This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft File: gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft (raw, json) Hash identifier: ULdlp8WWfA7mudPlYyiYBiNS03AsWQs3dEVeRu6hKKI= Subject key identifier: B9:0C:7A:E5:58:83:28:A5:AA:BD:E6:94:70:CA:C7:D4:92:37:9B:92 Authority key identifier: 81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E Certificate issuer: /CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e Certificate serial: 019AE7BC0D92DA0F79A07B6609CB68CC694F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft Manifest number: 017A Signing time: Thu 04 Dec 2025 05:00:52 +0000 Manifest this update: Thu 04 Dec 2025 05:00:52 +0000 Manifest next update: Fri 05 Dec 2025 05:00:52 +0000 Files and hashes: 1: LstQmx0npx1wBzXFQnWiCMni4rU.roa (hash: P0DAqw5mgnz/NGIMrf6y81li0lGZ6anTPEV88CrVJ8o=) 2: gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl (hash: IMZgffUz2iAVp6bM0O4cacpT6bX4YBWaqGJ5ao/vKHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 05:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:bc:0d:92:da:0f:79:a0:7b:66:09:cb:68:cc:69:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e Validity Not Before: Dec 4 05:00:52 2025 GMT Not After : Dec 5 05:00:52 2025 GMT Subject: CN=b90c7ae5588328a5aabde69470cac7d492379b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:05:7d:c2:a0:2c:26:e8:14:98:81:ee:3c: 49:ed:40:59:ac:a2:95:a5:9f:2d:52:5c:85:81:b8: 8b:6c:e6:72:c6:64:16:62:a3:84:f6:5a:c3:ea:a3: 9a:3a:5d:ec:f2:c3:0b:33:d0:57:69:a2:16:e8:0d: 14:8e:eb:84:2f:5c:a5:7f:5e:65:a0:bd:c0:9a:5e: 7e:e3:b8:29:66:7d:a8:2b:65:28:4a:d9:38:2f:f0: 44:bd:2f:ee:03:aa:b7:25:a4:96:cb:aa:55:44:81: 9e:2f:23:7f:2c:db:d5:6a:a1:17:62:49:8e:11:0e: 62:75:bf:8c:b9:d3:0d:35:01:c7:e3:19:e2:fa:33: 60:e3:30:62:9f:b7:2c:24:92:df:bb:47:50:c9:6e: a1:3c:64:dd:7f:2c:47:62:61:7b:66:bd:b2:5c:f0: a0:65:62:41:7b:c5:be:a1:c6:57:38:bd:44:f0:96: 78:9b:c2:24:87:74:e0:7b:99:96:92:6e:41:2b:22: a9:7b:7b:f5:1f:24:a3:c5:d7:cb:f2:cd:ed:a3:22: df:14:25:56:3a:66:5b:ef:d8:5b:9a:81:d3:cd:04: 91:5f:3e:16:b2:0a:c8:22:94:4f:37:ec:8c:35:f8: 71:dd:90:90:43:0f:db:54:02:fe:34:ba:28:3e:c1: 6c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0C:7A:E5:58:83:28:A5:AA:BD:E6:94:70:CA:C7:D4:92:37:9B:92 X509v3 Authority Key Identifier: keyid:81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5b:a8:35:19:42:b1:41:ab:ab:a6:ae:d5:c7:df:65:9a:96: 13:37:bf:7b:6a:ce:3e:5b:7f:90:51:4b:4b:cf:8f:06:c5:c3: a7:24:78:f0:0a:69:20:67:12:b4:0f:82:d8:bb:e2:0e:87:d5: b2:e4:30:eb:79:3a:b6:c7:8b:4c:85:8e:e5:b1:6e:d0:9c:97: bd:6f:90:b6:f0:0c:72:32:c4:db:57:02:b1:5d:12:54:d5:e9: e2:db:be:17:1b:75:7b:bc:76:46:7f:84:52:c6:c5:30:b5:a6: dd:2e:88:a7:62:b8:0e:3c:a9:c6:8b:75:4f:20:15:23:90:e6: 6a:6a:01:2d:13:27:1e:4f:aa:61:cd:49:01:ee:0b:bf:d6:db: 42:6b:c8:82:b9:ce:fd:3e:fe:a4:11:d8:01:c1:9e:66:68:00: 7d:3e:9d:ae:6a:fb:ca:67:af:a6:d5:9e:c1:ba:f2:8b:42:bf: 59:02:4d:f4:8f:c1:b7:7e:48:77:5c:5c:5c:58:af:90:8b:85: cc:1c:d8:b2:37:17:13:15:2c:dc:4b:27:8b:26:f9:80:24:22: 8c:3b:08:bd:55:e8:0e:6f:f4:b4:2d:3f:f5:c1:92:a2:5c:fe: 8c:5f:45:4d:a0:a6:31:c8:3c:5a:0f:fb:bf:e0:ad:f9:68:37: 5e:f4:aa:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrnvA2S2g95oHtmCctozGlPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMGU1MGY4YmUyMWU2NTU2YTJhM2I1ZTYwZTFkZTc2NWFl MDJkNGUwHhcNMjUxMjA0MDUwMDUyWhcNMjUxMjA1MDUwMDUyWjAzMTEwLwYDVQQD EyhiOTBjN2FlNTU4ODMyOGE1YWFiZGU2OTQ3MGNhYzdkNDkyMzc5YjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWgFfcKgLCboFJiB7jxJ7UBZrKKV pZ8tUlyFgbiLbOZyxmQWYqOE9lrD6qOaOl3s8sMLM9BXaaIW6A0UjuuEL1ylf15l oL3Aml5+47gpZn2oK2UoStk4L/BEvS/uA6q3JaSWy6pVRIGeLyN/LNvVaqEXYkmO EQ5idb+MudMNNQHH4xni+jNg4zBin7csJJLfu0dQyW6hPGTdfyxHYmF7Zr2yXPCg ZWJBe8W+ocZXOL1E8JZ4m8Ikh3Tge5mWkm5BKyKpe3v1HySjxdfL8s3toyLfFCVW OmZb79hbmoHTzQSRXz4WsgrIIpRPN+yMNfhx3ZCQQw/bVAL+NLooPsFsWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkMeuVYgyilqr3mlHDKx9SSN5uSMB8GA1UdIwQY MBaAFIEOUPi+IeZVaio7XmDh3nZa4C1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ODBkZjQtZTMzNC00YTc3LThmNGEt N2RmZGU4YjEyZTJjLzEvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84ODBkZjQtZTMzNC00YTc3LThmNGEtN2RmZGU4YjEyZTJj LzEvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1uoNRlC sUGrq6au1cffZZqWEze/e2rOPlt/kFFLS8+PBsXDpyR48AppIGcStA+C2LviDofV suQw63k6tseLTIWO5bFu0JyXvW+QtvAMcjLE21cCsV0SVNXp4tu+Fxt1e7x2Rn+E UsbFMLWm3S6Ip2K4Djypxot1TyAVI5DmamoBLRMnHk+qYc1JAe4Lv9bbQmvIgrnO /T7+pBHYAcGeZmgAfT6drmr7ymevptWewbryi0K/WQJN9I/Bt35Id1xcXFivkIuF zBzYsjcXExUs3Esniyb5gCQijDsIvVXoDm/0tC0/9cGSolz+jF9FTaCmMcg8Wg/7 v+Ct+Wg3XvSqUw== -----END CERTIFICATE-----Generated at Thu Dec 4 11:24:34 2025 by rpki-client