This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft File: gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft (raw, json) Hash identifier: ZKa3fUWNY+NSzccHUtHk/2Rx+F+8jhw8Y9mKBpgwvqo= Subject key identifier: 1F:C8:10:63:F1:64:6F:52:A2:F1:35:11:CA:2D:8A:8E:FE:C3:DE:6B Authority key identifier: 81:06:2D:CE:1A:79:1E:73:41:D5:F4:25:98:11:AB:4D:65:F6:B0:75 Certificate issuer: /CN=81062dce1a791e7341d5f4259811ab4d65f6b075 Certificate serial: 019B2D0B235DA4FF9A35B1ED0C68B36DDB65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft Manifest number: 1311 Signing time: Wed 17 Dec 2025 16:01:03 +0000 Manifest this update: Wed 17 Dec 2025 16:01:03 +0000 Manifest next update: Thu 18 Dec 2025 16:01:03 +0000 Files and hashes: 1: gPvG8JKXbj-vvJrpNLZ9cDnUs8w.roa (hash: JKRD+vgt19aGbPFmkdV1fkgtJNWsit5Cuia9bEn2uRY=) 2: gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl (hash: m965kdDcCP4Y+BTV3kA8hiYO6CyGrNrtAbZmXS5W4Ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:23:5d:a4:ff:9a:35:b1:ed:0c:68:b3:6d:db:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81062dce1a791e7341d5f4259811ab4d65f6b075 Validity Not Before: Dec 17 16:01:03 2025 GMT Not After : Dec 18 16:01:03 2025 GMT Subject: CN=1fc81063f1646f52a2f13511ca2d8a8efec3de6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c0:02:9e:82:16:80:dd:d6:7c:55:d5:af:f6: 07:1f:75:03:e4:25:70:b4:d3:74:87:23:45:6d:72: b2:c2:4e:63:f5:43:8a:38:29:22:5b:91:d0:a3:27: f6:e5:62:0c:01:ae:56:82:15:a2:a9:2b:85:5f:e1: a2:a7:e2:ef:cf:ed:13:4d:00:15:e5:7e:09:3e:bb: 09:1d:30:fc:0a:d5:a4:e9:c9:fa:2c:f9:38:17:94: 2f:3d:e9:75:1a:7d:0b:a9:ab:fc:4b:eb:30:11:a7: a7:41:bc:68:62:11:7e:f3:b6:f8:78:01:28:3b:0d: ab:2a:2a:6d:98:7e:14:f3:6e:7f:a8:c8:1b:e6:c8: 9d:88:20:5d:02:f4:90:e1:5c:5c:e7:35:09:80:93: 0c:d3:ff:0a:f0:c5:54:0d:4a:4c:56:c9:ee:d4:4c: c1:e4:c6:e6:91:b8:35:21:98:60:cb:56:22:46:04: 4f:b6:66:79:9f:4c:07:f5:78:cf:15:14:55:09:e2: 0e:88:2c:47:c8:d9:a0:d9:7d:6a:6a:02:46:76:37: 27:ca:98:7b:84:0d:5f:86:0d:f4:cb:68:35:3d:da: 90:f8:b0:b2:27:82:8c:c5:ca:4a:b6:b0:79:1e:53: d9:3a:c3:75:a3:01:d7:5c:ca:28:05:3b:34:f7:47: 1a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C8:10:63:F1:64:6F:52:A2:F1:35:11:CA:2D:8A:8E:FE:C3:DE:6B X509v3 Authority Key Identifier: keyid:81:06:2D:CE:1A:79:1E:73:41:D5:F4:25:98:11:AB:4D:65:F6:B0:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c1:16:a7:45:27:af:be:bd:e6:df:25:b6:17:da:1e:2f:cb: