This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft File: gQrwAiUQayCW6bIdmsLyBAaI3qI.mft (raw, json) Hash identifier: 5zevsx4R5/woXJBJqFJbQStkB5vlpE1xlZ4A/u+K330= Subject key identifier: 2F:04:C8:70:81:D9:A6:F3:FD:76:F4:7E:4D:2E:06:46:A8:60:81:0A Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2 Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2 Certificate serial: 019B213DB1CD59E7E6128C544DDE5E23F128 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft Manifest number: 0AC2 Signing time: Mon 15 Dec 2025 09:00:49 +0000 Manifest this update: Mon 15 Dec 2025 09:00:49 +0000 Manifest next update: Tue 16 Dec 2025 09:00:49 +0000 Files and hashes: 1: RY9h-rx1ZstpJjozDETgohyO7Lk.roa (hash: 0CX3AZGe8LLC0uBgiztbMwk7WnvOC9Yq5FJHH6gri8w=) 2: gA8AYbCwcFJfHyhTWrHCSel_7z4.roa (hash: DRfyCzFOVemyTrr7A1FKb5ojCB7lbj59iDLvIoFfDN4=) 3: gQrwAiUQayCW6bIdmsLyBAaI3qI.crl (hash: A8n+9Nhfhl8yPDnNM8mXZICOlo1VI/agvM/6TEPH64E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:3d:b1:cd:59:e7:e6:12:8c:54:4d:de:5e:23:f1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2 Validity Not Before: Dec 15 09:00:49 2025 GMT Not After : Dec 16 09:00:49 2025 GMT Subject: CN=2f04c87081d9a6f3fd76f47e4d2e0646a860810a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0f:5d:36:a0:27:98:e7:8e:13:1a:00:1e:33: 24:17:01:32:07:6d:95:35:60:be:68:b7:3b:89:85: 81:5e:5a:a9:be:3b:63:bb:11:c1:3a:b8:a5:03:b6: c1:fb:55:76:d1:e0:10:e5:b5:4b:8c:b3:ba:f2:56: b8:e1:28:c1:ff:3d:8d:5f:fb:01:d5:85:ce:08:7a: 99:23:c9:67:09:ff:03:d9:f8:e3:e2:cf:9d:d4:45: 1c:d3:80:42:3f:23:53:a6:84:5f:0d:22:12:f9:78: da:3e:b0:26:94:1b:64:79:a5:ea:37:c4:95:09:76: f8:ec:f0:87:cd:88:58:3f:04:e9:8d:e6:fc:60:b1: d4:bf:48:92:d6:5c:95:82:89:18:1c:fe:b6:87:fb: c1:13:17:e7:4c:00:aa:b6:f1:86:08:73:b5:07:02: 8b:9e:95:a2:5c:f2:d6:db:2e:3b:37:a4:51:54:cc: d1:7d:e6:48:05:fc:2a:94:a0:85:e3:f3:c1:9b:e8: 65:cb:b8:96:42:a8:b7:9b:26:24:6f:b5:eb:a2:e3: de:e9:69:f0:6c:1d:ac:d9:65:f4:50:a5:70:12:3c: 92:96:b8:32:98:d1:ce:d4:fa:81:48:d6:fe:4e:88: 8d:fc:10:85:52:0a:a9:c0:75:f9:63:cf:fa:5d:4e: 92:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:04:C8:70:81:D9:A6:F3:FD:76:F4:7E:4D:2E:06:46:A8:60:81:0A X509v3 Authority Key Identifier: keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:58:56:1e:ad:36:eb:f0:65:75:3c:a3:6b:15:a4:43:39:2d: 