This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft File: GqwOVjNDfnAN-YWImWKGzydis5c.mft (raw, json) Hash identifier: wtKXuZNek7BPHgUnXYSAkFSAx/C17KMkbKCkcvOwjFQ= Subject key identifier: AF:C6:85:12:81:05:38:8A:15:B6:08:86:95:60:04:36:55:A8:FD:36 Authority key identifier: 1A:AC:0E:56:33:43:7E:70:0D:F9:85:88:99:62:86:CF:27:62:B3:97 Certificate issuer: /CN=1aac0e5633437e700df98588996286cf2762b397 Certificate serial: 019AF49BE66C2FB754EAD75F71BA2D2A2EF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqwOVjNDfnAN-YWImWKGzydis5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 17:00:49 +0000 Manifest this update: Sat 06 Dec 2025 17:00:49 +0000 Manifest next update: Sun 07 Dec 2025 17:00:49 +0000 Files and hashes: 1: GqwOVjNDfnAN-YWImWKGzydis5c.crl (hash: UOkEvoD9NQ8zMIfuCVZUZ46xTZvCm0v3QCdKROlju5I=) 2: Z7scd0bqOcooSWNO6P1-J8lD1ZI.roa (hash: KdiHC1KssZd8y+s+NZVmdEHh2GbufRCimiylYpM1VS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft rsync://rpki.ripe.net/repository/DEFAULT/GqwOVjNDfnAN-YWImWKGzydis5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:e6:6c:2f:b7:54:ea:d7:5f:71:ba:2d:2a:2e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aac0e5633437e700df98588996286cf2762b397 Validity Not Before: Dec 6 17:00:49 2025 GMT Not After : Dec 7 17:00:49 2025 GMT Subject: CN=afc685128105388a15b608869560043655a8fd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:35:5c:bf:74:e9:88:af:37:4d:b1:d7:b0:eb: d1:73:7b:03:f3:b1:50:e5:4b:98:f7:9a:55:80:fa: e4:59:4d:3f:26:f5:be:12:23:48:59:36:08:51:35: 19:0c:b4:c7:5f:c3:5f:33:83:98:2a:32:4f:4e:1a: e3:d9:c7:cc:85:5a:4f:dc:26:f6:52:78:fe:fe:6a: 27:58:60:10:ab:32:f6:a9:e6:b5:80:b6:7a:e6:9b: 52:31:6f:74:e8:d0:ee:35:6c:c4:b6:56:ab:f4:8f: 4b:3f:38:96:40:dc:1a:b2:0a:74:cc:7f:1b:3a:e9: 64:7a:a7:63:7a:91:2a:04:d1:d0:6f:41:b7:54:2d: 9d:d7:84:6f:ee:98:33:bb:bf:2c:85:0a:b9:45:40: 13:e1:58:ac:ce:dc:0f:89:73:95:fd:5f:34:56:d0: 3b:3e:5e:31:19:14:05:1b:a3:68:65:25:0e:eb:20: 93:95:ce:92:5b:86:92:3f:0f:de:31:be:04:44:f9: 5f:39:51:f4:df:a4:2b:11:a7:3b:c5:db:9f:38:00: cb:f1:46:4b:a2:4b:00:20:f1:1f:db:67:b9:60:32: da:73:55:48:6e:04:5f:3a:9b:8c:64:e3:28:95:5a: fd:91:15:b2:5c:38:58:fc:e7:a0:26:ce:8a:54:d0: 57:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C6:85:12:81:05:38:8A:15:B6:08:86:95:60:04:36:55:A8:FD:36 X509v3 Authority Key Identifier: keyid:1A:AC:0E:56:33:43:7E:70:0D:F9:85:88:99:62:86:CF:27:62:B3:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqwOVjNDfnAN-YWImWKGzydis5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e8:25:a8:ff:a5:d7:c5:7d:33:00:08:6c:f9:44:b6:81:24: 