This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json) Hash identifier: 6Ke/acnnckLH6WhmvkhghmIub3LLfNafFwq4lqbw2ec= Subject key identifier: 73:6A:C3:2C:C7:4A:26:9B:17:1E:D0:B9:9B:81:84:EB:69:43:BF:33 Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97 Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997 Certificate serial: 019B31C345CB081A8BCC78012653353D01B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 14:00:39 +0000 Manifest this update: Thu 18 Dec 2025 14:00:39 +0000 Manifest next update: Fri 19 Dec 2025 14:00:39 +0000 Files and hashes: 1: Se8jY-LoM2MVsZ37wmyygWUdZqw.roa (hash: 460xRSiSARjue5TmuazrIkrxiYolcj28Woj0bWcIVJo=) 2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: 5pYPWdp+gyk/W6srcSaWagqoUhnQ+tuBWWHyu1Fds6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:45:cb:08:1a:8b:cc:78:01:26:53:35:3d:01:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997 Validity Not Before: Dec 18 14:00:39 2025 GMT Not After : Dec 19 14:00:39 2025 GMT Subject: CN=736ac32cc74a269b171ed0b99b8184eb6943bf33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:97:8a:cb:ec:fc:47:6c:2a:e7:83:da:64:21: a5:0a:04:21:78:e9:f2:c1:50:5c:55:b7:da:be:ab: 29:5e:f2:2e:00:f9:03:9d:6e:77:da:c6:89:c8:45: 04:78:3b:bc:71:0c:55:92:f0:e2:53:3d:7d:4a:70: 71:83:41:d5:73:a8:44:b9:4e:c0:24:bf:c0:6e:ec: 87:00:a6:0e:f4:41:52:53:8e:2d:78:ed:df:8b:d2: 6e:8a:f5:ac:9f:d8:7d:5f:b5:01:15:34:fa:b5:b2: b9:1e:c0:35:1b:50:ff:5c:8a:ee:6d:58:88:3b:f9: ca:f0:ac:fc:d9:ed:60:50:c9:52:1e:e7:ba:63:54: c7:1b:a3:20:75:a0:74:a0:30:cf:2f:d8:77:39:40: 0d:bf:e3:b0:44:0e:ec:dc:de:56:37:64:fb:3c:21: f5:a0:1f:61:4b:8f:25:6c:e8:86:50:b4:73:c9:8f: 44:2b:19:bc:f8:d6:a5:29:6a:a1:5e:11:04:1b:91: 25:e1:be:d3:79:05:04:05:8e:66:bf:37:49:a4:12: 0a:88:f1:ac:42:ce:fa:31:2f:d0:29:e8:be:d8:0d: 01:c0:97:29:a0:d6:02:b8:34:59:ce:d1:bd:f9:7b: 9a:1e:37:75:8f:92:13:05:24:f4:52:11:4e:ae:5d: d9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6A:C3:2C:C7:4A:26:9B:17:1E:D0:B9:9B:81:84:EB:69:43:BF:33 X509v3 Authority Key Identifier: keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:30:93:e1:2e:67:7e:82:30:7c:e5:0a:0f:91:8c:7e:1e:54: a0:fe:60:e7:a7:71:6c:89:24:0a:2e:2a:ba:4b:66:97:10:5f: d1:78:d6:36:ae:fe:9b:90:c7:6d:44:5b:aa:25:23:99:5d:56: 20:70:fa:bb:85:18:14:4d:8b:ac:9d:3a:83:3a:16:73:18:1b: 3e:13:87:3d:68:0f:a8:29:cd:11:51:e9:bf:bc:3a:b6:b9:af: f9:09:a3:cd:1c:a9:80:73:aa:07:cb:d1:e7:3a:13:db:86:e9: 31:ce:07:ac:f6:db:7c:10:96:4a:c9:78:7f:92:c5:84:1f:d7: 4e:fe:c7:a5:55:d0:d9:c4:a2:ce:e2:d3:f6:6c:ec:3b:0f:96: d7:a4:71:a5:66:b9:7f:c3:67:f4:e8:eb:52:6d:66:48:ac:5b: 04:77:50:ee:db:9b:7b:b9:a2:30:4a:22:09:7b:76:b5:d3:b9: 21:b1:5d:79:b2:23:4b:ec:ee:e7:8f:6b:fe:24:d6:1b:64:2f: 04:1e:2d:ea:bb:c8:80:66:3c:0f:b4:20:a7:8c:27:47:66:c4: 6c:8c:00:12:15:e3:7d:43:6c:22:9e:4b:8a:af:2a:14:48:e6: eb:29:fe:da:8f:72:9a:1c:59:cf:83:b5:07:ae:8e:a0:6c:83: 65:6b:12:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw0XLCBqLzHgBJlM1PQG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZTg5YmMzMDk3NzY4YWNkNjdjMmRkNzQ3ZDNiZTFhZGI3 MmU5OTcwHhcNMjUxMjE4MTQwMDM5WhcNMjUxMjE5MTQwMDM5WjAzMTEwLwYDVQQD Eyg3MzZhYzMyY2M3NGEyNjliMTcxZWQwYjk5YjgxODRlYjY5NDNiZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspeKy+z8R2wq54PaZCGlCgQheOny wVBcVbfavqspXvIuAPkDnW532saJyEUEeDu8cQxVkvDiUz19SnBxg0HVc6hEuU7A JL/AbuyHAKYO9EFSU44teO3fi9JuivWsn9h9X7UBFTT6tbK5HsA1G1D/XIrubViI O/nK8Kz82e1gUMlSHue6Y1THG6MgdaB0oDDPL9h3OUANv+OwRA7s3N5WN2T7PCH1 oB9hS48lbOiGULRzyY9EKxm8+NalKWqhXhEEG5El4b7TeQUEBY5mvzdJpBIKiPGs Qs76MS/QKei+2A0BwJcpoNYCuDRZztG9+XuaHjd1j5ITBST0UhFOrl3ZzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNqwyzHSiabFx7QuZuBhOtpQ78zMB8GA1UdIwQY MBaAFKrom8MJd2is1nwt10fTvhrbcumXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zMmU2NTAtMGNlYy00MjYyLWJjOTMt ZTNkZDc3NjQ4OWExLzEvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zMmU2NTAtMGNlYy00MjYyLWJjOTMtZTNkZDc3NjQ4OWEx LzEvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjCT4S5n foIwfOUKD5GMfh5UoP5g56dxbIkkCi4quktmlxBf0XjWNq7+m5DHbURbqiUjmV1W IHD6u4UYFE2LrJ06gzoWcxgbPhOHPWgPqCnNEVHpv7w6trmv+QmjzRypgHOqB8vR 5zoT24bpMc4HrPbbfBCWSsl4f5LFhB/XTv7HpVXQ2cSizuLT9mzsOw+W16RxpWa5 f8Nn9OjrUm1mSKxbBHdQ7tube7miMEoiCXt2tdO5IbFdebIjS+zu549r/iTWG2Qv BB4t6rvIgGY8D7Qgp4wnR2bEbIwAEhXjfUNsIp5Liq8qFEjm6yn+2o9ymhxZz4O1 B66OoGyDZWsSDg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:55 2025 by rpki-client