This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft File: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json) Hash identifier: R5OuZgxlcNxNCwlU5UnxejnZuhN4CPYgw0onT0+pjVA= Subject key identifier: BC:BE:7E:AA:DE:3C:40:1D:DE:F4:C5:F0:F2:25:91:ED:FD:14:BC:5D Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a Certificate serial: 019AF23F9D6B58121F1A5C822021BF594C9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:00:46 +0000 Manifest this update: Sat 06 Dec 2025 06:00:46 +0000 Manifest next update: Sun 07 Dec 2025 06:00:46 +0000 Files and hashes: 1: CabH8yqn5S_kOgWDLQqFiKvzRos.roa (hash: 6ag0+5Ik/WQxtmqQPOIuQwUXIuLv9ELuLcs7tX6aoMI=) 2: VQo-At29Fu-EX7b5D46S6kL9nbI.roa (hash: jdnjmvA4QLfORK84+jjkf8uapja4VMoDv0JpxJYMg64=) 3: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: q/fxanCjaUjDlDQwkQabYa2p6UzhH9jFHzUMSjUQX74=) 4: wB7zO9znSbsEaFVzHFAP7dE2rN0.roa (hash: oKOkiDomqnZDUq9zEDTivQ41nb+DuiZJIDMY2vxiFOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9d:6b:58:12:1f:1a:5c:82:20:21:bf:59:4c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a Validity Not Before: Dec 6 06:00:46 2025 GMT Not After : Dec 7 06:00:46 2025 GMT Subject: CN=bcbe7eaade3c401ddef4c5f0f22591edfd14bc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:93:b9:71:3f:e4:3e:cc:e8:84:68:b2:7e:11: aa:8e:a5:18:16:a6:12:d8:e6:d0:c3:d1:2e:81:19: b5:72:fb:2f:64:fe:47:04:26:1b:f0:e2:60:38:08: d5:78:ce:49:cd:80:80:1a:19:64:e8:48:6a:8f:5a: 9e:d7:d1:72:cb:be:f6:58:ff:b4:1b:be:cd:7b:62: b0:3b:ba:5b:8a:da:c3:fe:f4:3d:fb:03:d8:7c:2f: 80:34:a4:4d:34:4b:7d:9f:d1:1d:09:31:64:68:32: 71:41:df:9a:a8:12:d3:a9:96:0a:9b:10:90:e1:3a: 72:9a:6f:52:68:5b:3b:db:31:5c:ed:e9:7b:57:f6: 5a:23:af:de:a5:a3:72:5d:ac:13:bc:00:e7:5b:18: 26:c0:11:00:6e:0f:d2:09:a3:31:dd:72:e4:3a:e6: d6:83:29:8b:04:2d:f8:7d:d3:a3:8a:56:63:8a:84: 30:17:2f:89:da:21:a7:ad:dc:dc:f8:e8:d3:12:3a: a9:2f:64:e7:f9:43:91:e9:b8:41:3a:d2:96:f5:0d: 7b:04:f1:5f:5e:73:e5:b0:65:d0:91:17:88:97:0e: 88:3f:95:1a:c8:7a:8b:26:49:b2:da:ba:bf:6e:e3: d8:42:17:54:08:fb:21:c4:fd:d4:1c:01:93:58:95: 4d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BE:7E:AA:DE:3C:40:1D:DE:F4:C5:F0:F2:25:91:ED:FD:14:BC:5D X509v3 Authority Key Identifier: keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:08:91:79:54:f2:ba:17:e9:11:63:65:d1:b0:3e:f5:3e:eb: 75:36:f2:b0:5f:cd:01:a5:62:59:01:3c:da:58:63:2a:73:20: