This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft File: GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json) Hash identifier: tjsHuTR6RJL51PB6P21Psk7yPCA90MTc0uzQ6z3aG+0= Subject key identifier: 9F:CD:CF:4B:45:34:DF:C2:79:B0:62:65:24:C8:C0:D5:3D:E1:5E:08 Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8 Certificate issuer: /CN=1903647efb243662e57e61d4ec45b4a25a37eac8 Certificate serial: 019B42B70F7420A0AFF5974304B96076855C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 21:00:51 +0000 Manifest this update: Sun 21 Dec 2025 21:00:51 +0000 Manifest next update: Mon 22 Dec 2025 21:00:51 +0000 Files and hashes: 1: 7mu7dSdOdivtbUb5Ar1MUUCeTYk.roa (hash: q+lzjmvfQiLwsG4m5ztsli480LBdARkn+qQlJRAHsqg=) 2: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: j3Z9+9iF27zNNH8hi8nARp9wrYrZ2yDbFgGsBTx60h0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:0f:74:20:a0:af:f5:97:43:04:b9:60:76:85:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8 Validity Not Before: Dec 21 21:00:51 2025 GMT Not After : Dec 22 21:00:51 2025 GMT Subject: CN=9fcdcf4b4534dfc279b0626524c8c0d53de15e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:db:31:9f:bb:ac:4f:1d:95:68:0f:d2:f1:1a: 12:93:75:1b:31:7f:fe:a3:85:2a:07:50:72:b7:4a: 2f:72:e8:f5:83:9f:dd:ab:03:15:1e:6a:96:92:72: e9:5a:37:35:54:48:8a:56:60:04:53:c4:18:e4:fe: 02:6e:e8:53:69:e0:e8:88:45:43:32:9f:9f:d9:b7: 61:70:69:39:78:bf:2b:44:ff:45:e3:50:a4:f3:68: 55:dc:fa:71:f1:6d:b1:f8:56:83:c8:e4:e7:72:d6: 6b:04:ca:d0:86:fc:18:5a:b9:96:3b:2b:73:41:8c: 59:cd:6b:09:8c:78:49:d4:2f:53:e2:ab:92:23:de: 91:4e:0a:3b:21:5b:8a:ee:ba:f3:fb:56:a1:85:7c: bf:f4:5b:7a:39:be:53:f0:93:e6:8d:6e:1a:c3:68: 9d:5e:7b:be:41:b1:f9:2a:e6:db:42:c1:81:d0:a3: 5a:b2:81:3e:dc:b7:95:f0:b1:0a:f7:29:4e:3d:cc: 42:0b:32:d7:d5:ae:c7:7d:28:60:c0:6a:87:5e:ce: b8:6e:d7:04:a3:35:88:db:bf:79:7c:32:61:02:85: d2:eb:cf:2b:b8:4c:11:62:73:e6:a9:1e:88:83:fe: 7f:22:08:df:55:b9:f0:c1:5c:3d:24:8c:01:c2:05: 4d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CD:CF:4B:45:34:DF:C2:79:B0:62:65:24:C8:C0:D5:3D:E1:5E:08 X509v3 Authority Key Identifier: keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a0:67:8c:14:20:ef:00:ef:82:59:81:38:f8:55:36:f8:68: 84:b1:c2:6a:0c:54:80:00:e1:32:68:d2:70:3c:dc:80:af:82: 3e:13:4d:d4:a1:d6:b7:19:71:d3:b0:d6:54:27:cf:28:30:4e: 8c:8b:4b:bb:3f:ff:8b:fb:cb:8d:f2:9f:24:1d:1a:c2:e4:bb: ae:b1:8a:a4:40:9c:7a:4c:2a:13:80:9c:35:f0:a5:c4:c6:02: 0e:bb:ea:05:bb:68:c9:58:d3:27:6a:e2:bc:11:cf:dc:63:e3: 80:e8:2c:93:33:4e:64:f3:dc:78:5c:90:1b:13:1e:e4:70:6e: 93:fe:a2:9b:38:05:9f:05:d8:e6:d1:fd:86:de:4e:3d:d1:73: 06:5e:75:78:87:48:5f:ee:c7:87:ff:41:4c:55:c7:4a:6c:1c: 69:12:a7:df:1e:4a:5e:b1:6f:54:3a:77:de:d2:4b:e6:48:e5: 96:20:d6:e0:1a:6b:03:b2:45:c5:6c:58:f6:2f:8c:93:76:68: 02:16:fd:52:fe:f6:72:d5:13:dd:36:9c:53:0f:f9:9c:69:39: 87:ba:fb:62:6a:16:68:84:a9:ec:72:e2:83:78:c1:77:50:74: d4:de:fc:ef:b4:fb:f9:45:fc:b2:ef:69:4f:7c:ce:44:ed:ad: 21:ea:d5:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtw90IKCv9ZdDBLlgdoVcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDM2NDdlZmIyNDM2NjJlNTdlNjFkNGVjNDViNGEyNWEz N2VhYzgwHhcNMjUxMjIxMjEwMDUxWhcNMjUxMjIyMjEwMDUxWjAzMTEwLwYDVQQD Eyg5ZmNkY2Y0YjQ1MzRkZmMyNzliMDYyNjUyNGM4YzBkNTNkZTE1ZTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydsxn7usTx2VaA/S8RoSk3UbMX/+ o4UqB1Byt0ovcuj1g5/dqwMVHmqWknLpWjc1VEiKVmAEU8QY5P4CbuhTaeDoiEVD Mp+f2bdhcGk5eL8rRP9F41Ck82hV3Ppx8W2x+FaDyOTnctZrBMrQhvwYWrmWOytz QYxZzWsJjHhJ1C9T4quSI96RTgo7IVuK7rrz+1ahhXy/9Ft6Ob5T8JPmjW4aw2id Xnu+QbH5KubbQsGB0KNasoE+3LeV8LEK9ylOPcxCCzLX1a7HfShgwGqHXs64btcE ozWI2795fDJhAoXS688ruEwRYnPmqR6Ig/5/IgjfVbnwwVw9JIwBwgVN+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/Nz0tFNN/CebBiZSTIwNU94V4IMB8GA1UdIwQY MBaAFBkDZH77JDZi5X5h1OxFtKJaN+rIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FOa2Z2c2tObUxsZm1IVTdFVzBvbG8zNnNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82ZWVmZWUtYzlkZS00NzI4LWFjYTgt YTRjMzQzMmZiMDBmLzEvR1FOa2Z2c2tObUxsZm1IVTdFVzBvbG8zNnNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS82ZWVmZWUtYzlkZS00NzI4LWFjYTgtYTRjMzQzMmZiMDBm LzEvR1FOa2Z2c2tObUxsZm1IVTdFVzBvbG8zNnNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6BnjBQg 7wDvglmBOPhVNvhohLHCagxUgADhMmjScDzcgK+CPhNN1KHWtxlx07DWVCfPKDBO jItLuz//i/vLjfKfJB0awuS7rrGKpECcekwqE4CcNfClxMYCDrvqBbtoyVjTJ2ri vBHP3GPjgOgskzNOZPPceFyQGxMe5HBuk/6imzgFnwXY5tH9ht5OPdFzBl51eIdI X+7Hh/9BTFXHSmwcaRKn3x5KXrFvVDp33tJL5kjlliDW4BprA7JFxWxY9i+Mk3Zo Ahb9Uv72ctUT3TacUw/5nGk5h7r7YmoWaISp7HLig3jBd1B01N7877T7+UX8su9p T3zORO2tIerVXQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:26:30 2025 by rpki-client