This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
File: Gqq6fafI82yLJ1ynOEkc7cy14xI.mft (raw, json)
Hash identifier: vgHK38dDVmUGedFJc3wM8cHECHrbBLH59LgSfes64rA=
Subject key identifier: 42:5B:B1:F0:C4:F2:3D:DA:52:2C:64:AA:15:BE:04:39:04:F1:CB:EE
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 019B2DB0B6C0BFD0FDDF629B872B0AA9146E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
Manifest number: 0B8F
Signing time: Wed 17 Dec 2025 19:01:54 +0000
Manifest this update: Wed 17 Dec 2025 19:01:54 +0000
Manifest next update: Thu 18 Dec 2025 19:01:54 +0000
Files and hashes: 1: Gqq6fafI82yLJ1ynOEkc7cy14xI.crl (hash: C9Q0+Gb7NNaePFoTMwkXaD4lEBoVAOhP7G932+QWd24=)
2: SrGxiEcbv0Zc7-cVhdHTCkDoX9w.roa (hash: iavVdmhGOCEa+iXrvr89fSP+yPeTS+0oRnvgbRj+J3g=)
3: qdU5r0eoyeBHUa1NS90_R0v_QXg.roa (hash: VQ2X9ZLs6HKDrETPNNW9FW4YLxSUU+RRG8UFpA6pPfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2d:b0:b6:c0:bf:d0:fd:df:62:9b:87:2b:0a:a9:14:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Dec 17 19:01:54 2025 GMT
Not After : Dec 18 19:01:54 2025 GMT
Subject: CN=425bb1f0c4f23dda522c64aa15be043904f1cbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:d1:c3:93:cd:19:5e:a9:5e:6a:4d:f4:d4:
f2:17:7e:3d:4e:9f:e3:99:85:09:7c:f8:d2:1f:5a:
84:29:b0:4c:7b:0b:fe:78:b0:21:44:e7:bc:15:fb:
32:04:f3:e7:62:a3:75:1f:58:a2:6e:4f:1e:ff:3c:
8a:34:30:a8:f2:bd:13:4a:22:54:b6:a6:5b:37:86:
9b:eb:0e:dd:12:72:52:5b:a9:a9:e4:02:2c:5f:13:
3e:79:e5:30:4b:76:7c:ac:7a:52:e1:d9:8e:2d:99:
c0:d8:f0:a2:99:22:fc:3c:01:74:52:09:78:0e:3e:
1e:f9:ae:6d:06:2d:27:90:9f:c9:ff:69:75:49:7b:
c5:89:aa:8b:49:6c:4f:4c:0c:55:18:af:e2:19:7a:
91:2a:80:02:5a:a7:31:01:83:e5:54:e8:dc:e2:5d:
e4:68:35:d9:28:dd:d7:84:9c:5c:eb:bd:b4:80:33:
dd:b9:5c:49:25:b7:f9:4d:90:6e:6d:08:0e:af:98:
15:de:aa:be:a7:c9:c0:73:b9:d3:6a:04:c9:89:0b:
1f:4b:43:58:b3:f3:b1:17:ca:54:fe:18:5f:e1:d1:
e5:01:4c:cd:40:b9:51:82:4c:c1:f3:3c:97:1e:0f:
6c:20:af:2a:c6:6b:0f:6b:a0:f9:0c:17:e4:b1:b1:
22:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5B:B1:F0:C4:F2:3D:DA:52:2C:64:AA:15:BE:04:39:04:F1:CB:EE
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:44:cf:9d:7b:a2:5f:f0:c9:78:09:31:ae:01:84:d3:a6:38:
3c:3c:f8:ef:b5:ba:89:37:fb:bc:91:13:64:ac:a9:47:32:68:
91:be:19:c9:ec:ea:d2:94:ef:3d:f4:51:5c:16:b2:ba:f7:82:
86:bb:4c:80:e8:c4:bf:83:7c:91:5b:61:72:cd:1e:b8:23:e7:
21:ba:29:8f:ce:89:b2:d5:1d:c2:cc:37:e0:a5:a3:11:01:ab:
a6:85:6d:52:0e:e4:91:2c:bc:79:36:0d:87:ca:3b:6e:0e:25:
af:54:0f:43:ce:03:a0:a5:6c:c5:7b:41:0f:8d:43:90:53:25:
8a:e1:a4:7f:21:d4:85:87:5b:ff:5c:f0:1b:6d:1f:ae:36:3d:
f5:ec:40:99:7b:a7:46:05:1c:83:10:55:90:a1:0b:44:ea:6d:
72:70:28:a3:d9:a0:b0:b0:89:82:e5:e9:38:96:d4:c0:65:be:
7d:6e:9c:a5:68:f8:5b:4c:7d:16:a3:15:ac:d2:7d:2a:c7:ba:
b8:8d:7c:e7:25:98:75:65:6c:ad:8d:5a:19:96:46:62:84:47:
da:07:81:45:06:ee:b3:c8:51:48:ab:01:39:c0:1b:0a:3d:a6:
3c:61:8e:d6:22:72:4d:3c:2a:c3:19:b3:85:0c:70:e4:70:73:
01:bb:51:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 04:56:54 2025 by rpki-client