This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json) Hash identifier: /CPZtvQXpZIPG7isAFQFuBtoIG4vPz7CywUe1lYBi4M= Subject key identifier: 79:F3:6B:D7:F5:18:CA:C4:E3:09:7A:32:E1:C8:91:80:42:03:21:C2 Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84 Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84 Certificate serial: 019B42EECE3D1DB3B66D3897A96409A8F217 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft Manifest number: 0ACE Signing time: Sun 21 Dec 2025 22:01:45 +0000 Manifest this update: Sun 21 Dec 2025 22:01:45 +0000 Manifest next update: Mon 22 Dec 2025 22:01:45 +0000 Files and hashes: 1: NmyYIbuzbIXUj9jJPjF3BR9optE.roa (hash: wSdjb/vMyeBBwt44mj9k7sBn6y3WZbUfXBs3kYVLtv8=) 2: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: 5zIIkkEzp9BHFAE9DF6hwT0bXxjf6M/s+lmUpXWUOxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:ce:3d:1d:b3:b6:6d:38:97:a9:64:09:a8:f2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84 Validity Not Before: Dec 21 22:01:45 2025 GMT Not After : Dec 22 22:01:45 2025 GMT Subject: CN=79f36bd7f518cac4e3097a32e1c89180420321c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:aa:f3:cf:15:12:db:8c:e5:0c:57:94:e3:20: b1:61:c9:6b:2f:4f:e4:3f:ae:0f:37:c3:28:41:27: 64:1a:c0:cd:d9:ae:bc:8a:28:3b:e2:8d:1a:5c:f5: 74:1a:24:06:5e:31:15:cd:17:f3:6d:90:6e:aa:1c: c2:67:12:a2:4a:9b:9b:41:0c:81:2a:bb:60:d5:ea: 80:09:b7:76:15:67:6b:d9:97:b2:b9:ae:a3:97:9d: 08:e2:21:16:c5:5f:f2:6b:60:a5:99:31:0c:33:36: ff:78:c9:79:e5:a2:fa:2e:15:68:f3:e1:2e:dc:e1: 60:53:08:89:71:ad:d5:d1:a2:b7:59:5d:dd:5d:2c: 0b:ea:c7:26:63:79:27:20:c0:89:b3:93:51:51:58: a2:6f:d6:e7:46:93:f9:4a:ee:47:7d:51:3d:22:25: c4:b5:d9:42:d3:10:16:d2:7a:ca:64:2f:14:87:89: 3d:67:d0:91:ae:a9:db:32:a8:d3:2d:41:92:97:ca: 02:6e:72:7d:e7:2b:e1:27:43:6a:4e:2d:ef:b3:0d: 6d:68:80:b4:da:b1:6b:b2:35:96:0a:f7:5b:7a:16: 2d:ed:42:08:5f:22:42:b6:53:1a:ab:f4:ce:7f:2e: c2:5e:df:51:9d:91:39:ac:95:70:15:19:78:11:e6: 0d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F3:6B:D7:F5:18:CA:C4:E3:09:7A:32:E1:C8:91:80:42:03:21:C2 X509v3 Authority Key Identifier: keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:27:ab:73:4b:1e:06:78:35:25:c2:60:b6:55:0c:e7:05:78: 65:fc:36:b5:6f:30:94:3f:3b:3f:32:df:45:fb:5a:3b:a8:98: 94:f8:6b:82:69:cc:ed:f8:bb:0b:ac:ca:b5:c7:0a:e5:3b:8a: ea:7e:66:d6:fa:95:6f:1e:8f:50:0f:0b:f7:20:94:97:45:ed: 51:ec:a4:e7:52:49:0b:3d:ab:1e:b0:69:86:66:41:15:ff:9c: a5:b4:45:41:a1:64:b5:00:e0:eb:12:8e:27:86:2b:e7:37:ad: f1:bc:93:2f:37:f2:c3:67:5a:79:c3:30:9b:56:9f:00:73:f3: ed:52:1e:c8:01:a8:33:c7:51:41:41:31:da:36:b9:88:0e:c9: 4f:d3:ba:b2:d4:66:68:0f:b0:1e:ff:93:29:0f:54:d5:d5:e2: 6e:b5:01:62:6d:56:0b:65:c2:3c:11:b7:1a:57:9d:60:c5:c2: 56:4f:44:ef:37:3c:66:3c:0c:9b:6e:b0:0c:0d:17:e4:ce:7a: e3:dd:6d:55:57:06:01:db:71:b4:bf:85:9f:43:6c:da:4d:c5: f0:9a:6e:80:50:e5:bb:48:ae:a9:50:d8:85:df:12:8c:8a:52: da:59:2a:98:9d:59:64:65:11:ae:cd:a6:e1:d8:8c:cc:12:66: 2d:3f:35:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7s49HbO2bTiXqWQJqPIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZmFiNTUwZDgyN2EyZGVmMGQ0ZDI2MTYwNjE0MjVjMmY2 OTRjODQwHhcNMjUxMjIxMjIwMTQ1WhcNMjUxMjIyMjIwMTQ1WjAzMTEwLwYDVQQD Eyg3OWYzNmJkN2Y1MThjYWM0ZTMwOTdhMzJlMWM4OTE4MDQyMDMyMWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArarzzxUS24zlDFeU4yCxYclrL0/k P64PN8MoQSdkGsDN2a68iig74o0aXPV0GiQGXjEVzRfzbZBuqhzCZxKiSpubQQyB Krtg1eqACbd2FWdr2Zeyua6jl50I4iEWxV/ya2ClmTEMMzb/eMl55aL6LhVo8+Eu 3OFgUwiJca3V0aK3WV3dXSwL6scmY3knIMCJs5NRUViib9bnRpP5Su5HfVE9IiXE tdlC0xAW0nrKZC8Uh4k9Z9CRrqnbMqjTLUGSl8oCbnJ95yvhJ0NqTi3vsw1taIC0 2rFrsjWWCvdbehYt7UIIXyJCtlMaq/TOfy7CXt9RnZE5rJVwFRl4EeYNqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnza9f1GMrE4wl6MuHIkYBCAyHCMB8GA1UdIwQY MBaAFID6tVDYJ6Le8NTSYWBhQlwvaUyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAt Zjc2MjkyOWYxZjA4LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAtZjc2MjkyOWYxZjA4 LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSerc0se Bng1JcJgtlUM5wV4Zfw2tW8wlD87PzLfRftaO6iYlPhrgmnM7fi7C6zKtccK5TuK 6n5m1vqVbx6PUA8L9yCUl0XtUeyk51JJCz2rHrBphmZBFf+cpbRFQaFktQDg6xKO J4Yr5zet8byTLzfyw2daecMwm1afAHPz7VIeyAGoM8dRQUEx2ja5iA7JT9O6stRm aA+wHv+TKQ9U1dXibrUBYm1WC2XCPBG3GledYMXCVk9E7zc8ZjwMm26wDA0X5M56 491tVVcGAdtxtL+Fn0Ns2k3F8JpugFDlu0iuqVDYhd8SjIpS2lkqmJ1ZZGURrs2m 4diMzBJmLT81+A== -----END CERTIFICATE-----Generated at Mon Dec 22 07:18:53 2025 by rpki-client