This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft File: GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json) Hash identifier: AXhGH+S1a0lHmmJJ3HnZ6bSrZgIHTweEP5WFPuZLQNY= Subject key identifier: BE:3B:56:73:8A:CB:2D:53:E8:2F:18:C7:59:7D:E4:7A:E7:60:85:44 Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD Certificate issuer: /CN=1904ce28eae682c97acd2d862fee2897c3b096fd Certificate serial: 019B25BF474944EA1B3B382A2FD9D08074F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft Manifest number: 1782 Signing time: Tue 16 Dec 2025 06:00:50 +0000 Manifest this update: Tue 16 Dec 2025 06:00:50 +0000 Manifest next update: Wed 17 Dec 2025 06:00:50 +0000 Files and hashes: 1: 5ekJj6RYdmJBNmKWcQ0sEc6eWgU.roa (hash: gPGy8PS0+ecmm07tEkgKLMFDWfNcEFuAsE09yhAQrNo=) 2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: EHq8CPrvDKIuJyBvTVNphTX57IqbFJQTsBHMI/HzQwA=) 3: _YBrb9GHmCpqMjy8GFwAvwaPx90.roa (hash: XWiWSnDHqy5A+xwKGiqSBQrfe6N7eyh2EySgoK4VNNw=) 4: lCgKihl6lv9I1HmInNqD60nii-E.roa (hash: +eRiAGt7XlmYsCebRhtIL5+eM1SWrg49PToO3o+8iRc=) 5: mmY1ARivIWLIbuStJrmVTjbcqd0.roa (hash: pdFIZbB/0pJ15uLsSovmly6F7hKCHQG6LxPg19m7f9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:47:49:44:ea:1b:3b:38:2a:2f:d9:d0:80:74:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd Validity Not Before: Dec 16 06:00:50 2025 GMT Not After : Dec 17 06:00:50 2025 GMT Subject: CN=be3b56738acb2d53e82f18c7597de47ae7608544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bd:bf:40:f6:d7:92:18:22:3e:c3:f9:f6:df: f9:fe:68:b0:b1:73:4d:4c:ef:af:99:7a:ab:0e:73: b8:56:62:5a:1f:a7:e8:a5:82:c2:14:d7:35:5c:e4: dc:0b:0e:d4:22:ab:d9:5d:52:51:fa:a8:4c:1e:17: fc:24:a6:1f:93:44:da:b1:8f:1e:fa:ad:89:27:8f: 40:e3:1a:cd:ea:b0:c1:38:fa:cf:f8:f8:00:09:99: 5a:44:de:1d:27:9a:4f:ee:4e:01:7c:05:80:a3:a5: 31:00:60:9e:d4:bf:57:7d:7b:44:29:1e:a1:df:63: 84:aa:9e:87:0e:0e:18:23:83:d7:0a:ca:57:c6:77: 7a:ea:4c:d1:1b:06:90:ef:5d:0e:f9:ca:41:ac:55: a1:ee:32:9c:a9:9f:87:9d:7f:ec:d5:c9:1e:b7:02: 5c:86:24:44:aa:13:60:5f:be:20:35:60:a3:cf:67: dc:45:ca:74:e5:72:06:83:84:3f:77:7b:a0:87:86: 90:39:78:76:89:43:9d:30:1f:71:9e:14:2b:df:63: 3b:d6:d1:a0:a1:2d:7e:8e:13:2b:1e:89:94:d3:cb: b6:5c:29:e9:cd:56:b5:f6:d8:b5:7a:ff:6f:16:0b: 2f:21:5a:d3:9f:02:a8:a4:ad:8f:3c:d8:b6:dd:2c: fe:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3B:56:73:8A:CB:2D:53:E8:2F:18:C7:59:7D:E4:7A:E7:60:85:44 