This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft File: Gq51omzPhiEiKBakccy3wNXnFuI.mft (raw, json) Hash identifier: RRhz/kwQBWEfHCibeLbEhrr/Bi5/861Gb3c09kvkaOM= Subject key identifier: 64:D4:35:93:55:1F:41:6C:18:6E:47:5E:9F:35:36:DF:3E:3F:57:7C Authority key identifier: 1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2 Certificate issuer: /CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2 Certificate serial: 019AF352729FA0A9779C20508DD70ADABADB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft Manifest number: 0A6C Signing time: Sat 06 Dec 2025 11:00:58 +0000 Manifest this update: Sat 06 Dec 2025 11:00:58 +0000 Manifest next update: Sun 07 Dec 2025 11:00:58 +0000 Files and hashes: 1: Gq51omzPhiEiKBakccy3wNXnFuI.crl (hash: 6WyjSgsXfKfsHFgZi5p7D3jKcxsRH/ZXTZyQlCQaPU0=) 2: e-R839WD2s0lY-SLIuwOK0gz1NA.roa (hash: Br/dbcJ4O349JzP2gYAkSObA1wvRVc0Vvam1hapVqyI=) 3: wQpXfE9JEQ0xae3JNQ5WII9BPtg.roa (hash: Wc6T5r1GtvbV1icqr7Rl021bCXOyiaZtPpB0GH2eHqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:72:9f:a0:a9:77:9c:20:50:8d:d7:0a:da:ba:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2 Validity Not Before: Dec 6 11:00:58 2025 GMT Not After : Dec 7 11:00:58 2025 GMT Subject: CN=64d43593551f416c186e475e9f3536df3e3f577c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1f:5c:3a:9e:59:cd:c9:ce:ba:d6:ff:3c:c9: 4d:b5:2f:e6:11:22:5b:7e:9e:39:09:86:72:cb:2c: 91:83:3b:aa:9f:ac:0a:e7:68:58:9e:f5:ee:cf:23: 9d:97:e0:0c:bc:dd:3f:08:28:72:c0:d1:8e:50:8a: c1:7c:29:6f:66:4e:52:ac:af:44:54:da:36:7a:96: 71:9a:71:24:d4:da:67:28:83:98:0c:39:cb:cb:a2: 33:f3:d0:e0:20:56:bb:26:55:ec:15:12:01:9d:fc: c0:28:1e:45:6f:1c:f2:a2:ce:70:df:ba:ba:d7:0e: 56:71:df:ab:61:f9:f8:d2:54:30:54:04:b0:8f:20: a6:06:53:05:a9:40:15:3d:76:93:42:4c:de:a0:5b: 96:72:2b:49:32:eb:e2:16:5d:42:5d:b9:d3:50:2d: e9:0f:17:7c:26:13:3e:fa:4e:67:4a:ba:16:df:4e: 8a:6e:50:e3:a4:12:7f:ee:51:49:b5:8c:1f:e5:ad: ca:4e:2e:29:b3:b4:6b:70:d3:b8:c7:ba:74:55:66: f0:b7:33:04:47:c1:e7:b2:e3:d8:4e:c6:9d:60:9c: 5d:18:aa:34:89:82:bc:f7:b1:cf:46:e0:64:c4:62: 01:85:81:e7:cb:1c:02:5e:2b:51:bc:f0:e3:af:81: 72:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D4:35:93:55:1F:41:6C:18:6E:47:5E:9F:35:36:DF:3E:3F:57:7C X509v3 Authority Key Identifier: keyid:1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:5d:63:6b:15:0f:23:1e:7c:f2:4e:e1:01:3a:91:b5:f3:c6: d4:cd:87:53:21:73:f4:ce:90:0a:c8:fa:61:3b:b6:0d:3d:05: 8e:bb:30:ea:79:78:e2:0e:09:4b:41:65:0d:dd:bb:b2:35:4b: 30:ea:17:c3:36:28:bc:10:bd:2b:b7:4a:da:69:6a:4f:82:60: 83:3b:2b:c5:6d:66:ed:99:2c:0d:ce:02:80:b1:61:c1:17:33: 45:75:08:78:95:c6:27:2d:ea:b8:71:8b:57:48:9e:49:0b:7c: 93:4b:b8:a2:0d:d6:23:9b:bd:d8:a7:65:8e:6a:06:1d:9b:45: 0b:cc:5e:c6:ce:c0:0e:37:e0:c5:62:94:c9:eb:1b:9c:b6:3c: 86:c3:5c:76:4b:8a:fd:7b:cc:4a:35:f7:4b:43:2e:62:d9:91: 0d:84:4a:2f:57:66:ba:ec:fe:af:ac:c6:eb:1b:d7:10:32:3b: e3:19:e8:8c:51:75:7e:1e:7f:bd:90:34:c7:4e:2d:77:23:43: 3a:81:35:b7:b9:4c:48:22:3d:00:e5:6b:f1:ad:d7:fb:f1:b3: de:6c:58:20:54:f4:b9:3b:df:f2:8a:cf:e7:f1:a8:2f:3f:f4: c2:73:fd:29:fa:47:f1:2a:b3:6a:98:e0:1d:b3:44:4e:d2:27: 03:60:5b:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUnKfoKl3nCBQjdcK2rrbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYWU3NWEyNmNjZjg2MjEyMjI4MTZhNDcxY2NiN2MwZDVl NzE2ZTIwHhcNMjUxMjA2MTEwMDU4WhcNMjUxMjA3MTEwMDU4WjAzMTEwLwYDVQQD Eyg2NGQ0MzU5MzU1MWY0MTZjMTg2ZTQ3NWU5ZjM1MzZkZjNlM2Y1NzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x9cOp5ZzcnOutb/PMlNtS/mESJb fp45CYZyyyyRgzuqn6wK52hYnvXuzyOdl+AMvN0/CChywNGOUIrBfClvZk5SrK9E VNo2epZxmnEk1NpnKIOYDDnLy6Iz89DgIFa7JlXsFRIBnfzAKB5Fbxzyos5w37q6 1w5Wcd+rYfn40lQwVASwjyCmBlMFqUAVPXaTQkzeoFuWcitJMuviFl1CXbnTUC3p Dxd8JhM++k5nSroW306KblDjpBJ/7lFJtYwf5a3KTi4ps7RrcNO4x7p0VWbwtzME R8HnsuPYTsadYJxdGKo0iYK897HPRuBkxGIBhYHnyxwCXitRvPDjr4FyZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTUNZNVH0FsGG5HXp81Nt8+P1d8MB8GA1UdIwQY MBaAFBqudaJsz4YhIigWpHHMt8DV5xbiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3E1MW9telBoaUVpS0Jha2NjeTN3TlhuRnVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84ZTcwNTQtZmQ1MC00ZjkxLTljYzct MjY0ZjBjYzVmZjgwLzEvR3E1MW9telBoaUVpS0Jha2NjeTN3TlhuRnVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84ZTcwNTQtZmQ1MC00ZjkxLTljYzctMjY0ZjBjYzVmZjgw LzEvR3E1MW9telBoaUVpS0Jha2NjeTN3TlhuRnVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAol1jaxUP Ix588k7hATqRtfPG1M2HUyFz9M6QCsj6YTu2DT0Fjrsw6nl44g4JS0FlDd27sjVL MOoXwzYovBC9K7dK2mlqT4JggzsrxW1m7ZksDc4CgLFhwRczRXUIeJXGJy3quHGL V0ieSQt8k0u4og3WI5u92KdljmoGHZtFC8xexs7ADjfgxWKUyesbnLY8hsNcdkuK /XvMSjX3S0MuYtmRDYRKL1dmuuz+r6zG6xvXEDI74xnojFF1fh5/vZA0x04tdyND OoE1t7lMSCI9AOVr8a3X+/Gz3mxYIFT0uTvf8orP5/GoLz/0wnP9KfpH8Sqzapjg HbNETtInA2Bbng== -----END CERTIFICATE-----Generated at Sat Dec 6 16:45:54 2025 by rpki-client