This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft File: gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json) Hash identifier: VKAItcdubuWY3ufuLszkw402QgxZvgJBWris2I287wE= Subject key identifier: 58:2B:8C:ED:6C:A6:26:3F:77:4A:19:53:FF:8F:F9:A6:71:30:D9:A5 Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1 Certificate issuer: /CN=8293905afa134944f0630c949f3abda40646dac1 Certificate serial: 019B3FECEA8B3BC7ED3801756F730AF6AAFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 08:00:49 +0000 Manifest this update: Sun 21 Dec 2025 08:00:49 +0000 Manifest next update: Mon 22 Dec 2025 08:00:49 +0000 Files and hashes: 1: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: /jiq1nPLHxBmwRzBqM9oPt0pqnhgLkqmVltD+ocsInI=) 2: xqh-TDqxA6PFl_pLopVGhxzgy70.roa (hash: PFQ4rC1LE7WPTBJwr+kRgUbb+SgESq5u6lAAWw+3gVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:ea:8b:3b:c7:ed:38:01:75:6f:73:0a:f6:aa:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8293905afa134944f0630c949f3abda40646dac1 Validity Not Before: Dec 21 08:00:49 2025 GMT Not After : Dec 22 08:00:49 2025 GMT Subject: CN=582b8ced6ca6263f774a1953ff8ff9a67130d9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:6e:85:80:1c:3b:3a:ce:95:a4:27:83:93: 1b:d8:11:a0:0a:5c:bf:0c:b9:45:a3:3d:04:97:2f: 05:50:16:1a:de:63:31:69:eb:26:87:31:a4:33:c4: 5b:c5:4c:82:60:2d:c1:09:14:ba:47:1e:38:6e:e3: 19:10:a8:26:8e:a3:e6:c2:b2:22:6b:1c:81:1c:c0: fc:0c:7e:fd:af:44:f6:9b:17:b8:d5:20:d3:fc:2d: c7:f8:d0:db:25:62:9a:5a:3d:12:f4:01:22:14:84: ea:3b:1c:3f:30:c6:b4:aa:95:f0:fe:8f:d9:5f:a2: c0:a4:aa:17:8b:b7:1a:6e:e3:71:b8:db:ee:6f:ea: 31:cb:9e:6c:9a:bc:83:49:05:a6:5a:55:ba:53:6b: 03:a2:12:16:52:84:e5:9b:6e:04:b8:60:af:7d:9a: a0:6b:22:02:c0:08:00:75:30:5c:29:93:ca:ca:82: ec:56:91:14:bd:cb:37:23:8e:f9:07:d4:20:15:62: 03:a0:97:ab:f1:60:e0:23:43:db:fe:bb:1a:80:13: 9a:db:ef:46:7d:39:ee:1f:92:1b:55:89:26:4e:7c: 48:69:9b:9f:4f:b2:06:25:16:18:45:45:4d:58:b0: 87:42:ee:29:8a:dc:7c:82:99:e2:3a:d3:e8:0d:79: e5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2B:8C:ED:6C:A6:26:3F:77:4A:19:53:FF:8F:F9:A6:71:30:D9:A5 X509v3 Authority Key Identifier: keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:24:ad:15:27:b8:27:bd:b9:e0:78:2b:a6:07:52:c3:17:48: 19:d4:6b:e7:fe:74:b9:dc:e6:6e:0b:c9:ff:92:5e:94:d6:2c: d8:69:f1:04:8d:39:22:70:15:b6:6b:c4:0d:9c:bb:2c:c2:f2: 9e:5f:84:27:ba:22:7f:4c:87:56:0c:5b:75:da:62:37:fc:18: 39:31:15:34:05:e5:f2:04:c0:9f:d3:b7:fc:d7:c1:4f:a8:5d: 3f:4d:e3:44:29:fa:2a:d6:28:a6:55:72:89:d4:45:05:22:fd: 75:8d:f6:00:f5:8e:fd:80:a2:27:19:91:ea:be:ae:28:2d:29: 0a:07:b4:60:03:ae:ff:90:94:c7:92:bc:98:71:2e:34:73:30: d5:01:88:ff:56:87:f4:8f:aa:97:a7:4e:1e:ee:ad:a8:65:7b: 41:55:8a:6f:ad:68:1f:04:bc:16:4c:70:49:65:e8:24:6c:df: 59:b4:7e:df:a5:d8:6d:51:40:35:c9:40:d0:5c:17:5a:fb:78: f4:8a:38:39:3e:9b:32:87:7c:ae:50:c0:21:d7:e2:a6:68:be: 04:a2:ab:bb:5b:f6:12:40:eb:cf:00:43:94:2f:2e:cc:3e:86: dd:c0:9f:da:ee:cc:03:5f:76:27:c5:a2:1c:0d:c9:53:d4:2f: 06:81:7f:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7OqLO8ftOAF1b3MK9qr8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyOTM5MDVhZmExMzQ5NDRmMDYzMGM5NDlmM2FiZGE0MDY0 NmRhYzEwHhcNMjUxMjIxMDgwMDQ5WhcNMjUxMjIyMDgwMDQ5WjAzMTEwLwYDVQQD Eyg1ODJiOGNlZDZjYTYyNjNmNzc0YTE5NTNmZjhmZjlhNjcxMzBkOWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/puhYAcOzrOlaQng5Mb2BGgCly/ DLlFoz0Ely8FUBYa3mMxaesmhzGkM8RbxUyCYC3BCRS6Rx44buMZEKgmjqPmwrIi axyBHMD8DH79r0T2mxe41SDT/C3H+NDbJWKaWj0S9AEiFITqOxw/MMa0qpXw/o/Z X6LApKoXi7cabuNxuNvub+oxy55smryDSQWmWlW6U2sDohIWUoTlm24EuGCvfZqg ayICwAgAdTBcKZPKyoLsVpEUvcs3I475B9QgFWIDoJer8WDgI0Pb/rsagBOa2+9G fTnuH5IbVYkmTnxIaZufT7IGJRYYRUVNWLCHQu4pitx8gpniOtPoDXnl2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgrjO1spiY/d0oZU/+P+aZxMNmlMB8GA1UdIwQY MBaAFIKTkFr6E0lE8GMMlJ86vaQGRtrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3BPUVd2b1RTVVR3WXd5VW56cTlwQVpHMnNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9lMWMzNzMtNjRmOC00MjI2LTkwNDQt ODEwOTVhMTNiOWRlLzEvZ3BPUVd2b1RTVVR3WXd5VW56cTlwQVpHMnNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9lMWMzNzMtNjRmOC00MjI2LTkwNDQtODEwOTVhMTNiOWRl LzEvZ3BPUVd2b1RTVVR3WXd5VW56cTlwQVpHMnNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiStFSe4 J7254HgrpgdSwxdIGdRr5/50udzmbgvJ/5JelNYs2GnxBI05InAVtmvEDZy7LMLy nl+EJ7oif0yHVgxbddpiN/wYOTEVNAXl8gTAn9O3/NfBT6hdP03jRCn6KtYoplVy idRFBSL9dY32APWO/YCiJxmR6r6uKC0pCge0YAOu/5CUx5K8mHEuNHMw1QGI/1aH 9I+ql6dOHu6tqGV7QVWKb61oHwS8FkxwSWXoJGzfWbR+36XYbVFANclA0FwXWvt4 9Io4OT6bMod8rlDAIdfipmi+BKKru1v2EkDrzwBDlC8uzD6G3cCf2u7MA192J8Wi HA3JU9QvBoF/kw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:15:02 2025 by rpki-client