This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft File: gPI_QpUEIDwYlzeiB05T8u_GT8c.mft (raw, json) Hash identifier: Mvbb9wJbwwSOa7zGosCAsRP+yqYlI7CV54TyLcpV8Uk= Subject key identifier: 50:81:C5:B0:77:6D:C3:D9:E3:A2:A2:44:3D:26:39:C3:45:37:93:99 Authority key identifier: 80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7 Certificate issuer: /CN=80f23f429504203c189737a2074e53f2efc64fc7 Certificate serial: 019AF35230157DD6AD52390AE29B0E97734F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft Manifest number: 0207 Signing time: Sat 06 Dec 2025 11:00:40 +0000 Manifest this update: Sat 06 Dec 2025 11:00:40 +0000 Manifest next update: Sun 07 Dec 2025 11:00:40 +0000 Files and hashes: 1: 5v0hUEBxgEJ_Wz85dg0QD5wiMr4.roa (hash: AOgJD9izw5WZn+hE7i6Z6aoy52p5jFj9e/Qz0bGyFWk=) 2: gPI_QpUEIDwYlzeiB05T8u_GT8c.crl (hash: /Qx05j/ZYy14fFQtFHky2k5SFh4Uq0d7niHQFmD5Z60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:30:15:7d:d6:ad:52:39:0a:e2:9b:0e:97:73:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80f23f429504203c189737a2074e53f2efc64fc7 Validity Not Before: Dec 6 11:00:40 2025 GMT Not After : Dec 7 11:00:40 2025 GMT Subject: CN=5081c5b0776dc3d9e3a2a2443d2639c345379399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f4:00:27:48:1b:30:46:44:33:16:ba:35:77: 88:1f:17:a9:6f:e7:40:12:4e:e7:84:c6:c8:e1:f1: ff:3d:24:a5:53:30:76:11:d4:20:f8:ee:d0:99:f1: 76:7d:ec:79:09:ac:79:1a:e0:3e:37:21:b1:71:c6: ce:f0:c1:48:ae:c4:7f:46:7b:c7:8b:b6:c8:06:b2: 33:69:71:f9:c8:d5:34:c8:3f:13:78:e3:23:58:81: 2e:92:08:bf:86:b3:61:67:b7:b4:e5:c1:6b:2b:92: 27:6b:d8:04:eb:d1:2c:1a:af:99:99:65:33:12:06: 36:7b:36:8a:39:1c:a5:42:ae:36:32:7e:29:a9:65: c8:f9:0d:0a:d3:fc:4d:3f:12:c7:ba:80:50:68:b2: 4b:32:4f:1d:a2:bb:9c:7a:32:e0:8d:e8:f7:f7:9c: 20:d6:22:70:6b:58:8f:0a:af:43:51:62:56:19:83: 26:e9:a7:b0:28:7d:c1:2c:7a:9c:25:e8:b8:33:ab: c4:f9:17:ec:09:d9:ee:ef:83:5d:86:5b:20:5e:7b: e5:cc:40:d8:13:75:23:e8:63:b4:f5:2d:6d:4b:ca: ca:56:a7:8b:ee:ce:d1:e2:67:4b:92:55:e9:b1:fe: 8b:1c:d5:26:a8:8b:14:6f:ea:d0:c9:34:c1:e5:84: a2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:81:C5:B0:77:6D:C3:D9:E3:A2:A2:44:3D:26:39:C3:45:37:93:99 X509v3 Authority Key Identifier: keyid:80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:e6:57:9d:43:63:e3:f2:15:47:c4:d4:6f:0a:58:69:a9:af: 80:02:bf:87:55:a0:14:bb:32:23:ad:91:19:9b:ff:96:e3:bb: 