This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft File: Gqq6fafI82yLJ1ynOEkc7cy14xI.mft (raw, json) Hash identifier: GVim+hikE+gk4vtk4nXQncdkxPmnQ7huPJ3ciJDqeN0= Subject key identifier: C7:56:8B:CD:67:19:2B:F7:51:20:02:76:8F:89:B1:B1:B8:0E:33:93 Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12 Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312 Certificate serial: 019AF1D27316CA6D22B65D0EA7A7A53A8885 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft Manifest number: 0B70 Signing time: Sat 06 Dec 2025 04:01:32 +0000 Manifest this update: Sat 06 Dec 2025 04:01:32 +0000 Manifest next update: Sun 07 Dec 2025 04:01:32 +0000 Files and hashes: 1: Gqq6fafI82yLJ1ynOEkc7cy14xI.crl (hash: IjLp3px1uOyQ7FlynvqyiBP7iMqIttr8bYL/u6dcfs4=) 2: SrGxiEcbv0Zc7-cVhdHTCkDoX9w.roa (hash: iavVdmhGOCEa+iXrvr89fSP+yPeTS+0oRnvgbRj+J3g=) 3: qdU5r0eoyeBHUa1NS90_R0v_QXg.roa (hash: VQ2X9ZLs6HKDrETPNNW9FW4YLxSUU+RRG8UFpA6pPfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:73:16:ca:6d:22:b6:5d:0e:a7:a7:a5:3a:88:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312 Validity Not Before: Dec 6 04:01:32 2025 GMT Not After : Dec 7 04:01:32 2025 GMT Subject: CN=c7568bcd67192bf7512002768f89b1b1b80e3393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b4:da:df:b8:7f:b1:ae:5b:12:29:08:b6:33: ec:b8:3d:6d:6f:9f:d4:3d:ac:0c:52:58:a7:34:ba: de:09:03:4f:6e:08:b3:6c:d3:d3:4d:24:03:49:3c: 01:fd:6a:82:f5:2e:0d:0d:f7:82:66:6d:29:b2:4a: 1c:2e:de:28:b9:b0:f6:6c:85:50:ab:e5:e4:1a:7e: 96:2f:1c:ce:28:6c:2e:c1:4f:f4:ed:87:93:ca:9b: 32:b4:60:43:86:81:70:fa:30:4c:19:8f:46:86:f1: f0:37:39:37:66:7b:2f:4f:78:45:f4:8d:e5:16:18: eb:9e:a9:ca:fd:a0:6b:c7:7c:9f:17:f0:ef:c8:a8: f9:8e:b7:a1:a6:26:d0:b7:df:b8:fe:4e:85:37:ae: f6:f5:bd:47:22:47:c0:24:e9:72:5a:1b:21:03:c6: 1c:12:54:10:91:85:6b:1b:26:ac:d8:12:9b:a2:06: 9d:ed:59:96:5b:ce:cd:f3:1c:8e:0d:34:30:b6:1f: c6:79:5b:f6:20:30:b9:5e:01:d8:aa:0b:b2:ae:88: 13:af:11:44:1e:ac:f1:6f:e0:2c:2a:87:a9:4b:2d: 2c:f6:6f:4c:dd:94:c6:0f:ab:6f:89:46:87:df:4f: cf:44:50:33:dd:c1:05:b3:b3:b6:dc:18:53:4b:d4: f2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:56:8B:CD:67:19:2B:F7:51:20:02:76:8F:89:B1:B1:B8:0E:33:93 X509v3 Authority Key Identifier: keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:3f:f4:f4:5d:7f:af:0b:af:a6:81:50:51:c2:24:e6:e4:24: f3:67:d1:6a:7a:99:dd:1f:03:12:d1:32:c8:5b:ab:8d:06:52: 