This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft File: gqSUodrlSHPfot61bQMTNAdqyVs.mft (raw, json) Hash identifier: AqRFD/0yriegJXn6eSlNX7+Me3MiDnX/5l5buPXf3UU= Subject key identifier: 8A:74:13:2B:B6:B9:78:D0:05:D3:41:69:A5:D0:EA:75:EB:8B:A7:03 Authority key identifier: 82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B Certificate issuer: /CN=82a494a1dae54873dfa2deb56d031334076ac95b Certificate serial: 019B75237B5A23E457A9F8A567A1B54BC58D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft Manifest number: 0950 Signing time: Wed 31 Dec 2025 16:00:18 +0000 Manifest this update: Wed 31 Dec 2025 16:00:18 +0000 Manifest next update: Thu 01 Jan 2026 16:00:18 +0000 Files and hashes: 1: gqSUodrlSHPfot61bQMTNAdqyVs.crl (hash: K3gu9/919wM+L57mK4BeHl7B93kB5oXs7zz39tSDNas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:23:7b:5a:23:e4:57:a9:f8:a5:67:a1:b5:4b:c5:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82a494a1dae54873dfa2deb56d031334076ac95b Validity Not Before: Dec 31 16:00:18 2025 GMT Not After : Jan 1 16:00:18 2026 GMT Subject: CN=8a74132bb6b978d005d34169a5d0ea75eb8ba703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:79:c7:9d:86:f4:04:4b:29:c0:4e:56:9c: 41:cf:19:3e:54:02:68:e6:7e:5d:16:5d:d3:5a:0f: f2:39:62:69:b6:9e:fd:95:d1:e6:03:58:a0:1a:cc: 4b:06:63:45:82:65:39:f9:16:a9:5e:5c:d7:9f:bf: b9:55:c6:0d:6f:81:53:fe:ae:76:98:ee:6c:64:93: 98:ef:8c:ac:38:6c:f5:61:74:0b:55:c8:6f:85:05: 19:96:9e:5e:6d:78:87:e8:9a:6f:c4:ef:63:1e:b3: 25:c9:53:b4:67:39:65:2a:f3:0c:b0:7a:47:ea:31: c3:80:96:f6:f9:de:36:99:bc:4b:a9:96:e7:8a:9b: bf:2b:c6:23:1e:e0:47:89:42:2c:6f:29:5d:0d:f5: fa:87:93:8f:c4:e9:7d:2f:a1:1d:01:46:2f:85:e2: d1:9c:a7:5d:1c:e2:9c:4d:8e:e7:c6:87:10:26:60: d7:2f:71:aa:c3:3e:a2:89:e3:c3:3c:52:c8:67:31: 6b:07:9d:c6:18:82:3b:2d:ae:80:11:fe:60:d0:e9: b1:07:c6:0c:c9:21:ff:56:c0:8b:bc:5a:2a:35:28: c2:c8:a1:2f:88:bf:3e:07:c2:23:f3:ec:c3:28:cc: e9:bb:78:92:61:ee:cb:60:a6:06:74:29:e7:37:5d: 08:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:74:13:2B:B6:B9:78:D0:05:D3:41:69:A5:D0:EA:75:EB:8B:A7:03 X509v3 Authority Key Identifier: keyid:82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:3c:95:a7:c8:6d:fc:72:20:ae:ab:39:55:69:20:7a:de:cc: 31:dc:22:ad:d0:f8:0f:2f:b9:44:47:72:3e:8a:bd:d9:c5:8a: 97:35:e3:13:2a:c3:e7:f0:86:9c:e3:c9:05:5f:53:ce:88:af: