This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft File: gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft (raw, json) Hash identifier: RZ1mIb3RgFVp+HyNKANdkc1l4ZbGA5XKMowZxhIuS9k= Subject key identifier: AE:0D:88:9C:B5:75:F6:FB:DB:31:37:59:CE:3B:58:DC:F1:FB:6E:9A Authority key identifier: 81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81 Certificate issuer: /CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81 Certificate serial: 019AF57818DBFEA7EA9878A3199462F5FA9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft Manifest number: 071B Signing time: Sat 06 Dec 2025 21:01:19 +0000 Manifest this update: Sat 06 Dec 2025 21:01:19 +0000 Manifest next update: Sun 07 Dec 2025 21:01:19 +0000 Files and hashes: 1: FS82XW-k77zMqGngn5r7_Yo2ofY.roa (hash: HKhziiZ0vfYbPizRPboCVEcmyagdxZmch8FNJ52Iiys=) 2: gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl (hash: /Yve3UKKJn4cZ3W2SFyuR1KISYj16Y31U2oHIBnlfW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:18:db:fe:a7:ea:98:78:a3:19:94:62:f5:fa:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81 Validity Not Before: Dec 6 21:01:19 2025 GMT Not After : Dec 7 21:01:19 2025 GMT Subject: CN=ae0d889cb575f6fbdb313759ce3b58dcf1fb6e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e9:c6:0b:63:44:b9:25:15:5a:56:aa:a0:d6: a9:f9:87:18:f2:01:87:38:64:bc:30:e6:69:1c:66: 5f:3e:3c:b6:35:0a:ad:93:b1:50:4e:dd:98:9c:46: 6d:6e:14:38:82:71:3c:ce:4f:24:34:b9:16:20:b1: 0a:9d:ba:6e:8f:46:1c:b2:b4:10:76:e0:20:2d:23: e5:52:d3:72:2d:93:2e:f2:de:7e:c5:5e:bf:96:a4: 40:da:5a:9f:0c:ee:31:94:19:10:5a:d5:80:cc:2a: ef:1c:91:8f:5a:03:7e:d9:19:38:3e:fd:98:32:2e: 67:13:52:6c:78:d4:bf:07:f3:22:c4:8e:e5:d5:71: ff:0d:8e:c4:6f:d3:dc:30:c3:9a:fd:58:ce:17:ff: 73:68:29:53:58:ca:f6:3c:28:8f:41:77:cb:95:df: a0:be:e2:17:48:3e:e2:ca:9b:68:b6:cb:0f:fc:28: 84:5b:61:b0:fb:bc:e5:23:9c:24:68:64:c1:03:0a: 35:d5:68:96:a8:30:ec:53:31:27:22:f4:43:07:6e: f6:4c:31:67:47:02:75:ee:5f:b6:b0:5f:5a:4a:51: 9d:31:ef:a4:a4:a6:26:36:1e:17:2f:1d:42:1f:6a: 72:1e:35:a6:23:d7:34:f7:b4:9c:0d:12:92:0d:17: 9c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0D:88:9C:B5:75:F6:FB:DB:31:37:59:CE:3B:58:DC:F1:FB:6E:9A X509v3 Authority Key Identifier: keyid:81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:18:dc:7f:45:9a:37:07:fe:f3:12:e4:b1:10:f7:b3:54:0f: 53:4d:1c:76:ab:0d:99:80:80:4b:e4:7a:9a:9f:15:75:07:1c: