This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json) Hash identifier: cq1rIjCYdBevR1csiMw838KxJ1KJaDS5YWBGNEMXTZ8= Subject key identifier: 7E:D7:85:F0:AF:56:BC:2F:DA:CA:67:C0:E6:CE:5D:2A:6F:C7:B2:42 Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9 Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9 Certificate serial: 019B356939A3EBB54A92B0508A1AB4BD81FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft Manifest number: 164B Signing time: Fri 19 Dec 2025 07:00:47 +0000 Manifest this update: Fri 19 Dec 2025 07:00:47 +0000 Manifest next update: Sat 20 Dec 2025 07:00:47 +0000 Files and hashes: 1: 3bMVFRs8FOeJcOkO2XYWLqzrrkg.roa (hash: jcRVVzJYs1NWamGAFlutgx67H4FacWZP/qMYz6OqYpI=) 2: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: aniW9mvsdAGYCCE5/WUJ/oUQnCFr0rTSEEMy+nPgdTM=) 3: iu1uLDkjA2lC4iCmh3mgoTg-ECs.roa (hash: J1M6seCPFdUQmcH1n+B1kmRcatuaeOrkFhV5roQrzQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:39:a3:eb:b5:4a:92:b0:50:8a:1a:b4:bd:81:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9 Validity Not Before: Dec 19 07:00:47 2025 GMT Not After : Dec 20 07:00:47 2025 GMT Subject: CN=7ed785f0af56bc2fdaca67c0e6ce5d2a6fc7b242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:5b:9e:63:1d:05:e3:c0:82:36:8e:2b:d7: f6:37:30:47:8e:af:de:1d:03:c3:fb:db:5e:ab:c8: 16:af:b7:e9:ac:2b:49:61:5d:56:62:25:8c:dc:06: 4b:e9:00:10:0e:60:f1:db:7e:02:d8:96:a1:89:5b: 1b:08:4f:7f:10:a4:35:14:9c:c1:eb:1d:3f:91:b8: 28:47:81:56:86:9f:cf:b3:e0:7e:a7:b0:8e:46:bd: 78:8c:1a:15:d9:28:b0:7d:0a:76:4f:35:02:69:0f: 75:2d:01:60:8a:5d:e7:6b:8c:ef:f9:e8:d2:f8:7d: 0d:ec:b6:55:10:72:51:fc:71:13:f6:81:97:ee:4c: 1e:21:0c:3c:a5:25:bb:05:d5:3c:9f:e7:55:fb:45: aa:17:ba:a7:66:97:b4:7f:f8:d3:e8:b2:fd:e1:1d: 73:ef:a9:97:a3:09:b3:ee:e1:cc:4c:a9:3c:a2:97: cb:c9:d0:7a:6a:48:cf:3e:02:df:0e:04:dc:8a:4d: 1c:da:2b:9b:cb:eb:f9:e2:61:d2:31:fc:ce:84:ee: d7:1d:13:17:ba:84:64:63:1c:b2:32:c7:20:b9:30: ac:6e:90:6c:7e:56:a7:3a:02:f1:39:fd:f1:c7:ec: 9d:c3:77:dc:96:fe:92:aa:d4:1a:43:60:4a:7b:43: c8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D7:85:F0:AF:56:BC:2F:DA:CA:67:C0:E6:CE:5D:2A:6F:C7:B2:42 X509v3 Authority Key Identifier: keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:7e:a6:69:09:4f:80:9d:a4:fc:88:74:eb:47:64:23:82:23: 78:b7:2a:c4:3f:4a:3a:7b:6a:4d:25:5f:e1:9a:26:57:f2:b1: 33:2d:97:ff:4e:d7:ad:01:7f:d5:3f:ca:22:6b:1e:5f:78:e8: dd:e5:88:9e:de:c6:8b:1d:06:7f:ac:d1:07:d3:2d:fa:23:64: 0a:62:bf:96:ba:14:bb:f8:91:a4:83:46:5d:7b:81:98:2c:31: 6b:30:b4:ba:a6:d8:4f:5a:07:19:11:fc:77:3e:d8:27:4c:61: a3:47:70:33:fb:04:bf:49:98:18:67:d5:7b:39:8d:3e:19:76: 66:9f:75:42:4d:31:7e:06:9b:0f:32:df:d7:51:2e:95:c7:6c: 38:db:6e:48:f3:50:c3:4b:ab:24:8f:58:c4:8f:6f:c7:b0:2f: 70:4e:62:7b:7e:f6:24:5c:5a:14:0a:ec:60:45:37:95:67:fe: 10:45:ad:f7:5d:86:18:47:fb:92:4f:39:83:63:82:4b:02:54: 19:09:c2:0d:2b:6d:ab:b5:6d:a7:aa:25:03:53:ec:e1:4c:d9: cf:4b:fc:94:36:12:e4:f4:00:2b:c3:d0:8d:86:23:fc:db:2e: 0b:4e:87:8f:23:52:16:03:a8:b9:26:7f:76:44:bc:9a:52:e7: e1:d0:b8:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aTmj67VKkrBQihq0vYH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYTJkMGRjZDUwYTY4MmY5NzVlYTNkOGMzOGU1ZTY3YmIw MzIyZjkwHhcNMjUxMjE5MDcwMDQ3WhcNMjUxMjIwMDcwMDQ3WjAzMTEwLwYDVQQD Eyg3ZWQ3ODVmMGFmNTZiYzJmZGFjYTY3YzBlNmNlNWQyYTZmYzdiMjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2tbnmMdBePAgjaOK9f2NzBHjq/e HQPD+9teq8gWr7fprCtJYV1WYiWM3AZL6QAQDmDx234C2JahiVsbCE9/EKQ1FJzB 6x0/kbgoR4FWhp/Ps+B+p7CORr14jBoV2SiwfQp2TzUCaQ91LQFgil3na4zv+ejS +H0N7LZVEHJR/HET9oGX7kweIQw8pSW7BdU8n+dV+0WqF7qnZpe0f/jT6LL94R1z 76mXowmz7uHMTKk8opfLydB6akjPPgLfDgTcik0c2iuby+v54mHSMfzOhO7XHRMX uoRkYxyyMscguTCsbpBsflanOgLxOf3xx+ydw3fclv6SqtQaQ2BKe0PIDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7XhfCvVrwv2spnwObOXSpvx7JCMB8GA1UdIwQY MBaAFIGi0NzVCmgvl16j2MOOXme7AyL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQt ZmU0NWQ1MTYwYzM5LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQtZmU0NWQ1MTYwYzM5 LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnH6maQlP gJ2k/Ih060dkI4IjeLcqxD9KOntqTSVf4ZomV/KxMy2X/07XrQF/1T/KImseX3jo 3eWInt7Gix0Gf6zRB9Mt+iNkCmK/lroUu/iRpINGXXuBmCwxazC0uqbYT1oHGRH8 dz7YJ0xho0dwM/sEv0mYGGfVezmNPhl2Zp91Qk0xfgabDzLf11EulcdsONtuSPNQ w0urJI9YxI9vx7AvcE5ie372JFxaFArsYEU3lWf+EEWt912GGEf7kk85g2OCSwJU GQnCDSttq7Vtp6olA1Ps4UzZz0v8lDYS5PQAK8PQjYYj/NsuC06HjyNSFgOouSZ/ dkS8mlLn4dC4gA== -----END CERTIFICATE-----Generated at Fri Dec 19 09:42:48 2025 by rpki-client