This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft File: GgQ5RItijNC6QjLqXcOalo2paW4.mft (raw, json) Hash identifier: vwO9+sL+NAU4zLcqOA4J7sjJ7oMbBo0KFLFp4BhbS0s= Subject key identifier: 4B:7B:23:3E:E5:E2:79:5C:7E:B1:14:1A:E1:29:10:97:07:FE:82:75 Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E Certificate issuer: /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e Certificate serial: 019AF16485AA8651D14D8FCA4E1437E34B53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 02:01:28 +0000 Manifest this update: Sat 06 Dec 2025 02:01:28 +0000 Manifest next update: Sun 07 Dec 2025 02:01:28 +0000 Files and hashes: 1: GgQ5RItijNC6QjLqXcOalo2paW4.crl (hash: xdlxUFvKbWTA22maNFC8y+H/+d8LX6hjF4uamVlcNGc=) 2: awiZZNgesWW0Sbd6K5IRMUenzBI.roa (hash: OVxRXVan7pYiQ6GVr4WHU+GWhPaWUbbRmfzBGki3zjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:85:aa:86:51:d1:4d:8f:ca:4e:14:37:e3:4b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e Validity Not Before: Dec 6 02:01:28 2025 GMT Not After : Dec 7 02:01:28 2025 GMT Subject: CN=4b7b233ee5e2795c7eb1141ae129109707fe8275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:63:ba:5d:7f:03:d2:aa:5c:67:5e:f8:56:56: 62:63:20:cd:02:ab:1e:4f:cf:7c:72:f2:aa:c1:dd: fe:0c:e3:ff:bd:b2:a8:e3:99:58:e0:b0:13:64:60: 97:8b:3f:cb:b6:b2:05:27:f1:2e:21:4d:45:fc:24: 45:95:56:53:b7:39:48:3c:29:a6:2c:77:a9:19:4a: 79:7e:f1:67:49:b9:f4:dd:1b:47:68:b1:e8:c5:94: 9c:6a:87:67:b0:c1:7d:0f:92:ce:cc:1c:32:2f:91: 1d:3a:d8:7c:3d:af:a1:85:7b:4d:0a:96:75:05:f7: 05:c3:fb:fe:ed:60:4b:f3:f4:d2:e3:7b:0f:70:97: 15:94:21:83:07:d1:c5:9f:27:ed:9b:9f:8b:da:a7: 72:94:38:ad:e8:db:92:d5:7a:b2:22:95:03:c0:2a: df:53:41:99:76:2e:a5:9e:f6:60:c9:47:b1:e1:a5: 89:2e:ee:d5:83:fc:db:e0:59:7b:73:97:28:df:d5: 53:23:38:30:cd:d4:ff:4f:d5:ce:0a:f8:64:68:8d: 4e:54:3d:2f:f8:3b:8b:d4:99:54:3c:f8:75:24:95: 18:3c:b0:6f:65:ab:10:93:3f:4a:98:7e:e0:22:99: b0:65:6b:7c:1a:c2:01:fd:9c:72:46:7a:4a:67:e9: 13:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7B:23:3E:E5:E2:79:5C:7E:B1:14:1A:E1:29:10:97:07:FE:82:75 X509v3 Authority Key Identifier: keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:52:0a:ce:8f:ee:02:20:ee:d7:f2:a4:74:1c:06:6c:72:cc: 33:21:c0:bd:52:50:2b:01:8f:55:3b:e9:67:d3:17:89:c7:5f: e0:6c:80:a0:77:bd:09:41:b4:f6:ca:35:9d:f7:83:a3:9a:d7: 