This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft File: GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json) Hash identifier: bvDXLVgS4tftptRgMeWFmF61UjCdnBiU2OKuRDVsBUc= Subject key identifier: 7A:C0:DC:A4:60:26:E7:93:49:C1:86:48:9F:3E:E5:73:F1:C8:ED:88 Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d Certificate serial: 019AF23FCD056AE604162FA6055D465ACF26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft Manifest number: 0F18 Signing time: Sat 06 Dec 2025 06:00:58 +0000 Manifest this update: Sat 06 Dec 2025 06:00:58 +0000 Manifest next update: Sun 07 Dec 2025 06:00:58 +0000 Files and hashes: 1: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: vDWI8+J4OjpMhNW4ekn8aCd2JcP74yiHDS/hocRwHFw=) 2: HGA6jjVB7UclmIMciEeXUBcTxyQ.roa (hash: blRYsuCoLjuXHy8qGKJB2iPcbmUbbGdoaMO6Z5/ynCQ=) 3: kZQj5c3qTbDNst6FPmlVFTJBwU0.roa (hash: OVYrhsG4NKJtVB+RFz2IORzGEYajNg4HBNGBwkD+aFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:cd:05:6a:e6:04:16:2f:a6:05:5d:46:5a:cf:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d Validity Not Before: Dec 6 06:00:58 2025 GMT Not After : Dec 7 06:00:58 2025 GMT Subject: CN=7ac0dca46026e79349c186489f3ee573f1c8ed88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:b6:b4:8d:cc:c2:cc:77:94:83:ad:3c:2b: ac:a7:c0:2c:a7:4e:5e:21:6b:fc:bd:d0:2c:f7:f5: c1:34:62:76:be:a7:6f:00:8d:9a:d7:b7:af:74:3d: 7a:d1:28:10:9e:b4:af:7a:35:5c:99:a6:3f:d9:c0: 3b:ec:64:8d:4c:79:8c:5a:0a:10:17:22:7a:30:76: 07:95:48:fc:28:44:dc:c3:87:b5:22:83:f9:61:3e: 23:f4:f4:b0:2c:39:be:42:3d:46:50:96:62:ec:6b: a8:4a:1a:25:62:02:a0:3f:e2:57:31:cf:a0:82:62: e1:94:6c:eb:0e:9d:c0:9a:d8:fb:0e:23:3b:0f:af: e7:5f:52:4b:2d:9a:68:d8:ba:b9:c0:ab:e9:6d:d0: 7b:f7:0d:b8:59:85:b9:90:b4:d1:f7:ad:9c:c8:94: 90:4d:cf:aa:f4:e2:48:6d:10:63:61:15:4a:48:04: 0f:6a:fb:d2:3f:ca:4d:1a:66:ea:67:e4:f7:81:b1: 10:14:27:1c:78:f0:fd:1e:a1:ba:fe:b5:7b:13:36: 8c:ab:8d:2b:a3:56:da:4d:6b:4c:03:f6:cf:77:b4: db:fc:02:ff:90:6d:38:34:44:32:db:9e:9c:99:20: 81:b3:06:1c:81:75:0d:65:99:1e:38:e6:39:29:5b: 69:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C0:DC:A4:60:26:E7:93:49:C1:86:48:9F:3E:E5:73:F1:C8:ED:88 X509v3 Authority Key Identifier: keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:de:cc:69:37:28:41:f4:5e:e4:e8:2c:c8:4f:fb:23:d7:a1: 8a:43:6b:ef:6b:94:8e:85:2e:6f:ad:0c:4f:c4:aa:44:43:62: bc:c8:0d:1c:eb:f8:95:16:a6:2e:19:c0:d3:35:ab:89:34:39: 1c:f3:15:dc:54:31:fe:5e:db:13:f4:79:b2:0e:c3:67:6a:c0: 29:3f:dc:f6:3f:3c:10:01:15:56:91:c1:9c:16:90:ef:7e:69: a5:bb:7b:fb:92:72:7a:e5:07:4c:e2:3a:73:0b:23:9a:32:5c: ec:a9:92:aa:5b:80:69:89:19:94:ce:32:38:0d:7f:6e:7e:1d: 5d:c3:dd:bb:51:2b:b3:99:11:49:9f:2e:86:82:95:c8:3a:a1: 58:24:18:f2:81:47:01:e9:e2:a3:e9:a0:56:eb:26:18:26:14: 69:2d:01:e3:7d:ce:55:b4:0a:fd:60:ca:3c:63:70:e1:58:e5: 54:e9:a7:c4:f7:e0:61:85:f1:1d:bd:9e:db:7a:75:e2:5a:14: 35:d7:9b:dc:23:ec:b2:52:54:ee:f5:d3:e0:8a:79:d5:f0:f4: 19:05:fe:eb:2b:58:77:4a:5c:93:74:c8:90:4b:5d:91:38:44: 0e:59:c1:bd:7c:21:11:64:5d:24:73:1d:f9:68:87:1d:01:79: 4b:4e:61:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP80FauYEFi+mBV1GWs8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYTBhMzI4YzZmZTBmMWJjYTVlNjU5OTA0MmRmZjU5ZTUx M2IyNWQwHhcNMjUxMjA2MDYwMDU4WhcNMjUxMjA3MDYwMDU4WjAzMTEwLwYDVQQD Eyg3YWMwZGNhNDYwMjZlNzkzNDljMTg2NDg5ZjNlZTU3M2YxYzhlZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdK2tI3Mwsx3lIOtPCusp8Asp05e IWv8vdAs9/XBNGJ2vqdvAI2a17evdD160SgQnrSvejVcmaY/2cA77GSNTHmMWgoQ FyJ6MHYHlUj8KETcw4e1IoP5YT4j9PSwLDm+Qj1GUJZi7GuoSholYgKgP+JXMc+g gmLhlGzrDp3Amtj7DiM7D6/nX1JLLZpo2Lq5wKvpbdB79w24WYW5kLTR962cyJSQ Tc+q9OJIbRBjYRVKSAQPavvSP8pNGmbqZ+T3gbEQFCccePD9HqG6/rV7EzaMq40r o1baTWtMA/bPd7Tb/AL/kG04NEQy256cmSCBswYcgXUNZZkeOOY5KVtpAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrA3KRgJueTScGGSJ8+5XPxyO2IMB8GA1UdIwQY MBaAFBqgoyjG/g8byl5lmQQt/1nlE7JdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNDRkMjQtMmUxMS00NjZkLThhZGUt MzhlODQ2MTQ4Yzc4LzEvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zNDRkMjQtMmUxMS00NjZkLThhZGUtMzhlODQ2MTQ4Yzc4 LzEvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmt7MaTco QfRe5OgsyE/7I9ehikNr72uUjoUub60MT8SqRENivMgNHOv4lRamLhnA0zWriTQ5 HPMV3FQx/l7bE/R5sg7DZ2rAKT/c9j88EAEVVpHBnBaQ735ppbt7+5JyeuUHTOI6 cwsjmjJc7KmSqluAaYkZlM4yOA1/bn4dXcPdu1Ers5kRSZ8uhoKVyDqhWCQY8oFH Aenio+mgVusmGCYUaS0B433OVbQK/WDKPGNw4VjlVOmnxPfgYYXxHb2e23p14loU Ndeb3CPsslJU7vXT4Ip51fD0GQX+6ytYd0pck3TIkEtdkThEDlnBvXwhEWRdJHMd +WiHHQF5S05hRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:17 2025 by rpki-client