This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft File: l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft (raw, json) Hash identifier: 7+Ch58RKLnqe4II+mkQx/yNJXrKFvCTIACg1QEsU3ko= Subject key identifier: C4:16:E0:1F:94:2F:A4:F9:47:12:7A:5B:A4:93:E3:C7:6B:B8:95:41 Authority key identifier: 97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB Certificate issuer: /CN=97f19047f3f1e0593d1c317997bede2890aa0ffb Certificate serial: 019B46CAD444EEB578F2A579C0E83B06D650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft Manifest number: C3 Signing time: Mon 22 Dec 2025 16:00:56 +0000 Manifest this update: Mon 22 Dec 2025 16:00:56 +0000 Manifest next update: Tue 23 Dec 2025 16:00:56 +0000 Files and hashes: 1: 3MukuvAjChzbkXUiH7AnQDbb0l4.roa (hash: kY3n/ZTy9g9zEH976kSVtvidmHz0YnZOSjj64JdMJqA=) 2: M9icYFpRdfuUP8GszU75Wi0Nv1A.roa (hash: enDVpQ7OlTMZIE4utPL8AG9YkPcxUy6DkUw1A6uMG2w=) 3: XD0PXwobbQjv2v0SAyif4Rt3QYU.roa (hash: Impuxhx1sitl+JUUEv0n/TPV0OeehyFvKjujO93QXyQ=) 4: l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl (hash: r6tRHX9FW2jlVFiSVHfcYNPEtzj7kU+vigo3Yskb07E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 16:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:d4:44:ee:b5:78:f2:a5:79:c0:e8:3b:06:d6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97f19047f3f1e0593d1c317997bede2890aa0ffb Validity Not Before: Dec 22 16:00:56 2025 GMT Not After : Dec 23 16:00:56 2025 GMT Subject: CN=c416e01f942fa4f947127a5ba493e3c76bb89541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e2:d2:13:69:0a:be:81:6d:56:15:5d:17:a4: 37:a4:ad:47:06:ae:64:b7:a3:d1:b7:63:2e:6b:bf: 71:da:de:a0:6f:be:81:0d:db:59:d1:c9:92:cf:49: 37:6f:af:6e:b9:2c:41:06:7b:fd:e9:1f:20:43:25: 0a:33:d0:68:c0:2c:89:3d:41:a2:9c:52:87:61:5d: 53:10:dd:79:71:05:5a:0c:1e:cf:85:dd:ac:49:1d: f8:40:98:48:44:ed:98:4e:a2:8c:61:bf:08:9f:9b: 1b:c9:16:fe:e5:06:ef:3b:b6:93:8d:3c:20:9f:4b: b6:e8:c1:58:38:72:82:b4:6f:d4:6e:0f:56:db:f2: 49:46:8d:56:89:5e:75:03:b5:6f:b9:ad:da:e5:6e: f2:9b:81:ca:06:16:fd:a7:3b:7f:1a:9c:a5:53:dd: 76:ef:98:6a:77:9b:f1:65:eb:6f:7a:67:ac:07:ca: c0:eb:76:11:6b:3e:12:22:2d:a3:2e:02:07:00:22: f0:c0:bc:0d:71:bb:f9:44:a2:cb:81:5b:d2:34:8a: 5e:fb:86:24:7d:1e:33:f4:5f:cc:ca:d3:c8:5b:75: 5f:4a:00:93:af:b4:60:bc:2e:1e:68:22:7a:51:89: 36:c1:a2:91:75:2e:ce:fa:51:46:c8:7b:6e:01:70: 02:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:16:E0:1F:94:2F:A4:F9:47:12:7A:5B:A4:93:E3:C7:6B:B8:95:41 X509v3 Authority Key Identifier: keyid:97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:1a:36:5d:40:bc:6d:c3:fd:17:56:99:1f:10:f3:9f:00:8e: f6:0c:e9:4e:b3:dc:d2:ff:f8:32:79:4d:37:5d:75:73:bb:f9: 9d:13:91:17:bf:20:a1:df:ff:09:03:96:b5:fb:35:d5:0f:74: c9:f0:01:11:51:d4:83:a4:0e:0e:41:9d:34:63:dd:09:24:f6: 94:31:e8:8c:bb:af:cb:f0:f3:2e:9b:0e:1c:97:07:00:ed:6b: 23:aa:99:2c:3d:24:7b:2d:85:66:70:50:d8:a4:fd:01:e4:e6: ec:7f:1c:25:5e:80:4c:7f:28:b2:45:04:41:7b:96:c2:a3:23: 44:f6:68:92:08:f4:88:03:f8:84:32:6d:00:e2:78:ce:b3:13: 21:5f:58:57:96:95:5b:a3:97:cf:50:11:04:fb:26:35:6a:26: 56:2c:f7:52:5b:f7:fa:dc:5d:ba:db:e8:91:47:2a:e5:6f:7f: 38:48:80:f1:ef:28:cd:90:f2:af:1d:91:6f:97:3b:15:fc:4c: 8f:47:f7:71:6f:00:db:58:84:f5:a2:26:bf:c4:bd:a9:8b:09: 25:47:4d:9d:50:cc:db:18:e4:2a:d6:9f:35:77:90:ee:8f:58: 7e:7e:82:c6:bb:e6:08:a0:5e:01:46:8c:f5:3b:d8:76:44:b7: 9a:61:e3:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGytRE7rV48qV5wOg7BtZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZjE5MDQ3ZjNmMWUwNTkzZDFjMzE3OTk3YmVkZTI4OTBh YTBmZmIwHhcNMjUxMjIyMTYwMDU2WhcNMjUxMjIzMTYwMDU2WjAzMTEwLwYDVQQD EyhjNDE2ZTAxZjk0MmZhNGY5NDcxMjdhNWJhNDkzZTNjNzZiYjg5NTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruLSE2kKvoFtVhVdF6Q3pK1HBq5k t6PRt2Mua79x2t6gb76BDdtZ0cmSz0k3b69uuSxBBnv96R8gQyUKM9BowCyJPUGi nFKHYV1TEN15cQVaDB7Phd2sSR34QJhIRO2YTqKMYb8In5sbyRb+5QbvO7aTjTwg n0u26MFYOHKCtG/Ubg9W2/JJRo1WiV51A7Vvua3a5W7ym4HKBhb9pzt/GpylU912 75hqd5vxZetvemesB8rA63YRaz4SIi2jLgIHACLwwLwNcbv5RKLLgVvSNIpe+4Yk fR4z9F/MytPIW3VfSgCTr7RgvC4eaCJ6UYk2waKRdS7O+lFGyHtuAXACVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQW4B+UL6T5RxJ6W6ST48druJVBMB8GA1UdIwQY MBaAFJfxkEfz8eBZPRwxeZe+3iiQqg/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbF9HUVJfUHg0Rms5SERGNWw3N2VLSkNxRF9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8yMGIzZmUtZWViZi00MmZmLWIwMTIt N2EzZTM5NGMwNDkzLzEvbF9HUVJfUHg0Rms5SERGNWw3N2VLSkNxRF9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8yMGIzZmUtZWViZi00MmZmLWIwMTItN2EzZTM5NGMwNDkz LzEvbF9HUVJfUHg0Rms5SERGNWw3N2VLSkNxRF9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqxo2XUC8 bcP9F1aZHxDznwCO9gzpTrPc0v/4MnlNN111c7v5nRORF78god//CQOWtfs11Q90 yfABEVHUg6QODkGdNGPdCST2lDHojLuvy/DzLpsOHJcHAO1rI6qZLD0key2FZnBQ 2KT9AeTm7H8cJV6ATH8oskUEQXuWwqMjRPZokgj0iAP4hDJtAOJ4zrMTIV9YV5aV W6OXz1ARBPsmNWomViz3Ulv3+txdutvokUcq5W9/OEiA8e8ozZDyrx2Rb5c7FfxM j0f3cW8A21iE9aImv8S9qYsJJUdNnVDM2xjkKtafNXeQ7o9Yfn6CxrvmCKBeAUaM 9TvYdkS3mmHjlQ== -----END CERTIFICATE-----Generated at Tue Dec 23 02:02:02 2025 by rpki-client