This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft File: GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft (raw, json) Hash identifier: Y3QXj0d0o+IP70QmmI4HoRBFxm0rIM3DRkrQXSq6h2Y= Subject key identifier: E5:C1:D9:0F:22:5A:6F:77:7B:2D:D3:FD:FA:31:4F:1F:48:1A:40:EC Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59 Certificate issuer: /CN=1902391799337601331f5a12af11e9f4f6421159 Certificate serial: 019B48B99A19D0B44C75016EEC661741CD20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 01:01:21 +0000 Manifest this update: Tue 23 Dec 2025 01:01:21 +0000 Manifest next update: Wed 24 Dec 2025 01:01:21 +0000 Files and hashes: 1: GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl (hash: P/YWwar0nNB0pN6ZD+XHoqQCpS0jnjM2oOXkSkbG05E=) 2: MG8GkG1guL2JPQamlCCVL0WmXAU.roa (hash: zOqvBBG8dg13+yUZPiGoLbhSAZEkww5TYWxAzF0vCsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:9a:19:d0:b4:4c:75:01:6e:ec:66:17:41:cd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1902391799337601331f5a12af11e9f4f6421159 Validity Not Before: Dec 23 01:01:21 2025 GMT Not After : Dec 24 01:01:21 2025 GMT Subject: CN=e5c1d90f225a6f777b2dd3fdfa314f1f481a40ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bc:a2:8b:01:a5:43:30:3c:31:a2:be:b4:b9: 2a:fd:d4:30:e5:52:be:ac:36:d4:f0:c3:39:ed:b8: 30:51:b7:52:a8:27:0c:2a:3f:0c:3c:47:d0:29:69: 01:c8:13:81:92:e2:72:74:f9:d2:fc:e0:32:ee:eb: 7b:d0:1f:ff:1e:fa:6e:d5:b8:bf:ab:7d:d2:67:09: d9:fd:46:a0:14:18:0b:36:3e:b0:6b:8a:c3:f6:83: 07:ee:89:e5:d5:5f:c0:3f:ba:5c:2c:40:e0:71:fc: b4:cd:83:69:d8:bc:b3:d6:c4:9f:7f:3a:b8:30:3a: 6f:1a:6b:12:41:77:b4:f3:fb:19:3d:89:6b:9b:5a: ca:2a:a0:3f:8c:90:da:89:e9:b6:71:00:82:4d:46: 77:59:0c:f4:c9:f1:49:4b:10:85:4f:5e:b7:2b:58: 4b:b4:33:e6:e2:cf:79:60:2d:8e:c8:e6:c3:25:d7: 8a:56:36:1b:b2:0c:53:45:68:3e:ca:1e:8c:9d:02: bc:9e:07:e2:2d:b9:f7:cf:14:21:29:21:ce:65:b9: 7d:8a:8b:23:99:83:bf:3d:00:82:1e:a7:b2:3a:0f: 32:a4:26:bd:fe:35:97:2a:f5:c8:1a:b8:ee:b4:90: a4:78:75:1f:c3:7d:c7:ad:31:c6:df:6c:31:ab:13: f3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C1:D9:0F:22:5A:6F:77:7B:2D:D3:FD:FA:31:4F:1F:48:1A:40:EC X509v3 Authority Key Identifier: keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ed:96:75:ea:70:15:e3:70:2c:4c:45:28:b2:02:8d:a6:01: 19:92:b4:5b:9d:05:0f:42:33:7e:5c:30:dc:38:9f:6b:96:e6: 