This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json) Hash identifier: BRAUrk96PlCwlCXobnwT1CyQ5G9Qs1MjMsF9C1dRVZ0= Subject key identifier: 61:19:E2:71:BD:9B:19:77:51:27:8C:40:09:08:A2:3A:37:7F:D5:3B Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d Certificate serial: 019B3E6D4FC886FB6DB00E3AEC79FFA57E29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft Manifest number: 10CC Signing time: Sun 21 Dec 2025 01:01:49 +0000 Manifest this update: Sun 21 Dec 2025 01:01:49 +0000 Manifest next update: Mon 22 Dec 2025 01:01:49 +0000 Files and hashes: 1: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: ka+PHwd2s8t+0OcZE32zfspGNeT7Vd597wvpvinvVHA=) 2: qWiRXpCL0NKtXzFBLcgeaF0mM4A.roa (hash: V0gkUhFHDtKhWrN/3cVBozf0t4RmZJghnQqebhSHl+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:4f:c8:86:fb:6d:b0:0e:3a:ec:79:ff:a5:7e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d Validity Not Before: Dec 21 01:01:49 2025 GMT Not After : Dec 22 01:01:49 2025 GMT Subject: CN=6119e271bd9b197751278c400908a23a377fd53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cb:4b:38:4e:28:49:62:ed:b9:b0:c5:8d:45: 36:48:72:1f:30:10:1b:a6:ba:07:fc:2b:c7:f9:d0: c3:0c:7d:65:56:41:02:05:36:f9:c8:13:f8:50:96: d4:f6:9f:68:2a:a2:d9:b7:02:a3:0a:58:05:2d:3b: 43:ad:b0:d4:71:8c:1d:a3:0c:d6:c0:4a:35:65:f3: 61:89:0e:cc:63:cf:7b:f2:98:06:d4:ac:2e:38:88: e1:4f:da:55:51:ca:d5:db:70:02:20:59:a0:7c:93: 93:53:5e:db:0c:7f:1e:71:c3:26:32:72:af:30:c8: 75:a7:f2:15:0c:24:df:0c:ba:72:d9:19:c9:68:d1: 52:de:bb:57:40:8b:8a:3b:46:b7:fb:bf:86:fc:a8: 20:e9:93:a4:f1:68:d4:4a:99:6c:56:60:8b:4f:16: 2e:e7:4c:b5:51:fb:d8:3a:a1:63:1c:a2:4b:61:d9: 87:61:56:f4:40:a9:2b:a8:ea:0d:25:84:e5:7a:ba: a9:fd:20:9b:43:e7:21:f0:cb:db:c1:dc:78:a2:f5: e4:e7:22:98:7e:ea:7c:1d:00:76:4c:af:e8:21:70: e5:43:cc:f8:dd:e9:f3:cc:2d:fe:d7:7d:94:44:58: a9:21:16:36:54:3b:20:a5:c3:03:06:4d:f1:38:1d: f5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:19:E2:71:BD:9B:19:77:51:27:8C:40:09:08:A2:3A:37:7F:D5:3B X509v3 Authority Key Identifier: keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:43:bb:72:22:b4:79:57:49:72:c8:2e:0c:a8:0e:c5:9d:b6: 36:3d:0d:5b:98:5f:d3:d0:10:eb:38:7a:e4:88:57:d3:3a:ec: 5e:c3:8c:75:6d:44:8f:c9:be:28:c1:e3:a6:37:3e:78:ad:7a: 15:1e:b0:4b:16:95:83:a9:b3:85:fc:1b:53:e9:76:4e:46:0d: e4:63:11:a2:cd:18:df:33:82:d6:a0:33:f1:5f:6b:91:54:b5: d7:1a:44:71:27:51:9e:68:f6:cc:af:c3:cb:2c:0a:2b:75:91: 65:a0:f5:b2:00:b2:5b:45:9f:94:aa:29:2f:8e:06:93:82:97: c5:9a:9e:07:28:35:dd:5e:29:5e:52:ee:62:f2:e8:d1:06:3b: 86:35:22:eb:67:0f:70:4b:06:b8:17:e8:76:03:bb:09:80:e3: f4:31:d1:3c:fa:4c:1e:d9:f8:44:3a:00:ad:97:86:2c:e7:ff: c3:fd:e0:6b:6c:2f:65:f2:0c:df:11:08:77:f0:18:d0:68:36: 77:64:0f:47:33:38:32:de:6a:b9:c2:91:61:14:e8:83:69:85: 1e:aa:65:b6:4a:31:cd:44:99:0a:ef:76:d1:c6:39:4a:2a:41: 40:79:75:12:a4:35:de:f9:63:dc:3d:c8:9f:56:ca:04:dc:f0: f1:22:99:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bU/IhvttsA467Hn/pX4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MGVjN2FhYjIwZmM0YzgwMWM2Nzk2M2U1OWU0ZjkzNjAw ZTQwMWQwHhcNMjUxMjIxMDEwMTQ5WhcNMjUxMjIyMDEwMTQ5WjAzMTEwLwYDVQQD Eyg2MTE5ZTI3MWJkOWIxOTc3NTEyNzhjNDAwOTA4YTIzYTM3N2ZkNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmctLOE4oSWLtubDFjUU2SHIfMBAb proH/CvH+dDDDH1lVkECBTb5yBP4UJbU9p9oKqLZtwKjClgFLTtDrbDUcYwdowzW wEo1ZfNhiQ7MY8978pgG1KwuOIjhT9pVUcrV23ACIFmgfJOTU17bDH8eccMmMnKv MMh1p/IVDCTfDLpy2RnJaNFS3rtXQIuKO0a3+7+G/Kgg6ZOk8WjUSplsVmCLTxYu 50y1UfvYOqFjHKJLYdmHYVb0QKkrqOoNJYTlerqp/SCbQ+ch8Mvbwdx4ovXk5yKY fup8HQB2TK/oIXDlQ8z43enzzC3+132URFipIRY2VDsgpcMDBk3xOB31/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEZ4nG9mxl3USeMQAkIojo3f9U7MB8GA1UdIwQY MBaAFBkOx6qyD8TIAcZ5Y+WeT5NgDkAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgt ZGFiOWI0ODNjMTIzLzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgtZGFiOWI0ODNjMTIz LzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkO7ciK0 eVdJcsguDKgOxZ22Nj0NW5hf09AQ6zh65IhX0zrsXsOMdW1Ej8m+KMHjpjc+eK16 FR6wSxaVg6mzhfwbU+l2TkYN5GMRos0Y3zOC1qAz8V9rkVS11xpEcSdRnmj2zK/D yywKK3WRZaD1sgCyW0WflKopL44Gk4KXxZqeByg13V4pXlLuYvLo0QY7hjUi62cP cEsGuBfodgO7CYDj9DHRPPpMHtn4RDoArZeGLOf/w/3ga2wvZfIM3xEId/AY0Gg2 d2QPRzM4Mt5qucKRYRTog2mFHqpltkoxzUSZCu920cY5SipBQHl1EqQ13vlj3D3I n1bKBNzw8SKZlA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:58:05 2025 by rpki-client