This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft File: GQ1bBUO9hajs-WmruFA8nerQ35g.mft (raw, json) Hash identifier: Lctf3Vg5FjOaDKKZyyrmVK+5nkTRbmaxWy8pp/JNhlo= Subject key identifier: 16:03:EC:63:CD:65:52:76:04:BB:04:95:EE:E5:63:F9:04:08:D9:FC Authority key identifier: 19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98 Certificate issuer: /CN=190d5b0543bd85a8ecf969abb8503c9dead0df98 Certificate serial: 019B405BE6C7A9AF201A10C2B64CF5B4BE7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft Manifest number: 0E6B Signing time: Sun 21 Dec 2025 10:02:03 +0000 Manifest this update: Sun 21 Dec 2025 10:02:03 +0000 Manifest next update: Mon 22 Dec 2025 10:02:03 +0000 Files and hashes: 1: DRozhMtaZ2qQi39QkdO5G1jc7k0.roa (hash: PuORiX2E31wDt+P9sStv2sIXh7s2xmzWRFumBtIrOBQ=) 2: GQ1bBUO9hajs-WmruFA8nerQ35g.crl (hash: Ie6sEfgqtfjQWQeE44ji6vnqDWo0kCsfYwWRyPTDMKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:e6:c7:a9:af:20:1a:10:c2:b6:4c:f5:b4:be:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=190d5b0543bd85a8ecf969abb8503c9dead0df98 Validity Not Before: Dec 21 10:02:03 2025 GMT Not After : Dec 22 10:02:03 2025 GMT Subject: CN=1603ec63cd65527604bb0495eee563f90408d9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:bd:c7:c3:a9:77:1b:3a:a3:54:c5:f1:68: f8:df:0f:7c:ac:6a:1f:aa:f0:a8:a5:46:08:2b:8e: 82:0b:71:e9:10:60:77:a5:75:bf:75:cc:69:29:72: 78:bd:fb:29:9b:2c:6c:1c:ee:c3:79:f4:54:e4:ac: df:d3:35:d3:fa:8f:85:e8:f6:c3:59:e5:8c:06:40: 37:6f:a9:4c:fe:84:75:fa:95:a4:89:b5:6e:b5:2d: ae:57:b7:06:5e:98:0a:b8:9f:31:22:69:80:8f:11: 66:9c:a9:ef:f7:2f:d1:b0:87:51:5e:a9:7a:6d:52: 1d:f1:91:45:09:66:57:08:ff:b9:df:d2:25:3b:cc: 88:d4:87:52:74:e7:82:9b:97:28:df:6e:14:9c:7b: 8b:a1:9f:26:9e:f5:9d:fc:d1:b8:54:e6:1a:23:66: a4:b5:6c:94:7a:cb:7a:2c:79:7b:19:a8:31:7a:4f: 2f:af:dc:8a:16:37:74:77:7e:66:e8:17:60:e8:ce: 11:72:97:73:7c:1c:59:78:95:ae:d1:55:5f:36:e6: 4f:c1:48:56:2a:84:84:50:ef:5a:bc:73:e6:4a:6f: 17:86:d9:88:be:32:bf:1d:b4:b1:73:c6:ec:85:00: 1f:7e:d9:cb:4b:0e:ec:38:0a:d3:cd:55:40:19:83: 35:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:03:EC:63:CD:65:52:76:04:BB:04:95:EE:E5:63:F9:04:08:D9:FC X509v3 Authority Key Identifier: keyid:19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:9e:fb:00:08:af:ac:1b:5a:2a:73:4e:b8:8f:bd:76:6f:8a: a7:72:92:81:6d:06:e8:a4:57:bf:2d:73:86:88:d1:91:01:d0: 78:3e:a2:83:b1:33:aa:4f:c2:e8:67:75:26:a4:e1:6b:94:50: 28:5b:55:2e:5b:f6:c7:a3:e4:4f:83:7d:54:87:6b:38:95:82: 94:60:7a:34:b3:00:0b:bf:7a:03:bb:38:71:c0:09:6e:ea:45: 4a:5a:8d:f8:29:fe:dd:47:85:6f:35:a4:9f:de:7b:a0:8f:3d: 85:ea:36:a2:51:fd:00:00:fb:f5:1d:1a:bb:d0:d8:62:81:2e: 66:5f:15:60:88:b2:3a:46:32:2a:8c:36:61:89:b7:0f:2b:15: 1c:7f:06:6f:76:b7:34:a4:86:95:4e:88:77:05:66:59:ec:07: 22:6f:7f:94:70:d5:96:b4:2d:61:42:5b:0c:ec:b1:41:9a:8d: 76:37:e0:ab:dc:36:47:d5:b2:63:69:4b:7a:57:94:5c:81:f2: c0:6c:d7:30:16:5a:f7:f0:fc:26:bf:e9:6a:a1:6e:e5:62:0b: 28:11:76:00:93:b3:ef:23:a2:68:e6:b6:71:25:d7:5e:fd:68: 08:17:a2:80:98:13:65:1b:e8:f5:a4:94:86:3b:52:54:8c:da: 2c:59:d8:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW+bHqa8gGhDCtkz1tL57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MGQ1YjA1NDNiZDg1YThlY2Y5NjlhYmI4NTAzYzlkZWFk MGRmOTgwHhcNMjUxMjIxMTAwMjAzWhcNMjUxMjIyMTAwMjAzWjAzMTEwLwYDVQQD EygxNjAzZWM2M2NkNjU1Mjc2MDRiYjA0OTVlZWU1NjNmOTA0MDhkOWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugK9x8Opdxs6o1TF8Wj43w98rGof qvCopUYIK46CC3HpEGB3pXW/dcxpKXJ4vfspmyxsHO7DefRU5Kzf0zXT+o+F6PbD WeWMBkA3b6lM/oR1+pWkibVutS2uV7cGXpgKuJ8xImmAjxFmnKnv9y/RsIdRXql6 bVId8ZFFCWZXCP+539IlO8yI1IdSdOeCm5co324UnHuLoZ8mnvWd/NG4VOYaI2ak tWyUest6LHl7Gagxek8vr9yKFjd0d35m6Bdg6M4RcpdzfBxZeJWu0VVfNuZPwUhW KoSEUO9avHPmSm8XhtmIvjK/HbSxc8bshQAfftnLSw7sOArTzVVAGYM1kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYD7GPNZVJ2BLsEle7lY/kECNn8MB8GA1UdIwQY MBaAFBkNWwVDvYWo7Plpq7hQPJ3q0N+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MDA3ZmYtNWYwYy00YTczLWEzZjIt Y2NjNTgxNDA5NGFkLzEvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82MDA3ZmYtNWYwYy00YTczLWEzZjItY2NjNTgxNDA5NGFk LzEvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJ77AAiv rBtaKnNOuI+9dm+Kp3KSgW0G6KRXvy1zhojRkQHQeD6ig7Ezqk/C6Gd1JqTha5RQ KFtVLlv2x6PkT4N9VIdrOJWClGB6NLMAC796A7s4ccAJbupFSlqN+Cn+3UeFbzWk n957oI89heo2olH9AAD79R0au9DYYoEuZl8VYIiyOkYyKow2YYm3DysVHH8Gb3a3 NKSGlU6IdwVmWewHIm9/lHDVlrQtYUJbDOyxQZqNdjfgq9w2R9WyY2lLeleUXIHy wGzXMBZa9/D8Jr/paqFu5WILKBF2AJOz7yOiaOa2cSXXXv1oCBeigJgTZRvo9aSU hjtSVIzaLFnYVQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:37:03 2025 by rpki-client