This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
File: quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft (raw, json)
Hash identifier: LSQpYwYebAVLSwfO1m02/TTwnKSxerXON4jywqepWdE=
Subject key identifier: 91:DD:8C:3A:4F:E5:F5:46:89:8E:B6:78:A2:E4:5F:10:95:DB:F3:01
Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
Certificate issuer: /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Certificate serial: 019B544F5C695E7A7BD340D59070F3D9EE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
Manifest number: 1798
Signing time: Thu 25 Dec 2025 07:00:45 +0000
Manifest this update: Thu 25 Dec 2025 07:00:45 +0000
Manifest next update: Fri 26 Dec 2025 07:00:45 +0000
Files and hashes: 1: EkUIGjWiNAunJ0m4VD6N0lbMIt8.roa (hash: APmjj8E3v76VLgRg+v7SdezJbT5vDpWvktN4FM1/GHk=)
2: QoKbYN7OmRBdNux8ZVRQTZeJ0po.roa (hash: +v8M6N8Y0/MmQiQAMyBHFYzXCbEXjl19X7YGjBZ8sJQ=)
3: d3wHhLF7_F2drrnAq4ufIbIjpfM.roa (hash: KBpvQcL8WXArnGC0TPR+vAIeruDFeNliNeiATzVd2jY=)
4: hAVC08FxpJFnXfaeJz29NCq7Sug.roa (hash: ApHYhoJ0ZC5NYrtBeVMJI/3kAo+MHYIlbbcC8nWTcEw=)
5: quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl (hash: 6D3vxtY8fzsbLXTQMCJQg1KsyR999vStSGjOpYtQl8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Dec 2025 01:21:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:54:4f:5c:69:5e:7a:7b:d3:40:d5:90:70:f3:d9:ee:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Validity
Not Before: Dec 25 07:00:45 2025 GMT
Not After : Dec 26 07:00:45 2025 GMT
Subject: CN=91dd8c3a4fe5f546898eb678a2e45f1095dbf301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:44:b4:9b:ae:62:e6:ac:31:30:56:0f:d1:
2a:d2:38:e6:1c:a4:be:8e:91:14:15:27:5a:c6:e5:
13:be:cd:6c:df:fb:37:72:07:e6:3e:0d:d8:35:a5:
d7:d2:43:fe:8d:2d:71:fe:cb:4f:6a:a7:4a:76:84:
60:dd:6f:f7:29:44:12:07:48:9e:6a:66:91:6c:d1:
6c:c3:83:0b:4f:11:78:5f:dd:92:d7:1f:e8:e5:7a:
25:8a:6c:56:54:4f:c0:07:79:88:b0:f1:39:94:91:
01:aa:77:a6:18:3e:1e:04:4d:3a:b6:50:64:f0:59:
fc:45:94:21:0a:e3:dd:6b:00:5e:3f:1b:ad:20:86:
9e:4d:56:92:4e:1a:21:85:f0:88:73:b0:b6:cc:b0:
23:e2:ba:a7:59:ed:88:01:03:b0:d5:7a:7a:03:82:
97:b6:c4:72:53:0f:e7:73:57:6e:99:fd:4c:38:2e:
29:36:fc:21:ac:4c:4c:b2:2a:a3:1f:6f:bd:40:c6:
31:02:41:98:d1:fe:4c:c3:ef:a8:7a:d8:e4:32:14:
11:d4:ed:f8:78:e4:96:d7:5b:5f:6a:e4:43:92:19:
44:b1:f3:87:68:3d:80:92:43:c4:a0:0d:ca:00:3d:
77:d9:fd:f4:d0:fa:6c:9f:e3:a5:d7:00:f2:05:f2:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DD:8C:3A:4F:E5:F5:46:89:8E:B6:78:A2:E4:5F:10:95:DB:F3:01
X509v3 Authority Key Identifier:
keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f3:fa:47:15:d2:1d:96:7b:54:1f:d9:c0:a5:22:03:7c:f5:
54:3c:7e:d2:48:93:8e:b2:32:1c:27:bd:2d:18:89:8e:e7:47:
a5:e7:1d:39:ba:e1:97:73:21:86:3d:94:47:19:f0:73:c2:15:
0a:63:87:51:2c:5f:7f:c5:1d:31:d3:ed:d7:56:21:23:95:4f:
e6:34:60:68:2c:d8:d1:f4:dc:cb:29:9f:b5:25:19:fd:1f:c6:
79:4f:a6:42:71:e5:d8:b8:f6:ee:52:54:7f:4a:4c:04:ba:37:
c2:d8:56:46:ab:26:57:45:a5:14:3c:8e:dd:56:8e:c4:9a:bf:
f6:ae:a1:ed:81:f5:59:43:aa:cc:f8:b9:30:a2:aa:00:90:44:
05:8a:c7:65:b5:00:b3:7a:4e:4c:e4:99:75:14:fb:7f:fe:25:
f5:24:23:4b:e8:e0:40:c8:01:46:f2:46:05:f2:26:ad:6e:76:
86:17:ea:9d:80:7c:47:e8:6a:02:ea:56:94:12:6d:5d:a6:22:
5c:dc:dd:29:cc:dd:08:70:f9:eb:86:a6:ab:c3:e0:ca:a0:cc:
72:d3:e0:cd:ad:b4:f6:ff:10:e6:ee:fb:e9:67:66:9a:06:43:
f3:81:89:58:e7:d2:63:8d:5c:6c:6c:58:6e:0d:12:00:15:10:
e0:71:c1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 08:24:32 2025 by rpki-client