This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json) Hash identifier: oO+c9efqeSf3WWfzilc5Hqaz1zF0TJzsRfDOedxvXnk= Subject key identifier: 28:C8:E3:CA:9B:80:E6:93:8E:F7:60:95:19:73:58:73:19:27:07:E9 Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97 Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997 Certificate serial: 019B3D5972C34B78D57F986F9198B19380DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 20:00:30 +0000 Manifest this update: Sat 20 Dec 2025 20:00:30 +0000 Manifest next update: Sun 21 Dec 2025 20:00:30 +0000 Files and hashes: 1: Se8jY-LoM2MVsZ37wmyygWUdZqw.roa (hash: 460xRSiSARjue5TmuazrIkrxiYolcj28Woj0bWcIVJo=) 2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: /G9v7zcfujQ4+d0vv954/bGXlo7TQhtxzO4zOk/1iyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:72:c3:4b:78:d5:7f:98:6f:91:98:b1:93:80:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997 Validity Not Before: Dec 20 20:00:30 2025 GMT Not After : Dec 21 20:00:30 2025 GMT Subject: CN=28c8e3ca9b80e6938ef7609519735873192707e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:02:f5:4d:3c:87:0c:da:a4:1c:fa:16:72:92: ec:38:50:dd:92:e8:3f:72:cb:9c:36:7b:97:34:ec: bd:93:f5:d0:04:4c:16:e4:cd:34:20:44:c0:0c:50: 69:3c:36:68:87:c6:a1:ae:24:20:47:c9:ad:16:9b: 56:84:40:14:5b:d5:b2:1a:9d:5c:66:93:13:39:4b: d9:2e:4e:b9:35:4b:53:8f:ff:46:cf:1e:6f:f5:bb: 15:61:14:64:67:a1:22:e6:83:bd:f6:c2:bd:8f:0d: b1:8d:da:a1:1b:b5:23:1e:ba:a8:b7:37:bc:4f:21: 61:4e:d4:1e:cf:64:b1:35:ca:90:2a:2a:4c:06:d6: 55:b3:4a:f9:03:86:d4:c0:62:36:77:d3:78:0f:47: 5d:e0:e8:d9:07:d0:75:9f:60:4b:dc:88:75:98:db: d0:05:0c:a8:7c:05:6e:2d:08:1c:89:cf:07:d7:0a: fb:e6:c4:32:ae:29:c6:ad:65:59:92:15:4d:20:ee: 49:e3:b3:62:24:52:6e:fa:f5:f0:55:1e:ec:00:61: 8c:94:a3:fa:6f:4b:b8:3a:d9:b9:b2:43:e3:a2:c5: 4e:57:a0:0b:c5:d5:e2:50:49:2a:03:92:1b:fc:c1: f1:53:f5:45:17:d7:5f:52:c0:47:5b:15:1a:92:4a: 17:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C8:E3:CA:9B:80:E6:93:8E:F7:60:95:19:73:58:73:19:27:07:E9 X509v3 Authority Key Identifier: keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:c1:02:59:57:b7:c8:db:a9:a7:b3:a4:46:65:3a:0d:0f:bd: 24:52:ca:2c:96:7a:87:d5:e3:ee:16:2e:b2:36:d2:4e:fb:3e: 52:c1:88:5d:c2:9d:af:b1:f2:40:72:8b:b9:88:a3:82:c6:5f: af:3a:7a:a8:66:bb:eb:2d:c6:8d:f8:b9:f3:59:34:63:01:fa: 66:d2:37:8b:08:cf:a3:64:a3:bb:42:b3:9e:52:ff:d2:69:61: 7c:d4:3b:6f:44:29:3e:ab:27:5d:03:4e:16:99:34:40:21:6a: 0f:4f:75:4b:1a:0f:d4:89:b0:80:15:be:3b:02:67:c7:7b:48: 51:bb:b8:f3:99:46:a9:78:17:43:f8:4b:83:e4:65:e1:12:a9: 2b:6b:66:6b:08:bf:cd:31:6a:23:05:95:2e:ce:13:f6:49:b4: c4:55:c9:62:f2:9a:93:f9:14:95:27:22:9e:99:f0:39:45:61: fb:64:44:b1:f0:20:2d:d8:5d:42:b9:97:fd:b5:13:ba:68:81: a2:7a:7c:7d:19:b2:4a:92:bd:b7:e0:da:1d:03:82:27:f5:7f: 2e:06:4e:3c:d0:2d:c9:d3:6f:ce:6e:08:82:a8:0f:0a:52:3f: 1f:48:36:18:7d:c1:54:07:26:b1:c1:e3:53:ee:a4:25:50:fb: d2:50:02:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WXLDS3jVf5hvkZixk4DdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZTg5YmMzMDk3NzY4YWNkNjdjMmRkNzQ3ZDNiZTFhZGI3 MmU5OTcwHhcNMjUxMjIwMjAwMDMwWhcNMjUxMjIxMjAwMDMwWjAzMTEwLwYDVQQD EygyOGM4ZTNjYTliODBlNjkzOGVmNzYwOTUxOTczNTg3MzE5MjcwN2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQL1TTyHDNqkHPoWcpLsOFDdkug/ csucNnuXNOy9k/XQBEwW5M00IETADFBpPDZoh8ahriQgR8mtFptWhEAUW9WyGp1c ZpMTOUvZLk65NUtTj/9Gzx5v9bsVYRRkZ6Ei5oO99sK9jw2xjdqhG7UjHrqotze8 TyFhTtQez2SxNcqQKipMBtZVs0r5A4bUwGI2d9N4D0dd4OjZB9B1n2BL3Ih1mNvQ BQyofAVuLQgcic8H1wr75sQyrinGrWVZkhVNIO5J47NiJFJu+vXwVR7sAGGMlKP6 b0u4Otm5skPjosVOV6ALxdXiUEkqA5Ib/MHxU/VFF9dfUsBHWxUakkoX0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjI48qbgOaTjvdglRlzWHMZJwfpMB8GA1UdIwQY MBaAFKrom8MJd2is1nwt10fTvhrbcumXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zMmU2NTAtMGNlYy00MjYyLWJjOTMt ZTNkZDc3NjQ4OWExLzEvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zMmU2NTAtMGNlYy00MjYyLWJjOTMtZTNkZDc3NjQ4OWEx LzEvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwMECWVe3 yNupp7OkRmU6DQ+9JFLKLJZ6h9Xj7hYusjbSTvs+UsGIXcKdr7HyQHKLuYijgsZf rzp6qGa76y3Gjfi581k0YwH6ZtI3iwjPo2Sju0KznlL/0mlhfNQ7b0QpPqsnXQNO Fpk0QCFqD091SxoP1ImwgBW+OwJnx3tIUbu485lGqXgXQ/hLg+Rl4RKpK2tmawi/ zTFqIwWVLs4T9km0xFXJYvKak/kUlScinpnwOUVh+2REsfAgLdhdQrmX/bUTumiB onp8fRmySpK9t+DaHQOCJ/V/LgZOPNAtydNvzm4IgqgPClI/H0g2GH3BVAcmscHj U+6kJVD70lACYA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:03:47 2025 by rpki-client