This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft File: gqo-xYuoRtJ6eXERxVhRUwANug4.mft (raw, json) Hash identifier: bV6Ot9zd8hDOye0L9H1v5jirhV9kUonl4RjLvjlt5v0= Subject key identifier: 4E:C8:6C:CE:F9:4A:C4:AC:DA:ED:C8:6C:02:9C:4C:0A:A4:4A:D7:5D Authority key identifier: 82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E Certificate issuer: /CN=82aa3ec58ba846d27a797111c5585153000dba0e Certificate serial: 019B476FD0252D23852D05E222D90C5E277D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 19:01:08 +0000 Manifest this update: Mon 22 Dec 2025 19:01:08 +0000 Manifest next update: Tue 23 Dec 2025 19:01:08 +0000 Files and hashes: 1: gqo-xYuoRtJ6eXERxVhRUwANug4.crl (hash: wxjzLLCvHwM6pc5NtducSOp/OBFb8SDA50RhqWOPZog=) 2: lJago70cI_xvyZhFfsg3Aw9OGeM.roa (hash: fi1kzkQyoRujjlEGa/d9WEUMMxSjDAb7GkNQ5Rq5Cis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:d0:25:2d:23:85:2d:05:e2:22:d9:0c:5e:27:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82aa3ec58ba846d27a797111c5585153000dba0e Validity Not Before: Dec 22 19:01:08 2025 GMT Not After : Dec 23 19:01:08 2025 GMT Subject: CN=4ec86ccef94ac4acdaedc86c029c4c0aa44ad75d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2f:84:a2:90:6f:9f:9b:0d:56:76:ef:60:b7: 6f:d9:7c:85:78:49:7e:e8:66:46:ff:22:85:6f:56: 26:05:88:c7:e5:13:62:7f:a9:1a:6c:b6:f4:d2:57: 5a:97:9c:50:c9:76:b1:9a:2b:fa:e1:87:ec:d6:38: a9:70:40:89:01:87:d0:42:ad:f1:05:da:fc:d6:60: 29:6a:1b:d6:c5:5a:94:5f:ea:1a:6c:93:e2:cf:12: 54:4b:4b:e4:b9:cb:dd:b5:89:3b:08:0f:4a:b7:08: e7:de:89:34:b3:47:e4:62:5e:bb:f8:19:61:86:7f: ad:ec:76:91:0f:d6:a5:07:a0:86:31:29:51:9d:10: c8:36:b8:03:03:50:a9:d8:76:18:66:98:20:54:7c: b6:94:6c:5c:ea:5d:04:3f:6e:62:30:24:86:2e:88: 96:37:d8:44:5d:5f:a7:b8:d9:a4:2e:9d:0c:9d:3f: 40:f7:47:2c:3e:1b:ff:d1:23:1b:68:1b:54:8d:af: ef:70:93:31:40:e4:b0:0e:d8:c9:97:49:2c:fc:45: f4:6b:be:f5:8a:0a:f3:20:0e:e6:80:7e:af:a4:7d: 58:b1:0d:f9:89:d1:c9:11:42:e1:c9:2e:c1:28:65: 8a:d5:5a:42:be:e3:d0:07:d3:0a:96:c1:60:9a:a9: 98:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C8:6C:CE:F9:4A:C4:AC:DA:ED:C8:6C:02:9C:4C:0A:A4:4A:D7:5D X509v3 Authority Key Identifier: keyid:82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:89:a9:56:ae:5e:75:42:8b:75:c7:09:a2:01:a8:4e:bf:d6: 18:d0:d6:a0:0e:c6:3d:5b:d5:3c:65:8d:da:88:a0:c1:17:b2: 6f:61:2f:70:61:f4:83:88:62:61:7c:ac:34:8a:c2:6b:f9:6a: 23:a9:8f:e5:70:f8:da:3b:6a:4d:74:71:45:b7:60:5b:f7:78: 8e:f2:fd:34:92:8c:81:65:56:74:10:00:4e:a8:76:07:46:62: 28:f2:b8:bf:d0:4b:43:13:6c:d2:46:e6:fe:ae:ee:62:4e:30: b3:ac:85:e5:d9:66:5f:3d:39:91:20:88:be:43:ee:76:a7:17: 71:cc:5a:13:50:dd:df:f1:31:f5:82:fc:19:c8:c8:24:a0:83: e3:d1:fa:10:ac:9d:c6:d3:d3:d1:40:76:85:8a:35:c2:7c:df: 52:05:db:e9:73:25:77:1a:55:a5:37:13:13:43:e0:68:e5:d9: ac:54:76:d9:27:a1:3d:70:52:9e:f7:23:d8:1e:d0:13:c1:a9: 04:9d:e7:cf:63:31:22:4e:68:1a:b7:6d:0e:2c:4f:d0:6c:40: 72:bd:a9:f1:6d:0d:ec:fa:cc:a2:9f:5b:06:8e:4a:3c:77:83: 3b:20:7f:a8:c0:2b:3a:c9:6e:45:fd:3a:d3:4d:b1:75:2a:6b: 61:1c:47:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb9AlLSOFLQXiItkMXid9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYWEzZWM1OGJhODQ2ZDI3YTc5NzExMWM1NTg1MTUzMDAw ZGJhMGUwHhcNMjUxMjIyMTkwMTA4WhcNMjUxMjIzMTkwMTA4WjAzMTEwLwYDVQQD Eyg0ZWM4NmNjZWY5NGFjNGFjZGFlZGM4NmMwMjljNGMwYWE0NGFkNzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i+EopBvn5sNVnbvYLdv2XyFeEl+ 6GZG/yKFb1YmBYjH5RNif6kabLb00ldal5xQyXaxmiv64Yfs1jipcECJAYfQQq3x Bdr81mApahvWxVqUX+oabJPizxJUS0vkucvdtYk7CA9Ktwjn3ok0s0fkYl67+Blh hn+t7HaRD9alB6CGMSlRnRDINrgDA1Cp2HYYZpggVHy2lGxc6l0EP25iMCSGLoiW N9hEXV+nuNmkLp0MnT9A90csPhv/0SMbaBtUja/vcJMxQOSwDtjJl0ks/EX0a771 igrzIA7mgH6vpH1YsQ35idHJEULhyS7BKGWK1VpCvuPQB9MKlsFgmqmY/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7IbM75SsSs2u3IbAKcTAqkStddMB8GA1UdIwQY MBaAFIKqPsWLqEbSenlxEcVYUVMADboOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMWM3ZjktYWQ5Yy00YmI3LWFjNDct OTI3ZGQ0NTlhYzVjLzEvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iMWM3ZjktYWQ5Yy00YmI3LWFjNDctOTI3ZGQ0NTlhYzVj LzEvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeImpVq5e dUKLdccJogGoTr/WGNDWoA7GPVvVPGWN2oigwReyb2EvcGH0g4hiYXysNIrCa/lq I6mP5XD42jtqTXRxRbdgW/d4jvL9NJKMgWVWdBAATqh2B0ZiKPK4v9BLQxNs0kbm /q7uYk4ws6yF5dlmXz05kSCIvkPudqcXccxaE1Dd3/Ex9YL8GcjIJKCD49H6EKyd xtPT0UB2hYo1wnzfUgXb6XMldxpVpTcTE0PgaOXZrFR22SehPXBSnvcj2B7QE8Gp BJ3nz2MxIk5oGrdtDixP0GxAcr2p8W0N7PrMop9bBo5KPHeDOyB/qMArOsluRf06 002xdSprYRxHEw== -----END CERTIFICATE-----Generated at Mon Dec 22 20:24:38 2025 by rpki-client