This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft File: GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json) Hash identifier: DrQZD2ktUMaK2am0dDZJno5OcGz5frS9zp/JKBX5pow= Subject key identifier: F9:DA:E9:DC:67:02:80:75:FF:E5:1A:0B:44:9F:41:39:63:F4:C4:0A Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD Certificate issuer: /CN=1904ce28eae682c97acd2d862fee2897c3b096fd Certificate serial: 019B390F44543B60CAB1226D0665E8E616A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 00:01:00 +0000 Manifest this update: Sat 20 Dec 2025 00:01:00 +0000 Manifest next update: Sun 21 Dec 2025 00:01:00 +0000 Files and hashes: 1: 5ekJj6RYdmJBNmKWcQ0sEc6eWgU.roa (hash: gPGy8PS0+ecmm07tEkgKLMFDWfNcEFuAsE09yhAQrNo=) 2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: nH01NksMcNUFaAdfPnW1sf10L0QY+NxbYARFCxE1gXc=) 3: _YBrb9GHmCpqMjy8GFwAvwaPx90.roa (hash: XWiWSnDHqy5A+xwKGiqSBQrfe6N7eyh2EySgoK4VNNw=) 4: lCgKihl6lv9I1HmInNqD60nii-E.roa (hash: +eRiAGt7XlmYsCebRhtIL5+eM1SWrg49PToO3o+8iRc=) 5: mmY1ARivIWLIbuStJrmVTjbcqd0.roa (hash: pdFIZbB/0pJ15uLsSovmly6F7hKCHQG6LxPg19m7f9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:44:54:3b:60:ca:b1:22:6d:06:65:e8:e6:16:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd Validity Not Before: Dec 20 00:01:00 2025 GMT Not After : Dec 21 00:01:00 2025 GMT Subject: CN=f9dae9dc67028075ffe51a0b449f413963f4c40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3a:96:79:b9:45:0c:7a:7e:3f:52:ad:9b:b1: 28:d1:e0:30:1d:89:3d:a4:eb:a5:ed:68:de:54:aa: 72:ac:b5:bf:31:e8:24:ca:24:38:38:2f:8d:43:02: 27:80:a3:33:fa:27:9e:31:4e:8b:40:59:36:c5:04: bf:c4:a0:c8:a9:17:93:98:89:e5:5a:ee:05:37:20: b7:b2:2e:88:13:0b:3e:cc:82:bc:b0:cd:42:8d:72: e7:c9:28:75:bb:53:d6:b4:52:4e:8a:d1:fd:1f:78: e9:0f:05:fd:72:55:84:bb:a1:70:04:05:96:f1:cf: 76:39:00:49:f5:57:7c:ec:76:c7:8c:cb:b2:a3:bf: 6d:f3:c6:1e:01:a4:91:cf:f2:20:e7:27:59:06:26: 19:38:55:06:f8:a2:cc:49:f0:a6:75:76:85:d2:fa: 0c:e6:5f:96:66:67:78:18:67:d4:8c:a8:fc:a1:14: c8:c5:d0:8e:93:87:0e:95:21:42:87:bc:f6:cd:30: ec:b0:64:15:7d:1e:a9:af:f8:72:cf:9a:dc:b2:3c: c9:2e:ca:70:18:d8:76:23:7f:73:24:c8:06:1b:be: d6:8a:80:44:f1:cf:7b:e3:c7:3c:9a:66:90:62:0d: 5f:ed:e8:c1:2b:98:d6:23:6e:c7:90:dd:81:a2:49: b2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DA:E9:DC:67:02:80:75:FF:E5:1A:0B:44:9F:41:39:63:F4:C4:0A