This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft File: Quv9iRe1jwaG2T60jeQh7AE3Csk.mft (raw, json) Hash identifier: ZjgQfNf4rU5amdyklISEYWNjufuOzHHRhi+JRUDN0d0= Subject key identifier: 25:C0:48:FF:2B:B9:AC:A5:07:89:35:09:0A:A5:5F:E3:05:C6:12:8C Authority key identifier: 42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9 Certificate issuer: /CN=42ebfd8917b58f0686d93eb48de421ec01370ac9 Certificate serial: 019B3EDA9259E76F45129178A8388BBC697B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 03:01:10 +0000 Manifest this update: Sun 21 Dec 2025 03:01:10 +0000 Manifest next update: Mon 22 Dec 2025 03:01:10 +0000 Files and hashes: 1: Dct1KnHlMjQEBf8FzrUaVj8hNPo.roa (hash: GFTblhcJpBtD5bZfbGwg+0xfnKk6qwYm9g5i1rXxbnw=) 2: Quv9iRe1jwaG2T60jeQh7AE3Csk.crl (hash: yjIBWW6nzRP7BYSYdVeiqLq84E5E5DrbbH5byTH3URc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:92:59:e7:6f:45:12:91:78:a8:38:8b:bc:69:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ebfd8917b58f0686d93eb48de421ec01370ac9 Validity Not Before: Dec 21 03:01:10 2025 GMT Not After : Dec 22 03:01:10 2025 GMT Subject: CN=25c048ff2bb9aca5078935090aa55fe305c6128c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ca:e3:fb:81:49:e4:dc:db:99:39:dd:3e:4b: 65:90:06:f4:35:de:d1:8d:76:dc:32:ae:63:47:8b: 53:60:89:0a:52:4f:b8:16:3f:9d:06:cd:fa:22:f8: c4:24:b8:fb:76:41:a7:12:8d:15:dd:31:a6:ac:fe: 08:83:61:09:b6:49:54:84:6f:1b:9c:e2:ac:cd:23: fc:c4:0f:2f:ec:07:14:f2:e4:97:8b:ec:42:1a:8a: 18:d4:06:7b:fa:e7:ce:70:56:a8:1e:21:dd:84:7b: ac:e5:18:e3:c0:6f:e8:55:54:3a:ac:7b:f1:19:4c: 19:f8:d4:42:55:b7:19:03:51:bb:34:1e:fa:1b:f7: be:67:87:60:27:ba:5c:ce:dc:83:e0:92:53:64:0c: 5f:42:04:52:bf:5e:9d:03:78:ad:75:c6:c8:27:79: e2:cb:ff:d6:61:8d:76:46:58:3e:7a:71:80:c1:f2: 2c:c1:e4:d6:05:7b:be:b0:54:22:e4:7b:00:4f:73: 3e:8e:24:60:3d:30:94:ee:05:40:96:c1:da:dc:4a: c8:e8:b9:b4:b3:ce:e5:c7:e4:2b:ef:56:1f:6e:a5: 9f:b4:81:3e:ec:b4:03:94:7c:3d:d1:da:2b:c6:be: bd:30:31:3e:9e:55:6a:d8:a9:a2:5f:42:bc:64:97: 99:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C0:48:FF:2B:B9:AC:A5:07:89:35:09:0A:A5:5F:E3:05:C6:12:8C X509v3 Authority Key Identifier: keyid:42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c7:ad:25:6a:db:b7:14:55:3d:3f:2d:e3:1c:7d:73:15:29: e2:40:45:4f:ab:02:13:0e:e4:90:f3:89:21:c1:43:bb:e8:42: 