58:f2:7b:b7:24:6a:a5:d7:14:38:cf:c4:e8:8d:89:de:cf:9a: 8a:6f:d0:28:b0:8d:fe:31:46:e9:ce:9f:aa:67:6b:c8:eb:f2: ce:5a:58:0d:3f:2a:ab:e0:86:02:1f:cb:84:f6:40:40:95:f9: d9:bf:53:58:e7:59:5f:56:aa:99:84:3d:e8:41:8a:45:64:2d: c5:15:4b:5f:40:e5:3d:d5:2f:f2:e5:e2:cf:13:60:76:ae:28: 78:84:4d:56:73:85:3e:77:9a:35:f1:4e:4f:25:24:c2:a8:c9: 3c:8a:8b:e3:0d:6c:c3:50:08:55:67:b3:9c:d6:c0:69:01:f7: f3:9e:a3:78:60:bf:d7:7b:9f:27:e3:b3:3b:c3:88:56:34:20: 1f:d1:60:de:70:da:01:73:d6:5f:62:85:2f:be:80:67:70:53: 75:38:92:71:d4:bd:c0:b6:25:30:b2:fc:d5:79:a7:5e:13:51: 46:e0:57:b0:8a:fb:57:e1:ba:43:29:28:58:43:79:97:09:f4: 20:92:0b:dd:0a:e4:14:de:44:8d:0f:e8:56:b6:46:e1:28:1c: 07:5e:7d:73:c8:90:aa:84:bc:95:d9:c1:4c:9d:8c:ba:11:b6: 34:9b:05:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshPbHNWefmEoxUTd5eI/EoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMGFmMDAyMjUxMDZiMjA5NmU5YjIxZDlhYzJmMjA0MDY4 OGRlYTIwHhcNMjUxMjE1MDkwMDQ5WhcNMjUxMjE2MDkwMDQ5WjAzMTEwLwYDVQQD EygyZjA0Yzg3MDgxZDlhNmYzZmQ3NmY0N2U0ZDJlMDY0NmE4NjA4MTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5A9dNqAnmOeOExoAHjMkFwEyB22V NWC+aLc7iYWBXlqpvjtjuxHBOrilA7bB+1V20eAQ5bVLjLO68la44SjB/z2NX/sB 1YXOCHqZI8lnCf8D2fjj4s+d1EUc04BCPyNTpoRfDSIS+XjaPrAmlBtkeaXqN8SV CXb47PCHzYhYPwTpjeb8YLHUv0iS1lyVgokYHP62h/vBExfnTACqtvGGCHO1BwKL npWiXPLW2y47N6RRVMzRfeZIBfwqlKCF4/PBm+hly7iWQqi3myYkb7XrouPe6Wnw bB2s2WX0UKVwEjySlrgymNHO1PqBSNb+ToiN/BCFUgqpwHX5Y8/6XU6S/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8EyHCB2abz/Xb0fk0uBkaoYIEKMB8GA1UdIwQY MBaAFIEK8AIlEGsglumyHZrC8gQGiN6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NDJhOWItOWVkNy00OTNkLTgzZjMt M2NhNDg4ZGVlZTg5LzEvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC80NDJhOWItOWVkNy00OTNkLTgzZjMtM2NhNDg4ZGVlZTg5 LzEvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlhWHq02 6/BldTyjaxWkQzktWPJ7tyRqpdcUOM/E6I2J3s+aim/QKLCN/jFG6c6fqmdryOvy zlpYDT8qq+CGAh/LhPZAQJX52b9TWOdZX1aqmYQ96EGKRWQtxRVLX0DlPdUv8uXi zxNgdq4oeIRNVnOFPneaNfFOTyUkwqjJPIqL4w1sw1AIVWeznNbAaQH3856jeGC/ 13ufJ+OzO8OIVjQgH9Fg3nDaAXPWX2KFL76AZ3BTdTiScdS9wLYlMLL81XmnXhNR RuBXsIr7V+G6QykoWEN5lwn0IJIL3QrkFN5EjQ/oVrZG4SgcB159c8iQqoS8ldnB TJ2MuhG2NJsF/g== -----END CERTIFICATE-----Generated at Mon Dec 15 12:00:17 2025 by rpki-client