This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft File: gqo-xYuoRtJ6eXERxVhRUwANug4.mft (raw, json) Hash identifier: 4zGIKW8HqQJuWs9WrfZtCk29z8N1O7IdHy3Top0xgKs= Subject key identifier: D2:9B:06:71:68:3C:4A:0B:28:49:6B:79:63:F2:C3:55:3B:12:D9:42 Authority key identifier: 82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E Certificate issuer: /CN=82aa3ec58ba846d27a797111c5585153000dba0e Certificate serial: 019AF277356A2D65DC2EAED6D1CBA7931167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:01:29 +0000 Manifest this update: Sat 06 Dec 2025 07:01:29 +0000 Manifest next update: Sun 07 Dec 2025 07:01:29 +0000 Files and hashes: 1: gqo-xYuoRtJ6eXERxVhRUwANug4.crl (hash: lXRSqkdnUlBfAkzN05uHR4XeVIP38BrxxjIvaYH/yV0=) 2: lJago70cI_xvyZhFfsg3Aw9OGeM.roa (hash: fi1kzkQyoRujjlEGa/d9WEUMMxSjDAb7GkNQ5Rq5Cis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:35:6a:2d:65:dc:2e:ae:d6:d1:cb:a7:93:11:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82aa3ec58ba846d27a797111c5585153000dba0e Validity Not Before: Dec 6 07:01:29 2025 GMT Not After : Dec 7 07:01:29 2025 GMT Subject: CN=d29b0671683c4a0b28496b7963f2c3553b12d942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:66:c2:a8:80:5a:7a:51:a1:65:3e:1b:f0:b7: 48:0e:aa:e5:71:3c:24:b1:85:e7:d3:87:a5:4d:bf: f9:63:89:ab:b3:66:00:82:7e:2d:00:a9:53:2e:fc: 1a:a8:d5:bc:8a:ad:f9:5d:09:d8:39:dc:d0:f3:9e: 99:2f:65:34:10:55:41:f4:01:48:c3:86:b3:97:62: 7b:b9:f7:dd:f6:00:36:fb:76:c3:2d:5c:04:e3:30: f7:a3:f2:c6:39:25:f5:66:79:29:1b:0f:f4:df:60: 53:3b:77:69:b0:59:5d:8c:d4:ce:9d:b9:c7:ba:48: b4:ff:0e:96:86:c3:e5:8d:49:c6:61:6c:58:e1:a8: 5d:fd:c5:c1:39:5c:44:77:70:36:a6:4e:3c:fb:e5: 28:f7:0c:82:72:18:ac:fc:2b:75:1d:e1:3a:08:ed: d1:90:92:a2:df:95:56:0f:ae:90:67:8b:61:27:1e: c8:15:9e:e4:e1:ef:cf:0c:56:92:46:bc:32:82:4e: 14:42:17:e8:c3:76:5c:22:52:2c:39:91:e5:46:4e: 27:71:2d:76:9e:cf:01:f6:4d:a4:24:57:ef:8d:c6: c4:6f:d0:45:a1:0c:ca:3e:73:59:92:c0:4b:47:1f: e9:f9:73:87:ea:5c:30:ec:77:67:ad:82:30:ab:0c: 20:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9B:06:71:68:3C:4A:0B:28:49:6B:79:63:F2:C3:55:3B:12:D9:42 X509v3 Authority Key Identifier: keyid:82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:86:3d:b8:33:88:7f:eb:66:92:4f:cd:b4:77:39:49:20:69: 24:63:5a:1d:bb:9e:2d:ef:06:fc:8e:3f:d8:b0:4e:f1:bf:87: 71:ea:d8:93:38:8e:8f:a6:5a:e0:ff:de:1d:9d:a7:2d:43:4f: fc:22:eb:00:13:c7:f1:6b:bb:d9:6b:03:7e:48:47:ae:7e:d1: 79:ae:7c:c4:ad:27:ea:6c:5e:3f:b6:a3:a0:84:65:a9:61:aa: 45:ab:4d:dd:29:5e:ca:43:05:88:90:68:ca:81:0f:fc:a4:1c: 93:38:36:28:2c:51:c6:f5:13:f9:4a:52:64:5b:39:bb:e1:d2: d7:04:dd:ff:91:b6:00:dd:f6:a1:8b:e3:78:59:38:54:f8:d8: c8:7b:77:cc:bd:7f:89:d0:53:b5:c3:23:07:d8:f6:b3:47:d7: 6e:49:22:16:6b:02:55:3a:3b:45:a9:6b:e2:09:e2:5b:20:70: 26:ab:d9:71:ac:0c:05:ef:8e:e1:4a:a0:21:f2:a2:31:e9:e4: e9:72:26:61:f9:e2:81:f0:da:14:31:3c:bc:f5:03:31:1b:55: 6e:0c:c1:50:f2:ac:c2:ff:fe:66:c1:9c:ea:a3:98:5b:36:6b: 4f:87:e1:61:8a:cc:e7:fe:51:19:f9:60:09:fa:f3:3d:48:5e: 78:3a:ab:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzVqLWXcLq7W0cunkxFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYWEzZWM1OGJhODQ2ZDI3YTc5NzExMWM1NTg1MTUzMDAw ZGJhMGUwHhcNMjUxMjA2MDcwMTI5WhcNMjUxMjA3MDcwMTI5WjAzMTEwLwYDVQQD EyhkMjliMDY3MTY4M2M0YTBiMjg0OTZiNzk2M2YyYzM1NTNiMTJkOTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWbCqIBaelGhZT4b8LdIDqrlcTwk sYXn04elTb/5Y4mrs2YAgn4tAKlTLvwaqNW8iq35XQnYOdzQ856ZL2U0EFVB9AFI w4azl2J7uffd9gA2+3bDLVwE4zD3o/LGOSX1ZnkpGw/032BTO3dpsFldjNTOnbnH uki0/w6WhsPljUnGYWxY4ahd/cXBOVxEd3A2pk48++Uo9wyCchis/Ct1HeE6CO3R kJKi35VWD66QZ4thJx7IFZ7k4e/PDFaSRrwygk4UQhfow3ZcIlIsOZHlRk4ncS12 ns8B9k2kJFfvjcbEb9BFoQzKPnNZksBLRx/p+XOH6lww7HdnrYIwqwwg2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKbBnFoPEoLKElreWPyw1U7EtlCMB8GA1UdIwQY MBaAFIKqPsWLqEbSenlxEcVYUVMADboOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMWM3ZjktYWQ5Yy00YmI3LWFjNDct OTI3ZGQ0NTlhYzVjLzEvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iMWM3ZjktYWQ5Yy00YmI3LWFjNDctOTI3ZGQ0NTlhYzVj LzEvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYY9uDOI f+tmkk/NtHc5SSBpJGNaHbueLe8G/I4/2LBO8b+HcerYkziOj6Za4P/eHZ2nLUNP /CLrABPH8Wu72WsDfkhHrn7Rea58xK0n6mxeP7ajoIRlqWGqRatN3SleykMFiJBo yoEP/KQckzg2KCxRxvUT+UpSZFs5u+HS1wTd/5G2AN32oYvjeFk4VPjYyHt3zL1/ idBTtcMjB9j2s0fXbkkiFmsCVTo7Ralr4gniWyBwJqvZcawMBe+O4UqgIfKiMenk 6XImYfnigfDaFDE8vPUDMRtVbgzBUPKswv/+ZsGc6qOYWzZrT4fhYYrM5/5RGflg CfrzPUheeDqroA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:12 2025 by rpki-client