This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft File: GQ1bBUO9hajs-WmruFA8nerQ35g.mft (raw, json) Hash identifier: Pg82fcqnSrvRCU3gzDGK2VgSnAmy10MntiM7Tg+iMWk= Subject key identifier: 91:B5:E9:31:A6:E5:BD:3E:BF:3F:CB:6C:D9:16:4E:F4:BF:B1:8D:9B Authority key identifier: 19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98 Certificate issuer: /CN=190d5b0543bd85a8ecf969abb8503c9dead0df98 Certificate serial: 019B4A033FDA94F596AC928C954BEBB85299 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft Manifest number: 0E70 Signing time: Tue 23 Dec 2025 07:01:25 +0000 Manifest this update: Tue 23 Dec 2025 07:01:25 +0000 Manifest next update: Wed 24 Dec 2025 07:01:25 +0000 Files and hashes: 1: DRozhMtaZ2qQi39QkdO5G1jc7k0.roa (hash: PuORiX2E31wDt+P9sStv2sIXh7s2xmzWRFumBtIrOBQ=) 2: GQ1bBUO9hajs-WmruFA8nerQ35g.crl (hash: 2Gzfgn9nqcgbpr1/EMI6JEl6RobDM2BBpU6b+QK3Lq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:3f:da:94:f5:96:ac:92:8c:95:4b:eb:b8:52:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=190d5b0543bd85a8ecf969abb8503c9dead0df98 Validity Not Before: Dec 23 07:01:25 2025 GMT Not After : Dec 24 07:01:25 2025 GMT Subject: CN=91b5e931a6e5bd3ebf3fcb6cd9164ef4bfb18d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:80:0c:27:16:73:2a:e6:69:a5:b9:58:55: d7:55:09:42:3b:39:67:af:18:b7:23:54:e9:8d:10: d1:04:4e:be:ec:d4:94:d6:5f:dc:c0:ff:83:cc:10: 0c:25:2e:1c:33:7b:5d:cd:0d:33:27:aa:e3:cf:f2: de:a1:99:10:41:ff:3a:74:d9:b1:86:b6:e8:29:7c: 03:bf:00:35:4c:6f:0e:e1:7e:ac:b8:b1:86:cc:cb: 45:c7:a1:72:42:c1:c3:02:e5:3e:2a:9b:6c:53:a7: 91:ef:bf:be:5d:17:55:59:09:62:26:99:8b:f9:d3: f2:1d:9e:c0:45:08:42:60:f7:89:de:a9:97:dc:9f: 56:ff:72:c5:bd:fe:12:68:74:83:f4:16:45:3d:13: 3e:91:a8:fe:09:8d:99:53:7d:82:2b:63:da:45:ec: ad:df:da:22:fd:ab:a1:ca:3c:b0:f6:73:e2:1a:90: a7:a7:de:60:3d:3c:78:66:c3:79:63:42:d5:c4:ba: b5:db:39:02:03:00:5a:a2:8c:03:0b:36:5b:5c:65: 42:75:7a:79:84:4e:bd:6a:1c:b6:20:57:43:29:4b: ac:2d:b1:6b:6b:f1:ee:5c:7a:d4:bf:a6:a3:2f:d9: 6f:71:89:53:4c:ad:85:75:fe:86:22:00:c9:65:41: 8c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B5:E9:31:A6:E5:BD:3E:BF:3F:CB:6C:D9:16:4E:F4:BF:B1:8D:9B X509v3 Authority Key Identifier: keyid:19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:41:46:2f:25:a3:5b:b4:7a:1e:b5:f4:0d:24:89:ec:59:a5: 