ed:36:1a:74:c9:52:7b:a7:92:9b:ef:b2:7a:48:40:5d:ac:ef: 82:aa:84:c4:94:4a:ca:e8:31:15:6a:41:b1:fc:4b:f3:ab:3f: 83:9f:6b:44:86:e5:67:74:c1:bc:47:7f:8f:ed:48:0d:b8:1b: 4a:6f:ab:01:9c:4d:5e:5c:6d:87:13:f4:a0:43:3c:d0:dc:9d: 6d:ee:68:9d:4d:cf:62:40:c8:16:80:fa:ae:d3:ba:d8:8f:79: 76:22:cf:a8:c4:b9:9d:2b:2b:31:5b:31:86:51:ba:c3:a2:ce: 6c:64:bf:51:57:7c:ba:01:ba:98:b4:fb:6d:78:12:e8:4a:f4: 17:8d:d7:96:5f:ec:a2:eb:b6:f5:db:80:6c:da:62:22:56:ee: 92:ea:e0:73:39:80:60:f0:53:e3:93:09:37:9a:96:1d:42:8b: 97:5b:95:df:eb:d2:52:28:c6:40:30:78:3c:de:d1:7a:ab:6b: 32:c9:27:b2:71:e4:51:22:07:00:53:0a:e0:dd:eb:53:85:5b: c6:31:a6:cd:35:11:25:56:d5:05:f9:1a:03:54:1e:3a:a6:20: bd:35:20:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP51rWBIfGlyCICG/WUyaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMGNkNTBkYjQzN2M3ODk0NjRjYjY0ZGZhYmZlNDA1Y2E5 ODFiMWEwHhcNMjUxMjA2MDYwMDQ2WhcNMjUxMjA3MDYwMDQ2WjAzMTEwLwYDVQQD EyhiY2JlN2VhYWRlM2M0MDFkZGVmNGM1ZjBmMjI1OTFlZGZkMTRiYzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pO5cT/kPszohGiyfhGqjqUYFqYS 2ObQw9EugRm1cvsvZP5HBCYb8OJgOAjVeM5JzYCAGhlk6Ehqj1qe19Fyy772WP+0 G77Ne2KwO7pbitrD/vQ9+wPYfC+ANKRNNEt9n9EdCTFkaDJxQd+aqBLTqZYKmxCQ 4Tpymm9SaFs72zFc7el7V/ZaI6/epaNyXawTvADnWxgmwBEAbg/SCaMx3XLkOubW gymLBC34fdOjilZjioQwFy+J2iGnrdzc+OjTEjqpL2Tn+UOR6bhBOtKW9Q17BPFf XnPlsGXQkReIlw6IP5UayHqLJkmy2rq/buPYQhdUCPshxP3UHAGTWJVNtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLy+fqrePEAd3vTF8PIlke39FLxdMB8GA1UdIwQY MBaAFIEM1Q20N8eJRky2Tfq/5AXKmBsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1F6VkRiUTN4NGxHVExaTi1yX2tCY3FZR3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lY2FhOTYtOWFmNi00Yjk5LTk1N2Yt NmI3NTk5ZmNkYzMzLzEvZ1F6VkRiUTN4NGxHVExaTi1yX2tCY3FZR3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lY2FhOTYtOWFmNi00Yjk5LTk1N2YtNmI3NTk5ZmNkYzMz LzEvZ1F6VkRiUTN4NGxHVExaTi1yX2tCY3FZR3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQiReVTy uhfpEWNl0bA+9T7rdTbysF/NAaViWQE82lhjKnMg7TYadMlSe6eSm++yekhAXazv gqqExJRKyugxFWpBsfxL86s/g59rRIblZ3TBvEd/j+1IDbgbSm+rAZxNXlxthxP0 oEM80Nydbe5onU3PYkDIFoD6rtO62I95diLPqMS5nSsrMVsxhlG6w6LObGS/UVd8 ugG6mLT7bXgS6Er0F43Xll/souu29duAbNpiIlbukurgczmAYPBT45MJN5qWHUKL l1uV3+vSUijGQDB4PN7ReqtrMsknsnHkUSIHAFMK4N3rU4VbxjGmzTURJVbVBfka A1QeOqYgvTUgiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:39 2025 by rpki-client