This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft File: GQAdVXoGmNrXfEs-3fKn02tyqwA.mft (raw, json) Hash identifier: Wgm5j79iR6R/4uAWsBLFOkvLKbi4R00xyQDp9Ez7zkQ= Subject key identifier: E6:B6:B4:E1:2D:56:D7:70:4C:80:D9:42:88:E8:0F:FC:3C:36:A7:44 Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00 Certificate issuer: /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00 Certificate serial: 019B2F671F47192FBF618B97CB8FC64E1FFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft Manifest number: 06C1 Signing time: Thu 18 Dec 2025 03:00:45 +0000 Manifest this update: Thu 18 Dec 2025 03:00:45 +0000 Manifest next update: Fri 19 Dec 2025 03:00:45 +0000 Files and hashes: 1: GQAdVXoGmNrXfEs-3fKn02tyqwA.crl (hash: oZmIibcJeyy/A7FRwfMYBhMbyD3LbN2gMWl91y0iC6I=) 2: _Y3WU0rL_Z5yMospeFK2kheOtgM.roa (hash: qqDo+PPhN0qvkLG+7KSZ3FS8hY7kC2hitlOvSMnc4pQ=) 3: cqleo2TkA-Dax9YzlbPC4oCeXks.roa (hash: WDLbfAf8uLhRV57uZSklRDXJ7tKTUOclgtS0od1R4M4=) 4: spoNsBquI5wjgn7gu8viZ3BO3l4.roa (hash: G+9zvvKyQogrHpfux1dzt3BVRrnfOK8LLcMasK0KKtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:1f:47:19:2f:bf:61:8b:97:cb:8f:c6:4e:1f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00 Validity Not Before: Dec 18 03:00:45 2025 GMT Not After : Dec 19 03:00:45 2025 GMT Subject: CN=e6b6b4e12d56d7704c80d94288e80ffc3c36a744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d6:34:8f:ec:ba:0e:8c:fe:f5:20:5a:ab:0b: 2a:26:cc:92:2b:2e:d4:6e:f6:1a:d7:42:c0:e7:bb: b6:d3:26:3d:77:e3:38:6a:ec:24:44:2e:da:28:d6: 67:86:d5:d6:0f:a5:9a:dc:a1:31:47:39:da:fb:8e: 1c:bb:3e:5d:9a:65:fc:e0:3d:fd:e2:87:ef:23:75: 20:18:bf:14:8b:77:3f:f7:2c:f7:a2:4b:f4:bb:ec: 36:e9:16:82:ea:f6:74:68:79:8e:a5:a0:b7:a1:45: d2:50:0f:6d:26:8a:bd:34:80:54:0d:15:0a:50:d2: c7:e8:9a:62:ac:56:4a:69:16:34:7c:33:15:f0:0c: 8f:e4:99:0f:1d:4f:f5:c7:88:65:74:c8:31:a2:21: d3:7f:92:cc:4d:10:d1:f6:3f:dd:36:e9:ce:8e:4d: 6b:99:0a:97:dd:a2:b6:53:28:d4:c8:d5:0b:7f:07: cf:03:9a:68:6a:9d:0f:0a:bd:1e:8b:ac:8c:7a:fc: 88:d4:0a:0a:39:10:fe:b9:c0:c3:e3:d5:ff:92:d8: 83:33:60:83:20:18:2a:6b:d8:37:ee:2e:cd:33:f2: d7:08:ee:d6:21:83:5c:e3:65:af:22:bd:e5:10:59: 4f:b4:ac:d1:16:6d:d0:27:bb:de:4b:c6:9b:f9:81: dc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B6:B4:E1:2D:56:D7:70:4C:80:D9:42:88:E8:0F:FC:3C:36:A7:44 X509v3 Authority Key Identifier: keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:7d:78:1f:bb:75:72:b8:21:8e:80:eb:89:42:40:ae:96:e6: 7f:09:72:b2:fc:c5:55:b6:6a:c0:bf:92:7e:4e:03:22:fc:b4: c8:00:af:4b:e1:18:23:d4:35:eb:e2:f6:c5:0c:0a:b9:d4:b1: 2e:b1:9e:f9:df:9b:bf:7c:d3:ba:f2:e6:cc:25:26:88:6f:93: 2d:3c:ab:89:be:a4:cc:91:84:46:dc:1c:63:c6:0f:73:71:df: 44:b6:49:a0:8d:b2:04:0b:e4:8b:c0:58:4e:03:e1:0b:10:18: a5:8c:71:1c:c8:71:21:41:3f:07:ab:ac:7e:bd:ed:cc:79:33: af:96:fc:2d:6e:70:55:f0:fa:fd:25:88:21:cb:02:99:a2:2f: 52:57:f6:40:43:04:f4:a2:e1:e3:07:7d:83:6f:ea:8e:22:d2: 8e:45:89:09:8b:b9:12:df:8a:26:c6:65:90:cb:d7:84:00:cd: 9b:80:05:60:77:84:d6:99:36:71:eb:c8:3c:4c:e2:dc:cb:b3: fc:5d:51:ad:bf:4e:3e:ce:35:7c:95:1f:b3:7b:b5:e3:94:eb: bd:fb:6c:70:e2:89:c2:b3:0a:8d:bf:ca:0c:e8:b9:ab:ae:24: 6c:38:00:42:d5:c9:80:81:55:ed:04:3d:c6:d6:02:e0:44:39: 7b:76:ca:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZx9HGS+/YYuXy4/GTh/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDAxZDU1N2EwNjk4ZGFkNzdjNGIzZWRkZjJhN2QzNmI3 MmFiMDAwHhcNMjUxMjE4MDMwMDQ1WhcNMjUxMjE5MDMwMDQ1WjAzMTEwLwYDVQQD EyhlNmI2YjRlMTJkNTZkNzcwNGM4MGQ5NDI4OGU4MGZmYzNjMzZhNzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNY0j+y6Doz+9SBaqwsqJsySKy7U bvYa10LA57u20yY9d+M4auwkRC7aKNZnhtXWD6Wa3KExRzna+44cuz5dmmX84D39 4ofvI3UgGL8Ui3c/9yz3okv0u+w26RaC6vZ0aHmOpaC3oUXSUA9tJoq9NIBUDRUK UNLH6JpirFZKaRY0fDMV8AyP5JkPHU/1x4hldMgxoiHTf5LMTRDR9j/dNunOjk1r mQqX3aK2UyjUyNULfwfPA5poap0PCr0ei6yMevyI1AoKORD+ucDD49X/ktiDM2CD IBgqa9g37i7NM/LXCO7WIYNc42WvIr3lEFlPtKzRFm3QJ7veS8ab+YHcDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOa2tOEtVtdwTIDZQojoD/w8NqdEMB8GA1UdIwQY MBaAFBkAHVV6Bpja13xLPt3yp9NrcqsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iY2RlY2QtNjY4OS00Y2Q4LWExMDkt MjBkZTY5NzI2MDliLzEvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iY2RlY2QtNjY4OS00Y2Q4LWExMDktMjBkZTY5NzI2MDli LzEvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu314H7t1 crghjoDriUJArpbmfwlysvzFVbZqwL+Sfk4DIvy0yACvS+EYI9Q16+L2xQwKudSx LrGe+d+bv3zTuvLmzCUmiG+TLTyrib6kzJGERtwcY8YPc3HfRLZJoI2yBAvki8BY TgPhCxAYpYxxHMhxIUE/B6usfr3tzHkzr5b8LW5wVfD6/SWIIcsCmaIvUlf2QEME 9KLh4wd9g2/qjiLSjkWJCYu5Et+KJsZlkMvXhADNm4AFYHeE1pk2cevIPEzi3Muz /F1Rrb9OPs41fJUfs3u145TrvftscOKJwrMKjb/KDOi5q64kbDgAQtXJgIFV7QQ9 xtYC4EQ5e3bKoA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:13:23 2025 by rpki-client