This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft File: gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft (raw, json) Hash identifier: IMZaoZWXx0Q91eTLIiUTJK9EvatCcHK2oR1sSont9hw= Subject key identifier: 1B:35:3C:E3:B0:7E:EB:DA:48:B9:E8:69:D9:7B:EC:D7:AF:09:2A:7F Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7 Certificate issuer: /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7 Certificate serial: 019B397D0382D494021078AAA166802A4358 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 02:00:52 +0000 Manifest this update: Sat 20 Dec 2025 02:00:52 +0000 Manifest next update: Sun 21 Dec 2025 02:00:52 +0000 Files and hashes: 1: 1GcdqVYrNeFzAfzIvWc1uwT98aA.roa (hash: 4uQf4DSwbX7BKGTdoGDfjY+9K4u0Qbg5gbpIHJoyB/8=) 2: gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl (hash: ApqUwx4ZFLLra0I8QRS1ZgxkRDLGc+ch8NHBlZBoCXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:03:82:d4:94:02:10:78:aa:a1:66:80:2a:43:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7 Validity Not Before: Dec 20 02:00:52 2025 GMT Not After : Dec 21 02:00:52 2025 GMT Subject: CN=1b353ce3b07eebda48b9e869d97becd7af092a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a7:fa:68:9f:5a:b1:9e:98:1f:52:cd:8d:4c: 17:69:af:55:93:8e:5a:33:8b:61:8e:c3:fd:a8:a4: 1e:11:cf:40:d9:6c:cf:47:65:a9:3a:bd:bf:3f:4f: 35:cd:a8:af:1b:0d:1e:47:6e:d5:22:6c:72:e7:68: db:f9:49:7b:85:e9:aa:b1:35:fc:d8:be:0f:88:53: 1e:73:0d:cb:b9:2c:b5:ef:b2:39:1d:d0:de:f5:45: 05:98:ab:b8:55:b1:11:b2:c0:40:c6:91:d8:a8:bc: 41:d8:78:5f:7f:03:ca:9d:0c:d1:ff:60:e1:38:6c: dc:95:6a:f1:e3:72:3c:d6:a4:db:6f:a3:da:12:0e: 3d:f0:bd:2b:b9:a0:59:b3:ad:23:78:0d:ee:f8:fb: b2:c6:4e:e7:39:dc:70:ba:12:75:92:f1:12:67:52: 05:86:6b:26:91:3f:09:69:34:1d:d0:b9:12:2f:81: 40:9e:3b:8f:a3:9d:4c:3a:a9:ce:46:bd:c3:43:f5: df:05:9b:cb:b5:66:f6:ae:0b:bd:65:66:12:f1:0a: 5a:ed:71:76:f9:8d:f0:39:e3:fe:a1:e9:21:d1:e1: 90:c1:81:0b:53:45:ee:e7:ef:60:30:3e:24:5f:14: a0:1b:c6:ab:72:a7:dc:f1:7c:37:1a:d7:93:69:b5: 6b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:35:3C:E3:B0:7E:EB:DA:48:B9:E8:69:D9:7B:EC:D7:AF:09:2A:7F X509v3 Authority Key Identifier: keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:51:44:83:8b:4f:40:2f:c5:7d:d0:cc:6a:75:2e:8e:1c:2a: 29:fe:a9:cb:ff:0e:35:ac:4e:69:f0:80:88:57:9c:52:04:25: 31:fc:f3:6f:7f:89:cb:d9:04:96:4d:aa:06:3d:29:e3:65:b0: 7b:ae:69:94:c9:75:7b:00:51:8b:fa:44:a8:23:32:dd:c4:7c: 93:30:59:35:29:15:19:67:0e:e7:ee:cd:6c:fe:fd:c8:56:33: b8:c0:ba:7e:33:ab:25:78:12:3b:0a:ec:22:b2:66:03:b9:e9: 10:16:c4:18:38:92:14:75:36:77:7f:6c:5b:a6:54:dc:76:93: 5f:c2:ca:71:69:c8:a6:30:03:44:bd:eb:e9:8b:2e:e9:74:d6: 58:d4:27:15:41:84:b3:05:fe:ef:49:97:47:7a:c2:ef:33:cf: fd:73:73:33:f5:16:ed:5e:cb:6a:d2:d4:7d:cd:66:c5:40:a7: 00:26:86:11:24:15:98:1f:1a:dd:f5:6f:50:c4:2a:0d:b9:b1: 20:89:55:0a:d8:ae:af:eb:d2:6b:24:00:60:e5:9c:1a:c9:53: c6:62:b2:5b:5b:fa:ec:2a:cf:65:7b:05:c5:88:f6:b0:09:a7: e1:d7:e7:59:4e:6a:06:9b:fd:2f:4b:43:ef:92:02:56:a6:4e: 51:e1:5e:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fQOC1JQCEHiqoWaAKkNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzllYWQ4MzVhOGZjZmFlMGQ5ZWUyODM5Y2QxNjg4MWJh MTFkZDcwHhcNMjUxMjIwMDIwMDUyWhcNMjUxMjIxMDIwMDUyWjAzMTEwLwYDVQQD EygxYjM1M2NlM2IwN2VlYmRhNDhiOWU4NjlkOTdiZWNkN2FmMDkyYTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaf6aJ9asZ6YH1LNjUwXaa9Vk45a M4thjsP9qKQeEc9A2WzPR2WpOr2/P081zaivGw0eR27VImxy52jb+Ul7hemqsTX8 2L4PiFMecw3LuSy177I5HdDe9UUFmKu4VbERssBAxpHYqLxB2HhffwPKnQzR/2Dh OGzclWrx43I81qTbb6PaEg498L0ruaBZs60jeA3u+Puyxk7nOdxwuhJ1kvESZ1IF hmsmkT8JaTQd0LkSL4FAnjuPo51MOqnORr3DQ/XfBZvLtWb2rgu9ZWYS8Qpa7XF2 +Y3wOeP+oekh0eGQwYELU0Xu5+9gMD4kXxSgG8arcqfc8Xw3GteTabVrbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBs1POOwfuvaSLnoadl77NevCSp/MB8GA1UdIwQY MBaAFIJ56tg1qPz64NnuKDnNFogboR3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUt ZWUyOWM5MTM2ZThiLzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUtZWUyOWM5MTM2ZThi LzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlFEg4tP QC/FfdDManUujhwqKf6py/8ONaxOafCAiFecUgQlMfzzb3+Jy9kElk2qBj0p42Ww e65plMl1ewBRi/pEqCMy3cR8kzBZNSkVGWcO5+7NbP79yFYzuMC6fjOrJXgSOwrs IrJmA7npEBbEGDiSFHU2d39sW6ZU3HaTX8LKcWnIpjADRL3r6Ysu6XTWWNQnFUGE swX+70mXR3rC7zPP/XNzM/UW7V7LatLUfc1mxUCnACaGESQVmB8a3fVvUMQqDbmx IIlVCtiur+vSayQAYOWcGslTxmKyW1v67CrPZXsFxYj2sAmn4dfnWU5qBpv9L0tD 75ICVqZOUeFebA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:44:18 2025 by rpki-client