This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft File: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json) Hash identifier: tThYs16qRpwjIuWDswFFKVYDX5N6UhRX9X9uWpHy4Ow= Subject key identifier: 59:D7:9B:A4:02:6F:C0:00:F6:65:A5:A7:99:20:7F:8B:83:F4:C0:C3 Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a Certificate serial: 019B3D90A1CCE9154ED6A77D742388F15D7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 21:00:47 +0000 Manifest this update: Sat 20 Dec 2025 21:00:47 +0000 Manifest next update: Sun 21 Dec 2025 21:00:47 +0000 Files and hashes: 1: CabH8yqn5S_kOgWDLQqFiKvzRos.roa (hash: 6ag0+5Ik/WQxtmqQPOIuQwUXIuLv9ELuLcs7tX6aoMI=) 2: VQo-At29Fu-EX7b5D46S6kL9nbI.roa (hash: jdnjmvA4QLfORK84+jjkf8uapja4VMoDv0JpxJYMg64=) 3: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: NEN0WgoxS72rEVJBWV/pAtYVvzTYGk0MtuuD+KuWxWU=) 4: wB7zO9znSbsEaFVzHFAP7dE2rN0.roa (hash: oKOkiDomqnZDUq9zEDTivQ41nb+DuiZJIDMY2vxiFOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:a1:cc:e9:15:4e:d6:a7:7d:74:23:88:f1:5d:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a Validity Not Before: Dec 20 21:00:47 2025 GMT Not After : Dec 21 21:00:47 2025 GMT Subject: CN=59d79ba4026fc000f665a5a799207f8b83f4c0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7b:e1:94:37:3e:6e:75:37:0c:b7:8c:19:b6: 56:73:37:0e:4b:ef:6c:96:2f:cd:f6:84:1a:fc:9f: 5c:37:91:ff:dc:9f:1f:be:eb:1f:3e:17:dc:00:e0: f9:00:48:c2:f3:62:33:c1:86:6e:a5:c2:81:eb:61: 65:96:38:50:38:65:9b:ae:c6:b0:0f:11:19:3f:b9: 8a:fd:49:8e:71:a4:5c:e0:ab:25:a1:05:4b:87:59: a8:d6:d8:13:85:e5:74:9f:a5:4c:6c:2f:e6:d0:21: cf:f8:9b:e9:1f:64:23:ab:36:d7:02:d4:ac:1d:c7: b7:fe:96:be:c5:57:44:6d:6b:21:cb:e7:14:84:03: 8f:16:fd:8b:93:44:88:eb:77:91:c1:10:ac:ed:cf: 80:d0:cc:71:80:b2:bb:82:2e:91:24:5d:b3:4a:05: 99:3f:2e:49:62:50:a4:1d:dd:08:33:d8:d8:24:85: 34:a6:34:48:fd:31:2c:2c:91:1d:91:35:21:1f:fa: 4b:92:70:f1:05:a3:07:32:7e:51:c8:a6:bb:f1:6c: 7d:0b:7a:cc:1a:ff:13:8b:0e:65:54:0b:64:f0:f0: 0e:b0:51:db:55:d8:34:d2:34:7c:35:3a:08:3b:2e: 63:63:0d:4b:ca:6c:8e:80:62:d5:a2:a2:51:44:3e: fd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D7:9B:A4:02:6F:C0:00:F6:65:A5:A7:99:20:7F:8B:83:F4:C0:C3 X509v3 Authority Key Identifier: keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:6a:4f:97:77:ee:93:01:31:b2:0a:ff:02:4c:75:bc:f6:1a: de:3f:eb:64:e1:3c:45:7a:36:7a:ac:7d:37:25:ec:5d:45:a5: 