This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft File: GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json) Hash identifier: Al8qGNk8We1p1Q1rrpFsb1U62YHK//8yL6ZwajXim5g= Subject key identifier: A0:F2:69:DD:53:1A:71:F6:0B:96:6D:A6:37:8F:DA:44:79:78:DD:44 Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8 Certificate issuer: /CN=1903647efb243662e57e61d4ec45b4a25a37eac8 Certificate serial: 019AF19B2561F9696FF5EE11BE7249F1725C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: 7mu7dSdOdivtbUb5Ar1MUUCeTYk.roa (hash: q+lzjmvfQiLwsG4m5ztsli480LBdARkn+qQlJRAHsqg=) 2: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: 2VOQ7jrKkDWxzq+UPAkjCyQiVOlddMWdovt/Z2UYuCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:25:61:f9:69:6f:f5:ee:11:be:72:49:f1:72:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8 Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=a0f269dd531a71f60b966da6378fda447978dd44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4a:7d:fc:25:7a:2b:e4:c4:8b:a4:01:44:d3: fc:58:fb:95:5e:a4:df:59:9f:5d:1c:46:75:1b:d6: ad:14:96:99:7a:ea:b9:40:b2:b9:b1:62:f5:ca:26: 43:5b:a2:3e:f8:2b:4f:24:d9:f6:94:72:29:c7:ad: 2e:6c:fa:f1:d4:85:3b:d1:3e:62:9d:82:81:61:3d: df:19:05:16:d5:d7:91:f9:19:14:e8:bb:47:d8:ce: 19:f6:64:f5:6e:55:0b:e3:1e:e4:75:5e:7c:c0:8c: ad:32:0f:fd:77:b7:0a:fe:4c:d9:2d:7e:2c:60:3c: ef:e2:00:5c:e3:f7:20:ac:46:0a:96:ea:b9:94:0b: e7:ef:2a:22:a6:95:10:81:e9:a1:f9:69:e9:76:b4: 0c:99:51:33:fb:50:62:dd:fb:70:44:0a:da:a9:7c: 17:93:92:d7:70:73:f9:74:d8:01:a9:01:eb:a3:8d: ff:32:71:6b:8f:fc:3d:24:cb:25:a8:ca:44:5e:18: d3:b0:77:90:35:3a:57:c0:fc:64:16:80:fb:5a:7f: ce:18:10:0a:8d:5c:9f:58:3d:eb:b6:9e:a2:e2:6b: 60:89:a3:9a:0e:03:6d:af:c4:23:1f:86:26:bf:14: cd:e0:db:43:2c:8d:c4:88:52:bb:65:e6:7c:0c:85: 84:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F2:69:DD:53:1A:71:F6:0B:96:6D:A6:37:8F:DA:44:79:78:DD:44 X509v3 Authority Key Identifier: keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d9:9c:82:fb:2b:ee:16:d4:4c:fe:5e:f3:24:15:d2:16:8d: 30:b0:28:bd:99:c7:83:83:90:ed:7c:53:1a:1b:67:b3:e0:c1: d6:fa:b1:23:c8:b7:06:f8:c0:a4:82:97:86:f4:e6:51:01:d8: 99:ef:13:13:ac:0f:60:87:b7:80:fa:f1:35:2a:9c:46:9b:d3: 71:52:bb:b3:b2:14:c5:2b:1f:8a:ce:a3:8b:47:2d:51:22:a0: c9:59:2d:8d:86:dc:95:60:e9:75:30:d4:13:7c:46:eb:f1:c7: 74:99:43:63:30:a6:f6:11:34:b3:9e:f2:7f:46:0d:de:fe:ff: d6:2b:08:b6:b5:81:96:05:61:58:af:f1:98:44:63:6a:d3:40: 83:94:4d:8f:8b:ee:c9:a1:7f:35:ab:72:c5:b3:b6:50:7e:40: e2:39:36:85:71:26:87:6f:2c:60:d0:3c:38:08:44:0b:0a:cb: 4c:45:f2:5a:c3:20:35:7a:0e:08:b6:7b:4b:95:b8:30:fc:9f: 4c:38:38:dd:39:1a:7e:03:8d:14:b9:db:32:e4:e3:fb:d9:3e: 9c:ce:b1:5b:54:94:da:33:3c:77:42:98:ff:db:7d:15:72:87: 6a:ad:bf:98:0f:3f:a4:ee:64:0a:c5:f5:b1:85:79:c0:15:8b: b4:d6:5b:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyVh+Wlv9e4RvnJJ8XJcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDM2NDdlZmIyNDM2NjJlNTdlNjFkNGVjNDViNGEyNWEz N2VhYzgwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD EyhhMGYyNjlkZDUzMWE3MWY2MGI5NjZkYTYzNzhmZGE0NDc5NzhkZDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kp9/CV6K+TEi6QBRNP8WPuVXqTf WZ9dHEZ1G9atFJaZeuq5QLK5sWL1yiZDW6I++CtPJNn2lHIpx60ubPrx1IU70T5i nYKBYT3fGQUW1deR+RkU6LtH2M4Z9mT1blUL4x7kdV58wIytMg/9d7cK/kzZLX4s YDzv4gBc4/cgrEYKluq5lAvn7yoippUQgemh+WnpdrQMmVEz+1Bi3ftwRAraqXwX k5LXcHP5dNgBqQHro43/MnFrj/w9JMslqMpEXhjTsHeQNTpXwPxkFoD7Wn/OGBAK jVyfWD3rtp6i4mtgiaOaDgNtr8QjH4YmvxTN4NtDLI3EiFK7ZeZ8DIWE0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDyad1TGnH2C5ZtpjeP2kR5eN1EMB8GA1UdIwQY MBaAFBkDZH77JDZi5X5h1OxFtKJaN+rIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FOa2Z2c2tObUxsZm1IVTdFVzBvbG8zNnNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82ZWVmZWUtYzlkZS00NzI4LWFjYTgt YTRjMzQzMmZiMDBmLzEvR1FOa2Z2c2tObUxsZm1IVTdFVzBvbG8zNnNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS82ZWVmZWUtYzlkZS00NzI4LWFjYTgtYTRjMzQzMmZiMDBm LzEvR1FOa2Z2c2tObUxsZm1IVTdFVzBvbG8zNnNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9mcgvsr 7hbUTP5e8yQV0haNMLAovZnHg4OQ7XxTGhtns+DB1vqxI8i3BvjApIKXhvTmUQHY me8TE6wPYIe3gPrxNSqcRpvTcVK7s7IUxSsfis6ji0ctUSKgyVktjYbclWDpdTDU E3xG6/HHdJlDYzCm9hE0s57yf0YN3v7/1isItrWBlgVhWK/xmERjatNAg5RNj4vu yaF/NatyxbO2UH5A4jk2hXEmh28sYNA8OAhECwrLTEXyWsMgNXoOCLZ7S5W4MPyf TDg43TkafgONFLnbMuTj+9k+nM6xW1SU2jM8d0KY/9t9FXKHaq2/mA8/pO5kCsX1 sYV5wBWLtNZbxg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:38 2025 by rpki-client