This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json) Hash identifier: nQKzobkG6Khb5AqDjSy8K0EAlchKUH/IhJRcwuOzrKs= Subject key identifier: 78:D4:DC:B3:20:95:90:04:73:1A:F4:EE:43:38:54:02:6E:6A:C8:99 Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84 Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84 Certificate serial: 019B221A287356A68977932B054BA0A12CDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft Manifest number: 0ABD Signing time: Mon 15 Dec 2025 13:01:38 +0000 Manifest this update: Mon 15 Dec 2025 13:01:38 +0000 Manifest next update: Tue 16 Dec 2025 13:01:38 +0000 Files and hashes: 1: NmyYIbuzbIXUj9jJPjF3BR9optE.roa (hash: wSdjb/vMyeBBwt44mj9k7sBn6y3WZbUfXBs3kYVLtv8=) 2: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: +KpesRdRSFJnaZDvmPmS22tJuwiGFMFNMa8zoq8TC6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:1a:28:73:56:a6:89:77:93:2b:05:4b:a0:a1:2c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84 Validity Not Before: Dec 15 13:01:38 2025 GMT Not After : Dec 16 13:01:38 2025 GMT Subject: CN=78d4dcb320959004731af4ee433854026e6ac899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:db:44:da:6f:fe:ac:b2:2a:25:04:ea:75:8c: 35:76:a2:16:19:cf:ee:7b:9f:63:9b:34:58:8c:81: 3e:0d:ca:73:86:d5:ad:87:c9:e6:05:83:55:a1:10: 7c:22:5a:2e:fb:40:62:8a:09:d4:56:5a:43:d7:80: 57:86:6c:62:c1:7e:26:23:3c:15:5c:f7:50:34:96: e5:f0:bc:64:b7:25:5e:46:f4:3e:13:8b:44:4c:98: e4:42:b8:a3:a8:c7:df:de:45:9f:dd:21:65:71:8a: 59:95:1b:2a:2f:2e:49:45:84:75:8a:3d:54:3a:25: 3a:64:21:88:77:50:00:de:f6:b8:b1:b0:ea:fd:0d: cf:31:92:79:da:e6:32:e9:7a:bb:74:b8:20:67:63: 08:ac:97:c1:5e:3b:57:0a:02:87:ff:be:70:04:90: 48:ed:ba:85:b4:c4:9e:31:4e:23:04:7b:4c:62:dd: 59:30:f7:98:8a:39:ef:ec:c4:fc:27:08:5c:ac:22: e1:9d:d3:7d:f9:a9:49:49:8d:dd:76:ee:ad:fe:70: 95:05:89:b9:c4:0c:02:02:67:af:8d:1d:12:28:44: 9d:39:62:0b:6a:d1:95:14:6c:b5:2a:57:ac:78:14: dc:b5:28:9c:91:53:ec:28:90:4f:cd:17:9a:c4:5b: 8d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D4:DC:B3:20:95:90:04:73:1A:F4:EE:43:38:54:02:6E:6A:C8:99 X509v3 Authority Key Identifier: keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a6:6a:06:32:5e:9c:9b:d6:74:ca:54:9d:3d:cd:4d:0c:68: f1:63:fc:c5:3c:a0:02:4a:83:fb:d0:b3:7e:6e:6f:7d:fe:18: 3a:25:96:8a:ee:87:b8:fa:97:61:72:10:bb:b3:cb:8b:a8:d8: 87:df:bc:1b:48:87:1b:e9:d9:1e:27:5d:50:d0:a5:7d:e4:ff: 27:16:29:10:2f:b2:c6:6d:63:dd:e4:3b:d7:95:af:22:e5:1a: 76:86:33:14:00:e1:4d:d3:29:85:8d:8d:24:fa:23:20:a9:ad: f2:58:06:db:26:d2:6c:52:20:d0:41:7a:10:b3:3d:71:9e:86: b4:29:c2:d1:6d:a7:86:e6:a2:e4:4d:f7:58:99:53:39:43:cb: 8b:39:15:c6:39:c6:96:4b:0f:a3:8b:7a:05:60:bb:1f:c0:d1: c4:c5:5e:d3:0e:22:94:ae:db:11:e7:fe:19:a2:91:5f:b2:e1: d5:24:15:8a:63:69:2a:d4:dd:27:57:1a:dc:25:8d:d6:84:11: 81:e6:df:5d:31:f6:db:d4:8d:f8:01:98:60:ef:5d:63:35:05: 72:a1:b1:3d:0d:82:f4:dc:3e:5c:14:a4:24:76:21:39:9a:1a: fc:ff:50:42:2e:c0:79:a7:d7:9e:25:04:b1:df:9e:4b:a6:61: dd:13:cd:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGihzVqaJd5MrBUugoSzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZmFiNTUwZDgyN2EyZGVmMGQ0ZDI2MTYwNjE0MjVjMmY2 OTRjODQwHhcNMjUxMjE1MTMwMTM4WhcNMjUxMjE2MTMwMTM4WjAzMTEwLwYDVQQD Eyg3OGQ0ZGNiMzIwOTU5MDA0NzMxYWY0ZWU0MzM4NTQwMjZlNmFjODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69tE2m/+rLIqJQTqdYw1dqIWGc/u e59jmzRYjIE+DcpzhtWth8nmBYNVoRB8Ilou+0BiignUVlpD14BXhmxiwX4mIzwV XPdQNJbl8LxktyVeRvQ+E4tETJjkQrijqMff3kWf3SFlcYpZlRsqLy5JRYR1ij1U OiU6ZCGId1AA3va4sbDq/Q3PMZJ52uYy6Xq7dLggZ2MIrJfBXjtXCgKH/75wBJBI 7bqFtMSeMU4jBHtMYt1ZMPeYijnv7MT8JwhcrCLhndN9+alJSY3ddu6t/nCVBYm5 xAwCAmevjR0SKESdOWILatGVFGy1KleseBTctSickVPsKJBPzReaxFuNcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjU3LMglZAEcxr07kM4VAJuasiZMB8GA1UdIwQY MBaAFID6tVDYJ6Le8NTSYWBhQlwvaUyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAt Zjc2MjkyOWYxZjA4LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAtZjc2MjkyOWYxZjA4 LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqZqBjJe nJvWdMpUnT3NTQxo8WP8xTygAkqD+9Czfm5vff4YOiWWiu6HuPqXYXIQu7PLi6jY h9+8G0iHG+nZHiddUNClfeT/JxYpEC+yxm1j3eQ715WvIuUadoYzFADhTdMphY2N JPojIKmt8lgG2ybSbFIg0EF6ELM9cZ6GtCnC0W2nhuai5E33WJlTOUPLizkVxjnG lksPo4t6BWC7H8DRxMVe0w4ilK7bEef+GaKRX7Lh1SQVimNpKtTdJ1ca3CWN1oQR gebfXTH229SN+AGYYO9dYzUFcqGxPQ2C9Nw+XBSkJHYhOZoa/P9QQi7AeafXniUE sd+eS6Zh3RPN+A== -----END CERTIFICATE-----Generated at Mon Dec 15 14:57:02 2025 by rpki-client