X509v3 Authority Key Identifier: keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:02:2c:07:4e:ab:90:56:ef:c6:90:a2:c8:6c:1c:ef:63:aa: a4:4f:ec:f5:11:10:c1:14:e4:18:bd:41:67:12:47:90:bb:fc: 7d:c2:3e:9f:2f:68:24:91:f8:ad:98:a0:7a:8d:b9:57:77:07: 60:eb:f6:64:4e:f7:5e:1f:e7:ff:73:ec:35:47:fa:27:a9:85: 65:3d:4b:5b:79:bd:ca:18:61:08:07:2c:62:68:cf:25:7c:05: 89:53:a9:ac:a2:fc:e4:4d:a8:2b:5a:ab:56:3b:ba:7a:31:fa: 2f:df:2c:ef:60:01:62:8d:6f:6f:08:0e:91:db:f5:ae:ee:a0: bf:a6:0a:d9:4c:ca:a3:d9:8b:2f:76:24:b5:ea:8d:95:77:4f: a7:7f:34:c0:3e:54:03:f0:ca:a5:7b:85:80:37:d1:84:bb:49: d1:41:8e:11:d2:32:74:b4:09:72:17:81:41:d6:df:ea:0c:58: 93:40:a1:5a:a5:bf:a7:62:10:6b:d3:65:f4:52:e2:60:a1:46: 25:ee:37:9a:33:78:07:1f:39:18:40:44:47:94:21:80:8d:47: d5:dc:c5:b8:42:f0:ca:76:fc:0d:e4:7b:dc:5e:96:a2:61:f7: bc:0e:6f:eb:4c:01:57:1e:90:ee:46:f8:73:16:69:fe:01:9a: 40:26:10:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D0RUO2DKsSJtBmXo5hahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDRjZTI4ZWFlNjgyYzk3YWNkMmQ4NjJmZWUyODk3YzNi MDk2ZmQwHhcNMjUxMjIwMDAwMTAwWhcNMjUxMjIxMDAwMTAwWjAzMTEwLwYDVQQD EyhmOWRhZTlkYzY3MDI4MDc1ZmZlNTFhMGI0NDlmNDEzOTYzZjRjNDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzqWeblFDHp+P1Ktm7Eo0eAwHYk9 pOul7WjeVKpyrLW/MegkyiQ4OC+NQwIngKMz+ieeMU6LQFk2xQS/xKDIqReTmInl Wu4FNyC3si6IEws+zIK8sM1CjXLnySh1u1PWtFJOitH9H3jpDwX9clWEu6FwBAWW 8c92OQBJ9Vd87HbHjMuyo79t88YeAaSRz/Ig5ydZBiYZOFUG+KLMSfCmdXaF0voM 5l+WZmd4GGfUjKj8oRTIxdCOk4cOlSFCh7z2zTDssGQVfR6pr/hyz5rcsjzJLspw GNh2I39zJMgGG77WioBE8c9748c8mmaQYg1f7ejBK5jWI27HkN2BokmyMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPna6dxnAoB1/+UaC0SfQTlj9MQKMB8GA1UdIwQY MBaAFBkEzijq5oLJes0thi/uKJfDsJb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDkt MTVkNWRlYjIyOGRkLzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDktMTVkNWRlYjIyOGRk LzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgIsB06r kFbvxpCiyGwc72OqpE/s9REQwRTkGL1BZxJHkLv8fcI+ny9oJJH4rZigeo25V3cH YOv2ZE73Xh/n/3PsNUf6J6mFZT1LW3m9yhhhCAcsYmjPJXwFiVOprKL85E2oK1qr Vju6ejH6L98s72ABYo1vbwgOkdv1ru6gv6YK2UzKo9mLL3YkteqNlXdPp380wD5U A/DKpXuFgDfRhLtJ0UGOEdIydLQJcheBQdbf6gxYk0ChWqW/p2IQa9Nl9FLiYKFG Je43mjN4Bx85GEBER5QhgI1H1dzFuELwynb8DeR73F6WomH3vA5v60wBVx6Q7kb4 cxZp/gGaQCYQ1g== -----END CERTIFICATE-----Generated at Sat Dec 20 09:03:28 2025 by rpki-client