61:e9:d4:11:bd:46:a0:e1:f7:59:5b:f8:94:f2:83:cc:ad:d9: 16:cd:d5:41:7a:b0:24:31:92:0c:5f:95:b8:39:46:03:5a:cb: 74:eb:cf:01:1c:ad:73:4c:0e:0a:77:e5:20:88:f6:fe:e1:6b: db:6a:a0:2e:cf:3a:97:a6:46:fc:8b:91:17:ac:6b:d9:41:4e: 9e:63:50:92:3b:ff:2a:8e:b5:68:24:c0:bf:85:76:77:00:ac: ec:ee:26:ed:d6:6d:e9:e0:fa:c3:e5:2b:e3:2e:c9:a9:a1:f1: 68:64:66:41:5e:d4:74:3d:d5:1e:81:40:20:11:f2:60:40:10: f8:b2:e5:c2:7e:89:91:14:98:e4:4b:8a:90:d4:1f:26:45:8d: a8:c4:a6:62:47:80:19:32:71:50:7c:ee:5b:8b:63:d2:81:41: b5:1a:7b:88:74:39:2e:de:83:9e:86:de:1c:40:91:89:46:b7: 4c:4c:20:f9:4e:73:91:d1:ee:3d:80:88:1f:cb:ab:07:c5:ca: da:5c:fd:4f:8e:e6:f3:ee:79:23:8b:39:fe:f2:03:f4:f7:00: ba:0b:75:e2:9c:40:dd:92:75:a3:b1:1e:f2:8d:9d:2a:d4:65: 8d:51:66:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAz/alPWWrJKMlUvruFKZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MGQ1YjA1NDNiZDg1YThlY2Y5NjlhYmI4NTAzYzlkZWFk MGRmOTgwHhcNMjUxMjIzMDcwMTI1WhcNMjUxMjI0MDcwMTI1WjAzMTEwLwYDVQQD Eyg5MWI1ZTkzMWE2ZTViZDNlYmYzZmNiNmNkOTE2NGVmNGJmYjE4ZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLuADCcWcyrmaaW5WFXXVQlCOzln rxi3I1TpjRDRBE6+7NSU1l/cwP+DzBAMJS4cM3tdzQ0zJ6rjz/LeoZkQQf86dNmx hrboKXwDvwA1TG8O4X6suLGGzMtFx6FyQsHDAuU+KptsU6eR77++XRdVWQliJpmL +dPyHZ7ARQhCYPeJ3qmX3J9W/3LFvf4SaHSD9BZFPRM+kaj+CY2ZU32CK2PaReyt 39oi/auhyjyw9nPiGpCnp95gPTx4ZsN5Y0LVxLq12zkCAwBaoowDCzZbXGVCdXp5 hE69ahy2IFdDKUusLbFra/HuXHrUv6ajL9lvcYlTTK2Fdf6GIgDJZUGMzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJG16TGm5b0+vz/LbNkWTvS/sY2bMB8GA1UdIwQY MBaAFBkNWwVDvYWo7Plpq7hQPJ3q0N+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MDA3ZmYtNWYwYy00YTczLWEzZjIt Y2NjNTgxNDA5NGFkLzEvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82MDA3ZmYtNWYwYy00YTczLWEzZjItY2NjNTgxNDA5NGFk LzEvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkFGLyWj W7R6HrX0DSSJ7FmlYenUEb1GoOH3WVv4lPKDzK3ZFs3VQXqwJDGSDF+VuDlGA1rL dOvPARytc0wOCnflIIj2/uFr22qgLs86l6ZG/IuRF6xr2UFOnmNQkjv/Ko61aCTA v4V2dwCs7O4m7dZt6eD6w+Ur4y7JqaHxaGRmQV7UdD3VHoFAIBHyYEAQ+LLlwn6J kRSY5EuKkNQfJkWNqMSmYkeAGTJxUHzuW4tj0oFBtRp7iHQ5Lt6DnobeHECRiUa3 TEwg+U5zkdHuPYCIH8urB8XK2lz9T47m8+55I4s5/vID9PcAugt14pxA3ZJ1o7Ee 8o2dKtRljVFmIw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:03:19 2025 by rpki-client