eb:76:ea:38:98:94:88:55:94:52:c4:5e:9a:48:85:46:1f:fa: b7:bd:b8:74:e0:16:e1:43:13:31:e2:d1:03:8b:53:2a:7b:e9: f7:b7:c0:4f:22:03:8e:42:ba:45:03:2a:86:92:0a:d4:5c:d8: c4:1b:c2:78:d1:ba:9d:af:87:da:b9:59:b0:50:04:c2:e9:3c: cb:89:f5:c2:70:49:c6:cc:0f:30:a0:fe:db:5d:5d:ee:50:49: 83:d5:95:0a:6a:97:63:59:e4:12:43:72:cc:dc:58:99:bf:82: 96:f2:4b:b1:cc:e4:33:b9:15:6c:e6:79:33:e1:93:5c:7e:6a: 5e:ca:07:f6:db:df:5f:90:f5:63:fe:ac:cd:28:7f:42:a5:93: 27:c6:6b:1b:a4:e4:ed:88:f8:bb:64:eb:bd:04:cc:a1:c0:0f: 23:68:71:61:bf:ea:d5:0d:1d:5b:75:60:a6:3e:23:0c:cd:b3: c7:17:3f:d4:f5:6f:93:7f:11:70:e7:02:66:cf:24:39:2a:bf: 3b:ed:ce:1d:53:cd:2e:b2:d9:cd:a8:72:8e:3b:9b:5c:3b:98: 48:80:8c:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eBjb/qfqmHijGZRi9fqdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMDdkYzAzNmQ5ZDZjMjhmMWQ4N2FiNjRlNzhlZTQ4NWE5 NmZkODEwHhcNMjUxMjA2MjEwMTE5WhcNMjUxMjA3MjEwMTE5WjAzMTEwLwYDVQQD EyhhZTBkODg5Y2I1NzVmNmZiZGIzMTM3NTljZTNiNThkY2YxZmI2ZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+nGC2NEuSUVWlaqoNap+YcY8gGH OGS8MOZpHGZfPjy2NQqtk7FQTt2YnEZtbhQ4gnE8zk8kNLkWILEKnbpuj0YcsrQQ duAgLSPlUtNyLZMu8t5+xV6/lqRA2lqfDO4xlBkQWtWAzCrvHJGPWgN+2Rk4Pv2Y Mi5nE1JseNS/B/MixI7l1XH/DY7Eb9PcMMOa/VjOF/9zaClTWMr2PCiPQXfLld+g vuIXSD7iyptotssP/CiEW2Gw+7zlI5wkaGTBAwo11WiWqDDsUzEnIvRDB272TDFn RwJ17l+2sF9aSlGdMe+kpKYmNh4XLx1CH2pyHjWmI9c097ScDRKSDRecmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4NiJy1dfb72zE3Wc47WNzx+26aMB8GA1UdIwQY MBaAFIEH3ANtnWwo8dh6tk547khalv2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1FmY0EyMmRiQ2p4MkhxMlRuanVTRnFXX1lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xNTk4NjAtZjgzMi00MzhhLTllNmYt NzZhMTQxY2RkNDFmLzEvZ1FmY0EyMmRiQ2p4MkhxMlRuanVTRnFXX1lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xNTk4NjAtZjgzMi00MzhhLTllNmYtNzZhMTQxY2RkNDFm LzEvZ1FmY0EyMmRiQ2p4MkhxMlRuanVTRnFXX1lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxjcf0Wa Nwf+8xLksRD3s1QPU00cdqsNmYCAS+R6mp8VdQcc63bqOJiUiFWUUsRemkiFRh/6 t724dOAW4UMTMeLRA4tTKnvp97fATyIDjkK6RQMqhpIK1FzYxBvCeNG6na+H2rlZ sFAEwuk8y4n1wnBJxswPMKD+211d7lBJg9WVCmqXY1nkEkNyzNxYmb+ClvJLsczk M7kVbOZ5M+GTXH5qXsoH9tvfX5D1Y/6szSh/QqWTJ8ZrG6Tk7Yj4u2TrvQTMocAP I2hxYb/q1Q0dW3Vgpj4jDM2zxxc/1PVvk38RcOcCZs8kOSq/O+3OHVPNLrLZzahy jjubXDuYSICM4A== -----END CERTIFICATE-----Generated at Sun Dec 7 02:32:43 2025 by rpki-client