15:63:f5:6d:86:eb:5d:7a:8a:98:36:46:79:1a:f3:bc:d5:22: e7:e5:34:d3:f1:4c:b2:0d:09:48:32:77:36:3c:94:79:6f:d6: 6f:c1:41:2d:df:4e:18:24:05:b1:ff:aa:15:14:47:5e:9d:5f: 2f:fd:af:cd:89:a8:be:0c:14:d6:2f:d8:b1:80:28:b0:dc:c5: a2:2c:46:92:a8:9f:05:f8:b3:62:ec:5b:b7:3c:7f:58:6b:2e: a7:d8:55:6d:36:04:1c:b6:01:19:71:ed:eb:13:45:1d:e9:a1: 93:34:12:7b:f6:7f:83:82:3e:cf:c0:d7:e2:14:0e:d9:7a:50: 3b:5d:01:ee:95:d1:db:2c:24:93:69:d3:e0:f6:9f:25:b8:b1: 40:a8:19:1b:cb:b4:d8:b9:0f:64:52:18:25:e2:b0:cd:90:40: 01:b6:10:12:dd:6b:69:a4:ed:ec:84:c0:7a:38:f8:2c:3d:6c: 9d:f5:57:e8:b6:99:be:f0:09:98:5a:13:85:64:07:8b:0e:db: 38:6a:97:89:18:9c:91:58:8f:c9:d0:e2:f5:e4:4c:7a:f9:97: 14:74:29:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0nMWym0itl0Op6elOoiFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYWFiYTdkYTdjOGYzNmM4YjI3NWNhNzM4NDkxY2VkY2Ni NWUzMTIwHhcNMjUxMjA2MDQwMTMyWhcNMjUxMjA3MDQwMTMyWjAzMTEwLwYDVQQD EyhjNzU2OGJjZDY3MTkyYmY3NTEyMDAyNzY4Zjg5YjFiMWI4MGUzMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rTa37h/sa5bEikItjPsuD1tb5/U PawMUlinNLreCQNPbgizbNPTTSQDSTwB/WqC9S4NDfeCZm0pskocLt4oubD2bIVQ q+XkGn6WLxzOKGwuwU/07YeTypsytGBDhoFw+jBMGY9GhvHwNzk3ZnsvT3hF9I3l FhjrnqnK/aBrx3yfF/DvyKj5jrehpibQt9+4/k6FN6729b1HIkfAJOlyWhshA8Yc ElQQkYVrGyas2BKbogad7VmWW87N8xyODTQwth/GeVv2IDC5XgHYqguyrogTrxFE Hqzxb+AsKoepSy0s9m9M3ZTGD6tviUaH30/PRFAz3cEFs7O23BhTS9TyIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdWi81nGSv3USACdo+JsbG4DjOTMB8GA1UdIwQY MBaAFBqqun2nyPNsiydcpzhJHO3MteMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3FxNmZhZkk4MnlMSjF5bk9Fa2M3Y3kxNHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hNzNmMDktMWI5ZC00YzI2LWIwMWQt MGU4YTk0ODVhOWEyLzEvR3FxNmZhZkk4MnlMSjF5bk9Fa2M3Y3kxNHhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9hNzNmMDktMWI5ZC00YzI2LWIwMWQtMGU4YTk0ODVhOWEy LzEvR3FxNmZhZkk4MnlMSjF5bk9Fa2M3Y3kxNHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYj/09F1/ rwuvpoFQUcIk5uQk82fRanqZ3R8DEtEyyFurjQZSFWP1bYbrXXqKmDZGeRrzvNUi 5+U00/FMsg0JSDJ3NjyUeW/Wb8FBLd9OGCQFsf+qFRRHXp1fL/2vzYmovgwU1i/Y sYAosNzFoixGkqifBfizYuxbtzx/WGsup9hVbTYEHLYBGXHt6xNFHemhkzQSe/Z/ g4I+z8DX4hQO2XpQO10B7pXR2ywkk2nT4PafJbixQKgZG8u02LkPZFIYJeKwzZBA AbYQEt1raaTt7ITAejj4LD1snfVX6LaZvvAJmFoThWQHiw7bOGqXiRickViPydDi 9eRMevmXFHQpaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:39 2025 by rpki-client