c9:77:8f:35:a4:c2:4e:f7:de:28:fc:8e:8f:67:1f:17:9d:8e: d2:db:12:b7:f3:e5:c8:ea:54:0d:e8:63:a2:60:1e:e7:32:b8: 7f:a4:2c:15:ba:86:57:da:8f:48:d4:24:a4:f1:19:bd:0a:14: b1:f4:86:63:6a:ef:68:a3:b6:ae:88:48:5c:7a:6f:ce:0d:49: 88:91:08:f2:e7:29:b4:2a:d2:39:db:80:a4:32:d0:15:99:ad: cc:94:10:3b:a7:c0:a0:9d:22:3e:0c:c1:5a:c0:e6:82:cf:1c: cc:32:b4:a3:7c:ad:55:25:ee:6f:e6:67:9e:42:8c:0b:da:e7: 4b:dc:44:bc:ad:61:f7:de:54:e7:c1:42:f9:ff:f5:02:fa:87: ee:37:12:d9:ba:3d:27:22:7c:45:02:39:e7:ac:32:17:2f:42: 18:d8:42:f1:68:e1:62:c2:ab:4c:bb:06:17:24:70:5b:8b:81: 01:95:0c:cf:b1:83:25:ef:30:5d:7a:65:b9:7e:8d:e9:1d:97: a9:3c:6b:38:47:bc:a8:79:2f:10:9a:45:fe:2e:1d:b7:ef:93: e2:a6:64:93:45:c5:f3:aa:1b:1d:20:a0:c4:92:dc:40:37:9e: 6b:7c:af:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCyNdpP+aNbHtDGizbdtlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMDYyZGNlMWE3OTFlNzM0MWQ1ZjQyNTk4MTFhYjRkNjVm NmIwNzUwHhcNMjUxMjE3MTYwMTAzWhcNMjUxMjE4MTYwMTAzWjAzMTEwLwYDVQQD EygxZmM4MTA2M2YxNjQ2ZjUyYTJmMTM1MTFjYTJkOGE4ZWZlYzNkZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sACnoIWgN3WfFXVr/YHH3UD5CVw tNN0hyNFbXKywk5j9UOKOCkiW5HQoyf25WIMAa5WghWiqSuFX+Gip+Lvz+0TTQAV 5X4JPrsJHTD8CtWk6cn6LPk4F5QvPel1Gn0Lqav8S+swEaenQbxoYhF+87b4eAEo Ow2rKiptmH4U825/qMgb5sidiCBdAvSQ4Vxc5zUJgJMM0/8K8MVUDUpMVsnu1EzB 5Mbmkbg1IZhgy1YiRgRPtmZ5n0wH9XjPFRRVCeIOiCxHyNmg2X1qagJGdjcnyph7 hA1fhg30y2g1PdqQ+LCyJ4KMxcpKtrB5HlPZOsN1owHXXMooBTs090caOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/IEGPxZG9SovE1Ecotio7+w95rMB8GA1UdIwQY MBaAFIEGLc4aeR5zQdX0JZgRq01l9rB1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1FZdHpocDVIbk5CMWZRbG1CR3JUV1gyc0hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDc4ZDEtM2UwYy00YzFhLWExNDEt NzRlMjE4ZDRiNjEzLzEvZ1FZdHpocDVIbk5CMWZRbG1CR3JUV1gyc0hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDc4ZDEtM2UwYy00YzFhLWExNDEtNzRlMjE4ZDRiNjEz LzEvZ1FZdHpocDVIbk5CMWZRbG1CR3JUV1gyc0hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcEWp0Un r7695t8lthfaHi/LyXePNaTCTvfeKPyOj2cfF52O0tsSt/PlyOpUDehjomAe5zK4 f6QsFbqGV9qPSNQkpPEZvQoUsfSGY2rvaKO2rohIXHpvzg1JiJEI8ucptCrSOduA pDLQFZmtzJQQO6fAoJ0iPgzBWsDmgs8czDK0o3ytVSXub+ZnnkKMC9rnS9xEvK1h 995U58FC+f/1AvqH7jcS2bo9JyJ8RQI556wyFy9CGNhC8WjhYsKrTLsGFyRwW4uB AZUMz7GDJe8wXXpluX6N6R2XqTxrOEe8qHkvEJpF/i4dt++T4qZkk0XF86obHSCg xJLcQDeea3yvAg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:39:02 2025 by rpki-client