This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft File: gqo-xYuoRtJ6eXERxVhRUwANug4.mft (raw, json) Hash identifier: vIVHGn+/4ofZke+JkactlpUDQYurJWwB/4uAwUZyBC4= Subject key identifier: D7:95:BF:C1:98:E8:9D:5A:12:BA:7A:B1:03:83:CA:91:6C:A9:EF:96 Authority key identifier: 82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E Certificate issuer: /CN=82aa3ec58ba846d27a797111c5585153000dba0e Certificate serial: 019BB4DF0EB32802326BA2092187CC8B63D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft Manifest number: 17C7 Signing time: Tue 13 Jan 2026 01:01:15 +0000 Manifest this update: Tue 13 Jan 2026 01:01:15 +0000 Manifest next update: Wed 14 Jan 2026 01:01:15 +0000 Files and hashes: 1: Ue5qGAdMUuZjIAkWiew3rNK7iec.roa (hash: 0R2GCImaNBlpU0Y1AJHIDWb7A+a1HMHsb4hUInCPqe8=) 2: gqo-xYuoRtJ6eXERxVhRUwANug4.crl (hash: l/Mqt42DpQbfEUodQcRPwRsyVfg06dPQCHX1CcAQD6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 21:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b4:df:0e:b3:28:02:32:6b:a2:09:21:87:cc:8b:63:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82aa3ec58ba846d27a797111c5585153000dba0e Validity Not Before: Jan 13 01:01:15 2026 GMT Not After : Jan 14 01:01:15 2026 GMT Subject: CN=d795bfc198e89d5a12ba7ab10383ca916ca9ef96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c4:56:f7:3c:ac:a1:9e:ad:d4:15:1b:9e:65: a3:68:f3:83:6e:ee:cf:15:59:bd:52:d8:89:bf:5b: f1:88:a0:cc:26:e5:5a:76:3f:13:d8:c4:dc:75:5d: 7a:3b:6a:75:50:4d:f7:12:c3:26:1d:83:8f:1e:da: 43:2c:67:bd:63:52:5c:fd:c4:bd:e1:40:6b:68:be: d3:56:ed:94:19:c1:94:45:1a:ca:07:cf:3a:54:57: 68:01:76:4d:15:00:4d:fa:53:f0:86:c0:f2:d1:b0: 59:59:d2:9b:77:3e:44:0a:7f:8c:44:e5:fd:d7:6c: 0b:dc:52:f5:1e:7d:ca:8d:5f:04:00:3a:a8:1a:93: e5:9a:c6:4e:74:95:21:47:62:99:61:f2:8f:a3:b6: 3c:d5:c4:c2:74:22:29:e6:77:dd:36:34:84:08:44: 9f:a4:4c:09:6d:ea:ae:e2:3f:d5:04:e0:36:5a:41: 06:4e:2c:1a:73:35:a0:40:80:46:bf:f4:dc:ce:52: 7d:9c:66:4f:d8:7e:e4:42:27:4e:7f:19:41:b1:0a: 2d:ef:49:0b:50:59:1d:1a:23:6e:9b:96:e3:97:fc: 99:5d:54:b2:a7:0e:cb:2d:50:ee:ce:79:f1:1e:01: b3:ef:7a:6f:65:b4:dd:31:40:c6:53:fd:f4:22:28: a3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:95:BF:C1:98:E8:9D:5A:12:BA:7A:B1:03:83:CA:91:6C:A9:EF:96 X509v3 Authority Key Identifier: