This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft File: gQacCVUbP-O6LJpuVdjgWbugsYY.mft (raw, json) Hash identifier: kdhldskrXR1mWdoYsUt7hWbBEPK3N+GVrCDDHgdFpck= Subject key identifier: 6F:00:1B:1C:B7:A2:13:F1:FA:E2:08:FD:F0:0D:B8:EB:06:1D:E1:B8 Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86 Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186 Certificate serial: 019AF38A05F1C759752BBACD4D3BB16DCE80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 12:01:40 +0000 Manifest this update: Sat 06 Dec 2025 12:01:40 +0000 Manifest next update: Sun 07 Dec 2025 12:01:40 +0000 Files and hashes: 1: 4S3I8iOH8dvNeoUdpR8F6wiHfZk.roa (hash: mxQZp2Bj9hP1TKo3JR4nFN0+5PMHR5qVix0IQ02MR/w=) 2: gQacCVUbP-O6LJpuVdjgWbugsYY.crl (hash: H4AXRJwwWGAgYfnZ6cxRzg9UY3uAWZo3zXuW+WfAgr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:05:f1:c7:59:75:2b:ba:cd:4d:3b:b1:6d:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186 Validity Not Before: Dec 6 12:01:40 2025 GMT Not After : Dec 7 12:01:40 2025 GMT Subject: CN=6f001b1cb7a213f1fae208fdf00db8eb061de1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2f:45:37:6e:7f:fd:09:59:b0:38:aa:61:64: 41:22:1f:f9:23:0f:c1:a0:00:f0:ee:20:a5:58:84: 70:b4:af:5d:fc:fa:bc:57:15:f2:6b:4d:b8:fd:e2: 49:fa:93:4c:9a:1a:b2:dc:7a:fb:25:48:9d:1f:55: a0:e4:a5:94:91:10:d8:8b:f4:ca:b9:88:03:d6:17: f7:39:5a:0d:a2:45:a0:7d:85:60:23:62:37:c1:2d: 4f:54:b5:14:d8:35:a9:98:b1:98:7a:5c:e5:03:4a: 48:b6:ae:6b:f6:1b:71:a4:af:bd:b3:e7:a0:9c:8e: 4f:39:c0:75:1d:98:57:1e:9c:02:08:32:9c:ed:a9: 18:e7:65:24:ab:89:cd:71:ce:e3:b4:4d:8d:b0:a7: 11:92:bd:f3:35:05:fe:89:4b:ce:31:fa:3f:5d:9c: 03:88:7d:ce:9c:8e:a6:59:07:32:82:28:6e:8e:b9: 14:14:6f:6c:ff:e6:0a:52:f4:c1:95:ec:df:de:62: 79:d4:f8:85:b6:3d:9f:09:bc:87:7a:93:b5:da:aa: 4e:c0:ba:f2:3b:0d:2a:a3:61:d3:2a:27:02:30:ad: de:2b:da:56:28:ff:12:84:72:74:2e:73:b2:d4:bf: 17:2f:fd:eb:15:19:47:24:7a:2b:e7:bb:e6:48:7a: a2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:00:1B:1C:B7:A2:13:F1:FA:E2:08:FD:F0:0D:B8:EB:06:1D:E1:B8 X509v3 Authority Key Identifier: keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:29:68:52:f2:fd:d6:23:77:e0:ba:f8:62:5e:4d:a3:7c:20: 6c:e0:2f:63:37:00:29:35:76:c8:32:83:bc:ff:13:1d:53:f7: 49:78:8c:34:ed:ee:a7:c2:e4:3e:3b:2e:d4:13:57:61:c1:6d: 