4QxAOGX0I4GDces5HWLVdMyr9uw4/LSkqHB/E0dD4vekJ 4a+BJsBnvf/qDDuvEMgNN7zaZpVd1TQ+sO/QVxJ3im7+NX6WJylTLzPa8j8UVASe pP5xkO2iUe2ED/BQlcqLwI82mrlBK9PcN9p9lpmnLq6dEAekAeRcHmQIeyLq/Gr0 0ERe8RkFGuZRBNkFpODZ9Z5nQICAiu6yEQ5Z0L3G2XQtXj79FRY9k3lz0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzgq+W2f/9jNikwtonxSgMxjqfDMB8GA1UdIwQY MBaAFEJ7VAbs2rjltA3cVLxhXKKnCSLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW50VUJ1emF1T1cwRGR4VXZHRmNvcWNKSXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8yNzhiN2QtY2Y0My00YWMyLWFkNmIt N2JjMTJhNjJhMGQzLzEvUW50VUJ1emF1T1cwRGR4VXZHRmNvcWNKSXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8yNzhiN2QtY2Y0My00YWMyLWFkNmItN2JjMTJhNjJhMGQz LzEvUW50VUJ1emF1T1cwRGR4VXZHRmNvcWNKSXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA26JGViQ3 YfNLJSP05ko/hDdMjrL8ozKW2Z/E6M8RzInVg1TT1m47MEzq25q8wio9NPkipQii agtrwiA/O+Ah3MsZ/KBS59C4R6S5PRhR9VmFYpF5mRqo3e7+JdXA8GLdyl1cK5n9 fAsTE6KXu6J01TXqjeRFxJU4NP3wR6YmyA8atjlVtbi1EkV5pmTqmOR2hNNHdVRb Ax++IfKPrUY4AZkBsJCIQ7fJGhZjgS7PFRxFVdze9WFsl0OP1q7mlO/PBvVkOQs5 YN8g5c5QOl8xGHbyX2vUge+1FozW+oSS1hZfQ0/19uV7hqUK3BqucM9MY8q9YxQI tw2V2PVo2HJeUQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:13:57 2025 by rpki-client