66:a4:3a:b5:08:d5:b1:cd:b8:29:b6:5a:59:47:ce:58:53:53: 39:31:f4:ce:31:36:d8:c3:79:f6:5a:15:e1:2e:82:24:cb:5a: 58:c3:63:c5:44:6d:3d:2e:45:08:2c:c6:c7:39:70:84:cb:a8: e9:70:a8:60:d3:d8:3b:80:29:f1:4e:74:f4:25:d0:42:0e:25: 7f:79:4c:b3:f1:11:c4:90:82:1e:97:3a:4e:ca:79:51:3c:ba: a0:6d:bf:e7:ca:37:ab:d4:ac:ef:52:66:21:63:46:ba:2a:a6: bc:37:33:23:c8:29:5e:e7:94:e9:d3:4e:c1:b5:f1:95:06:74: 56:88:2d:b5:06:74:25:ac:58:c8:2a:c0:df:47:8f:4b:5c:1f: a7:bf:23:28:51:21:e2:44:cd:5c:c7:0a:d7:14:fc:13:83:20: 07:f4:d6:39:a4:2a:ee:48:5f:39:e7:15:48:eb:63:0f:a7:3c: 76:df:b2:fa:b0:6d:f5:b5:89:88:e6:e5:99:e0:d2:66:3c:d7: f2:33:b4:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIWqhlHRTY/KThQ340tTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMDQzOTQ0OGI2MjhjZDBiYTQyMzJlYTVkYzM5YTk2OGRh OTY5NmUwHhcNMjUxMjA2MDIwMTI4WhcNMjUxMjA3MDIwMTI4WjAzMTEwLwYDVQQD Eyg0YjdiMjMzZWU1ZTI3OTVjN2ViMTE0MWFlMTI5MTA5NzA3ZmU4Mjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmO6XX8D0qpcZ174VlZiYyDNAqse T898cvKqwd3+DOP/vbKo45lY4LATZGCXiz/LtrIFJ/EuIU1F/CRFlVZTtzlIPCmm LHepGUp5fvFnSbn03RtHaLHoxZScaodnsMF9D5LOzBwyL5EdOth8Pa+hhXtNCpZ1 BfcFw/v+7WBL8/TS43sPcJcVlCGDB9HFnyftm5+L2qdylDit6NuS1XqyIpUDwCrf U0GZdi6lnvZgyUex4aWJLu7Vg/zb4Fl7c5co39VTIzgwzdT/T9XOCvhkaI1OVD0v +DuL1JlUPPh1JJUYPLBvZasQkz9KmH7gIpmwZWt8GsIB/ZxyRnpKZ+kTewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEt7Iz7l4nlcfrEUGuEpEJcH/oJ1MB8GA1UdIwQY MBaAFBoEOUSLYozQukIy6l3DmpaNqWluMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2dRNVJJdGlqTkM2UWpMcVhjT2FsbzJwYVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wNGIyM2ItOWMxMy00ZGQyLWJkYTgt MmYyMmE3Njk5NmQ5LzEvR2dRNVJJdGlqTkM2UWpMcVhjT2FsbzJwYVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8wNGIyM2ItOWMxMy00ZGQyLWJkYTgtMmYyMmE3Njk5NmQ5 LzEvR2dRNVJJdGlqTkM2UWpMcVhjT2FsbzJwYVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFIKzo/u AiDu1/KkdBwGbHLMMyHAvVJQKwGPVTvpZ9MXicdf4GyAoHe9CUG09so1nfeDo5rX ZqQ6tQjVsc24KbZaWUfOWFNTOTH0zjE22MN59loV4S6CJMtaWMNjxURtPS5FCCzG xzlwhMuo6XCoYNPYO4Ap8U509CXQQg4lf3lMs/ERxJCCHpc6Tsp5UTy6oG2/58o3 q9Ss71JmIWNGuiqmvDczI8gpXueU6dNOwbXxlQZ0VogttQZ0JaxYyCrA30ePS1wf p78jKFEh4kTNXMcK1xT8E4MgB/TWOaQq7khfOecVSOtjD6c8dt+y+rBt9bWJiObl meDSZjzX8jO0tA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:45 2025 by rpki-client