This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json) Hash identifier: UG8ecdmk/UlQ2/w0+gen05qXEMTPjwNUDx0CwKZ3ETI= Subject key identifier: A9:5C:0F:FF:89:B6:21:4A:FB:DC:62:92:2B:3C:AB:51:20:BE:EF:49 Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d Certificate serial: 019AF31C75EACE9A31D2E57A17343AE26613 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft Manifest number: 10A5 Signing time: Sat 06 Dec 2025 10:01:59 +0000 Manifest this update: Sat 06 Dec 2025 10:01:59 +0000 Manifest next update: Sun 07 Dec 2025 10:01:59 +0000 Files and hashes: 1: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: ZOqyI0BaD2PWuU5tlKPQQAEMSpJ/XMOYkNJttYfCr/I=) 2: qWiRXpCL0NKtXzFBLcgeaF0mM4A.roa (hash: V0gkUhFHDtKhWrN/3cVBozf0t4RmZJghnQqebhSHl+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:75:ea:ce:9a:31:d2:e5:7a:17:34:3a:e2:66:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d Validity Not Before: Dec 6 10:01:59 2025 GMT Not After : Dec 7 10:01:59 2025 GMT Subject: CN=a95c0fff89b6214afbdc62922b3cab5120beef49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:25:a8:3d:0a:66:df:12:64:78:91:5d:78: 83:30:1d:9a:88:12:fe:24:df:27:8b:d8:a4:25:f9: af:5f:b1:a6:b7:e4:6e:d1:eb:5c:94:52:74:95:4b: fe:7e:9c:30:e5:de:5b:fe:6d:bd:8b:b4:fe:b2:03: 1e:18:8d:8d:30:ae:59:44:37:96:0b:a7:27:9b:44: 1f:76:21:bb:05:36:cd:ce:89:9d:f9:14:7a:8d:09: d4:af:b9:52:4b:ef:8d:29:86:31:99:c1:3e:20:5b: 22:80:b3:2f:f6:8e:49:28:a3:4b:98:81:c9:27:dd: f4:eb:03:14:f1:c7:a9:49:bb:5c:74:ce:a5:1b:45: 84:33:13:e4:2d:88:70:81:ed:c7:c5:fb:a1:ee:1f: 28:3d:ad:a6:46:e8:45:d9:09:e0:5a:23:5c:23:3e: ed:02:ad:b8:fe:f6:c4:af:14:9e:17:b7:98:d3:50: 27:a7:bd:c3:85:d9:35:84:06:7d:75:e4:14:63:eb: ce:a0:7f:55:91:5b:94:81:95:cf:5c:ae:eb:a3:4c: 52:fb:9d:ff:58:50:52:18:ee:ee:6a:53:b8:bc:ba: 95:05:b4:c3:cd:76:9a:e4:7d:1d:81:0d:24:b0:12: de:d9:d8:ad:78:4a:e2:c3:95:01:3c:ed:b6:e9:87: 4a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5C:0F:FF:89:B6:21:4A:FB:DC:62:92:2B:3C:AB:51:20:BE:EF:49 X509v3 Authority Key Identifier: keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c2:20:9c:d5:4e:7d:c6:a1:2b:f0:54:8c:be:70:9f:98:55: 3f:03:62:cd:35:c5:e7:96:9f:ae:fc:e5:b9:85:3c:43:75:11: b8:9f:db:04:be:dc:58:bc:99:af:35:ce:06:2e:77:37:8e:ca: 7f:37:b7:c3:19:1a:c9:87:fb:4e:72:85:f9:c2:08:43:5c:84: ce:f7:ce:58:61:44:d0:8d:11:7f:9e:62:fd:49:e3:a6:b7:d9: ca:66:ce:ed:cf:74:1b:4b:1c:27:47:d0:14:83:52:ee:c7:55: 70:8b:1d:6e:19:60:04:19:95:63:93:10:6a:27:56:89:a3:7c: bd:c1:55:73:f2:a3:16:0a:ed:81:fe:c0:51:c7:7a:81:d6:51: d5:bf:54:97:4e:8f:96:2e:73:ac:12:75:d6:13:83:d3:fb:8b: 2e:28:c8:12:3a:7f:e8:a5:17:14:90:9c:7d:81:df:60:c6:08: 91:22:03:f2:e2:66:e1:e6:d8:cb:31:00:b7:de:a2:4f:28:af: be:09:d8:9f:72:76:e8:61:20:49:83:12:00:df:ef:8e:6e:fc: 20:ed:4b:57:40:ad:40:ca:c3:dd:6d:c2:d0:24:ba:44:37:32: 59:1b:7f:c8:60:47:b3:f2:86:06:fb:72:28:eb:4f:75:12:0f: f6:45:32:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHHXqzpox0uV6FzQ64mYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MGVjN2FhYjIwZmM0YzgwMWM2Nzk2M2U1OWU0ZjkzNjAw ZTQwMWQwHhcNMjUxMjA2MTAwMTU5WhcNMjUxMjA3MTAwMTU5WjAzMTEwLwYDVQQD EyhhOTVjMGZmZjg5YjYyMTRhZmJkYzYyOTIyYjNjYWI1MTIwYmVlZjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYAlqD0KZt8SZHiRXXiDMB2aiBL+ JN8ni9ikJfmvX7Gmt+Ru0etclFJ0lUv+fpww5d5b/m29i7T+sgMeGI2NMK5ZRDeW C6cnm0QfdiG7BTbNzomd+RR6jQnUr7lSS++NKYYxmcE+IFsigLMv9o5JKKNLmIHJ J9306wMU8cepSbtcdM6lG0WEMxPkLYhwge3Hxfuh7h8oPa2mRuhF2QngWiNcIz7t Aq24/vbErxSeF7eY01Anp73Dhdk1hAZ9deQUY+vOoH9VkVuUgZXPXK7ro0xS+53/ WFBSGO7ualO4vLqVBbTDzXaa5H0dgQ0ksBLe2diteEriw5UBPO226YdKaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlcD/+JtiFK+9xikis8q1Egvu9JMB8GA1UdIwQY MBaAFBkOx6qyD8TIAcZ5Y+WeT5NgDkAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgt ZGFiOWI0ODNjMTIzLzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgtZGFiOWI0ODNjMTIz LzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8IgnNVO fcahK/BUjL5wn5hVPwNizTXF55afrvzluYU8Q3URuJ/bBL7cWLyZrzXOBi53N47K fze3wxkayYf7TnKF+cIIQ1yEzvfOWGFE0I0Rf55i/UnjprfZymbO7c90G0scJ0fQ FINS7sdVcIsdbhlgBBmVY5MQaidWiaN8vcFVc/KjFgrtgf7AUcd6gdZR1b9Ul06P li5zrBJ11hOD0/uLLijIEjp/6KUXFJCcfYHfYMYIkSID8uJm4ebYyzEAt96iTyiv vgnYn3J26GEgSYMSAN/vjm78IO1LV0CtQMrD3W3C0CS6RDcyWRt/yGBHs/KGBvty KOtPdRIP9kUyZg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:31:19 2025 by rpki-client