This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json) Hash identifier: 2ZBDmLGkqPUnVnmwO/95TvUMNdf/ZArG4nUHfjNKdgo= Subject key identifier: BB:E8:B4:AF:08:4D:BA:EA:2E:98:53:36:DD:58:82:23:79:90:50:E2 Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d Certificate serial: 019B34C56BAA42A6475F93517F0D38DADF77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft Manifest number: 10C7 Signing time: Fri 19 Dec 2025 04:01:51 +0000 Manifest this update: Fri 19 Dec 2025 04:01:51 +0000 Manifest next update: Sat 20 Dec 2025 04:01:51 +0000 Files and hashes: 1: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: asdz+DdpZ+pwJ1YbxOQYwmuTwiNrIPq7wEzjZctwk0s=) 2: qWiRXpCL0NKtXzFBLcgeaF0mM4A.roa (hash: V0gkUhFHDtKhWrN/3cVBozf0t4RmZJghnQqebhSHl+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:6b:aa:42:a6:47:5f:93:51:7f:0d:38:da:df:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d Validity Not Before: Dec 19 04:01:51 2025 GMT Not After : Dec 20 04:01:51 2025 GMT Subject: CN=bbe8b4af084dbaea2e985336dd588223799050e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:10:c5:ae:8b:26:af:df:c9:0b:80:e1:97:56: e9:9d:a0:ee:00:ee:30:56:d1:6c:4a:ec:ab:09:d9: 12:ec:98:01:c5:f3:5d:91:81:65:d5:75:09:0b:9b: 76:ed:92:94:8f:24:e0:a3:4c:71:cb:cd:b6:6c:69: 3d:95:1f:73:29:9f:67:71:52:d4:23:34:d1:aa:98: f0:81:54:97:c4:f1:33:95:56:f6:90:33:92:b0:1f: 78:f5:c9:d5:9e:db:bd:90:a4:ef:bc:79:4b:64:ca: ec:21:91:4f:6c:90:d8:b6:d8:a8:55:ec:10:e6:2b: db:ca:f1:ff:fe:fd:7c:21:00:78:6b:c4:99:8b:f9: c2:4d:55:09:61:ea:dc:3c:cf:6b:06:f4:07:51:81: d9:0b:35:07:78:17:88:c5:86:31:dc:89:34:db:c2: b9:4a:0d:3c:be:35:d3:7d:11:e6:8d:c2:ec:c5:88: e4:0b:7f:8e:2f:9b:28:b0:02:db:12:45:dc:a2:2e: 1d:b7:6a:39:c6:e4:3c:ad:5f:a1:ca:47:49:e7:a2: a5:06:0a:4c:77:40:b8:87:ac:e9:cc:c1:37:63:39: c3:02:51:57:09:f9:42:8f:9e:7e:f6:c0:0a:96:b6: d9:be:e2:0c:69:cc:72:d4:7f:aa:fa:a2:c0:c9:13: 88:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E8:B4:AF:08:4D:BA:EA:2E:98:53:36:DD:58:82:23:79:90:50:E2 X509v3 Authority Key Identifier: keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:8b:1f:49:ff:0b:7d:11:20:96:44:98:6d:89:5e:49:87:67: f3:01:f7:c4:f5:97:10:aa:31:c4:55:d1:84:5b:fc:2a:18:ff: fd:8d:c0:37:37:9c:16:ef:65:a1:44:1b:59:7f:b2:31:fe:14: 77:15:5d:e8:fe:65:e0:9a:d7:01:c3:a4:9b:1b:4a:0b:41:ab: 78:59:27:b9:55:c9:96:37:64:cf:ac:89:0c:a4:02:b5:21:c5: ac:65:76:35:21:0e:4c:13:bb:77:67:bf:5d:57:c1:6c:e5:47: d7:6d:f4:ea:56:21:c2:4d:19:b4:ec:88:35:60:10:ed:53:a2: 09:c8:69:0f:6a:2e:85:fc:76:de:5b:3d:b7:ef:03:5e:96:e9: 17:d5:16:20:94:28:09:79:7b:87:7d:3d:9b:1f:7e:ee:d6:05: ba:37:7b:fc:06:fb:6d:b8:72:57:07:43:c4:a9:d2:6d:30:37: 7b:8f:cf:81:44:bc:9d:bc:fd:2f:b4:22:c6:47:13:28:d8:ea: ac:f7:d9:dd:86:7a:94:6a:60:54:8b:c9:61:80:4d:0b:0a:3a: e8:c8:4d:61:f0:13:f1:db:17:31:e3:b4:25:2e:78:fe:d5:af: 3f:0e:b7:ab:c2:4f:f7:c5:ae:58:6c:5e:21:3d:39:56:c1:96: e3:62:81:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xWuqQqZHX5NRfw042t93MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MGVjN2FhYjIwZmM0YzgwMWM2Nzk2M2U1OWU0ZjkzNjAw ZTQwMWQwHhcNMjUxMjE5MDQwMTUxWhcNMjUxMjIwMDQwMTUxWjAzMTEwLwYDVQQD EyhiYmU4YjRhZjA4NGRiYWVhMmU5ODUzMzZkZDU4ODIyMzc5OTA1MGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRDFrosmr9/JC4Dhl1bpnaDuAO4w VtFsSuyrCdkS7JgBxfNdkYFl1XUJC5t27ZKUjyTgo0xxy822bGk9lR9zKZ9ncVLU IzTRqpjwgVSXxPEzlVb2kDOSsB949cnVntu9kKTvvHlLZMrsIZFPbJDYttioVewQ 5ivbyvH//v18IQB4a8SZi/nCTVUJYercPM9rBvQHUYHZCzUHeBeIxYYx3Ik028K5 Sg08vjXTfRHmjcLsxYjkC3+OL5sosALbEkXcoi4dt2o5xuQ8rV+hykdJ56KlBgpM d0C4h6zpzME3YznDAlFXCflCj55+9sAKlrbZvuIMacxy1H+q+qLAyROItwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvotK8ITbrqLphTNt1YgiN5kFDiMB8GA1UdIwQY MBaAFBkOx6qyD8TIAcZ5Y+WeT5NgDkAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgt ZGFiOWI0ODNjMTIzLzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgtZGFiOWI0ODNjMTIz LzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIsfSf8L fREglkSYbYleSYdn8wH3xPWXEKoxxFXRhFv8Khj//Y3ANzecFu9loUQbWX+yMf4U dxVd6P5l4JrXAcOkmxtKC0GreFknuVXJljdkz6yJDKQCtSHFrGV2NSEOTBO7d2e/ XVfBbOVH12306lYhwk0ZtOyINWAQ7VOiCchpD2ouhfx23ls9t+8DXpbpF9UWIJQo CXl7h309mx9+7tYFujd7/Ab7bbhyVwdDxKnSbTA3e4/PgUS8nbz9L7QixkcTKNjq rPfZ3YZ6lGpgVIvJYYBNCwo66MhNYfAT8dsXMeO0JS54/tWvPw63q8JP98WuWGxe IT05VsGW42KBFg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:11:29 2025 by rpki-client