7a:da:ab:a7:74:ca:3b:3a:31:28:b4:55:69:fb:28:3c:74:37: 6f:46:b8:47:9c:dc:f2:7b:8b:9b:27:87:b0:79:c7:30:42:81: f4:93:15:fb:ed:a5:02:79:0e:d2:7b:2f:75:99:99:0b:e5:d6: a6:b9:a7:00:0e:79:cb:24:d6:95:50:78:1c:8a:3a:fb:b7:73: d8:ab:d2:22:1b:fb:4a:e8:3c:35:3a:80:31:4d:46:20:f7:a0: 42:27:d4:ce:95:76:a0:3e:8a:3f:a3:f5:72:f2:f7:df:23:e4: 40:60:bb:3e:e1:31:f5:34:8d:7d:94:ba:ae:9d:c8:2a:88:96: b6:e3:bf:1e:5d:ee:f1:c5:36:fe:ae:b5:ec:23:68:4b:80:48: f2:1e:a1:85:1c:69:e2:bd:7e:9c:76:56:bd:11:d1:f8:15:44: 1d:e5:9b:07:ea:96:1c:4a:00:12:24:e4:b6:95:2c:21:dc:d0: f1:a1:42:a0:f8:f4:aa:93:67:3e:8e:cf:cf:6a:5d:fa:df:52: 9b:07:22:13:16:ae:f0:7d:25:50:d0:db:07:e6:f3:2d:58:2c: 56:d5:c0:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kKHM6RVO1qd9dCOI8V17MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMGNkNTBkYjQzN2M3ODk0NjRjYjY0ZGZhYmZlNDA1Y2E5 ODFiMWEwHhcNMjUxMjIwMjEwMDQ3WhcNMjUxMjIxMjEwMDQ3WjAzMTEwLwYDVQQD Eyg1OWQ3OWJhNDAyNmZjMDAwZjY2NWE1YTc5OTIwN2Y4YjgzZjRjMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3vhlDc+bnU3DLeMGbZWczcOS+9s li/N9oQa/J9cN5H/3J8fvusfPhfcAOD5AEjC82IzwYZupcKB62FlljhQOGWbrsaw DxEZP7mK/UmOcaRc4KsloQVLh1mo1tgTheV0n6VMbC/m0CHP+JvpH2QjqzbXAtSs Hce3/pa+xVdEbWshy+cUhAOPFv2Lk0SI63eRwRCs7c+A0MxxgLK7gi6RJF2zSgWZ Py5JYlCkHd0IM9jYJIU0pjRI/TEsLJEdkTUhH/pLknDxBaMHMn5RyKa78Wx9C3rM Gv8Tiw5lVAtk8PAOsFHbVdg00jR8NToIOy5jYw1LymyOgGLVoqJRRD793QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnXm6QCb8AA9mWlp5kgf4uD9MDDMB8GA1UdIwQY MBaAFIEM1Q20N8eJRky2Tfq/5AXKmBsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1F6VkRiUTN4NGxHVExaTi1yX2tCY3FZR3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lY2FhOTYtOWFmNi00Yjk5LTk1N2Yt NmI3NTk5ZmNkYzMzLzEvZ1F6VkRiUTN4NGxHVExaTi1yX2tCY3FZR3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lY2FhOTYtOWFmNi00Yjk5LTk1N2YtNmI3NTk5ZmNkYzMz LzEvZ1F6VkRiUTN4NGxHVExaTi1yX2tCY3FZR3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWpPl3fu kwExsgr/Akx1vPYa3j/rZOE8RXo2eqx9NyXsXUWletqrp3TKOzoxKLRVafsoPHQ3 b0a4R5zc8nuLmyeHsHnHMEKB9JMV++2lAnkO0nsvdZmZC+XWprmnAA55yyTWlVB4 HIo6+7dz2KvSIhv7Sug8NTqAMU1GIPegQifUzpV2oD6KP6P1cvL33yPkQGC7PuEx 9TSNfZS6rp3IKoiWtuO/Hl3u8cU2/q617CNoS4BI8h6hhRxp4r1+nHZWvRHR+BVE HeWbB+qWHEoAEiTktpUsIdzQ8aFCoPj0qpNnPo7Pz2pd+t9SmwciExau8H0lUNDb B+bzLVgsVtXAJg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:08 2025 by rpki-client