8b:35:54:c4:5a:78:10:d2:33:db:85:4f:1d:ce:6b:28:d0:8a: 64:2f:47:b1:2c:56:fb:76:f4:9e:f3:a4:0e:fd:e2:8d:6b:f7: 58:af:33:63:3a:0f:d1:48:02:3c:17:3e:db:24:18:d8:06:28: 0f:0b:59:16:ca:77:8b:ce:93:fd:8f:e9:28:3a:ff:54:a2:92: 75:7c:53:32:c7:8e:30:83:1e:c4:46:78:fa:f3:90:4a:15:b3: 35:0b:94:aa:19:e3:be:ba:0b:e8:4f:2c:c2:72:49:1e:3d:35: c3:6e:ab:ad:5a:e0:1e:f5:d0:a3:91:52:5f:1c:7d:99:eb:c6: 8d:77:1b:6c:fd:73:0d:31:ba:36:e9:3d:97:01:a9:25:df:81: 58:dd:0c:b2:9b:92:9e:df:52:b5:86:59:6e:bb:c4:f8:47:a6: 29:d2:60:3a:57:f8:65:2e:a7:b3:eb:4c:fb:35:73:46:f0:a9: 0a:cb:cd:ef:b8:db:ca:d5:2d:bc:57:0b:28:e1:f1:de:63:d2: c9:1a:08:5c:7f:e7:1e:51:f0:f0:a3:b4:c0:ea:4b:9b:e5:16: b4:5b:ce:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuZoZ0LRMdQFu7GYXQc0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDIzOTE3OTkzMzc2MDEzMzFmNWExMmFmMTFlOWY0ZjY0 MjExNTkwHhcNMjUxMjIzMDEwMTIxWhcNMjUxMjI0MDEwMTIxWjAzMTEwLwYDVQQD EyhlNWMxZDkwZjIyNWE2Zjc3N2IyZGQzZmRmYTMxNGYxZjQ4MWE0MGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LyiiwGlQzA8MaK+tLkq/dQw5VK+ rDbU8MM57bgwUbdSqCcMKj8MPEfQKWkByBOBkuJydPnS/OAy7ut70B//Hvpu1bi/ q33SZwnZ/UagFBgLNj6wa4rD9oMH7onl1V/AP7pcLEDgcfy0zYNp2Lyz1sSffzq4 MDpvGmsSQXe08/sZPYlrm1rKKqA/jJDaiem2cQCCTUZ3WQz0yfFJSxCFT163K1hL tDPm4s95YC2OyObDJdeKVjYbsgxTRWg+yh6MnQK8ngfiLbn3zxQhKSHOZbl9iosj mYO/PQCCHqeyOg8ypCa9/jWXKvXIGrjutJCkeHUfw33HrTHG32wxqxPz/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXB2Q8iWm93ey3T/foxTx9IGkDsMB8GA1UdIwQY MBaAFBkCOReZM3YBMx9aEq8R6fT2QhFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FJNUY1a3pkZ0V6SDFvU3J4SHA5UFpDRVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hOWZmMWEtZDU4MC00YjQyLWJkODct NTU5NzI2MGY2NWVlLzEvR1FJNUY1a3pkZ0V6SDFvU3J4SHA5UFpDRVZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hOWZmMWEtZDU4MC00YjQyLWJkODctNTU5NzI2MGY2NWVl LzEvR1FJNUY1a3pkZ0V6SDFvU3J4SHA5UFpDRVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnO2Wdepw FeNwLExFKLICjaYBGZK0W50FD0Izflww3Difa5bmizVUxFp4ENIz24VPHc5rKNCK ZC9HsSxW+3b0nvOkDv3ijWv3WK8zYzoP0UgCPBc+2yQY2AYoDwtZFsp3i86T/Y/p KDr/VKKSdXxTMseOMIMexEZ4+vOQShWzNQuUqhnjvroL6E8swnJJHj01w26rrVrg HvXQo5FSXxx9mevGjXcbbP1zDTG6Nuk9lwGpJd+BWN0MspuSnt9StYZZbrvE+Eem KdJgOlf4ZS6ns+tM+zVzRvCpCsvN77jbytUtvFcLKOHx3mPSyRoIXH/nHlHw8KO0 wOpLm+UWtFvO4g== -----END CERTIFICATE-----Generated at Tue Dec 23 07:57:06 2025 by rpki-client