This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json) Hash identifier: 2ifcfD7tihdTriOXM3IvYUuZBfjNdYz53N2LT7QNAbE= Subject key identifier: 68:CD:02:89:26:1F:80:D6:FF:AB:A9:DD:81:D6:49:B4:BC:9D:B3:E4 Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b Certificate serial: 019B416D56D930CA7912B9D2EC28047EB3CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 15:00:43 +0000 Manifest this update: Sun 21 Dec 2025 15:00:43 +0000 Manifest next update: Mon 22 Dec 2025 15:00:43 +0000 Files and hashes: 1: Kt54sJQgRqTUq_5CeKj_uNxTFL4.roa (hash: 4RVmGcZHz9ixKOs2qOpourGK4cJrBwsGs1fzppEGkHY=) 2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: cgFBiPcoRBR7jHMVs0K1L8xeCngbclamzOkfxBXoI5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:56:d9:30:ca:79:12:b9:d2:ec:28:04:7e:b3:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b Validity Not Before: Dec 21 15:00:43 2025 GMT Not After : Dec 22 15:00:43 2025 GMT Subject: CN=68cd0289261f80d6ffaba9dd81d649b4bc9db3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fa:18:16:f9:46:6f:e8:fa:88:d2:d4:08:7c: 26:6e:ed:d0:51:19:17:91:d8:82:90:2b:e0:f6:08: ab:35:e9:ed:1b:19:45:9d:bb:42:8a:69:d2:30:75: 77:e6:be:60:1c:ff:98:9e:ff:db:f2:c5:03:f3:f7: 04:f9:83:bf:26:d0:78:e3:d6:fa:59:97:ff:4f:06: da:aa:33:75:6e:1b:63:a7:e0:43:a3:9f:d7:e1:98: 34:02:a9:d6:a8:44:dd:01:fe:51:c0:2c:b2:41:2d: 00:29:c7:ee:78:aa:10:f9:16:69:88:1a:e1:64:80: de:b2:4f:89:ef:58:67:88:34:8a:ec:fb:92:60:26: 8a:42:c0:16:8a:df:74:a7:3c:20:0a:6c:a2:e9:2b: 20:29:8c:4f:d9:c2:bc:85:6e:df:c5:85:be:8f:8f: e5:aa:b7:e6:72:9e:8b:95:86:dd:fe:f0:b5:68:06: 33:30:34:55:3c:66:6e:db:32:32:53:df:22:9f:08: 34:aa:06:f7:7d:36:7e:97:d4:17:e6:60:35:4e:34: 0c:34:54:9c:db:76:00:82:64:95:43:5a:8d:4a:59: 24:8b:85:00:d8:71:87:3d:36:b8:b9:af:85:23:cb: b1:aa:54:41:46:75:1e:e8:74:1a:5e:1c:78:83:15: 9c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CD:02:89:26:1F:80:D6:FF:AB:A9:DD:81:D6:49:B4:BC:9D:B3:E4 X509v3 Authority Key Identifier: keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a9:63:d1:61:09:5c:0a:84:d9:93:c7:1b:ae:9e:ae:62:99: 07:d6:9b:05:77:38:a0:5f:cf:d4:fe:1b:fe:f8:41:24:48:7b: 70:d6:c5:a4:29:ad:86:37:3e:0f:0a:c6:7b:8b:2f:87:18:fb: 8f:b4:57:0d:8e:56:dc:57:73:5e:13:23:64:14:ea:bb:cf:4e: c6:57:5e:1a:84:06:42:b3:53:f7:dd:a1:c9:a4:2b:96:77:02: 46:17:a7:11:76:b7:5f:36:cb:5a:b0:df:fc:fb:1a:78:e6:db: 90:85:45:b9:10:5a:42:62:b6:24:e6:5f:b8:9e:eb:bf:be:92: 04:33:76:72:31:65:01:0c:55:8f:88:ff:bc:92:c8:b0:2a:4a: cb:9a:c2:8d:4d:9e:bf:ff:4f:e5:81:41:bd:ab:e2:43:34:8d: 0a:bb:c6:0d:c0:c6:36:34:f8:e7:3c:b5:21:3f:6b:b8:88:fe: 59:f8:52:21:64:95:88:9e:f1:3a:d4:e9:96:13:69:1a:41:1e: 62:f6:92:e4:c3:81:e3:6f:4f:fd:46:c4:02:8f:1a:e6:d9:6d: e4:ac:06:ad:96:7d:e4:16:3e:1b:17:88:33:ec:df:44:86:03: 55:87:33:56:84:eb:58:50:c8:ad:99:c2:a2:24:ab:c7:42:d9: 85:2e:61:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbVbZMMp5ErnS7CgEfrPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMDZkOTk0YTEyMTkyNTdhM2NlYzllZDkxY2QxODliYzNk OTNiMGIwHhcNMjUxMjIxMTUwMDQzWhcNMjUxMjIyMTUwMDQzWjAzMTEwLwYDVQQD Eyg2OGNkMDI4OTI2MWY4MGQ2ZmZhYmE5ZGQ4MWQ2NDliNGJjOWRiM2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPoYFvlGb+j6iNLUCHwmbu3QURkX kdiCkCvg9girNentGxlFnbtCimnSMHV35r5gHP+Ynv/b8sUD8/cE+YO/JtB449b6 WZf/TwbaqjN1bhtjp+BDo5/X4Zg0AqnWqETdAf5RwCyyQS0AKcfueKoQ+RZpiBrh ZIDesk+J71hniDSK7PuSYCaKQsAWit90pzwgCmyi6SsgKYxP2cK8hW7fxYW+j4/l qrfmcp6LlYbd/vC1aAYzMDRVPGZu2zIyU98inwg0qgb3fTZ+l9QX5mA1TjQMNFSc 23YAgmSVQ1qNSlkki4UA2HGHPTa4ua+FI8uxqlRBRnUe6HQaXhx4gxWcXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjNAokmH4DW/6up3YHWSbS8nbPkMB8GA1UdIwQY MBaAFIEG2ZShIZJXo87J7ZHNGJvD2TsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEt YjM1NGI3OGNjOTY5LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEtYjM1NGI3OGNjOTY5 LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqlj0WEJ XAqE2ZPHG66ermKZB9abBXc4oF/P1P4b/vhBJEh7cNbFpCmthjc+DwrGe4svhxj7 j7RXDY5W3FdzXhMjZBTqu89OxldeGoQGQrNT992hyaQrlncCRhenEXa3XzbLWrDf /PsaeObbkIVFuRBaQmK2JOZfuJ7rv76SBDN2cjFlAQxVj4j/vJLIsCpKy5rCjU2e v/9P5YFBvaviQzSNCrvGDcDGNjT45zy1IT9ruIj+WfhSIWSViJ7xOtTplhNpGkEe YvaS5MOB429P/UbEAo8a5tlt5KwGrZZ95BY+GxeIM+zfRIYDVYczVoTrWFDIrZnC oiSrx0LZhS5hqw== -----END CERTIFICATE-----Generated at Sun Dec 21 21:15:51 2025 by rpki-client