This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft File: GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json) Hash identifier: 3vOXK6reQK5RRzEbi1NHYgzYYvSiDtRYBKOiWJFZ1C8= Subject key identifier: 33:28:C2:4B:AC:68:85:F7:8E:C4:3A:3F:80:EF:27:0C:46:67:5F:88 Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96 Certificate issuer: /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96 Certificate serial: 019B548622885CB628BF3D660A47F6E572EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft Manifest number: 09FE Signing time: Thu 25 Dec 2025 08:00:35 +0000 Manifest this update: Thu 25 Dec 2025 08:00:35 +0000 Manifest next update: Fri 26 Dec 2025 08:00:35 +0000 Files and hashes: 1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: mFDD8aTwNzdUf8NbXaBqKDJ6s4HcIaOfM0HAy85wSPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:22:88:5c:b6:28:bf:3d:66:0a:47:f6:e5:72:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96 Validity Not Before: Dec 25 08:00:35 2025 GMT Not After : Dec 26 08:00:35 2025 GMT Subject: CN=3328c24bac6885f78ec43a3f80ef270c46675f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b1:6e:fd:9c:b5:ea:c1:6a:86:38:8a:86:1b: 6c:7e:e0:4f:52:8d:b5:2d:83:78:95:9e:fd:9a:d4: e3:00:86:2f:c1:7a:df:f7:f2:c9:cf:e4:ab:a4:9b: c9:f0:bd:fd:a9:7c:6f:d5:96:90:6e:af:bf:8b:1d: ea:b3:42:18:3a:59:ba:73:ea:ed:b5:18:e3:7a:74: ec:54:e6:82:eb:e1:de:b2:cf:14:60:92:43:d8:6c: fa:45:14:d9:21:a3:10:81:1e:45:86:cb:14:f4:ee: a9:b1:e7:08:b0:49:41:e3:b4:cb:81:8a:3e:aa:62: f6:a0:37:b6:40:2f:ba:1d:e3:75:d1:cd:a2:50:bd: c0:d4:92:c1:b2:1a:15:25:0a:02:b8:7e:57:f5:7e: 85:96:67:9c:fb:4d:ea:26:73:73:35:b0:3d:6c:7c: 39:13:70:bf:2b:f3:25:6c:8e:d1:ea:11:a9:28:1a: c3:f6:55:3f:73:b0:57:c1:bb:b7:04:52:8c:87:c6: 38:58:80:dd:3e:07:ee:f9:0d:e5:cb:1b:80:52:93: 32:07:2b:50:0c:b6:5e:bb:fd:3a:68:45:0e:58:50: 23:8f:95:26:d3:0e:2d:27:24:31:de:17:ef:65:20: 7d:5e:a9:9f:55:66:d9:33:07:b2:fd:c3:16:d9:28: 85:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:28:C2:4B:AC:68:85:F7:8E:C4:3A:3F:80:EF:27:0C:46:67:5F:88 X509v3 Authority Key Identifier: keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:23:23:0a:02:e1:81:9c:92:e7:e2:2a:e0:ad:6b:a3:0c:e1: 15:76:7f:bc:03:79:98:3b:74:91:60:8a:c5:07:1d:52:7a:15: 2c:bc:72:8a:14:bd:dc:32:ae:e4:3a:26:37:7f:ad:e2:37:92: ed:2d:8c:35:03:90:85:5d:c0:d8:9d:fc:2c:48:fc:e8:2a:a5: 71:4b:5a:2b:6a:fd:0b:1f:70:a8:74:6c:60:69:72:70:fe:0b: 75:4c:4d:2a:86:51:ee:8c:e3:1c:db:f1:7b:be:b0:7f:66:4a: 80:ff:e8:a7:1b:3c:1f:8f:a3:2c:3d:dd:0a:d7:a8:59:ec:e6: fb:c9:3a:bd:c6:4b:de:be:23:6c:a2:f4:b1:c6:37:e9:45:09: 71:b0:f3:e9:0b:cf:f7:8c:81:c5:98:1b:99:3d:e6:b8:ce:ed: 1a:21:36:25:ce:a0:6e:a7:c2:8b:fb:86:77:3f:81:1f:e9:90: 75:c6:30:ce:a5:e3:97:5a:58:65:bb:fe:f1:f3:f8:48:ce:a4: f6:37:be:5b:82:a4:be:db:9c:37:d3:7a:30:70:43:ac:b9:20: 2a:3c:29:66:72:50:28:0e:0a:fc:08:0d:6f:cb:00:7f:08:4d: e1:24:22:48:db:3b:05:be:7f:b3:84:ee:13:c4:69:37:4f:e0: cb:5e:6c:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhiKIXLYovz1mCkf25XLuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDlmNjBjOGI4NWVmZWQzNjFkZjViNmI1MWM5ZmVkYWUx YzdmOTYwHhcNMjUxMjI1MDgwMDM1WhcNMjUxMjI2MDgwMDM1WjAzMTEwLwYDVQQD EygzMzI4YzI0YmFjNjg4NWY3OGVjNDNhM2Y4MGVmMjcwYzQ2Njc1Zjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLFu/Zy16sFqhjiKhhtsfuBPUo21 LYN4lZ79mtTjAIYvwXrf9/LJz+SrpJvJ8L39qXxv1ZaQbq+/ix3qs0IYOlm6c+rt tRjjenTsVOaC6+Hess8UYJJD2Gz6RRTZIaMQgR5FhssU9O6psecIsElB47TLgYo+ qmL2oDe2QC+6HeN10c2iUL3A1JLBshoVJQoCuH5X9X6Flmec+03qJnNzNbA9bHw5 E3C/K/MlbI7R6hGpKBrD9lU/c7BXwbu3BFKMh8Y4WIDdPgfu+Q3lyxuAUpMyBytQ DLZeu/06aEUOWFAjj5Um0w4tJyQx3hfvZSB9XqmfVWbZMwey/cMW2SiFrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMowkusaIX3jsQ6P4DvJwxGZ1+IMB8GA1UdIwQY MBaAFBkJ9gyLhe/tNh31trUcn+2uHH+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy83MDIxZTItZWZmZS00MTYzLThiYjMt NThlN2RiMzBlYTQ0LzEvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy83MDIxZTItZWZmZS00MTYzLThiYjMtNThlN2RiMzBlYTQ0 LzEvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCMjCgLh gZyS5+Iq4K1rowzhFXZ/vAN5mDt0kWCKxQcdUnoVLLxyihS93DKu5DomN3+t4jeS 7S2MNQOQhV3A2J38LEj86CqlcUtaK2r9Cx9wqHRsYGlycP4LdUxNKoZR7ozjHNvx e76wf2ZKgP/opxs8H4+jLD3dCteoWezm+8k6vcZL3r4jbKL0scY36UUJcbDz6QvP 94yBxZgbmT3muM7tGiE2Jc6gbqfCi/uGdz+BH+mQdcYwzqXjl1pYZbv+8fP4SM6k 9je+W4KkvtucN9N6MHBDrLkgKjwpZnJQKA4K/AgNb8sAfwhN4SQiSNs7Bb5/s4Tu E8RpN0/gy15sBw== -----END CERTIFICATE-----Generated at Thu Dec 25 11:14:45 2025 by rpki-client