This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft File: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json) Hash identifier: KhSXz6mk866LFrtGQ2/qh4RLvhhI+QamUi2QGKMw+CA= Subject key identifier: 73:A0:7F:66:29:8D:A3:31:86:2A:41:E3:20:07:AA:1C:24:A0:B7:56 Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a Certificate serial: 019B228775D02845CC382D41535B1D7EE545 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft Manifest number: 177D Signing time: Mon 15 Dec 2025 15:01:01 +0000 Manifest this update: Mon 15 Dec 2025 15:01:01 +0000 Manifest next update: Tue 16 Dec 2025 15:01:01 +0000 Files and hashes: 1: CabH8yqn5S_kOgWDLQqFiKvzRos.roa (hash: 6ag0+5Ik/WQxtmqQPOIuQwUXIuLv9ELuLcs7tX6aoMI=) 2: VQo-At29Fu-EX7b5D46S6kL9nbI.roa (hash: jdnjmvA4QLfORK84+jjkf8uapja4VMoDv0JpxJYMg64=) 3: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: puJx3vZM6+BiGUt5h4XiLklDgl8AVomYLKGBNRfppvk=) 4: wB7zO9znSbsEaFVzHFAP7dE2rN0.roa (hash: oKOkiDomqnZDUq9zEDTivQ41nb+DuiZJIDMY2vxiFOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:75:d0:28:45:cc:38:2d:41:53:5b:1d:7e:e5:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a Validity Not Before: Dec 15 15:01:01 2025 GMT Not After : Dec 16 15:01:01 2025 GMT Subject: CN=73a07f66298da331862a41e32007aa1c24a0b756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9a:da:5c:ab:97:9f:66:85:12:a3:ed:aa:e0: 16:ba:ff:64:8f:f5:80:60:ee:a2:83:49:bf:fb:96: d0:d4:3e:09:1d:61:fd:66:8d:6e:75:7c:5b:21:a1: 26:91:0c:27:41:ba:4c:51:15:18:ee:85:94:e9:15: a2:6a:06:e3:37:a2:fd:77:5e:53:1a:47:68:65:f6: 1f:d6:39:7b:bb:73:4c:5c:23:d2:cd:1a:c2:d6:e6: 05:fc:94:4d:1e:90:8e:6a:b8:13:ff:5c:cb:36:df: c2:92:80:61:84:51:e7:3f:a0:65:1b:a3:a8:8b:8d: 89:b8:97:e0:3c:e8:92:97:b1:69:9f:62:8c:79:3e: 48:f3:28:1a:4f:0b:bf:7b:f9:e2:36:67:9f:0c:43: e1:83:95:59:65:04:e7:a5:5e:9b:57:05:99:31:fb: 9b:a2:e0:ae:77:36:4a:fd:6d:0f:c2:c4:a2:c7:56: 76:65:31:ba:53:a3:29:81:31:ac:c5:bd:46:c5:5f: a2:17:61:a6:af:ee:c6:15:ba:7a:17:8b:94:02:f4: 4b:aa:0a:b9:60:09:14:fd:5d:92:f4:b5:0d:1d:f6: 75:d9:c5:5c:31:2a:5b:c3:0e:a8:8f:f9:02:a8:58: 70:0e:a3:16:25:0b:2c:8b:99:fc:cc:60:30:5b:5c: a1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A0:7F:66:29:8D:A3:31:86:2A:41:E3:20:07:AA:1C:24:A0:B7:56 X509v3 Authority Key Identifier: keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:a5:8a:30:60:7d:54:d8:93:60:63:ff:18:3f:d3:6a:2a:53: c5:f2:8c:30:4d:8c:fe:fb:b6:9b:ad:b6:f7:e0:b5:a6:08:80: 21:5a:98:5d:9e:ee:fe:d5:e8:c9:f8:d4:fd:35:85:13:73:19: 79:ee:0b:ec:64:3a:0c:3c:cc:5e:c7:29:06:5c:02:37:be:29: 4c:9e:28:56:f9:a6:29:ce:66:3f:fa:bb:f2:72:15:45:3b:20: 7b:a9:76:4f:34:bb:e8:6e:28:8a:1b:10:46:ad:f2:78:e9:8c: 36:a6:ce:74:30:9c:b6:34:a4:f2:4b:67:b8:8c:83:1b:23:2e: 35:42:0a:70:74:71:99:c5:96:dd:d7:b3:f3:45:82:6f:af:fa: bf:2a:41:02:72:22:d6:ee:62:66:49:96:78:33:f7:c3:5a:9f: 13:23:1d:84:48:33:c1:a8:26:1f:6e:1b:7e:15:28:5e:4a:13: 51:77:72:64:70:80:03:d9:57:fd:48:b5:f4:78:76:47:ef:f6: 80:9b:52:d1:fc:dd:48:9c:25:13:e3:14:5a:f5:31:8a:14:5a: d4:28:6b:7a:6a:de:b4:63:a9:14:d0:9b:f9:38:e8:31:33:68: 87:41:e7:e2:76:af:1c:7f:29:14:78:b3:ae:33:2d:e5:d3:9c: e6:3c:58:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih3XQKEXMOC1BU1sdfuVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMGNkNTBkYjQzN2M3ODk0NjRjYjY0ZGZhYmZlNDA1Y2E5 ODFiMWEwHhcNMjUxMjE1MTUwMTAxWhcNMjUxMjE2MTUwMTAxWjAzMTEwLwYDVQQD Eyg3M2EwN2Y2NjI5OGRhMzMxODYyYTQxZTMyMDA3YWExYzI0YTBiNzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1praXKuXn2aFEqPtquAWuv9kj/WA YO6ig0m/+5bQ1D4JHWH9Zo1udXxbIaEmkQwnQbpMURUY7oWU6RWiagbjN6L9d15T GkdoZfYf1jl7u3NMXCPSzRrC1uYF/JRNHpCOargT/1zLNt/CkoBhhFHnP6BlG6Oo i42JuJfgPOiSl7Fpn2KMeT5I8ygaTwu/e/niNmefDEPhg5VZZQTnpV6bVwWZMfub ouCudzZK/W0PwsSix1Z2ZTG6U6MpgTGsxb1GxV+iF2Gmr+7GFbp6F4uUAvRLqgq5 YAkU/V2S9LUNHfZ12cVcMSpbww6oj/kCqFhwDqMWJQssi5n8zGAwW1yhnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOgf2YpjaMxhipB4yAHqhwkoLdWMB8GA1UdIwQY MBaAFIEM1Q20N8eJRky2Tfq/5AXKmBsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1F6VkRiUTN4NGxHVExaTi1yX2tCY3FZR3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lY2FhOTYtOWFmNi00Yjk5LTk1N2Yt NmI3NTk5ZmNkYzMzLzEvZ1F6VkRiUTN4NGxHVExaTi1yX2tCY3FZR3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lY2FhOTYtOWFmNi00Yjk5LTk1N2YtNmI3NTk5ZmNkYzMz LzEvZ1F6VkRiUTN4NGxHVExaTi1yX2tCY3FZR3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKWKMGB9 VNiTYGP/GD/TaipTxfKMME2M/vu2m6229+C1pgiAIVqYXZ7u/tXoyfjU/TWFE3MZ ee4L7GQ6DDzMXscpBlwCN74pTJ4oVvmmKc5mP/q78nIVRTsge6l2TzS76G4oihsQ Rq3yeOmMNqbOdDCctjSk8ktnuIyDGyMuNUIKcHRxmcWW3dez80WCb6/6vypBAnIi 1u5iZkmWeDP3w1qfEyMdhEgzwagmH24bfhUoXkoTUXdyZHCAA9lX/Ui19Hh2R+/2 gJtS0fzdSJwlE+MUWvUxihRa1ChremretGOpFNCb+TjoMTNoh0Hn4navHH8pFHiz rjMt5dOc5jxYzw== -----END CERTIFICATE-----Generated at Mon Dec 15 16:56:26 2025 by rpki-client