This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft File: GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft (raw, json) Hash identifier: 7Wo4Q4AkNQWwmL0nQy8S3PSJnNPbfP2b5AHWYi1M0nU= Subject key identifier: 66:81:6F:0D:4E:08:37:48:2E:7F:20:AD:3A:BE:9E:60:19:45:54:CB Authority key identifier: 19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB Certificate issuer: /CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb Certificate serial: 019AF12CD5CAC5CB672BAA08139D009F3DBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft Manifest number: 165E Signing time: Sat 06 Dec 2025 01:00:38 +0000 Manifest this update: Sat 06 Dec 2025 01:00:38 +0000 Manifest next update: Sun 07 Dec 2025 01:00:38 +0000 Files and hashes: 1: GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl (hash: PWYRgpsguE0mKLhxICuz82tnrV4+KekkbRXwEGY7SiE=) 2: R9wvbwR8vf6XKX0eGcMmD8X8Klo.roa (hash: MTZzbOkg2UHrN+bJCxm0dSAtniaWbyC3ZD9jm9TIAQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d5:ca:c5:cb:67:2b:aa:08:13:9d:00:9f:3d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb Validity Not Before: Dec 6 01:00:38 2025 GMT Not After : Dec 7 01:00:38 2025 GMT Subject: CN=66816f0d4e0837482e7f20ad3abe9e60194554cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ea:64:b6:75:97:15:98:4c:88:cd:a8:b3:24: 16:72:b9:4b:fa:fe:4f:60:cf:34:df:c0:4d:1b:39: e2:ea:3f:17:19:13:a4:3a:65:4a:6d:86:50:6f:5a: d5:bb:e0:c7:b6:6b:6f:5c:a6:58:66:7e:9c:e6:b2: 0d:aa:b3:7a:6d:57:95:5c:d8:1d:c5:f5:e8:6f:01: de:60:ed:ac:38:b6:68:ac:dc:ac:1a:e3:34:49:b7: bc:db:c7:41:0f:1d:7e:77:f4:d7:a5:12:5a:5b:60: 0b:71:2a:a1:3b:b2:57:7a:d4:8a:26:14:69:27:36: a0:42:65:2c:9a:48:88:95:28:ed:b4:d4:8f:c6:27: 8c:29:e5:61:55:bd:12:fe:a4:58:d8:f2:68:98:8e: 1a:f6:2a:71:52:bf:df:76:7c:aa:af:3a:2c:66:a7: 64:2c:8d:7d:0b:08:a9:cb:b1:06:12:a6:6e:8e:c4: 66:49:61:07:f9:04:ea:dc:f3:2b:90:9a:b4:a4:a0: 70:3e:49:90:54:09:16:16:53:b2:15:81:40:88:fc: 35:03:19:a9:1e:ea:2c:81:b6:d6:97:ca:61:66:f5: ee:73:25:04:6e:5c:e4:22:2d:9a:ac:ca:cc:bb:77: 7f:3e:da:e3:e3:24:e3:70:03:e9:fc:0c:ad:9e:d9: e6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:81:6F:0D:4E:08:37:48:2E:7F:20:AD:3A:BE:9E:60:19:45:54:CB X509v3 Authority Key Identifier: keyid:19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2b:97:f5:83:a5:89:47:4b:ed:da:b1:d6:c7:d1:d3:df:c0: 4e:db:3a:78:d0:66:7d:76:9e:95:1f:72:3a:33:06:00:98:81: a1:fc:2a:b7:c8:4a:3b:c5:eb:cc:1b:f0:1b:8d:a5:f5:63:42: 11:d7:69:70:83:6e:82:ec:e6:e5:31:f3:14:00:57:a8:0e:40: 78:ae:8d:1d:bd:fe:ca:90:80:d5:a2:36:df:cc:9c:5b:ad:de: c5:83:d5:5e:27:64:b4:09:f7:0f:36:00:7c:73:54:53:05:00: d0:0c:d9:d3:f4:91:35:d4:84:10:ca:31:3e:1a:1f:9a:66:e2: f5:c9:33:fd:6c:06:c6:34:01:34:6a:ee:fe:28:92:b1:31:59: cc:fa:f9:74:65:9a:59:a5:47:9f:f9:21:46:65:49:23:f5:30: 7b:25:62:e5:33:ac:8e:33:f8:5e:b3:f9:f0:44:e3:df:c2:92: 39:14:d1:c3:e7:62:5b:4c:9d:9b:40:44:be:70:c7:77:41:f6: 0a:ab:69:85:57:e5:b2:9b:5f:b9:6c:d4:62:03:17:2d:d7:12: 25:0f:9f:55:97:e7:ef:1a:49:87:5c:56:8b:51:55:b9:ee:57: b7:72:9b:fd:10:c4:c3:a0:cf:9a:fa:f4:7c:96:6c:9e:89:5e: cb:57:c2:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNXKxctnK6oIE50Anz29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YTQzZDgxNjU3YTNjMzhjMTUwZGU1NTc5N2YxYzdiNWYw YzJlYmIwHhcNMjUxMjA2MDEwMDM4WhcNMjUxMjA3MDEwMDM4WjAzMTEwLwYDVQQD Eyg2NjgxNmYwZDRlMDgzNzQ4MmU3ZjIwYWQzYWJlOWU2MDE5NDU1NGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnupktnWXFZhMiM2osyQWcrlL+v5P YM8038BNGzni6j8XGROkOmVKbYZQb1rVu+DHtmtvXKZYZn6c5rINqrN6bVeVXNgd xfXobwHeYO2sOLZorNysGuM0Sbe828dBDx1+d/TXpRJaW2ALcSqhO7JXetSKJhRp JzagQmUsmkiIlSjttNSPxieMKeVhVb0S/qRY2PJomI4a9ipxUr/fdnyqrzosZqdk LI19Cwipy7EGEqZujsRmSWEH+QTq3PMrkJq0pKBwPkmQVAkWFlOyFYFAiPw1Axmp HuosgbbWl8phZvXucyUEblzkIi2arMrMu3d/Ptrj4yTjcAPp/AytntnmnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaBbw1OCDdILn8grTq+nmAZRVTLMB8GA1UdIwQY MBaAFBmkPYFlejw4wVDeVXl/HHtfDC67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2FROWdXVjZQRGpCVU41VmVYOGNlMThNTHJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wZjNjNjEtMDJkZi00YWY3LWI5M2Yt MDdmNzRjMDE5NzMyLzEvR2FROWdXVjZQRGpCVU41VmVYOGNlMThNTHJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8wZjNjNjEtMDJkZi00YWY3LWI5M2YtMDdmNzRjMDE5NzMy LzEvR2FROWdXVjZQRGpCVU41VmVYOGNlMThNTHJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCuX9YOl iUdL7dqx1sfR09/ATts6eNBmfXaelR9yOjMGAJiBofwqt8hKO8XrzBvwG42l9WNC EddpcINuguzm5THzFABXqA5AeK6NHb3+ypCA1aI238ycW63exYPVXidktAn3DzYA fHNUUwUA0AzZ0/SRNdSEEMoxPhofmmbi9ckz/WwGxjQBNGru/iiSsTFZzPr5dGWa WaVHn/khRmVJI/UweyVi5TOsjjP4XrP58ETj38KSORTRw+diW0ydm0BEvnDHd0H2 CqtphVflsptfuWzUYgMXLdcSJQ+fVZfn7xpJh1xWi1FVue5Xt3Kb/RDEw6DPmvr0 fJZsnoley1fCGw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:09 2025 by rpki-client