This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft File: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft (raw, json) Hash identifier: v40rO2getL7t9kJDhsASvIwYfS6cofx6/5XeH+f+CN4= Subject key identifier: A5:6F:3B:C3:DD:DC:CE:94:21:28:40:3E:01:07:46:8E:99:55:8F:FD Authority key identifier: 19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55 Certificate issuer: /CN=190d300e6acd1f9895fce3b5abe38a5f00584d55 Certificate serial: 019AF50BB105DF367E988EEFD83D877B317B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 19:02:55 +0000 Manifest this update: Sat 06 Dec 2025 19:02:55 +0000 Manifest next update: Sun 07 Dec 2025 19:02:55 +0000 Files and hashes: 1: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl (hash: 9rN9xHGxLOvWpV2wEX1Tq7QtOWHQDOQFdgV3LKAQXR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:b1:05:df:36:7e:98:8e:ef:d8:3d:87:7b:31:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=190d300e6acd1f9895fce3b5abe38a5f00584d55 Validity Not Before: Dec 6 19:02:55 2025 GMT Not After : Dec 7 19:02:55 2025 GMT Subject: CN=a56f3bc3dddcce942128403e0107468e99558ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:02:64:14:c1:6a:9f:b0:a4:c8:e7:b7:34:f4: 6f:0a:0a:83:9b:b2:ea:01:0e:bf:77:ea:e1:6e:14: 01:f6:a8:70:e0:0b:55:1b:3e:c4:89:50:41:52:59: 6d:31:f8:c8:a3:91:30:d6:4e:04:e3:f4:83:2c:ce: ec:3e:b4:28:79:cc:f2:92:cd:e2:98:af:a0:1f:d4: 75:d7:9b:21:0b:e6:e1:f7:bb:98:bd:99:90:f9:3c: 85:d0:f0:80:62:a9:03:3b:59:fe:d7:d7:90:1f:55: e4:0c:82:d0:44:ac:5a:ac:f1:b9:36:2b:c8:df:29: 0b:8c:ec:b1:f5:d8:39:00:b1:af:d3:ab:66:2c:c9: db:a4:35:33:b4:39:54:8e:90:08:63:8e:9e:83:ab: 76:6a:24:c5:16:4d:4b:cf:de:2b:52:6c:47:b7:cd: 7c:42:18:ea:aa:94:da:d2:d6:48:4a:2f:c2:a2:46: 3a:10:e3:f7:3c:c9:b4:71:fd:83:e1:0c:0a:41:07: 93:b5:55:68:46:7a:07:23:bd:93:53:69:4c:4c:df: 3d:48:b3:38:d8:34:38:c5:6e:71:0a:ad:eb:97:2b: 52:1d:20:35:b4:cb:68:6d:8b:da:ce:63:96:80:11: 21:93:1d:5f:2a:58:84:b2:29:4a:d5:7a:fa:f2:15: 86:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6F:3B:C3:DD:DC:CE:94:21:28:40:3E:01:07:46:8E:99:55:8F:FD X509v3 Authority Key Identifier: keyid:19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:4b:34:eb:c1:75:4e:56:9d:70:f9:47:ad:a6:96:86:a1:ff: 5f:bb:85:7c:d3:ca:a5:dd:42:b3:82:15:cb:e4:39:a9:f4:d1: 39:02:0b:c7:c1:e4:c2:8b:95:e8:7e:9e:8f:3e:09:89:0f:3a: 74:7a:1b:26:47:ee:1f:f7:72:5b:f0:d1:f9:1e:84:1f:32:21: 7f:42:59:64:10:b2:21:a2:19:4c:4a:0f:47:94:88:4d:c9:9c: 42:0b:b6:91:e4:60:3c:e2:71:6f:b0:1c:7f:bb:b6:66:19:42: ce:6e:65:a0:d4:d7:d9:09:3b:c5:9a:a8:b5:8c:1d:3a:93:63: 3c:a6:15:f8:07:e8:1d:27:1d:7d:2b:15:93:98:d3:6b:c6:1b: e9:91:3a:68:2c:de:48:95:dc:68:41:87:2b:a7:c2:68:5c:d7: 18:17:46:76:70:b1:3b:18:f4:59:59:f4:01:e9:39:bb:1b:8a: 1a:cb:eb:f4:e7:4c:0c:9d:9c:38:a7:41:20:54:9f:ad:5d:23: 50:70:5a:69:41:58:2d:49:dc:54:02:63:13:f0:46:de:e2:76: 19:14:c4:08:cc:53:26:20:a5:18:6b:5b:66:c2:22:dd:00:f1: 48:f2:c7:92:48:4b:e1:32:18:b2:28:f8:b3:ff:d2:44:9a:11: 5c:4a:4f:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C7EF3zZ+mI7v2D2HezF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MGQzMDBlNmFjZDFmOTg5NWZjZTNiNWFiZTM4YTVmMDA1 ODRkNTUwHhcNMjUxMjA2MTkwMjU1WhcNMjUxMjA3MTkwMjU1WjAzMTEwLwYDVQQD EyhhNTZmM2JjM2RkZGNjZTk0MjEyODQwM2UwMTA3NDY4ZTk5NTU4ZmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QJkFMFqn7CkyOe3NPRvCgqDm7Lq AQ6/d+rhbhQB9qhw4AtVGz7EiVBBUlltMfjIo5Ew1k4E4/SDLM7sPrQoeczyks3i mK+gH9R115shC+bh97uYvZmQ+TyF0PCAYqkDO1n+19eQH1XkDILQRKxarPG5NivI 3ykLjOyx9dg5ALGv06tmLMnbpDUztDlUjpAIY46eg6t2aiTFFk1Lz94rUmxHt818 QhjqqpTa0tZISi/CokY6EOP3PMm0cf2D4QwKQQeTtVVoRnoHI72TU2lMTN89SLM4 2DQ4xW5xCq3rlytSHSA1tMtobYvazmOWgBEhkx1fKliEsilK1Xr68hWGhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVvO8Pd3M6UIShAPgEHRo6ZVY/9MB8GA1UdIwQY MBaAFBkNMA5qzR+Ylfzjtavjil8AWE1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1Ewd0Rtck5INWlWX09PMXEtT0tYd0JZVFZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My85NzRlYTItNDBhZi00ZWY2LWI2Yzct ZmRjZDlmZDliYjAzLzEvR1Ewd0Rtck5INWlWX09PMXEtT0tYd0JZVFZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My85NzRlYTItNDBhZi00ZWY2LWI2YzctZmRjZDlmZDliYjAz LzEvR1Ewd0Rtck5INWlWX09PMXEtT0tYd0JZVFZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUs068F1 TladcPlHraaWhqH/X7uFfNPKpd1Cs4IVy+Q5qfTROQILx8HkwouV6H6ejz4JiQ86 dHobJkfuH/dyW/DR+R6EHzIhf0JZZBCyIaIZTEoPR5SITcmcQgu2keRgPOJxb7Ac f7u2ZhlCzm5loNTX2Qk7xZqotYwdOpNjPKYV+AfoHScdfSsVk5jTa8Yb6ZE6aCze SJXcaEGHK6fCaFzXGBdGdnCxOxj0WVn0Aek5uxuKGsvr9OdMDJ2cOKdBIFSfrV0j UHBaaUFYLUncVAJjE/BG3uJ2GRTECMxTJiClGGtbZsIi3QDxSPLHkkhL4TIYsij4 s//SRJoRXEpPnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:26:04 2025 by rpki-client