This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft File: gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft (raw, json) Hash identifier: 5nuvJpHPiL5yU8FFGm8UMyIRRKiocshgC+QM7hGf4Ns= Subject key identifier: 5E:77:5A:A6:DA:3B:B6:1C:A1:A0:73:7D:77:F9:4F:96:1F:C7:ED:F1 Authority key identifier: 81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81 Certificate issuer: /CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81 Certificate serial: 019B40C88172CCF289F2D3F147C62CE695D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft Manifest number: 0742 Signing time: Sun 21 Dec 2025 12:00:40 +0000 Manifest this update: Sun 21 Dec 2025 12:00:40 +0000 Manifest next update: Mon 22 Dec 2025 12:00:40 +0000 Files and hashes: 1: FS82XW-k77zMqGngn5r7_Yo2ofY.roa (hash: HKhziiZ0vfYbPizRPboCVEcmyagdxZmch8FNJ52Iiys=) 2: gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl (hash: Fj8r1HPfXpaYTpkcaKCkf4VdQcbuZDdMMxlR44+OgxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:81:72:cc:f2:89:f2:d3:f1:47:c6:2c:e6:95:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81 Validity Not Before: Dec 21 12:00:40 2025 GMT Not After : Dec 22 12:00:40 2025 GMT Subject: CN=5e775aa6da3bb61ca1a0737d77f94f961fc7edf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:0f:8c:b9:8f:f1:b8:db:7f:3b:6d:f3:06: eb:0e:8e:32:9a:ae:f9:b5:a2:ef:74:29:aa:8e:a4: 92:ae:c6:d5:21:54:72:95:15:1b:ee:8e:53:d2:a0: 39:6a:40:ba:88:ac:98:e8:76:3e:83:64:dd:f7:45: f8:2f:61:33:12:8e:33:1c:10:a1:68:aa:10:74:0f: 7e:ab:b9:42:ca:13:13:4e:9c:e8:ae:2f:38:12:ab: ec:29:e9:b1:92:d6:c6:59:c6:89:9c:68:59:f3:ab: 59:7c:60:85:d3:ba:dd:53:7a:05:5e:1c:72:e4:4a: f7:9e:ca:75:5b:c1:db:97:bc:05:2e:6c:46:fc:7c: c8:d8:e9:65:a2:01:4b:24:8d:06:4d:5c:b0:54:00: 7d:32:c2:50:b3:18:2c:8b:83:67:44:89:45:b4:f8: 07:6a:0d:f7:8f:fa:e0:d2:5d:89:60:aa:7b:40:4c: 7a:a1:92:53:74:ee:5f:80:b2:1f:90:b9:f3:8c:fa: ef:bd:59:47:c4:e9:67:a9:20:42:b3:15:3a:83:22: 29:9e:b4:41:a9:25:9e:87:57:ab:78:0a:16:7a:06: f8:a9:cf:b3:1e:9b:18:1c:33:0a:1c:79:29:30:23: 84:4f:5d:79:b5:c1:da:ca:36:cb:86:8f:0c:e9:b3: 90:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:77:5A:A6:DA:3B:B6:1C:A1:A0:73:7D:77:F9:4F:96:1F:C7:ED:F1 X509v3 Authority Key Identifier: keyid:81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d5:b6:19:33:1f:13:37:5d:66:a4:ac:da:7c:e8:e5:2e:8c: be:de:81:92:f7:70:8a:2f:12:5a:51:f7:7a:02:f0:12:83:c2: 