X509v3 Authority Key Identifier: keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:78:5a:e9:3f:bb:d4:e4:85:d9:51:a5:ef:cf:76:80:af:b0: 2f:2a:47:3f:94:9e:2f:60:cb:09:03:4e:be:68:09:90:5d:8a: f6:51:d7:74:ae:d8:8f:de:6b:94:5a:d9:76:df:04:4a:a7:c6: 34:03:c1:52:5a:7c:f8:a9:2f:a0:46:a7:ad:11:c2:56:34:1a: 78:2f:8c:a0:ad:66:31:ee:80:82:c9:10:b5:05:1c:39:3d:d1: 98:18:87:0f:ae:15:59:3c:d3:d8:8d:fb:ac:ff:ba:c8:7a:bf: 97:cd:da:51:99:62:cf:04:8d:18:61:c2:ff:07:01:67:46:17: b7:c4:16:2f:b7:0d:88:3d:21:34:95:22:30:a7:e5:7b:41:96: 13:31:70:84:50:e1:3e:f2:53:a5:65:9a:e4:93:35:00:64:9c: 37:5b:15:52:14:3e:52:a6:97:b2:4f:32:1f:5c:d3:6d:07:95: 7b:d7:31:5f:3f:a8:f6:e1:b6:72:f4:96:e5:aa:78:d6:1b:c0: 08:b5:78:fb:c6:9e:66:16:95:34:bd:36:34:02:d2:0e:29:18: 06:90:32:2f:97:e5:6f:b8:90:82:c3:f9:1a:08:f9:5a:6d:44: 91:1d:72:fe:42:7e:77:cc:97:58:c9:4f:ec:c5:e3:f2:be:2e: 49:0c:4b:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv0dJROobOzgqL9nQgHT1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDRjZTI4ZWFlNjgyYzk3YWNkMmQ4NjJmZWUyODk3YzNi MDk2ZmQwHhcNMjUxMjE2MDYwMDUwWhcNMjUxMjE3MDYwMDUwWjAzMTEwLwYDVQQD EyhiZTNiNTY3MzhhY2IyZDUzZTgyZjE4Yzc1OTdkZTQ3YWU3NjA4NTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA672/QPbXkhgiPsP59t/5/miwsXNN TO+vmXqrDnO4VmJaH6fopYLCFNc1XOTcCw7UIqvZXVJR+qhMHhf8JKYfk0TasY8e +q2JJ49A4xrN6rDBOPrP+PgACZlaRN4dJ5pP7k4BfAWAo6UxAGCe1L9XfXtEKR6h 32OEqp6HDg4YI4PXCspXxnd66kzRGwaQ710O+cpBrFWh7jKcqZ+HnX/s1cketwJc hiREqhNgX74gNWCjz2fcRcp05XIGg4Q/d3ugh4aQOXh2iUOdMB9xnhQr32M71tGg oS1+jhMrHomU08u2XCnpzVa19ti1ev9vFgsvIVrTnwKopK2PPNi23Sz+MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL47VnOKyy1T6C8Yx1l95HrnYIVEMB8GA1UdIwQY MBaAFBkEzijq5oLJes0thi/uKJfDsJb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDkt MTVkNWRlYjIyOGRkLzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDktMTVkNWRlYjIyOGRk LzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXha6T+7 1OSF2VGl7892gK+wLypHP5SeL2DLCQNOvmgJkF2K9lHXdK7Yj95rlFrZdt8ESqfG NAPBUlp8+KkvoEanrRHCVjQaeC+MoK1mMe6AgskQtQUcOT3RmBiHD64VWTzT2I37 rP+6yHq/l83aUZlizwSNGGHC/wcBZ0YXt8QWL7cNiD0hNJUiMKfle0GWEzFwhFDh PvJTpWWa5JM1AGScN1sVUhQ+UqaXsk8yH1zTbQeVe9cxXz+o9uG2cvSW5ap41hvA CLV4+8aeZhaVNL02NALSDikYBpAyL5flb7iQgsP5Ggj5Wm1EkR1y/kJ+d8yXWMlP 7MXj8r4uSQxLuQ== -----END CERTIFICATE-----Generated at Tue Dec 16 12:31:44 2025 by rpki-client