3f:64:84:c3:6a:b9:c8:75:86:ea:7f:fd:ff:59:bf:d1:e9:94: c7:30:3c:7d:10:c7:8c:18:a9:fb:a9:a4:97:4c:86:8e:f3:28: dc:41:21:17:c3:0e:6c:53:ec:88:74:ca:25:61:c7:5a:3f:a7: 38:1c:47:a4:cf:2e:01:d9:81:32:aa:f8:77:19:0f:13:57:ba: 02:83:5b:eb:28:bf:21:b0:b7:26:e6:87:41:5b:1a:47:b3:a2: ce:32:5c:00:56:82:46:7d:e8:b1:dd:65:57:7f:41:de:86:72: 2b:4d:fc:41:d3:ce:d1:ab:93:a9:18:23:17:98:19:79:52:de: 1a:1d:93:dc:d8:53:16:f2:b4:6a:2b:23:95:53:67:53:ee:d7: af:d1:3b:c9:37:8b:b4:1c:cc:c9:aa:13:20:22:81:52:df:b4: a3:ac:33:48:65:89:84:ec:13:70:df:a2:b6:4a:b2:20:59:d8: 64:eb:7c:72:ea:a6:4f:94:1a:82:b2:17:fc:88:fb:c9:45:0a: 33:ae:30:f8:be:1a:dd:40:cf:d8:b1:29:fc:1a:c3:57:3d:a6: ed:e5:48:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2pJZ529FEpF4qDiLvGl7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZWJmZDg5MTdiNThmMDY4NmQ5M2ViNDhkZTQyMWVjMDEz NzBhYzkwHhcNMjUxMjIxMDMwMTEwWhcNMjUxMjIyMDMwMTEwWjAzMTEwLwYDVQQD EygyNWMwNDhmZjJiYjlhY2E1MDc4OTM1MDkwYWE1NWZlMzA1YzYxMjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsrj+4FJ5NzbmTndPktlkAb0Nd7R jXbcMq5jR4tTYIkKUk+4Fj+dBs36IvjEJLj7dkGnEo0V3TGmrP4Ig2EJtklUhG8b nOKszSP8xA8v7AcU8uSXi+xCGooY1AZ7+ufOcFaoHiHdhHus5RjjwG/oVVQ6rHvx GUwZ+NRCVbcZA1G7NB76G/e+Z4dgJ7pcztyD4JJTZAxfQgRSv16dA3itdcbIJ3ni y//WYY12Rlg+enGAwfIsweTWBXu+sFQi5HsAT3M+jiRgPTCU7gVAlsHa3ErI6Lm0 s87lx+Qr71YfbqWftIE+7LQDlHw90dorxr69MDE+nlVq2KmiX0K8ZJeZ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXASP8ruaylB4k1CQqlX+MFxhKMMB8GA1UdIwQY MBaAFELr/YkXtY8Ghtk+tI3kIewBNwrJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXV2OWlSZTFqd2FHMlQ2MGplUWg3QUUzQ3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNDI4MWUtZTFlYS00ZjY5LWI1M2Qt N2YwMzM4ZTQ5ZWUxLzEvUXV2OWlSZTFqd2FHMlQ2MGplUWg3QUUzQ3NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yNDI4MWUtZTFlYS00ZjY5LWI1M2QtN2YwMzM4ZTQ5ZWUx LzEvUXV2OWlSZTFqd2FHMlQ2MGplUWg3QUUzQ3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMetJWrb txRVPT8t4xx9cxUp4kBFT6sCEw7kkPOJIcFDu+hCP2SEw2q5yHWG6n/9/1m/0emU xzA8fRDHjBip+6mkl0yGjvMo3EEhF8MObFPsiHTKJWHHWj+nOBxHpM8uAdmBMqr4 dxkPE1e6AoNb6yi/IbC3JuaHQVsaR7OizjJcAFaCRn3osd1lV39B3oZyK038QdPO 0auTqRgjF5gZeVLeGh2T3NhTFvK0aisjlVNnU+7Xr9E7yTeLtBzMyaoTICKBUt+0 o6wzSGWJhOwTcN+itkqyIFnYZOt8cuqmT5QagrIX/Ij7yUUKM64w+L4a3UDP2LEp /BrDVz2m7eVIdw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:17:08 2025 by rpki-client