37:e8:ce:32:07:c9:9c:dc:b3:0a:10:ba:f2:b1:7e:9b:f8:c9: ff:89:b6:a1:29:6c:2f:9b:eb:4d:d0:73:04:28:83:57:a4:d6: 09:ae:14:6a:58:17:80:37:3c:bc:14:63:57:26:b5:e2:b5:70: 9c:bb:2e:63:b1:ac:70:9b:9a:7f:a0:bb:de:b7:40:f3:8b:9a: ac:b1:82:69:75:b9:d0:09:dc:fd:e4:41:52:ef:48:03:a7:95: 80:e8:5f:02:09:4e:e9:07:5d:00:cf:42:fd:26:39:e4:09:71: 55:32:cf:34:2c:21:80:d9:13:5b:83:f9:8c:f4:db:b3:71:b0: ef:46:8f:09:25:df:8f:c2:55:3e:7a:13:7f:db:45:69:5c:ae: e3:c0:a8:5c:e1:5e:a0:b9:ae:45:2f:fe:0d:db:53:a4:c4:33: 5a:75:32:e2:a3:55:df:36:9a:af:0c:f5:42:d9:1d:30:24:af: fc:69:10:b0:f9:d8:4e:81:95:ac:3d:f5:a9:f4:36:83:ba:fe: 97:32:a7:4b:7c:ef:f0:39:53:d0:ee:5c:10:ab:b9:81:aa:0b: e6:cc:cf:aa:65:79:93:5f:71:58:02:52:1d:f0:14:6c:12:d6: b5:50:88:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+ZsL7dU6tdfcbotKi75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYWMwZTU2MzM0MzdlNzAwZGY5ODU4ODk5NjI4NmNmMjc2 MmIzOTcwHhcNMjUxMjA2MTcwMDQ5WhcNMjUxMjA3MTcwMDQ5WjAzMTEwLwYDVQQD EyhhZmM2ODUxMjgxMDUzODhhMTViNjA4ODY5NTYwMDQzNjU1YThmZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzVcv3TpiK83TbHXsOvRc3sD87FQ 5UuY95pVgPrkWU0/JvW+EiNIWTYIUTUZDLTHX8NfM4OYKjJPThrj2cfMhVpP3Cb2 Unj+/monWGAQqzL2qea1gLZ65ptSMW906NDuNWzEtlar9I9LPziWQNwasgp0zH8b OulkeqdjepEqBNHQb0G3VC2d14Rv7pgzu78shQq5RUAT4VisztwPiXOV/V80VtA7 Pl4xGRQFG6NoZSUO6yCTlc6SW4aSPw/eMb4ERPlfOVH036QrEac7xdufOADL8UZL oksAIPEf22e5YDLac1VIbgRfOpuMZOMolVr9kRWyXDhY/OegJs6KVNBXjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/GhRKBBTiKFbYIhpVgBDZVqP02MB8GA1UdIwQY MBaAFBqsDlYzQ35wDfmFiJlihs8nYrOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3F3T1ZqTkRmbkFOLVlXSW1XS0d6eWRpczVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8wZjBjNjEtMjAyYy00NjdjLTgyZGYt NTNjZDAyNjllYjU1LzEvR3F3T1ZqTkRmbkFOLVlXSW1XS0d6eWRpczVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8wZjBjNjEtMjAyYy00NjdjLTgyZGYtNTNjZDAyNjllYjU1 LzEvR3F3T1ZqTkRmbkFOLVlXSW1XS0d6eWRpczVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeglqP+l 18V9MwAIbPlEtoEkN+jOMgfJnNyzChC68rF+m/jJ/4m2oSlsL5vrTdBzBCiDV6TW Ca4UalgXgDc8vBRjVya14rVwnLsuY7GscJuaf6C73rdA84uarLGCaXW50Anc/eRB Uu9IA6eVgOhfAglO6QddAM9C/SY55AlxVTLPNCwhgNkTW4P5jPTbs3Gw70aPCSXf j8JVPnoTf9tFaVyu48CoXOFeoLmuRS/+DdtTpMQzWnUy4qNV3zaarwz1QtkdMCSv /GkQsPnYToGVrD31qfQ2g7r+lzKnS3zv8DlT0O5cEKu5gaoL5szPqmV5k19xWAJS HfAUbBLWtVCILg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:01:21 2025 by rpki-client