This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft File: GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft (raw, json) Hash identifier: dYq4oWYsvloh9GfPClcFFSXGO9zmmptDKhx+vNtdpkQ= Subject key identifier: 29:01:60:BD:FD:41:57:B3:56:92:D7:A0:66:AF:92:92:26:26:AF:79 Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59 Certificate issuer: /CN=1902391799337601331f5a12af11e9f4f6421159 Certificate serial: 019B6D6ABCE8C6660E033696A1777E3E561F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 04:01:10 +0000 Manifest this update: Tue 30 Dec 2025 04:01:10 +0000 Manifest next update: Wed 31 Dec 2025 04:01:10 +0000 Files and hashes: 1: GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl (hash: 87SxMXdZbhEpaL1Ul1LkFxuyJvFWmltFn5EP5Pd/zMc=) 2: MG8GkG1guL2JPQamlCCVL0WmXAU.roa (hash: zOqvBBG8dg13+yUZPiGoLbhSAZEkww5TYWxAzF0vCsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:bc:e8:c6:66:0e:03:36:96:a1:77:7e:3e:56:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1902391799337601331f5a12af11e9f4f6421159 Validity Not Before: Dec 30 04:01:10 2025 GMT Not After : Dec 31 04:01:10 2025 GMT Subject: CN=290160bdfd4157b35692d7a066af92922626af79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:20:04:6e:6c:fe:1d:e4:23:0a:23:61:26:33: 65:79:19:eb:c3:b6:76:6e:a9:e4:c7:cd:71:c0:1d: 7e:5f:2f:39:65:8b:35:f0:88:b3:be:8a:4e:47:79: f0:94:51:fb:75:bc:b2:b3:d8:47:0f:b2:8c:ff:9f: 73:57:23:53:ac:76:8f:70:ed:60:d7:8f:07:94:de: d0:55:f7:44:69:ad:ba:b8:e1:d6:77:07:83:52:3f: eb:4f:a2:11:37:d3:25:ef:23:35:d4:3a:d5:3b:46: 38:c8:29:01:63:bc:d9:b9:fb:8a:fe:7a:29:27:77: c8:61:af:88:8e:a3:03:7b:9b:26:31:bb:b5:15:3b: df:c2:90:16:2b:2d:c2:09:0f:94:59:73:92:ec:60: 44:d3:9a:51:2a:79:ec:d5:b4:76:34:b4:62:a4:76: 26:15:6e:3f:5a:b6:85:b6:51:38:4b:4b:54:a8:76: ca:5a:2d:6e:79:01:16:a6:6f:04:d4:9d:24:61:a7: cf:46:1d:fd:b8:1c:49:17:a4:d9:22:42:b6:42:07: 7e:a7:43:51:df:23:e1:99:0e:b7:b5:66:e5:e5:09: 1e:1a:4b:88:d7:c9:e5:17:c0:d8:62:f9:00:74:49: 54:29:b0:81:3b:82:60:62:7a:24:7e:89:5f:a3:20: b5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:01:60:BD:FD:41:57:B3:56:92:D7:A0:66:AF:92:92:26:26:AF:79 X509v3 Authority Key Identifier: keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:84:7a:0c:46:a4:20:7b:d5:93:65:51:d5:97:28:a1:f5:7d: 86:a9:a8:fa:5c:26:17:b0:d2:a7:99:30:eb:c7:b4:62:7e:08: ca:75:c2:c9:74:e5:db:b2:75:4f:d9:80:00:ef:06:31:b2:84: cd:a2:56:f2:f3:92:60:49:d2:5f:51:6f:d2:ed:48:d3:a2:09: f5:92:6a:d5:c7:b4:da:5b:8b:58:64:2d:a7:fb:c8:ca:f8:1e: 6a:79:7c:f7:ac:2c:c7:d5:90:4d:06:3a:9c:64:b3:ba:cd:6a: 61:0c:74:4b:1d:22:07:22:de:0e:c0:d7:3e:24:00:07:e7:9c: 6a:98:b8:3d:4d:57:29:57:5b:93:4b:f8:df:57:0c:31:9b:66: 74:a5:17:96:2d:83:1a:be:10:27:7b:e3:18:49:0a:42:36:8d: 75:df:54:da:c3:2b:60:39:54:3e:2b:5a:23:25:d8:0e:9f:fb: e5:b2:c6:b5:ec:1f:6c:01:3f:68:94:11:16:c8:34:c1:8f:af: 0e:f6:e7:a2:1b:1d:ff:7b:00:8e:e1:e5:47:85:7a:b9:e7:a3: 10:63:a2:74:3b:76:bc:ce:28:8f:6b:c1:30:fd:b2:66:9f:fa: 02:77:a8:ba:e5:b6:6b:d5:2f:5a:a3:2b:4d:42:84:e2:b0:19: 54:8f:37:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttarzoxmYOAzaWoXd+PlYfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDIzOTE3OTkzMzc2MDEzMzFmNWExMmFmMTFlOWY0ZjY0 MjExNTkwHhcNMjUxMjMwMDQwMTEwWhcNMjUxMjMxMDQwMTEwWjAzMTEwLwYDVQQD EygyOTAxNjBiZGZkNDE1N2IzNTY5MmQ3YTA2NmFmOTI5MjI2MjZhZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCAEbmz+HeQjCiNhJjNleRnrw7Z2 bqnkx81xwB1+Xy85ZYs18IizvopOR3nwlFH7dbyys9hHD7KM/59zVyNTrHaPcO1g 148HlN7QVfdEaa26uOHWdweDUj/rT6IRN9Ml7yM11DrVO0Y4yCkBY7zZufuK/nop J3fIYa+IjqMDe5smMbu1FTvfwpAWKy3CCQ+UWXOS7GBE05pRKnns1bR2NLRipHYm FW4/WraFtlE4S0tUqHbKWi1ueQEWpm8E1J0kYafPRh39uBxJF6TZIkK2Qgd+p0NR 3yPhmQ63tWbl5QkeGkuI18nlF8DYYvkAdElUKbCBO4JgYnokfolfoyC1WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkBYL39QVezVpLXoGavkpImJq95MB8GA1UdIwQY MBaAFBkCOReZM3YBMx9aEq8R6fT2QhFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FJNUY1a3pkZ0V6SDFvU3J4SHA5UFpDRVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hOWZmMWEtZDU4MC00YjQyLWJkODct NTU5NzI2MGY2NWVlLzEvR1FJNUY1a3pkZ0V6SDFvU3J4SHA5UFpDRVZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hOWZmMWEtZDU4MC00YjQyLWJkODctNTU5NzI2MGY2NWVl LzEvR1FJNUY1a3pkZ0V6SDFvU3J4SHA5UFpDRVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYR6DEak IHvVk2VR1ZcoofV9hqmo+lwmF7DSp5kw68e0Yn4IynXCyXTl27J1T9mAAO8GMbKE zaJW8vOSYEnSX1Fv0u1I06IJ9ZJq1ce02luLWGQtp/vIyvgeanl896wsx9WQTQY6 nGSzus1qYQx0Sx0iByLeDsDXPiQAB+ecapi4PU1XKVdbk0v431cMMZtmdKUXli2D Gr4QJ3vjGEkKQjaNdd9U2sMrYDlUPitaIyXYDp/75bLGtewfbAE/aJQRFsg0wY+v Dvbnohsd/3sAjuHlR4V6ueejEGOidDt2vM4oj2vBMP2yZp/6AneouuW2a9UvWqMr TUKE4rAZVI83kg== -----END CERTIFICATE-----Generated at Tue Dec 30 12:29:22 2025 by rpki-client