This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft File: GqGckulmd_X5b2jxygqtn6MR60U.mft (raw, json) Hash identifier: zH5mBHQ1Y2TaLfjYiBOXHuKb71nRA/roJ3QARgqh0oM= Subject key identifier: CC:96:88:0E:AA:C0:FC:E3:2F:BC:5B:AE:49:19:FB:EF:02:A1:19:FF Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45 Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45 Certificate serial: 019B4FCF16642D4D21701B9DB9CE0B9F2EFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft Manifest number: 1550 Signing time: Wed 24 Dec 2025 10:02:10 +0000 Manifest this update: Wed 24 Dec 2025 10:02:10 +0000 Manifest next update: Thu 25 Dec 2025 10:02:10 +0000 Files and hashes: 1: 9PY0CzQO7rCs7a7ACWMmh-gYUMI.roa (hash: MRgHCGLmmsjnvw7chUeEEH655TL4/pWfw0Bh/13k3RE=) 2: GqGckulmd_X5b2jxygqtn6MR60U.crl (hash: /1mWAA4SF66RVUx5CweWSJnRjn/D3zHxUcM3l6McVRI=) 3: LUxnI4gkqH7yAwk0S-IwEaOnth8.roa (hash: N89HNSm0vKdgJlvHR+QOPBS6nqPeyhUDVxUtqyfT4hM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:16:64:2d:4d:21:70:1b:9d:b9:ce:0b:9f:2e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45 Validity Not Before: Dec 24 10:02:10 2025 GMT Not After : Dec 25 10:02:10 2025 GMT Subject: CN=cc96880eaac0fce32fbc5bae4919fbef02a119ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c7:85:b1:3a:3b:bf:8a:e8:04:14:09:71:cf: 16:3b:c4:eb:bd:bb:61:43:5b:c6:f7:4b:b1:bf:3f: aa:da:0c:92:d2:40:6a:b8:a4:b0:8b:ce:af:50:96: a9:51:5c:e8:a4:c7:c9:12:86:c0:69:0b:6a:cc:4f: 2d:0b:f7:4f:98:72:88:f7:3c:27:5f:e5:09:d3:61: 21:af:86:2f:aa:62:67:15:fc:56:81:18:36:bc:5d: 05:d6:1d:83:8a:c9:d3:a5:e1:f7:a7:5e:b1:83:7b: bc:b4:2b:50:15:96:0b:78:f1:e4:d8:e3:e0:9a:a2: a8:9f:d9:ed:4a:b0:4e:f1:32:88:0e:77:1f:9d:bc: 2d:0d:d6:26:67:45:70:29:aa:db:af:d2:0a:0b:eb: f1:e7:48:70:9f:8d:c4:c1:26:48:fb:a9:e9:73:e6: a9:33:c6:7f:dd:5b:00:38:ac:fd:b9:82:11:ea:7c: 1a:1d:22:1d:20:09:bd:ec:65:bf:4b:97:cc:2c:f9: f8:52:7e:78:d8:9a:31:83:9c:fb:fe:e6:71:50:f0: f1:1a:97:83:e0:80:d0:66:89:f5:ae:99:1b:0d:f2: aa:ae:19:7d:fb:dc:50:38:24:d8:67:ff:09:6e:68: 69:be:28:6d:52:fe:0d:62:0c:7e:4c:75:90:f9:1f: 54:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:96:88:0E:AA:C0:FC:E3:2F:BC:5B:AE:49:19:FB:EF:02:A1:19:FF X509v3 Authority Key Identifier: keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:bf:39:cc:4e:3f:56:0f:39:86:f2:53:b1:29:10:c0:ff:19: 3f:3a:0b:5c:49:13:03:3c:95:74:8f:3c:f1:b4:9d:fa:84:9d: 