bc:20:1f:ba:ac:81:aa:5b:63:19:bc:f9:7a:8c:32:82:94:d3: eb:bb:2e:29:38:2d:a3:e7:82:cd:2f:55:f3:a5:e5:06:b5:39: 08:6c:ef:0a:a9:a7:b2:0a:27:6f:34:20:3c:16:4f:b9:c0:e3: 94:a1:1b:59:2f:07:97:a0:40:76:1f:b8:ee:01:80:2d:ad:49: 09:90:39:28:c9:28:01:b6:47:27:bd:1d:9b:7d:c6:9a:32:a8: d1:a4:8a:d5:22:8e:39:56:ca:07:14:0a:47:00:66:d8:4e:56: 38:f8:e4:3d:39:25:b5:e0:00:b0:9e:08:c8:7c:c8:6b:d5:97: 78:4f:bb:ad:46:92:14:32:c6:ec:1e:10:e6:19:69:74:13:a5: 2f:38:3d:6c:ab:84:74:55:a7:78:56:8b:b5:3d:ef:16:80:51: 87:47:ae:53:6e:25:3b:a4:6b:4b:98:22:dc:2e:0b:71:c6:91: 5f:95:0e:1f:86:8d:91:fa:9a:a5:13:1a:9b:e9:dc:3e:be:11: 9d:83:62:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1I3taI+RXqfilZ6G1S8WNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYTQ5NGExZGFlNTQ4NzNkZmEyZGViNTZkMDMxMzM0MDc2 YWM5NWIwHhcNMjUxMjMxMTYwMDE4WhcNMjYwMTAxMTYwMDE4WjAzMTEwLwYDVQQD Eyg4YTc0MTMyYmI2Yjk3OGQwMDVkMzQxNjlhNWQwZWE3NWViOGJhNzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdh5x52G9ARLKcBOVpxBzxk+VAJo 5n5dFl3TWg/yOWJptp79ldHmA1igGsxLBmNFgmU5+RapXlzXn7+5VcYNb4FT/q52 mO5sZJOY74ysOGz1YXQLVchvhQUZlp5ebXiH6JpvxO9jHrMlyVO0ZzllKvMMsHpH 6jHDgJb2+d42mbxLqZbnipu/K8YjHuBHiUIsbyldDfX6h5OPxOl9L6EdAUYvheLR nKddHOKcTY7nxocQJmDXL3Gqwz6iiePDPFLIZzFrB53GGII7La6AEf5g0OmxB8YM ySH/VsCLvFoqNSjCyKEviL8+B8Ij8+zDKMzpu3iSYe7LYKYGdCnnN10IkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIp0Eyu2uXjQBdNBaaXQ6nXri6cDMB8GA1UdIwQY MBaAFIKklKHa5Uhz36LetW0DEzQHaslbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3FTVW9kcmxTSFBmb3Q2MWJRTVROQWRxeVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lYWYxMDctNjcyMy00ZDQ2LTllMGMt YzBiZDAyMDE0OTcxLzEvZ3FTVW9kcmxTSFBmb3Q2MWJRTVROQWRxeVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9lYWYxMDctNjcyMy00ZDQ2LTllMGMtYzBiZDAyMDE0OTcx LzEvZ3FTVW9kcmxTSFBmb3Q2MWJRTVROQWRxeVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTyVp8ht /HIgrqs5VWkget7MMdwirdD4Dy+5REdyPoq92cWKlzXjEyrD5/CGnOPJBV9Tzoiv vCAfuqyBqltjGbz5eowygpTT67suKTgto+eCzS9V86XlBrU5CGzvCqmnsgonbzQg PBZPucDjlKEbWS8Hl6BAdh+47gGALa1JCZA5KMkoAbZHJ70dm33GmjKo0aSK1SKO OVbKBxQKRwBm2E5WOPjkPTklteAAsJ4IyHzIa9WXeE+7rUaSFDLG7B4Q5hlpdBOl Lzg9bKuEdFWneFaLtT3vFoBRh0euU24lO6RrS5gi3C4LccaRX5UOH4aNkfqapRMa m+ncPr4RnYNiOg== -----END CERTIFICATE-----Generated at Wed Dec 31 21:06:22 2025 by rpki-client