This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json) Hash identifier: xfBfpnLrxxEHZ2h9BTCTQ/McAexl8rBNvlSFiJ3S1Y0= Subject key identifier: 6E:B5:23:66:D0:20:31:C7:A9:94:24:3E:24:76:6A:B3:BA:CA:8A:5F Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e Certificate serial: 019B0FDBF7EBD2E91ADCBA74F5164C0BA04C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft Manifest number: 027D Signing time: Fri 12 Dec 2025 00:00:32 +0000 Manifest this update: Fri 12 Dec 2025 00:00:32 +0000 Manifest next update: Sat 13 Dec 2025 00:00:32 +0000 Files and hashes: 1: N9bR_mBXXHjDIFBVaDKi9gxaXJ0.roa (hash: t/vnY4c9w46jNFfl6Ql0aCTX7Py6QOE0v9MYkC3oE08=) 2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: d6qGcDILxsC61pVt5T1kf1HPSIz9evSLXHuqPYXwnqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:db:f7:eb:d2:e9:1a:dc:ba:74:f5:16:4c:0b:a0:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e Validity Not Before: Dec 12 00:00:32 2025 GMT Not After : Dec 13 00:00:32 2025 GMT Subject: CN=6eb52366d02031c7a994243e24766ab3baca8a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:18:14:a7:e7:1d:9b:2f:60:c4:5b:6a:bb:ad: 3a:d6:e0:b7:eb:d5:fc:df:1b:8b:e1:cb:5c:96:63: a9:cb:ef:8d:3a:84:99:ad:43:82:da:94:76:22:46: b9:0f:3d:ed:bc:e8:06:c6:49:39:b8:26:51:2a:3a: ac:6a:96:04:91:fb:d7:51:6f:3d:f2:0f:ed:0c:e9: fe:11:60:51:fb:07:f7:c3:59:3d:f8:6c:6d:20:20: 89:cc:60:65:45:ef:90:5e:ce:7a:80:74:1f:6e:2a: 7a:fd:b5:fd:38:a0:83:5e:5c:76:19:24:8b:eb:18: 26:2a:3e:42:37:ae:d0:2c:5e:99:9b:10:b2:63:75: 8f:fb:b8:3f:cc:3d:e2:53:60:1c:47:5b:34:bd:2d: 68:29:99:7f:21:5e:6c:55:ff:64:7f:8e:8b:d6:70: 56:54:c6:1b:76:14:18:a9:fa:76:52:a4:db:99:e1: 0c:1f:6c:a5:54:a9:3c:80:7e:60:44:2c:e4:0d:fb: cb:a5:76:6a:76:93:49:40:84:c9:3f:b3:84:6f:a2: ad:9b:e9:8b:80:e9:39:53:20:1e:e1:32:3b:54:2a: 7e:7e:b7:1c:91:e1:ac:42:55:2f:de:fc:8b:8e:89: 1d:02:33:94:70:63:24:dd:5d:db:38:24:39:b2:ba: 9d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B5:23:66:D0:20:31:C7:A9:94:24:3E:24:76:6A:B3:BA:CA:8A:5F X509v3 Authority Key Identifier: keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:4c:a2:69:8b:70:09:0b:63:74:78:d6:47:f9:23:65:ff:c2: ca:1f:37:f0:e2:ac:1c:3d:fb:a8:71:96:69:58:f2:27:16:29: e2:01:9d:5c:10:f9:d1:95:a4:16:1a:81:20:5e:c5:5d:34:3e: 0d:5c:09:e6:b1:14:ae:08:e7:d9:b0:44:c4:d9:31:ab:c0:e0: 2f:d3:c3:37:67:03:18:30:81:8e:bf:16:05:b2:c2:2a:af:a3: c4:c0:29:dd:1f:10:a0:71:02:ba:4f:2e:e6:5c:66:bc:38:8c: e2:69:b2:35:52:d2:be:fc:1a:cf:59:d1:32:10:9d:a0:f1:df: 33:99:52:6c:fe:d2:e4:f6:bd:ce:62:37:21:65:f1:dc:66:96: f5:f7:18:37:32:fd:4b:ea:35:59:e9:d0:1b:9a:2c:25:d4:1b: b9:e7:ee:e1:3f:00:1f:e0:d0:ed:0f:c2:7a:d8:66:3c:28:2a: f8:b0:83:7d:2f:41:d8:1a:88:7f:b7:21:42:84:b2:c3:ca:6a: 8d:29:67:db:bb:6a:d8:01:03:08:82:d8:dc:ae:42:81:31:ac: 43:51:01:0f:1c:74:83:fb:51:3f:20:33:fe:d3:ed:ba:3b:bb: d4:38:2f:c4:4c:44:a1:ae:d8:45:83:fd:24:6f:8c:86:7b:0a: 57:c8:4d:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsP2/fr0uka3Lp09RZMC6BMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNmFhOTFhYjEyNzRlNDc1Mzk3YjkwN2E2NTVmOTFlOWQ2 MDVlMGUwHhcNMjUxMjEyMDAwMDMyWhcNMjUxMjEzMDAwMDMyWjAzMTEwLwYDVQQD Eyg2ZWI1MjM2NmQwMjAzMWM3YTk5NDI0M2UyNDc2NmFiM2JhY2E4YTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBgUp+cdmy9gxFtqu6061uC369X8 3xuL4ctclmOpy++NOoSZrUOC2pR2Ika5Dz3tvOgGxkk5uCZRKjqsapYEkfvXUW89 8g/tDOn+EWBR+wf3w1k9+GxtICCJzGBlRe+QXs56gHQfbip6/bX9OKCDXlx2GSSL 6xgmKj5CN67QLF6ZmxCyY3WP+7g/zD3iU2AcR1s0vS1oKZl/IV5sVf9kf46L1nBW VMYbdhQYqfp2UqTbmeEMH2ylVKk8gH5gRCzkDfvLpXZqdpNJQITJP7OEb6Ktm+mL gOk5UyAe4TI7VCp+frcckeGsQlUv3vyLjokdAjOUcGMk3V3bOCQ5srqdRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG61I2bQIDHHqZQkPiR2arO6yopfMB8GA1UdIwQY MBaAFIFqqRqxJ05HU5e5B6ZV+R6dYF4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYTdmZDQtNWRlMC00YTExLWEyNTMt ZGZmM2JjZWU2YjY2LzEvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8yYTdmZDQtNWRlMC00YTExLWEyNTMtZGZmM2JjZWU2YjY2 LzEvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkyiaYtw CQtjdHjWR/kjZf/Cyh838OKsHD37qHGWaVjyJxYp4gGdXBD50ZWkFhqBIF7FXTQ+ DVwJ5rEUrgjn2bBExNkxq8DgL9PDN2cDGDCBjr8WBbLCKq+jxMAp3R8QoHECuk8u 5lxmvDiM4mmyNVLSvvwaz1nRMhCdoPHfM5lSbP7S5Pa9zmI3IWXx3GaW9fcYNzL9 S+o1WenQG5osJdQbuefu4T8AH+DQ7Q/CethmPCgq+LCDfS9B2BqIf7chQoSyw8pq jSln27tq2AEDCILY3K5CgTGsQ1EBDxx0g/tRPyAz/tPtuju71DgvxExEoa7YRYP9 JG+MhnsKV8hNVw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:28:56 2025 by rpki-client