keyid:82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:32:86:08:f2:10:76:43:92:36:f9:74:3b:07:fc:ff:e3:81: 92:dc:59:bb:f2:0d:3f:7e:bc:ad:f5:f1:52:44:5c:07:1a:f9: c4:7d:08:84:df:3a:11:fd:0a:64:69:d3:72:67:70:e5:01:aa: 9b:9e:98:05:be:63:0c:6a:86:66:15:6d:a8:2e:28:83:8c:87: 4d:06:72:6e:67:3f:e0:bd:c8:aa:78:69:b2:8a:33:9e:23:4c: 28:25:97:0b:e6:29:83:71:cf:bb:14:dc:85:b4:8d:57:1a:b0: 23:97:18:02:d7:dd:3d:42:21:be:49:37:2d:1a:cc:62:b6:d8: 5c:80:4e:d2:b4:72:f2:7d:d4:b7:83:63:1b:42:45:d6:8d:e9: ca:4b:07:10:06:cd:e7:73:5a:a0:95:51:ac:75:2a:b3:18:49: dc:17:09:f5:76:4c:a9:81:e1:b9:a0:a1:5a:7b:af:43:48:a6: 70:c9:ec:cd:3b:d7:fd:39:bc:75:8a:9e:81:75:1a:cd:19:1f: 43:36:2d:c2:68:b4:50:df:6b:4a:d3:06:5e:b0:0c:84:1d:9c: 66:1b:51:38:06:74:3a:9c:9d:23:97:42:2b:92:43:6d:61:71: 87:8f:49:9a:dc:f2:9c:37:2d:e7:25:56:81:78:51:1e:a3:97: c2:3f:e9:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu03w6zKAIya6IJIYfMi2PSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYWEzZWM1OGJhODQ2ZDI3YTc5NzExMWM1NTg1MTUzMDAw ZGJhMGUwHhcNMjYwMTEzMDEwMTE1WhcNMjYwMTE0MDEwMTE1WjAzMTEwLwYDVQQD EyhkNzk1YmZjMTk4ZTg5ZDVhMTJiYTdhYjEwMzgzY2E5MTZjYTllZjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMRW9zysoZ6t1BUbnmWjaPODbu7P FVm9UtiJv1vxiKDMJuVadj8T2MTcdV16O2p1UE33EsMmHYOPHtpDLGe9Y1Jc/cS9 4UBraL7TVu2UGcGURRrKB886VFdoAXZNFQBN+lPwhsDy0bBZWdKbdz5ECn+MROX9 12wL3FL1Hn3KjV8EADqoGpPlmsZOdJUhR2KZYfKPo7Y81cTCdCIp5nfdNjSECESf pEwJbequ4j/VBOA2WkEGTiwaczWgQIBGv/TczlJ9nGZP2H7kQidOfxlBsQot70kL UFkdGiNum5bjl/yZXVSypw7LLVDuznnxHgGz73pvZbTdMUDGU/30IiijFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeVv8GY6J1aErp6sQODypFsqe+WMB8GA1UdIwQY MBaAFIKqPsWLqEbSenlxEcVYUVMADboOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMWM3ZjktYWQ5Yy00YmI3LWFjNDct OTI3ZGQ0NTlhYzVjLzEvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iMWM3ZjktYWQ5Yy00YmI3LWFjNDctOTI3ZGQ0NTlhYzVj LzEvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzKGCPIQ dkOSNvl0Owf8/+OBktxZu/INP368rfXxUkRcBxr5xH0IhN86Ef0KZGnTcmdw5QGq m56YBb5jDGqGZhVtqC4og4yHTQZybmc/4L3IqnhpsoozniNMKCWXC+Ypg3HPuxTc hbSNVxqwI5cYAtfdPUIhvkk3LRrMYrbYXIBO0rRy8n3Ut4NjG0JF1o3pyksHEAbN 53NaoJVRrHUqsxhJ3BcJ9XZMqYHhuaChWnuvQ0imcMnszTvX/Tm8dYqegXUazRkf QzYtwmi0UN9rStMGXrAMhB2cZhtROAZ0OpydI5dCK5JDbWFxh49JmtzynDct5yVW gXhRHqOXwj/pYw== -----END CERTIFICATE-----Generated at Tue Jan 13 04:20:34 2026 by rpki-client