0b:9f:01:8e:4a:80:67:ad:93:f1:0c:11:05:41:94:98:f9:7c: 57:9e:81:fb:52:dd:60:82:2f:43:27:4b:6e:4a:69:d2:aa:46: 68:dd:9f:76:31:af:99:db:c2:b6:5f:32:ef:5a:a0:75:07:d3: dd:c5:9e:9d:2a:2a:26:1b:51:61:5c:6e:d9:3a:7c:f7:39:0b: 95:f4:05:2d:fa:9c:75:03:14:09:76:31:0b:b0:a7:78:ce:4a: f1:5e:89:f7:6a:15:56:b7:b6:60:42:f5:9b:17:75:df:f9:c4: cc:88:6c:09:7e:3f:68:15:35:ec:98:65:45:a0:c2:15:fb:82: b8:90:57:d0:e5:8e:6a:71:b3:b3:1c:c7:dc:35:8a:22:fc:f6: 96:08:6b:7a:69:98:1a:26:bf:bd:d7:d9:6c:e9:dc:71:90:3b: b1:ac:63:ad:55:b0:c9:39:aa:9e:f7:5d:99:60:84:91:93:13: 06:2a:10:d9:75:6b:2f:bc:76:4c:12:48:a5:f9:bd:45:67:c2: a0:92:ab:0f:3a:5c:f3:41:a6:ef:ac:b8:64:dc:81:d9:0f:43: d7:98:5c:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyIFyzPKJ8tPxR8Ys5pXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMDdkYzAzNmQ5ZDZjMjhmMWQ4N2FiNjRlNzhlZTQ4NWE5 NmZkODEwHhcNMjUxMjIxMTIwMDQwWhcNMjUxMjIyMTIwMDQwWjAzMTEwLwYDVQQD Eyg1ZTc3NWFhNmRhM2JiNjFjYTFhMDczN2Q3N2Y5NGY5NjFmYzdlZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw20PjLmP8bjbfztt8wbrDo4ymq75 taLvdCmqjqSSrsbVIVRylRUb7o5T0qA5akC6iKyY6HY+g2Td90X4L2EzEo4zHBCh aKoQdA9+q7lCyhMTTpzori84EqvsKemxktbGWcaJnGhZ86tZfGCF07rdU3oFXhxy 5Er3nsp1W8Hbl7wFLmxG/HzI2OllogFLJI0GTVywVAB9MsJQsxgsi4NnRIlFtPgH ag33j/rg0l2JYKp7QEx6oZJTdO5fgLIfkLnzjPrvvVlHxOlnqSBCsxU6gyIpnrRB qSWeh1ereAoWegb4qc+zHpsYHDMKHHkpMCOET115tcHayjbLho8M6bOQqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF53WqbaO7YcoaBzfXf5T5Yfx+3xMB8GA1UdIwQY MBaAFIEH3ANtnWwo8dh6tk547khalv2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1FmY0EyMmRiQ2p4MkhxMlRuanVTRnFXX1lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xNTk4NjAtZjgzMi00MzhhLTllNmYt NzZhMTQxY2RkNDFmLzEvZ1FmY0EyMmRiQ2p4MkhxMlRuanVTRnFXX1lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xNTk4NjAtZjgzMi00MzhhLTllNmYtNzZhMTQxY2RkNDFm LzEvZ1FmY0EyMmRiQ2p4MkhxMlRuanVTRnFXX1lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnNW2GTMf EzddZqSs2nzo5S6Mvt6Bkvdwii8SWlH3egLwEoPCC58BjkqAZ62T8QwRBUGUmPl8 V56B+1LdYIIvQydLbkpp0qpGaN2fdjGvmdvCtl8y71qgdQfT3cWenSoqJhtRYVxu 2Tp89zkLlfQFLfqcdQMUCXYxC7CneM5K8V6J92oVVre2YEL1mxd13/nEzIhsCX4/ aBU17JhlRaDCFfuCuJBX0OWOanGzsxzH3DWKIvz2lghremmYGia/vdfZbOnccZA7 saxjrVWwyTmqnvddmWCEkZMTBioQ2XVrL7x2TBJIpfm9RWfCoJKrDzpc80Gm76y4 ZNyB2Q9D15hc5w== -----END CERTIFICATE-----Generated at Sun Dec 21 18:08:52 2025 by rpki-client