This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft File: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft (raw, json) Hash identifier: 8lw3UI2AOWuTvs+4xA4z9IS3JEu9mlszauou1vRFo0A= Subject key identifier: 9C:C4:49:6D:60:F6:7A:CC:04:FF:D5:94:CE:24:69:8C:05:26:6C:2F Authority key identifier: 19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55 Certificate issuer: /CN=190d300e6acd1f9895fce3b5abe38a5f00584d55 Certificate serial: 019B4A03949E1742CCB331E212C2529697E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft Manifest number: 178B Signing time: Tue 23 Dec 2025 07:01:47 +0000 Manifest this update: Tue 23 Dec 2025 07:01:47 +0000 Manifest next update: Wed 24 Dec 2025 07:01:47 +0000 Files and hashes: 1: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl (hash: QpPbHRsqqurQPeObvE0R83CNRKAqnLwB6FSGchfJOKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:94:9e:17:42:cc:b3:31:e2:12:c2:52:96:97:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=190d300e6acd1f9895fce3b5abe38a5f00584d55 Validity Not Before: Dec 23 07:01:47 2025 GMT Not After : Dec 24 07:01:47 2025 GMT Subject: CN=9cc4496d60f67acc04ffd594ce24698c05266c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3a:95:5d:ea:53:9c:22:f1:df:f3:af:4a:eb: 30:c9:e1:9d:65:e8:0b:0f:af:0e:8e:f6:d7:5e:5e: 01:35:a5:4f:ad:2a:a0:ab:41:af:62:50:a9:8e:4b: f7:d0:4a:a1:7e:fb:e4:3b:99:7a:7c:80:56:97:ba: 48:04:3e:7f:db:b2:23:81:e8:fa:a5:7c:1f:51:8d: d8:1b:5b:be:62:a8:31:dd:da:c1:a8:21:f8:a2:07: ed:a5:56:0d:16:cd:a4:57:55:56:15:37:0d:a3:c1: 7b:ca:3e:9d:0a:89:b5:08:a8:cf:e1:28:ea:4a:04: 98:b8:a3:62:59:bc:3f:db:51:a5:44:e4:bc:99:62: b7:04:5b:ef:4c:30:33:b2:90:06:e3:7e:0e:19:ce: 60:5a:df:f4:b4:a5:3d:f4:c8:ad:88:c0:26:45:3b: 77:f5:15:e6:69:7d:27:0e:c7:af:1e:73:8c:b4:13: 0d:84:85:15:9b:2c:02:61:55:d7:4d:63:48:6c:20: f5:5c:23:dc:c7:d6:e8:64:bf:42:f8:c8:97:f0:c1: d2:2c:f4:a4:e6:e9:a0:21:b5:03:4e:bc:e2:08:7f: b0:53:6f:2f:19:b0:94:c7:75:f9:91:e2:8f:0a:1d: fd:05:39:51:0a:54:c0:e6:ab:1a:72:19:db:28:8e: ae:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C4:49:6D:60:F6:7A:CC:04:FF:D5:94:CE:24:69:8C:05:26:6C:2F X509v3 Authority Key Identifier: keyid:19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:1f:12:c1:c3:0c:e0:23:d0:13:94:c4:dd:d4:6a:fc:47:d6: 0c:54:03:fc:a4:39:c5:49:96:27:c4:b0:84:05:fc:8e:70:15: 8a:ce:2b:d1:c7:f5:5b:45:74:15:60:74:6f:86:f1:e5:11:2d: cd:fc:3b:01:60:6c:e4:f3:e8:58:0c:93:fa:22:59:70:65:2e: da:23:2b:75:c7:4d:3c:81:99:fb:51:a4:72:f4:bf:e5:51:3f: 48:a8:0d:9e:97:7c:01:eb:02:a8:be:b0:30:2a:45:44:26:5c: 90:47:a1:9c:89:57:ac:07:bb:9c:2f:9b:10:47:c9:d1:29:54: 7d:29:a2:8c:07:f3:90:9e:87:4a:17:c9:8b:f8:6b:ce:51:42: 84:81:0c:b9:04:b3:3c:8a:aa:b0:9e:da:e6:92:d5:28:36:7a: 13:80:f8:4e:93:d0:ba:c2:85:20:9a:e4:13:bd:d3:ba:99:33: 53:88:4a:15:8f:73:43:99:a2:64:e3:57:b8:d3:ac:87:ab:58: 7c:b6:e2:fd:02:22:05:38:4c:42:62:d9:2a:53:45:6a:7e:84: 4c:e5:2e:31:c2:68:b5:09:69:0d:27:fc:02:a8:9e:e0:1f:ba: 4f:1a:09:29:6d:af:cf:65:96:cd:57:94:a1:a6:22:56:01:98: 95:f9:a2:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA5SeF0LMszHiEsJSlpflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MGQzMDBlNmFjZDFmOTg5NWZjZTNiNWFiZTM4YTVmMDA1 ODRkNTUwHhcNMjUxMjIzMDcwMTQ3WhcNMjUxMjI0MDcwMTQ3WjAzMTEwLwYDVQQD Eyg5Y2M0NDk2ZDYwZjY3YWNjMDRmZmQ1OTRjZTI0Njk4YzA1MjY2YzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDqVXepTnCLx3/OvSuswyeGdZegL D68OjvbXXl4BNaVPrSqgq0GvYlCpjkv30EqhfvvkO5l6fIBWl7pIBD5/27Ijgej6 pXwfUY3YG1u+Yqgx3drBqCH4ogftpVYNFs2kV1VWFTcNo8F7yj6dCom1CKjP4Sjq SgSYuKNiWbw/21GlROS8mWK3BFvvTDAzspAG434OGc5gWt/0tKU99MitiMAmRTt3 9RXmaX0nDsevHnOMtBMNhIUVmywCYVXXTWNIbCD1XCPcx9boZL9C+MiX8MHSLPSk 5umgIbUDTrziCH+wU28vGbCUx3X5keKPCh39BTlRClTA5qsachnbKI6uHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzESW1g9nrMBP/VlM4kaYwFJmwvMB8GA1UdIwQY MBaAFBkNMA5qzR+Ylfzjtavjil8AWE1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1Ewd0Rtck5INWlWX09PMXEtT0tYd0JZVFZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My85NzRlYTItNDBhZi00ZWY2LWI2Yzct ZmRjZDlmZDliYjAzLzEvR1Ewd0Rtck5INWlWX09PMXEtT0tYd0JZVFZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My85NzRlYTItNDBhZi00ZWY2LWI2YzctZmRjZDlmZDliYjAz LzEvR1Ewd0Rtck5INWlWX09PMXEtT0tYd0JZVFZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFx8SwcMM 4CPQE5TE3dRq/EfWDFQD/KQ5xUmWJ8SwhAX8jnAVis4r0cf1W0V0FWB0b4bx5REt zfw7AWBs5PPoWAyT+iJZcGUu2iMrdcdNPIGZ+1GkcvS/5VE/SKgNnpd8AesCqL6w MCpFRCZckEehnIlXrAe7nC+bEEfJ0SlUfSmijAfzkJ6HShfJi/hrzlFChIEMuQSz PIqqsJ7a5pLVKDZ6E4D4TpPQusKFIJrkE73TupkzU4hKFY9zQ5miZONXuNOsh6tY fLbi/QIiBThMQmLZKlNFan6ETOUuMcJotQlpDSf8Aqie4B+6TxoJKW2vz2WWzVeU oaYiVgGYlfmiCg== -----END CERTIFICATE-----Generated at Tue Dec 23 10:54:08 2025 by rpki-client