This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft File: gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json) Hash identifier: LebMnTNAnX54WEKwKnegkW0QmupGwo7zNmO8MYr9/co= Subject key identifier: 77:D1:D0:B2:D2:D8:24:70:C7:2F:30:28:95:FE:98:8D:5C:86:A7:21 Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9 Certificate issuer: /CN=81060a518528e86a8ea77f188a0263790c08f6b9 Certificate serial: 019B273FC68F516E326243E2BCB59DC4C009 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft Manifest number: 1177 Signing time: Tue 16 Dec 2025 13:00:49 +0000 Manifest this update: Tue 16 Dec 2025 13:00:49 +0000 Manifest next update: Wed 17 Dec 2025 13:00:49 +0000 Files and hashes: 1: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: bFFYlPe3Q17IDy9UNJQhM62O0I0ZkZ9OhvTzmBfAEik=) 2: mzS0mg7LzekXtU0-AI8vjQNsdnI.roa (hash: W1Odlm/4gNw2/x1K4BE4WalP/0rHvCKJa9lik2Xno0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:c6:8f:51:6e:32:62:43:e2:bc:b5:9d:c4:c0:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9 Validity Not Before: Dec 16 13:00:49 2025 GMT Not After : Dec 17 13:00:49 2025 GMT Subject: CN=77d1d0b2d2d82470c72f302895fe988d5c86a721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7a:45:d7:de:b4:fc:93:14:18:cb:0f:a2:98: aa:69:48:a4:6d:91:0c:87:5c:6e:4f:ed:62:d0:09: 82:98:c1:8f:b3:45:69:b4:55:15:40:cc:7c:03:5e: ce:a3:c2:27:73:81:5c:b8:3d:da:67:f0:87:0e:90: fa:3c:29:9a:22:4b:ae:08:ba:7d:52:38:6d:f3:6e: 7a:3b:08:d9:aa:87:90:3b:f3:a2:9a:34:d0:d8:eb: f4:d0:a4:70:40:5a:c1:43:6b:ad:f8:78:69:a6:e0: 5d:19:11:8b:4b:6c:e7:92:b7:dc:de:0a:6f:43:8d: de:d7:eb:d9:6d:74:a4:68:28:43:ca:21:a7:d7:de: 60:e6:86:5c:8f:f5:a5:13:a3:b3:a2:7c:46:37:e8: 56:12:ed:a5:0f:29:a4:0a:26:0f:3a:80:28:4a:4c: ee:5f:71:51:39:ef:bf:aa:09:68:7d:7d:b7:40:90: b1:9b:4a:4e:00:53:10:00:8b:1c:5d:64:a5:b2:1d: b0:bf:b1:ec:08:01:91:67:a4:e5:ba:23:ba:7a:e8: 44:4d:95:42:9b:d5:e3:f6:1c:f1:33:f0:64:23:14: 23:7e:4c:ff:22:f8:ea:8a:54:a8:32:26:35:e0:7a: 59:9c:0a:cc:3a:b5:e5:b4:07:2f:d5:c5:eb:60:a4: b7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D1:D0:B2:D2:D8:24:70:C7:2F:30:28:95:FE:98:8D:5C:86:A7:21 X509v3 Authority Key Identifier: keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3d:20:5a:f8:9e:ca:6f:0b:28:b6:a0:f0:e6:5c:09:ec:45: c3:3f:86:07:9f:af:bc:21:b9:dd:fd:76:18:d1:de:ab:e5:7c: a6:23:1c:1c:b8:f7:e3:4b:7e:7a:19:d8:ff:20:70:29:c5:a8: 76:7a:23:3f:08:0d:58:4f:bc:8b:be:12:e3:04:9a:dc:72:44: b8:4d:63:07:d2:04:13:ab:0d:4c:16:16:25:0a:8e:d3:00:dc: c2:72:c0:22:6d:02:1c:1b:7b:11:4a:6a:1f:d6:15:9a:1d:d8: 9d:11:ba:ff:79:6b:f1:21:b0:64:2b:80:75:f1:e5:2a:51:e2: 88:4b:ab:7a:df:4d:6f:ed:59:a0:43:2c:36:98:db:55:22:08: 1d:9f:a2:f9:5f:90:a1:03:95:c1:f8:4a:80:5c:99:3b:e2:77: 5c:64:45:cb:d3:82:72:14:47:44:d7:d5:d5:53:c7:cd:39:e3: 3a:f1:ff:33:ff:ac:85:2a:af:0a:02:78:14:b7:54:a0:e8:ce: af:d1:2e:38:2f:4f:16:bd:47:14:fd:dc:f6:9f:ea:b8:5c:47: 13:0a:e7:f8:82:31:b4:ef:fa:98:5f:c2:70:1e:28:6d:49:d6: 69:0e:9a:75:2c:02:7e:c7:b2:0e:02:15:60:2a:5a:a5:3b:00: c2:7b:5a:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP8aPUW4yYkPivLWdxMAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMDYwYTUxODUyOGU4NmE4ZWE3N2YxODhhMDI2Mzc5MGMw OGY2YjkwHhcNMjUxMjE2MTMwMDQ5WhcNMjUxMjE3MTMwMDQ5WjAzMTEwLwYDVQQD Eyg3N2QxZDBiMmQyZDgyNDcwYzcyZjMwMjg5NWZlOTg4ZDVjODZhNzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHpF1960/JMUGMsPopiqaUikbZEM h1xuT+1i0AmCmMGPs0VptFUVQMx8A17Oo8Inc4FcuD3aZ/CHDpD6PCmaIkuuCLp9 Ujht8256OwjZqoeQO/OimjTQ2Ov00KRwQFrBQ2ut+HhppuBdGRGLS2znkrfc3gpv Q43e1+vZbXSkaChDyiGn195g5oZcj/WlE6OzonxGN+hWEu2lDymkCiYPOoAoSkzu X3FROe+/qglofX23QJCxm0pOAFMQAIscXWSlsh2wv7HsCAGRZ6TluiO6euhETZVC m9Xj9hzxM/BkIxQjfkz/IvjqilSoMiY14HpZnArMOrXltAcv1cXrYKS3XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfR0LLS2CRwxy8wKJX+mI1chqchMB8GA1UdIwQY MBaAFIEGClGFKOhqjqd/GIoCY3kMCPa5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lNWUyZDAtZjQzOS00NWU0LTg1NDAt ZjE5NjAwYzdhZDU0LzEvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9lNWUyZDAtZjQzOS00NWU0LTg1NDAtZjE5NjAwYzdhZDU0 LzEvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbj0gWvie ym8LKLag8OZcCexFwz+GB5+vvCG53f12GNHeq+V8piMcHLj340t+ehnY/yBwKcWo dnojPwgNWE+8i74S4wSa3HJEuE1jB9IEE6sNTBYWJQqO0wDcwnLAIm0CHBt7EUpq H9YVmh3YnRG6/3lr8SGwZCuAdfHlKlHiiEuret9Nb+1ZoEMsNpjbVSIIHZ+i+V+Q oQOVwfhKgFyZO+J3XGRFy9OCchRHRNfV1VPHzTnjOvH/M/+shSqvCgJ4FLdUoOjO r9EuOC9PFr1HFP3c9p/quFxHEwrn+IIxtO/6mF/CcB4obUnWaQ6adSwCfseyDgIV YCpapTsAwntaBw== -----END CERTIFICATE-----Generated at Tue Dec 16 23:21:41 2025 by rpki-client