This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json) Hash identifier: kfu6bs3mle2P29ffbHjRmjmdXCNz8WthJxB28WBpCQ0= Subject key identifier: A0:9D:D3:87:D8:F2:30:4A:5A:F4:C7:5C:24:92:07:16:E4:95:EF:27 Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e Certificate serial: 019AF2E4428AA216B3681DBAC7F518DFD858 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft Manifest number: 026E Signing time: Sat 06 Dec 2025 09:00:36 +0000 Manifest this update: Sat 06 Dec 2025 09:00:36 +0000 Manifest next update: Sun 07 Dec 2025 09:00:36 +0000 Files and hashes: 1: N9bR_mBXXHjDIFBVaDKi9gxaXJ0.roa (hash: t/vnY4c9w46jNFfl6Ql0aCTX7Py6QOE0v9MYkC3oE08=) 2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: 08yFP73fUO3EPbQEY03dhmq+7U2NJeYsHnUFeIrxDkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:42:8a:a2:16:b3:68:1d:ba:c7:f5:18:df:d8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e Validity Not Before: Dec 6 09:00:36 2025 GMT Not After : Dec 7 09:00:36 2025 GMT Subject: CN=a09dd387d8f2304a5af4c75c24920716e495ef27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ac:72:5d:84:c6:35:1c:05:e1:d8:01:77:b6: 81:5b:d2:3a:e5:76:02:bf:b7:37:82:40:69:79:f2: 6f:0d:9d:50:a1:a6:7f:a0:25:93:e5:fc:a3:00:32: d8:b7:dc:03:14:27:48:de:3a:7e:2d:80:a4:d5:56: d3:b2:65:87:45:0c:19:1e:f2:78:ff:f7:b9:a6:6b: c6:93:08:0f:24:ba:36:d9:b1:54:87:38:d1:a3:36: 63:eb:f8:83:c5:37:a2:d8:12:35:38:7c:2c:27:4a: fb:bb:c9:69:db:84:23:2d:3d:99:d6:26:ed:2a:6a: b5:bc:52:b6:09:98:da:d5:9b:58:91:6b:2b:09:d6: 96:fa:0f:76:dd:60:bb:89:9d:2a:da:fd:bb:1d:11: ee:98:97:88:8a:61:57:93:13:0c:b4:8b:e8:c5:be: b7:39:ef:c9:66:54:0b:75:0a:d5:60:51:7a:88:52: 35:20:60:3e:60:9a:0d:2b:0b:8f:6b:ce:d1:86:59: 1c:8c:44:92:f3:b4:f6:86:5e:13:29:91:d8:62:8f: f1:96:89:29:68:f0:fb:61:0d:17:82:34:1e:a0:16: 23:09:5e:12:80:f0:0c:af:43:92:ea:7f:dd:e2:f4: 72:fd:97:c8:0d:46:c9:8b:d3:8d:25:da:76:fd:ae: a4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9D:D3:87:D8:F2:30:4A:5A:F4:C7:5C:24:92:07:16:E4:95:EF:27 X509v3 Authority Key Identifier: keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:78:ce:2d:60:b9:82:f1:58:d6:fc:f1:db:09:d1:29:1d:86: 16:02:9f:2e:e2:d9:f1:bf:4b:c8:a8:63:c4:b6:81:b6:b9:6f: aa:c3:6c:ad:fc:d8:2f:05:bb:01:0d:34:4e:53:ca:1b:45:3a: 86:4f:3e:e0:92:9b:40:26:13:85:de:44:ea:13:b1:cb:ae:96: 6a:e3:8e:e8:40:09:a7:2f:20:b5:54:4a:a5:fd:f6:88:08:4c: 6c:d3:03:1f:60:54:37:e5:cd:16:ae:c9:9f:54:78:bf:b3:d0: fd:0a:8e:80:7e:7e:98:23:87:06:00:3b:f2:2b:bd:22:85:9d: d9:74:cc:aa:59:9d:a5:b8:fe:43:6e:2f:10:df:45:e7:21:c3: 49:72:c1:32:fa:2a:dc:a6:b9:31:d7:28:5e:da:05:64:de:b1: 28:51:d7:a6:a6:f1:a3:6c:59:27:46:91:2a:f5:20:77:f3:3b: d8:73:8f:13:2d:7d:3c:60:3e:08:be:8c:ca:a4:47:8f:91:5f: 97:b8:1f:c7:e2:8e:3b:d9:31:8e:16:5d:70:d7:91:ba:3c:fe: c2:23:64:1e:3b:ee:85:fb:28:68:cd:77:b2:90:b7:1b:96:11: f1:5b:94:76:88:96:d2:ac:7d:63:1b:ad:67:48:d8:ea:38:cd: 68:b9:d0:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5EKKohazaB26x/UY39hYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNmFhOTFhYjEyNzRlNDc1Mzk3YjkwN2E2NTVmOTFlOWQ2 MDVlMGUwHhcNMjUxMjA2MDkwMDM2WhcNMjUxMjA3MDkwMDM2WjAzMTEwLwYDVQQD EyhhMDlkZDM4N2Q4ZjIzMDRhNWFmNGM3NWMyNDkyMDcxNmU0OTVlZjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraxyXYTGNRwF4dgBd7aBW9I65XYC v7c3gkBpefJvDZ1QoaZ/oCWT5fyjADLYt9wDFCdI3jp+LYCk1VbTsmWHRQwZHvJ4 //e5pmvGkwgPJLo22bFUhzjRozZj6/iDxTei2BI1OHwsJ0r7u8lp24QjLT2Z1ibt Kmq1vFK2CZja1ZtYkWsrCdaW+g923WC7iZ0q2v27HRHumJeIimFXkxMMtIvoxb63 Oe/JZlQLdQrVYFF6iFI1IGA+YJoNKwuPa87RhlkcjESS87T2hl4TKZHYYo/xlokp aPD7YQ0XgjQeoBYjCV4SgPAMr0OS6n/d4vRy/ZfIDUbJi9ONJdp2/a6khwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCd04fY8jBKWvTHXCSSBxbkle8nMB8GA1UdIwQY MBaAFIFqqRqxJ05HU5e5B6ZV+R6dYF4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYTdmZDQtNWRlMC00YTExLWEyNTMt ZGZmM2JjZWU2YjY2LzEvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8yYTdmZDQtNWRlMC00YTExLWEyNTMtZGZmM2JjZWU2YjY2 LzEvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3jOLWC5 gvFY1vzx2wnRKR2GFgKfLuLZ8b9LyKhjxLaBtrlvqsNsrfzYLwW7AQ00TlPKG0U6 hk8+4JKbQCYThd5E6hOxy66WauOO6EAJpy8gtVRKpf32iAhMbNMDH2BUN+XNFq7J n1R4v7PQ/QqOgH5+mCOHBgA78iu9IoWd2XTMqlmdpbj+Q24vEN9F5yHDSXLBMvoq 3Ka5MdcoXtoFZN6xKFHXpqbxo2xZJ0aRKvUgd/M72HOPEy19PGA+CL6MyqRHj5Ff l7gfx+KOO9kxjhZdcNeRujz+wiNkHjvuhfsoaM13spC3G5YR8VuUdoiW0qx9Yxut Z0jY6jjNaLnQVA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:56:58 2025 by rpki-client