2b:01:61:d3:42:76:a5:34:d3:f2:fc:50:17:6b:e1:5d:bb:b8: 08:09:76:43:99:ad:66:2d:0f:a0:b7:97:70:b0:a9:6e:f7:57: 4b:65:6b:82:b9:68:2e:fb:99:a5:ce:c7:05:fb:98:4e:19:c9: 5d:4a:04:40:3d:67:c1:3c:b8:5c:9a:32:e3:07:1b:43:11:b9: 87:d3:42:f2:17:a2:4d:02:85:64:bd:e2:50:70:24:0c:4d:e4: 79:11:11:21:55:eb:f5:70:9c:88:a4:a5:22:d4:5a:25:4e:88: e4:71:e7:4d:af:63:87:04:53:64:23:a2:a0:ac:19:27:09:9b: 28:75:a5:9d:d3:80:7a:9d:09:32:cf:d5:8c:03:56:29:2e:4a: e3:21:05:f9:94:da:ff:38:24:23:fe:15:b8:21:4b:06:65:6d: cb:bf:69:88:d9:2c:27:bb:74:b7:ff:7c:78:f6:3a:ca:0a:55: 1f:77:69:e3:56:18:48:ad:ac:bc:15:d4:66:68:f1:74:8b:b1: b3:eb:29:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzigXxx1l1K7rNTTuxbc6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMDY5YzA5NTUxYjNmZTNiYTJjOWE2ZTU1ZDhlMDU5YmJh MGIxODYwHhcNMjUxMjA2MTIwMTQwWhcNMjUxMjA3MTIwMTQwWjAzMTEwLwYDVQQD Eyg2ZjAwMWIxY2I3YTIxM2YxZmFlMjA4ZmRmMDBkYjhlYjA2MWRlMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C9FN25//QlZsDiqYWRBIh/5Iw/B oADw7iClWIRwtK9d/Pq8VxXya024/eJJ+pNMmhqy3Hr7JUidH1Wg5KWUkRDYi/TK uYgD1hf3OVoNokWgfYVgI2I3wS1PVLUU2DWpmLGYelzlA0pItq5r9htxpK+9s+eg nI5POcB1HZhXHpwCCDKc7akY52Ukq4nNcc7jtE2NsKcRkr3zNQX+iUvOMfo/XZwD iH3OnI6mWQcygihujrkUFG9s/+YKUvTBlezf3mJ51PiFtj2fCbyHepO12qpOwLry Ow0qo2HTKicCMK3eK9pWKP8ShHJ0LnOy1L8XL/3rFRlHJHor57vmSHqi5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8AGxy3ohPx+uII/fANuOsGHeG4MB8GA1UdIwQY MBaAFIEGnAlVGz/juiyablXY4Fm7oLGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1FhY0NWVWJQLU82TEpwdVZkamdXYnVnc1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9mMzc4ZDMtMzk0Ny00N2Y5LTgwNWQt ODI5YWNlYmMxMTY5LzEvZ1FhY0NWVWJQLU82TEpwdVZkamdXYnVnc1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9mMzc4ZDMtMzk0Ny00N2Y5LTgwNWQtODI5YWNlYmMxMTY5 LzEvZ1FhY0NWVWJQLU82TEpwdVZkamdXYnVnc1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSloUvL9 1iN34Lr4Yl5No3wgbOAvYzcAKTV2yDKDvP8THVP3SXiMNO3up8LkPjsu1BNXYcFt KwFh00J2pTTT8vxQF2vhXbu4CAl2Q5mtZi0PoLeXcLCpbvdXS2VrgrloLvuZpc7H BfuYThnJXUoEQD1nwTy4XJoy4wcbQxG5h9NC8heiTQKFZL3iUHAkDE3keRERIVXr 9XCciKSlItRaJU6I5HHnTa9jhwRTZCOioKwZJwmbKHWlndOAep0JMs/VjANWKS5K 4yEF+ZTa/zgkI/4VuCFLBmVty79piNksJ7t0t/98ePY6ygpVH3dp41YYSK2svBXU ZmjxdIuxs+spwg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:44:16 2025 by rpki-client