This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft File: GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft (raw, json) Hash identifier: MIV4JBysvF0rJ2AMy9gZX9BqYGEvr9sSw6SN5zkzNhE= Subject key identifier: 35:54:2F:0B:61:70:89:4E:A8:44:0D:1D:DE:97:5F:F2:CD:21:3D:4A Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94 Certificate issuer: /CN=1924008415ca185b8eddedc2dcdd8d09441a7794 Certificate serial: 019B236420C2BF40DF0EA25ADBCD491CAAEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft Manifest number: 159A Signing time: Mon 15 Dec 2025 19:02:03 +0000 Manifest this update: Mon 15 Dec 2025 19:02:03 +0000 Manifest next update: Tue 16 Dec 2025 19:02:03 +0000 Files and hashes: 1: GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl (hash: 12rkRACHxGA79tRflxegHZWsM862tg7BzEeAU4abSfA=) 2: bioMAYKF1qqrZbXGWoBChN2Rwsg.roa (hash: XBbDJ/525v0nDOlO1cf/FOJnRgOSNpcxMVq1T633zZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:20:c2:bf:40:df:0e:a2:5a:db:cd:49:1c:aa:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794 Validity Not Before: Dec 15 19:02:03 2025 GMT Not After : Dec 16 19:02:03 2025 GMT Subject: CN=35542f0b6170894ea8440d1dde975ff2cd213d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6e:c2:cd:ed:62:97:ac:72:46:91:47:54:8e: 1b:06:30:15:84:9a:4c:ab:5f:18:7d:75:e8:42:3f: 56:f2:92:52:cf:ec:fe:d2:d2:1d:a1:47:6e:7d:4e: fe:11:95:8f:07:3e:79:c3:ca:55:b0:2f:e4:21:70: f5:b3:dd:42:a0:53:8a:1d:9f:69:77:f2:b1:52:b1: 21:6e:63:b8:2c:0f:c9:fb:9e:49:3d:8b:29:24:f4: 20:56:26:34:22:83:eb:8e:48:88:e1:82:f4:c2:04: 32:15:b3:d3:59:1a:9c:13:9c:8f:ca:27:20:6d:52: 12:50:32:e8:e8:ba:fb:f3:64:ba:2b:97:f8:64:95: c8:90:71:b5:be:4a:87:c0:4f:b3:7b:6f:84:f4:c8: ee:1d:45:a6:80:51:1b:30:f7:1c:d6:e7:43:16:a1: 29:64:cc:1a:04:7c:aa:60:90:9e:87:e1:af:cf:97: 0a:d3:b9:48:a8:86:d3:64:1b:35:68:4a:fe:3e:1f: 67:5f:84:4b:06:99:03:7a:47:23:c5:b2:39:f1:7b: 01:16:88:17:1c:5f:fb:e4:ac:dd:da:e0:4a:bf:04: 4e:07:5c:45:f8:85:f2:8e:10:43:f0:f7:4d:56:6c: c8:7f:c0:22:e3:3e:01:30:cd:78:a9:4d:77:a3:5a: e1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:54:2F:0B:61:70:89:4E:A8:44:0D:1D:DE:97:5F:F2:CD:21:3D:4A X509v3 Authority Key Identifier: keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:77:e7:33:75:7d:5b:74:fc:58:ed:f9:4b:44:29:65:ab:a2: 5f:f3:19:5e:a4:46:9f:58:aa:86:51:d6:40:15:a1:ea:93:e4: b3:63:66:fd:48:38:bf:79:89:36:5e:c9:dd:ad:c5:63:2b:b2: 43:a1:e8:fc:81:be:40:c7:81:28:94:36:0c:4d:94:15:a2:4b: 28:b8:57:f9:68:11:c4:84:7f:10:06:6b:29:d2:d0:c9:82:1d: 1b:37:66:1b:8f:d5:8e:5a:09:26:5a:f7:8f:c7:6e:f3:c5:d3: 39:01:ad:4a:40:69:50:b1:44:cb:64:74:20:07:7d:70:c6:e0: 46:4f:d2:4f:5e:54:ec:20:a3:2a:97:8d:79:09:c0:ff:41:25: f0:7b:a1:f9:df:e6:c6:c2:26:f8:a4:0b:98:46:35:c0:be:47: 34:88:4e:13:38:72:23:28:07:dd:df:ac:b3:52:12:05:a8:20: e8:89:b2:a5:51:9e:11:49:ae:1e:01:1a:ff:9a:63:43:8c:16: d6:97:32:35:b8:d5:e8:b4:fd:5f:0f:d0:d8:13:05:cd:08:b8: f8:b3:ed:d5:63:5d:5d:40:19:3b:34:1a:e2:bb:5f:c0:91:82: 78:37:ef:3a:3b:07:29:01:48:66:03:3c:09:2f:ac:59:4d:27: ac:4c:4c:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZCDCv0DfDqJa281JHKrsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MjQwMDg0MTVjYTE4NWI4ZWRkZWRjMmRjZGQ4ZDA5NDQx YTc3OTQwHhcNMjUxMjE1MTkwMjAzWhcNMjUxMjE2MTkwMjAzWjAzMTEwLwYDVQQD EygzNTU0MmYwYjYxNzA4OTRlYTg0NDBkMWRkZTk3NWZmMmNkMjEzZDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW7Cze1il6xyRpFHVI4bBjAVhJpM q18YfXXoQj9W8pJSz+z+0tIdoUdufU7+EZWPBz55w8pVsC/kIXD1s91CoFOKHZ9p d/KxUrEhbmO4LA/J+55JPYspJPQgViY0IoPrjkiI4YL0wgQyFbPTWRqcE5yPyicg bVISUDLo6Lr782S6K5f4ZJXIkHG1vkqHwE+ze2+E9MjuHUWmgFEbMPcc1udDFqEp ZMwaBHyqYJCeh+Gvz5cK07lIqIbTZBs1aEr+Ph9nX4RLBpkDekcjxbI58XsBFogX HF/75Kzd2uBKvwROB1xF+IXyjhBD8PdNVmzIf8Ai4z4BMM14qU13o1rh7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVULwthcIlOqEQNHd6XX/LNIT1KMB8GA1UdIwQY MBaAFBkkAIQVyhhbjt3twtzdjQlEGneUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQt N2E4MGVkNjIxNzgxLzEvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQtN2E4MGVkNjIxNzgx LzEvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHfnM3V9 W3T8WO35S0QpZauiX/MZXqRGn1iqhlHWQBWh6pPks2Nm/Ug4v3mJNl7J3a3FYyuy Q6Ho/IG+QMeBKJQ2DE2UFaJLKLhX+WgRxIR/EAZrKdLQyYIdGzdmG4/VjloJJlr3 j8du88XTOQGtSkBpULFEy2R0IAd9cMbgRk/ST15U7CCjKpeNeQnA/0El8Huh+d/m xsIm+KQLmEY1wL5HNIhOEzhyIygH3d+ss1ISBagg6ImypVGeEUmuHgEa/5pjQ4wW 1pcyNbjV6LT9Xw/Q2BMFzQi4+LPt1WNdXUAZOzQa4rtfwJGCeDfvOjsHKQFIZgM8 CS+sWU0nrExM6A== -----END CERTIFICATE-----Generated at Tue Dec 16 02:36:55 2025 by rpki-client