This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft File: GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json) Hash identifier: kE0vnLNUMzv1tbu8ILn+fwldKrQa3EtHNtdBthCh1Aw= Subject key identifier: 12:76:5A:AA:40:8E:38:2E:46:3A:B3:7A:69:FE:59:38:65:C4:A8:23 Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d Certificate serial: 019B3D910B81A5871D6134092A669061724D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft Manifest number: 0F3F Signing time: Sat 20 Dec 2025 21:01:14 +0000 Manifest this update: Sat 20 Dec 2025 21:01:14 +0000 Manifest next update: Sun 21 Dec 2025 21:01:14 +0000 Files and hashes: 1: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: vTyKoJ9jHTVDAAOGOND2yqsVimF4ObQdWZkosXOchvg=) 2: HGA6jjVB7UclmIMciEeXUBcTxyQ.roa (hash: blRYsuCoLjuXHy8qGKJB2iPcbmUbbGdoaMO6Z5/ynCQ=) 3: kZQj5c3qTbDNst6FPmlVFTJBwU0.roa (hash: OVYrhsG4NKJtVB+RFz2IORzGEYajNg4HBNGBwkD+aFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:0b:81:a5:87:1d:61:34:09:2a:66:90:61:72:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d Validity Not Before: Dec 20 21:01:14 2025 GMT Not After : Dec 21 21:01:14 2025 GMT Subject: CN=12765aaa408e382e463ab37a69fe593865c4a823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:62:8d:c4:04:af:88:fe:e0:8f:9d:78:dc:28: b8:0a:69:46:90:36:93:83:f4:f0:d3:87:2f:88:52: 35:18:81:53:f3:fe:34:f0:ed:c1:96:96:8c:f8:78: 75:77:14:f0:5b:d7:82:33:8f:e2:a9:78:34:26:c3: bc:cd:f3:57:35:e9:ed:7f:bb:60:77:bf:a5:91:d4: ff:05:76:f9:60:61:19:8d:d3:c7:9c:fb:32:36:72: e2:3d:04:91:d3:a5:c9:1b:38:0e:08:7d:39:3b:0d: 9a:91:3a:79:9c:69:a7:1d:78:50:ee:a7:3b:e1:3e: 40:3e:c5:d6:6b:93:73:7b:58:f0:1f:1e:76:00:3e: 4f:cd:86:a9:57:00:b4:22:36:ff:ab:f0:b9:1e:22: 77:a8:d4:de:02:d8:2c:36:f1:ca:1c:5e:06:43:c7: b0:ec:f7:a0:76:71:b4:11:82:c3:5d:70:3e:44:4c: 05:8a:02:ef:ca:c5:f8:ee:6b:fc:74:5e:88:f6:93: 29:42:0d:bc:bb:38:a3:f1:23:d3:ff:4a:6a:01:36: d6:56:5a:b8:99:95:82:06:2f:00:80:6e:19:6a:c1: 3d:9a:e2:ef:9c:94:3a:77:e9:23:3d:df:cc:82:ba: 69:8a:63:4f:ce:c2:8e:19:3b:31:2d:a9:a2:2d:f7: f1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:76:5A:AA:40:8E:38:2E:46:3A:B3:7A:69:FE:59:38:65:C4:A8:23 X509v3 Authority Key Identifier: keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:35:21:31:a9:08:f8:bd:69:48:d0:bf:f4:31:60:a5:f7:a2: 5f:77:a1:76:ee:2b:ff:0a:fa:b0:89:21:65:19:77:a3:0b:81: e2:de:b6:be:9b:fa:63:ee:0d:05:dd:9b:9e:04:a9:73:2e:a9: b9:79:e2:30:b4:e8:f9:10:5e:6b:25:c7:cf:25:cd:4c:bf:03: 31:d8:45:8a:0d:d4:f0:bb:b8:38:a7:3a:6f:24:b1:be:f2:ca: 01:99:09:9c:42:c0:44:d9:14:71:b2:b4:14:9b:49:9a:78:75: e6:b9:83:0a:55:b8:de:bd:c3:45:dd:51:e0:fa:34:0f:ed:c5: 6c:eb:29:df:0b:67:5f:ee:f4:17:8d:02:4a:59:34:10:dd:3f: 50:76:58:6a:49:60:f9:50:e1:e9:5b:e2:0f:61:d0:ad:a4:bf: bc:f8:e0:8c:7f:9a:51:7a:3e:d0:d8:3e:55:e4:81:e3:03:df: 78:52:9d:a9:65:61:c4:08:33:d1:58:8a:49:4c:f6:38:74:62: 83:bd:f1:d9:73:e5:5f:1c:d7:8b:9c:0c:bf:39:89:12:8a:d5: 5f:4b:b5:3b:7a:9c:54:08:3f:ad:85:1a:ad:61:1e:80:0c:17: 75:c7:db:e3:a0:f5:ef:ad:a2:db:65:98:af:db:c2:e5:4c:80: 77:ff:d7:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kQuBpYcdYTQJKmaQYXJNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYTBhMzI4YzZmZTBmMWJjYTVlNjU5OTA0MmRmZjU5ZTUx M2IyNWQwHhcNMjUxMjIwMjEwMTE0WhcNMjUxMjIxMjEwMTE0WjAzMTEwLwYDVQQD EygxMjc2NWFhYTQwOGUzODJlNDYzYWIzN2E2OWZlNTkzODY1YzRhODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmKNxASviP7gj5143Ci4CmlGkDaT g/Tw04cviFI1GIFT8/408O3BlpaM+Hh1dxTwW9eCM4/iqXg0JsO8zfNXNentf7tg d7+lkdT/BXb5YGEZjdPHnPsyNnLiPQSR06XJGzgOCH05Ow2akTp5nGmnHXhQ7qc7 4T5APsXWa5Nze1jwHx52AD5PzYapVwC0Ijb/q/C5HiJ3qNTeAtgsNvHKHF4GQ8ew 7PegdnG0EYLDXXA+REwFigLvysX47mv8dF6I9pMpQg28uzij8SPT/0pqATbWVlq4 mZWCBi8AgG4ZasE9muLvnJQ6d+kjPd/MgrppimNPzsKOGTsxLamiLffxMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJ2WqpAjjguRjqzemn+WThlxKgjMB8GA1UdIwQY MBaAFBqgoyjG/g8byl5lmQQt/1nlE7JdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNDRkMjQtMmUxMS00NjZkLThhZGUt MzhlODQ2MTQ4Yzc4LzEvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zNDRkMjQtMmUxMS00NjZkLThhZGUtMzhlODQ2MTQ4Yzc4 LzEvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjUhMakI +L1pSNC/9DFgpfeiX3ehdu4r/wr6sIkhZRl3owuB4t62vpv6Y+4NBd2bngSpcy6p uXniMLTo+RBeayXHzyXNTL8DMdhFig3U8Lu4OKc6bySxvvLKAZkJnELARNkUcbK0 FJtJmnh15rmDClW43r3DRd1R4Po0D+3FbOsp3wtnX+70F40CSlk0EN0/UHZYaklg +VDh6VviD2HQraS/vPjgjH+aUXo+0Ng+VeSB4wPfeFKdqWVhxAgz0ViKSUz2OHRi g73x2XPlXxzXi5wMvzmJEorVX0u1O3qcVAg/rYUarWEegAwXdcfb46D1762i22WY r9vC5UyAd//XYQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:43:48 2025 by rpki-client