This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft File: gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft (raw, json) Hash identifier: W4TYMuqZfg4QTnndZnvKAHruE+Q6OMdzebA+7s3aVzs= Subject key identifier: E7:D7:9E:67:E9:7C:CA:68:75:E6:7D:41:17:65:48:CD:F6:2B:06:50 Authority key identifier: 81:06:2D:CE:1A:79:1E:73:41:D5:F4:25:98:11:AB:4D:65:F6:B0:75 Certificate issuer: /CN=81062dce1a791e7341d5f4259811ab4d65f6b075 Certificate serial: 019AF12E66F6DC6DA2245ECD81E4992B6010 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft Manifest number: 12F2 Signing time: Sat 06 Dec 2025 01:02:21 +0000 Manifest this update: Sat 06 Dec 2025 01:02:21 +0000 Manifest next update: Sun 07 Dec 2025 01:02:21 +0000 Files and hashes: 1: gPvG8JKXbj-vvJrpNLZ9cDnUs8w.roa (hash: JKRD+vgt19aGbPFmkdV1fkgtJNWsit5Cuia9bEn2uRY=) 2: gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl (hash: ucjw8GZx/FUZFeq3XfrxG/MjfqTv33hJq9hMyxdNVG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:66:f6:dc:6d:a2:24:5e:cd:81:e4:99:2b:60:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81062dce1a791e7341d5f4259811ab4d65f6b075 Validity Not Before: Dec 6 01:02:21 2025 GMT Not After : Dec 7 01:02:21 2025 GMT Subject: CN=e7d79e67e97cca6875e67d41176548cdf62b0650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:2c:d9:78:1b:d2:79:93:97:8f:57:0e:0e: 01:05:ca:00:5d:3a:33:28:2b:91:96:da:9f:c2:7a: 8b:ac:bf:72:56:3f:ac:2c:0c:c8:33:54:a0:80:0f: ba:af:96:53:f1:a1:d9:a0:12:83:32:24:6f:c1:56: 49:41:bd:46:58:75:d8:08:71:2e:d9:8c:d5:68:f6: 20:4e:1e:c6:6b:64:5a:38:79:65:f9:88:50:fc:75: 4b:1a:b7:3b:c4:d4:e1:63:f0:25:53:fa:0a:ab:c5: 8a:20:b2:81:e1:71:0e:fc:d5:b5:11:47:32:d5:f2: 0b:90:d3:44:23:e3:91:06:82:9c:fa:4b:46:02:e6: 23:c0:ad:30:97:08:57:a9:8d:58:fc:be:0c:ef:15: 8a:8a:cf:98:53:01:a4:74:8b:84:ac:4b:91:7b:9d: c2:af:d8:db:da:34:db:cd:17:ff:cc:3e:e2:17:8a: 30:53:9c:80:5a:cb:c9:42:e5:8a:4a:6a:23:c8:00: 1a:fe:d9:f6:68:c1:5f:5b:3a:bd:10:34:e7:90:e2: 57:f3:de:3f:c6:95:2a:f9:69:93:5f:cf:6a:b7:1c: 4d:a6:22:6b:b4:97:f7:34:3e:73:a0:6f:39:5c:ed: db:42:0f:8d:55:a2:21:92:23:0f:3c:9e:00:88:c1: 7c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D7:9E:67:E9:7C:CA:68:75:E6:7D:41:17:65:48:CD:F6:2B:06:50 X509v3 Authority Key Identifier: keyid:81:06:2D:CE:1A:79:1E:73:41:D5:F4:25:98:11:AB:4D:65:F6:B0:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:2e:90:23:91:08:a9:94:31:af:54:42:cb:8b:66:0d:52:7a: 