1b:ec:30:ad:5d:ce:e3:f6:01:1a:a3:22:84:44:0f:b9:d5:ee: ba:2b:fe:62:aa:4e:2d:aa:63:eb:1e:ca:dd:46:8e:d9:a1:6f: f1:d6:69:98:16:ca:d7:ef:86:16:87:af:16:af:82:c7:fb:74: 49:8d:2f:6a:33:14:f5:d9:bc:8d:51:4c:2f:4c:8d:c9:17:ba: 6b:7c:ef:3a:de:65:69:13:f0:88:31:23:52:45:3a:e0:d2:0b: a0:5a:f8:1c:51:b1:8a:00:67:28:a5:aa:73:1b:57:e8:fe:f0: 22:d9:77:b4:ce:c8:52:23:1d:4f:41:8c:d4:71:15:fb:94:66: 91:de:a9:0b:13:39:f0:09:60:c4:05:d1:3d:00:a0:66:23:81: 59:8a:f3:00:32:d4:df:a3:09:5d:4c:bd:b4:c9:56:8c:94:ec: f5:31:7d:44:b2:68:3e:cd:ce:30:cd:01:e4:e7:2c:87:fc:64: 7e:8c:ac:12:54:7c:6e:16:69:e4:40:b1:3b:80:83:38:21:57: d3:62:65:62:b2:68:3f:9e:a3:6f:25:a8:f9:7f:35:ce:fb:c8: 5d:49:7c:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjAVfdatUjkK4psOl3NPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZjIzZjQyOTUwNDIwM2MxODk3MzdhMjA3NGU1M2YyZWZj NjRmYzcwHhcNMjUxMjA2MTEwMDQwWhcNMjUxMjA3MTEwMDQwWjAzMTEwLwYDVQQD Eyg1MDgxYzViMDc3NmRjM2Q5ZTNhMmEyNDQzZDI2MzljMzQ1Mzc5Mzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfQAJ0gbMEZEMxa6NXeIHxepb+dA Ek7nhMbI4fH/PSSlUzB2EdQg+O7QmfF2fex5Cax5GuA+NyGxccbO8MFIrsR/RnvH i7bIBrIzaXH5yNU0yD8TeOMjWIEukgi/hrNhZ7e05cFrK5Ina9gE69EsGq+ZmWUz EgY2ezaKORylQq42Mn4pqWXI+Q0K0/xNPxLHuoBQaLJLMk8dorucejLgjej395wg 1iJwa1iPCq9DUWJWGYMm6aewKH3BLHqcJei4M6vE+RfsCdnu74NdhlsgXnvlzEDY E3Uj6GO09S1tS8rKVqeL7s7R4mdLklXpsf6LHNUmqIsUb+rQyTTB5YSiUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCBxbB3bcPZ46KiRD0mOcNFN5OZMB8GA1UdIwQY MBaAFIDyP0KVBCA8GJc3ogdOU/Lvxk/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BJX1FwVUVJRHdZbHplaUIwNVQ4dV9HVDhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mNzljYmMtODQ4ZC00ZjNlLThkYzEt ZDUxMTQxY2NkYzA2LzEvZ1BJX1FwVUVJRHdZbHplaUIwNVQ4dV9HVDhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mNzljYmMtODQ4ZC00ZjNlLThkYzEtZDUxMTQxY2NkYzA2 LzEvZ1BJX1FwVUVJRHdZbHplaUIwNVQ4dV9HVDhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+ZXnUNj 4/IVR8TUbwpYaamvgAK/h1WgFLsyI62RGZv/luO7G+wwrV3O4/YBGqMihEQPudXu uiv+YqpOLapj6x7K3UaO2aFv8dZpmBbK1++GFoevFq+Cx/t0SY0vajMU9dm8jVFM L0yNyRe6a3zvOt5laRPwiDEjUkU64NILoFr4HFGxigBnKKWqcxtX6P7wItl3tM7I UiMdT0GM1HEV+5Rmkd6pCxM58AlgxAXRPQCgZiOBWYrzADLU36MJXUy9tMlWjJTs 9TF9RLJoPs3OMM0B5Ocsh/xkfoysElR8bhZp5ECxO4CDOCFX02JlYrJoP56jbyWo +X81zvvIXUl8+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 21:52:52 2025 by rpki-client