This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft File: GQ1bBUO9hajs-WmruFA8nerQ35g.mft (raw, json) Hash identifier: gStoAxY5rY/5N/koHtPM6/ZiC7Xua4e3MHt9FFJm+kA= Subject key identifier: A6:0D:2A:D1:B5:2F:4D:22:09:D5:C0:29:FA:00:92:F2:52:BC:6E:AB Authority key identifier: 19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98 Certificate issuer: /CN=190d5b0543bd85a8ecf969abb8503c9dead0df98 Certificate serial: 019B2175DB37F9B88C64A9739CFB2F621F85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft Manifest number: 0E5B Signing time: Mon 15 Dec 2025 10:02:10 +0000 Manifest this update: Mon 15 Dec 2025 10:02:10 +0000 Manifest next update: Tue 16 Dec 2025 10:02:10 +0000 Files and hashes: 1: DRozhMtaZ2qQi39QkdO5G1jc7k0.roa (hash: PuORiX2E31wDt+P9sStv2sIXh7s2xmzWRFumBtIrOBQ=) 2: GQ1bBUO9hajs-WmruFA8nerQ35g.crl (hash: Ty4InwMzst/V4TVE2uJM9Em1fb8Iuia3WcnFgSj6Clk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:db:37:f9:b8:8c:64:a9:73:9c:fb:2f:62:1f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=190d5b0543bd85a8ecf969abb8503c9dead0df98 Validity Not Before: Dec 15 10:02:10 2025 GMT Not After : Dec 16 10:02:10 2025 GMT Subject: CN=a60d2ad1b52f4d2209d5c029fa0092f252bc6eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:13:56:6f:68:89:8f:3a:63:da:d7:8f:30: 1a:be:79:c0:47:18:6d:db:f0:6f:dc:7b:14:b0:da: 5c:27:6f:ae:31:1b:99:0a:02:34:2e:48:3f:20:a7: c3:97:3d:3a:d8:04:5d:93:f9:71:72:c6:3a:05:87: 49:66:25:d1:03:63:af:91:5c:3b:c0:e9:c5:2f:12: c0:ad:60:09:31:09:ad:9a:cc:9c:2b:07:36:d4:47: 27:61:fd:b1:77:83:b3:3b:66:4f:29:ec:71:ca:7b: d9:08:a3:8b:d3:c9:df:4e:2a:53:9a:e3:1e:71:67: bf:8a:18:23:64:df:78:a2:f0:4e:ea:28:ee:65:9f: f2:f6:4d:82:5d:fe:18:d2:43:d9:b0:e6:a6:49:b5: e6:b2:8f:56:d7:7d:cc:05:15:e0:a5:9c:c7:08:9c: ca:0f:25:96:96:62:14:e4:31:27:5d:19:a0:cf:ce: ff:01:c2:ca:7d:e4:0e:e5:d3:8c:82:38:f7:8b:41: 35:76:0a:9e:38:aa:e7:3e:cc:bb:95:1a:c5:ca:b6: ce:23:c9:9d:3c:54:57:32:bd:75:5c:1d:f5:ba:c9: 58:27:89:80:a3:e7:31:6d:e6:d7:da:81:f7:7d:0c: e0:47:9d:38:a7:ba:4f:15:44:06:ae:99:74:b2:24: f0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0D:2A:D1:B5:2F:4D:22:09:D5:C0:29:FA:00:92:F2:52:BC:6E:AB X509v3 Authority Key Identifier: keyid:19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:56:34:e0:d8:d3:9e:62:aa:77:aa:36:8c:74:bb:0e:db:92: 14:ef:c4:a3:f1:de:4d:85:db:1f:f3:b3:92:32:c2:f3:36:45: aa:c7:bc:f4:e9:a1:30:bf:c7:f0:4a:19:4a:e1:13:92:67:be: 12:f0:ac:9c:9e:94:6f:a6:84:7c:26:51:b7:05:54:6e:89:bc: e6:fa:00:e0:df:76:1d:ec:fd:9e:60:36:8a:51:91:ce:65:a5: 98:d3:b1:91:0c:6a:7b:6a:78:5f:a0:a2:04:39:74:ff:84:2c: 27:8b:2c:7e:c9:18:a5:06:44:ba:1f:49:7a:4e:9a:a4:27:43: d2:22:97:ba:c3:8b:1a:b0:51:ea:41:40:6b:78:ea:1c:59:e5: b9:b4:76:b8:60:6f:ff:9e:80:a4:31:df:f0:28:b1:b0:da:50: 38:31:30:8b:1a:b8:ba:9d:3b:18:68:39:9b:f5:ce:9a:d5:bb: 30:25:43:e2:21:06:b2:a7:4c:db:23:a4:fc:f2:68:8b:aa:f2: 5a:81:04:29:c0:ba:21:ea:57:65:e0:6b:f2:f3:55:79:64:ee: 8e:67:24:96:0d:47:64:35:8b:8a:0b:39:fd:4c:01:48:3d:45: de:e2:f4:78:a4:cc:a8:5e:ae:6b:7a:54:f8:d9:fa:c2:f6:99: 6e:1f:cc:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdds3+biMZKlznPsvYh+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MGQ1YjA1NDNiZDg1YThlY2Y5NjlhYmI4NTAzYzlkZWFk MGRmOTgwHhcNMjUxMjE1MTAwMjEwWhcNMjUxMjE2MTAwMjEwWjAzMTEwLwYDVQQD EyhhNjBkMmFkMWI1MmY0ZDIyMDlkNWMwMjlmYTAwOTJmMjUyYmM2ZWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZoTVm9oiY86Y9rXjzAavnnARxht 2/Bv3HsUsNpcJ2+uMRuZCgI0Lkg/IKfDlz062ARdk/lxcsY6BYdJZiXRA2OvkVw7 wOnFLxLArWAJMQmtmsycKwc21EcnYf2xd4OzO2ZPKexxynvZCKOL08nfTipTmuMe cWe/ihgjZN94ovBO6ijuZZ/y9k2CXf4Y0kPZsOamSbXmso9W133MBRXgpZzHCJzK DyWWlmIU5DEnXRmgz87/AcLKfeQO5dOMgjj3i0E1dgqeOKrnPsy7lRrFyrbOI8md PFRXMr11XB31uslYJ4mAo+cxbebX2oH3fQzgR504p7pPFUQGrpl0siTwZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYNKtG1L00iCdXAKfoAkvJSvG6rMB8GA1UdIwQY MBaAFBkNWwVDvYWo7Plpq7hQPJ3q0N+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MDA3ZmYtNWYwYy00YTczLWEzZjIt Y2NjNTgxNDA5NGFkLzEvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82MDA3ZmYtNWYwYy00YTczLWEzZjItY2NjNTgxNDA5NGFk LzEvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVY04NjT nmKqd6o2jHS7DtuSFO/Eo/HeTYXbH/OzkjLC8zZFqse89OmhML/H8EoZSuETkme+ EvCsnJ6Ub6aEfCZRtwVUbom85voA4N92Hez9nmA2ilGRzmWlmNOxkQxqe2p4X6Ci BDl0/4QsJ4ssfskYpQZEuh9Jek6apCdD0iKXusOLGrBR6kFAa3jqHFnlubR2uGBv /56ApDHf8CixsNpQODEwixq4up07GGg5m/XOmtW7MCVD4iEGsqdM2yOk/PJoi6ry WoEEKcC6IepXZeBr8vNVeWTujmcklg1HZDWLigs5/UwBSD1F3uL0eKTMqF6ua3pU +Nn6wvaZbh/MVg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:52:09 2025 by rpki-client