54:f2:1c:0b:5d:3d:ee:36:d0:02:2e:3c:8e:a0:63:c8:0a:3e: 3d:44:d7:ec:14:95:e3:0e:8f:d0:27:df:79:0a:17:95:4c:d1: e8:af:b2:d2:4a:6d:7b:bb:0b:02:3c:c0:8d:05:81:9b:dd:2d: f7:26:09:30:74:25:b9:b4:c6:f3:f0:59:96:aa:cd:e7:8b:40: d2:b1:19:79:3a:6f:b9:dc:18:88:a5:ab:15:26:ac:f0:5d:ad: c4:7c:ba:a6:44:ab:1b:3e:65:6a:e9:41:bb:95:f5:2f:39:71: e8:0d:06:99:7e:48:00:55:b4:66:dd:9d:5b:6d:28:d0:66:93: 2b:0e:e3:d2:27:e2:20:0b:69:1f:a3:84:38:0e:41:f9:05:a7: fa:0d:df:ac:ab:30:34:5c:e4:6d:02:e2:48:52:a4:81:64:41: 9c:16:3d:a4:45:58:99:63:6c:80:35:9c:d7:ad:08:af:46:f6: 17:56:8b:59:03:f1:99:1a:a3:b8:f6:80:cb:12:b5:52:ed:95: 34:e7:06:75:8c:66:31:aa:79:8c:8c:b5:2e:4e:b7:63:b4:06: 5d:08:63:25:ff:13:d9:2e:7a:91:67:d0:98:f8:a8:45:6c:1f: 1b:d8:3d:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmb23G2iJF7NgeSZK2AQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMDYyZGNlMWE3OTFlNzM0MWQ1ZjQyNTk4MTFhYjRkNjVm NmIwNzUwHhcNMjUxMjA2MDEwMjIxWhcNMjUxMjA3MDEwMjIxWjAzMTEwLwYDVQQD EyhlN2Q3OWU2N2U5N2NjYTY4NzVlNjdkNDExNzY1NDhjZGY2MmIwNjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx0s2Xgb0nmTl49XDg4BBcoAXToz KCuRltqfwnqLrL9yVj+sLAzIM1SggA+6r5ZT8aHZoBKDMiRvwVZJQb1GWHXYCHEu 2YzVaPYgTh7Ga2RaOHll+YhQ/HVLGrc7xNThY/AlU/oKq8WKILKB4XEO/NW1EUcy 1fILkNNEI+ORBoKc+ktGAuYjwK0wlwhXqY1Y/L4M7xWKis+YUwGkdIuErEuRe53C r9jb2jTbzRf/zD7iF4owU5yAWsvJQuWKSmojyAAa/tn2aMFfWzq9EDTnkOJX894/ xpUq+WmTX89qtxxNpiJrtJf3ND5zoG85XO3bQg+NVaIhkiMPPJ4AiMF8vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfXnmfpfMpodeZ9QRdlSM32KwZQMB8GA1UdIwQY MBaAFIEGLc4aeR5zQdX0JZgRq01l9rB1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1FZdHpocDVIbk5CMWZRbG1CR3JUV1gyc0hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDc4ZDEtM2UwYy00YzFhLWExNDEt NzRlMjE4ZDRiNjEzLzEvZ1FZdHpocDVIbk5CMWZRbG1CR3JUV1gyc0hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDc4ZDEtM2UwYy00YzFhLWExNDEtNzRlMjE4ZDRiNjEz LzEvZ1FZdHpocDVIbk5CMWZRbG1CR3JUV1gyc0hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvi6QI5EI qZQxr1RCy4tmDVJ6VPIcC1097jbQAi48jqBjyAo+PUTX7BSV4w6P0CffeQoXlUzR 6K+y0kpte7sLAjzAjQWBm90t9yYJMHQlubTG8/BZlqrN54tA0rEZeTpvudwYiKWr FSas8F2txHy6pkSrGz5laulBu5X1Lzlx6A0GmX5IAFW0Zt2dW20o0GaTKw7j0ifi IAtpH6OEOA5B+QWn+g3frKswNFzkbQLiSFKkgWRBnBY9pEVYmWNsgDWc160Ir0b2 F1aLWQPxmRqjuPaAyxK1Uu2VNOcGdYxmMap5jIy1Lk63Y7QGXQhjJf8T2S56kWfQ mPioRWwfG9g9gg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:39 2025 by rpki-client