This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json) Hash identifier: 5z63LSrt5cCUgohY/9w8VjG128srWVb4r2HeL2SEvd4= Subject key identifier: 11:2D:CD:7A:7D:BD:59:23:85:75:FA:AD:23:6A:62:78:68:AA:74:AF Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9 Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9 Certificate serial: 019ACD2119A810958840E534A95510059D81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft Manifest number: 1615 Signing time: Sat 29 Nov 2025 01:01:29 +0000 Manifest this update: Sat 29 Nov 2025 01:01:29 +0000 Manifest next update: Sun 30 Nov 2025 01:01:29 +0000 Files and hashes: 1: 3bMVFRs8FOeJcOkO2XYWLqzrrkg.roa (hash: jcRVVzJYs1NWamGAFlutgx67H4FacWZP/qMYz6OqYpI=) 2: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: PamthihRC4ko88fxS52YBLy+WmmXDa+IZiwgNcSR8AA=) 3: iu1uLDkjA2lC4iCmh3mgoTg-ECs.roa (hash: J1M6seCPFdUQmcH1n+B1kmRcatuaeOrkFhV5roQrzQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 22:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cd:21:19:a8:10:95:88:40:e5:34:a9:55:10:05:9d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9 Validity Not Before: Nov 29 01:01:29 2025 GMT Not After : Nov 30 01:01:29 2025 GMT Subject: CN=112dcd7a7dbd59238575faad236a627868aa74af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d6:56:af:5e:13:16:90:16:ca:61:86:1f:1a: 50:18:41:b6:b0:71:ef:11:66:38:39:21:1a:0e:a8: a0:a4:ee:88:2e:3b:b5:44:15:7d:e5:e3:14:c4:a1: ed:e5:c3:08:20:eb:d6:01:4d:a6:10:cf:3d:39:a4: 7c:61:ad:3f:43:21:af:de:05:08:b8:f9:4b:d4:dc: d5:64:07:92:27:52:63:4a:1d:89:49:b7:d6:75:81: ff:b7:42:11:e4:b5:75:36:97:9e:73:38:3f:e0:7e: a2:a1:4f:96:c1:e8:48:16:0d:20:bb:79:9f:12:75: 63:ee:58:78:83:82:fc:7b:5d:c2:4f:98:5d:59:be: 85:0f:02:41:93:2a:f5:f5:31:01:38:c7:32:cb:db: e8:c6:01:12:46:1e:2b:79:c5:2a:86:65:01:74:1d: 04:aa:40:0e:41:d3:56:75:50:a1:7d:b9:4c:0c:90: 79:93:e9:b9:2c:20:c8:0e:e5:6d:89:1a:07:a3:28: 1d:b9:81:f8:31:cb:18:f5:f1:11:45:33:4c:34:4f: b9:ed:d7:1d:4e:e6:ae:eb:65:07:2d:07:a7:8a:59: 26:ff:fc:bd:4a:43:e5:d3:88:e0:c8:4b:e2:97:de: 9a:3b:00:2b:4d:b4:92:0f:97:75:06:b4:59:48:fe: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2D:CD:7A:7D:BD:59:23:85:75:FA:AD:23:6A:62:78:68:AA:74:AF X509v3 Authority Key Identifier: keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ee:c1:12:c5:42:18:e1:26:2c:15:66:7d:f9:cc:c5:2d:87: 79:74:6d:31:86:f9:00:6d:bf:e6:db:dd:7e:75:5f:c9:3c:0c: 99:d8:63:97:94:fb:e7:62:c3:6f:6d:14:c7:1f:17:e5:5e:d5: a0:57:72:0e:78:8e:e2:2b:af:99:ca:7b:16:fc:f0:1b:a7:db: 81:98:9c:2a:fc:8e:e4:27:18:d7:11:bb:c2:73:3a:69:8e:60: 31:c3:5d:fb:9c:47:1e:7a:c0:33:0d:5f:bf:4d:08:c4:e7:c0: 3e:f1:62:2e:21:32:f7:0d:e3:ad:35:ef:2f:1e:6c:84:eb:37: 41:98:6b:60:35:aa:86:06:91:52:3c:25:fb:b2:43:56:05:65: e1:7f:da:0c:a3:cd:24:2a:30:2c:ff:d5:66:f1:29:cd:3c:af: 99:b8:42:b4:2d:b7:1c:63:c2:95:34:b3:a9:93:8e:e4:ca:14: 27:97:7e:e1:b9:5a:9b:ca:70:dc:de:ff:06:9e:86:e1:8b:03: ef:05:9f:ef:b2:82:94:89:88:3d:af:1f:ec:70:f3:63:74:0f: c6:88:b5:a0:fa:08:ab:2f:8b:7e:55:f2:2c:9f:1c:90:80:03: 96:27:aa:d6:b1:5c:8d:a1:d4:5c:70:34:00:5a:11:e2:33:f9: 5f:1b:42:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrNIRmoEJWIQOU0qVUQBZ2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYTJkMGRjZDUwYTY4MmY5NzVlYTNkOGMzOGU1ZTY3YmIw MzIyZjkwHhcNMjUxMTI5MDEwMTI5WhcNMjUxMTMwMDEwMTI5WjAzMTEwLwYDVQQD EygxMTJkY2Q3YTdkYmQ1OTIzODU3NWZhYWQyMzZhNjI3ODY4YWE3NGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19ZWr14TFpAWymGGHxpQGEG2sHHv EWY4OSEaDqigpO6ILju1RBV95eMUxKHt5cMIIOvWAU2mEM89OaR8Ya0/QyGv3gUI uPlL1NzVZAeSJ1JjSh2JSbfWdYH/t0IR5LV1Npeeczg/4H6ioU+WwehIFg0gu3mf EnVj7lh4g4L8e13CT5hdWb6FDwJBkyr19TEBOMcyy9voxgESRh4recUqhmUBdB0E qkAOQdNWdVChfblMDJB5k+m5LCDIDuVtiRoHoygduYH4McsY9fERRTNMNE+57dcd Tuau62UHLQenilkm//y9SkPl04jgyEvil96aOwArTbSSD5d1BrRZSP6FUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEtzXp9vVkjhXX6rSNqYnhoqnSvMB8GA1UdIwQY MBaAFIGi0NzVCmgvl16j2MOOXme7AyL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQt ZmU0NWQ1MTYwYzM5LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQtZmU0NWQ1MTYwYzM5 LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASu7BEsVC GOEmLBVmffnMxS2HeXRtMYb5AG2/5tvdfnVfyTwMmdhjl5T752LDb20Uxx8X5V7V oFdyDniO4iuvmcp7FvzwG6fbgZicKvyO5CcY1xG7wnM6aY5gMcNd+5xHHnrAMw1f v00IxOfAPvFiLiEy9w3jrTXvLx5shOs3QZhrYDWqhgaRUjwl+7JDVgVl4X/aDKPN JCowLP/VZvEpzTyvmbhCtC23HGPClTSzqZOO5MoUJ5d+4blam8pw3N7/Bp6G4YsD 7wWf77KClImIPa8f7HDzY3QPxoi1oPoIqy+LflXyLJ8ckIADlieq1rFcjaHUXHA0 AFoR4jP5XxtCog== -----END CERTIFICATE-----Generated at Sat Nov 29 01:59:34 2025 by rpki-client