52:a9:1d:e5:f9:88:08:1f:f3:13:94:14:0b:00:44:57:0d:c5: 79:c6:b4:cf:35:9e:8e:4e:3f:b5:fb:b6:f6:96:dd:b2:ed:d0: b6:d1:2e:b3:ba:0c:24:b1:30:b3:7f:7c:8e:72:a6:49:0d:1b: b0:68:83:09:02:d1:a6:68:4a:1f:93:72:d0:4f:22:1f:97:bd: f7:16:7d:df:83:6d:70:e7:fa:01:a4:2e:ff:b9:fe:09:cf:e2: 55:b8:06:3e:dc:cd:51:1a:83:f9:63:b9:f4:0e:c8:90:71:e9: 4f:40:a0:db:85:2d:f0:e6:9e:52:22:79:b7:58:f7:49:68:2d: 75:1a:f1:08:80:70:21:86:a5:06:2a:8b:c7:16:f6:3c:9e:43: f2:a6:75:3e:e8:3b:cd:2f:57:de:93:17:44:d2:ee:95:53:ae: 58:d3:42:2b:49:35:ce:2a:93:3d:11:a2:f2:db:94:95:7e:38: ac:35:e9:13:69:65:3c:15:3f:d3:fb:c3:80:f6:32:60:ef:19: ca:20:df:8b:08:ec:30:e9:24:7c:7c:b2:58:d4:24:76:fc:10: 8d:e8:20:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzxZkLU0hcBuduc4Lny77MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYTE5YzkyZTk2Njc3ZjVmOTZmNjhmMWNhMGFhZDlmYTMx MWViNDUwHhcNMjUxMjI0MTAwMjEwWhcNMjUxMjI1MTAwMjEwWjAzMTEwLwYDVQQD EyhjYzk2ODgwZWFhYzBmY2UzMmZiYzViYWU0OTE5ZmJlZjAyYTExOWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyseFsTo7v4roBBQJcc8WO8Trvbth Q1vG90uxvz+q2gyS0kBquKSwi86vUJapUVzopMfJEobAaQtqzE8tC/dPmHKI9zwn X+UJ02Ehr4YvqmJnFfxWgRg2vF0F1h2DisnTpeH3p16xg3u8tCtQFZYLePHk2OPg mqKon9ntSrBO8TKIDncfnbwtDdYmZ0VwKarbr9IKC+vx50hwn43EwSZI+6npc+ap M8Z/3VsAOKz9uYIR6nwaHSIdIAm97GW/S5fMLPn4Un542Joxg5z7/uZxUPDxGpeD 4IDQZon1rpkbDfKqrhl9+9xQOCTYZ/8JbmhpvihtUv4NYgx+THWQ+R9UzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyWiA6qwPzjL7xbrkkZ++8CoRn/MB8GA1UdIwQY MBaAFBqhnJLpZnf1+W9o8coKrZ+jEetFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3FHY2t1bG1kX1g1YjJqeHlncXRuNk1SNjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wMGFkYjAtODkwZC00N2FkLWExOGMt NGFkMGFiZWMyNzVlLzEvR3FHY2t1bG1kX1g1YjJqeHlncXRuNk1SNjBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8wMGFkYjAtODkwZC00N2FkLWExOGMtNGFkMGFiZWMyNzVl LzEvR3FHY2t1bG1kX1g1YjJqeHlncXRuNk1SNjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu785zE4/ Vg85hvJTsSkQwP8ZPzoLXEkTAzyVdI888bSd+oSdUqkd5fmICB/zE5QUCwBEVw3F eca0zzWejk4/tfu29pbdsu3QttEus7oMJLEws398jnKmSQ0bsGiDCQLRpmhKH5Ny 0E8iH5e99xZ934NtcOf6AaQu/7n+Cc/iVbgGPtzNURqD+WO59A7IkHHpT0Cg24Ut 8OaeUiJ5t1j3SWgtdRrxCIBwIYalBiqLxxb2PJ5D8qZ1Pug7zS9X3pMXRNLulVOu WNNCK0k1ziqTPRGi8tuUlX44rDXpE2llPBU/0/vDgPYyYO8ZyiDfiwjsMOkkfHyy WNQkdvwQjeggWg== -----END CERTIFICATE-----Generated at Wed Dec 24 16:19:00 2025 by rpki-client