This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json) Hash identifier: n0JYhO2uYVyN0vico4i2N/zM7E97v8ZSCMGvVM7Uv3M= Subject key identifier: 9D:4D:E0:F3:D6:74:F4:9F:B6:23:86:63:C7:2C:2F:96:2F:98:80:F6 Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d Certificate serial: 019B10141BE013B7A0C6576C1F3AA37F5CD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft Manifest number: 10B4 Signing time: Fri 12 Dec 2025 01:01:51 +0000 Manifest this update: Fri 12 Dec 2025 01:01:51 +0000 Manifest next update: Sat 13 Dec 2025 01:01:51 +0000 Files and hashes: 1: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: Dqq4I+Aj3Sn4V2lXNJIYlMZPnLph+8FSbYq7luEwR74=) 2: qWiRXpCL0NKtXzFBLcgeaF0mM4A.roa (hash: V0gkUhFHDtKhWrN/3cVBozf0t4RmZJghnQqebhSHl+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 01:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:1b:e0:13:b7:a0:c6:57:6c:1f:3a:a3:7f:5c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d Validity Not Before: Dec 12 01:01:51 2025 GMT Not After : Dec 13 01:01:51 2025 GMT Subject: CN=9d4de0f3d674f49fb6238663c72c2f962f9880f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:8b:29:aa:7c:31:85:18:4a:1c:19:39:38: c2:25:e5:b8:3f:94:3e:ab:42:0f:ee:b2:58:42:16: 69:39:3b:2b:a5:7b:d4:e3:ca:4a:1b:ab:30:56:8d: 3b:d8:82:d5:4b:05:b9:31:dd:fa:6d:c4:1d:8a:d8: 21:a7:6e:d8:08:92:ac:f4:0c:f2:eb:72:97:6d:ff: 87:94:ca:9a:9a:30:0b:0c:a2:eb:30:9c:50:77:83: 85:fc:08:dd:a3:26:2e:59:73:59:ee:3c:9d:e0:e7: b0:19:d2:74:a2:fb:7e:55:b0:32:da:68:e8:f4:98: a5:73:bb:89:b9:76:15:df:c4:68:5c:63:53:46:78: 8d:3d:06:8a:c1:b4:74:01:e0:69:c3:ca:21:78:ec: 28:ca:74:6a:5e:56:57:85:be:f3:a9:cf:0f:2a:36: d9:02:d9:34:01:a5:e9:c2:ea:8a:00:ca:de:53:d4: ff:1d:70:36:be:1a:d0:e9:5b:d8:3e:c1:f4:7d:93: 0e:c6:82:c5:b9:f6:14:b4:27:e9:dc:08:9a:b2:15: f1:48:b0:ee:60:83:d9:bd:23:3d:47:90:cf:f3:b3: 28:96:87:7e:23:4d:2f:78:55:08:34:50:aa:92:76: a0:56:de:ea:b3:b0:e6:42:52:87:fb:1b:a8:61:e6: f2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4D:E0:F3:D6:74:F4:9F:B6:23:86:63:C7:2C:2F:96:2F:98:80:F6 X509v3 Authority Key Identifier: keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e2:d1:3a:cf:9d:15:e3:d3:32:09:db:87:22:53:fb:c4:a3: f5:b3:3f:c9:c0:43:29:c6:2b:a7:75:e0:78:34:29:7f:bf:9f: d3:24:96:59:1f:e3:0a:06:da:fa:1d:a9:fa:45:9f:53:df:32: bb:90:6a:9f:5f:35:19:fb:42:69:ad:98:9b:dd:0c:89:40:10: 0b:60:e6:ff:ab:b9:a1:87:6d:88:88:d8:a5:c5:c7:82:19:35: 2c:33:09:b7:ad:3d:2f:07:4c:09:49:d3:d8:9a:4a:bd:6a:f9: f6:08:0e:6c:0e:c4:fa:68:5f:22:4d:eb:11:40:8c:6e:e1:41: 39:d7:ce:02:4f:f3:78:bc:c8:fb:7c:8e:2a:43:2b:be:86:2d: ed:4c:64:47:8f:bd:18:ad:df:0b:6f:c2:51:80:68:48:10:b5: 22:72:b3:7d:d6:15:08:22:93:14:78:58:31:00:fb:e1:fa:e4: db:86:77:ab:d5:39:99:85:39:37:eb:4d:7a:72:83:b9:ae:e9: 11:64:8a:0f:b1:7b:f4:80:73:8f:99:fa:37:69:6b:af:56:da: 6b:6f:3b:ff:81:7c:81:4e:fb:da:23:ec:bd:77:ff:82:f3:2e: 03:fc:16:9e:ee:72:f6:d9:10:fe:0b:1e:29:76:29:b0:8e:1c: 3e:3b:7b:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFBvgE7egxldsHzqjf1zUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MGVjN2FhYjIwZmM0YzgwMWM2Nzk2M2U1OWU0ZjkzNjAw ZTQwMWQwHhcNMjUxMjEyMDEwMTUxWhcNMjUxMjEzMDEwMTUxWjAzMTEwLwYDVQQD Eyg5ZDRkZTBmM2Q2NzRmNDlmYjYyMzg2NjNjNzJjMmY5NjJmOTg4MGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtGLKap8MYUYShwZOTjCJeW4P5Q+ q0IP7rJYQhZpOTsrpXvU48pKG6swVo072ILVSwW5Md36bcQditghp27YCJKs9Azy 63KXbf+HlMqamjALDKLrMJxQd4OF/AjdoyYuWXNZ7jyd4OewGdJ0ovt+VbAy2mjo 9Jilc7uJuXYV38RoXGNTRniNPQaKwbR0AeBpw8oheOwoynRqXlZXhb7zqc8PKjbZ Atk0AaXpwuqKAMreU9T/HXA2vhrQ6VvYPsH0fZMOxoLFufYUtCfp3AiashXxSLDu YIPZvSM9R5DP87Molod+I00veFUINFCqknagVt7qs7DmQlKH+xuoYeby6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1N4PPWdPSftiOGY8csL5YvmID2MB8GA1UdIwQY MBaAFBkOx6qyD8TIAcZ5Y+WeT5NgDkAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgt ZGFiOWI0ODNjMTIzLzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgtZGFiOWI0ODNjMTIz LzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOLROs+d FePTMgnbhyJT+8Sj9bM/ycBDKcYrp3XgeDQpf7+f0ySWWR/jCgba+h2p+kWfU98y u5Bqn181GftCaa2Ym90MiUAQC2Dm/6u5oYdtiIjYpcXHghk1LDMJt609LwdMCUnT 2JpKvWr59ggObA7E+mhfIk3rEUCMbuFBOdfOAk/zeLzI+3yOKkMrvoYt7UxkR4+9 GK3fC2/CUYBoSBC1InKzfdYVCCKTFHhYMQD74frk24Z3q9U5mYU5N+tNenKDua7p EWSKD7F79IBzj5n6N2lrr1baa287/4F8gU772iPsvXf/gvMuA/wWnu5y9tkQ/gse KXYpsI4cPjt7mQ== -----END CERTIFICATE-----Generated at Fri Dec 12 09:09:52 2025 by rpki-client