This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft File: gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json) Hash identifier: RfzkGMqhUmyd1lzIWrTnJQuMzZZNG4WW2eUEUBmMyvA= Subject key identifier: 9F:DE:49:20:13:C1:5F:7D:C7:72:5D:D6:70:C4:E0:FA:50:F1:AC:80 Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9 Certificate issuer: /CN=81060a518528e86a8ea77f188a0263790c08f6b9 Certificate serial: 019B32D5D7BD65D3EB50FE234BF49CDEA588 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft Manifest number: 117D Signing time: Thu 18 Dec 2025 19:00:33 +0000 Manifest this update: Thu 18 Dec 2025 19:00:33 +0000 Manifest next update: Fri 19 Dec 2025 19:00:33 +0000 Files and hashes: 1: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: YEHQObmjRiugX/BpwY3TtbFUxzaUjmeNNxAMwcrCc4U=) 2: mzS0mg7LzekXtU0-AI8vjQNsdnI.roa (hash: W1Odlm/4gNw2/x1K4BE4WalP/0rHvCKJa9lik2Xno0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:d7:bd:65:d3:eb:50:fe:23:4b:f4:9c:de:a5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9 Validity Not Before: Dec 18 19:00:33 2025 GMT Not After : Dec 19 19:00:33 2025 GMT Subject: CN=9fde492013c15f7dc7725dd670c4e0fa50f1ac80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a9:3a:35:ec:05:d7:73:bd:33:02:48:5b:d9: 61:b7:78:11:67:73:1b:19:1b:27:fa:db:72:c2:f5: 8a:05:ec:39:5a:00:ce:37:65:4b:a9:88:a6:28:b6: ce:93:78:99:cd:06:13:5a:41:f9:bb:90:1e:b0:f2: 12:86:15:01:d4:7f:fd:98:1a:cb:40:9b:fa:92:94: 2c:19:33:74:cc:f2:76:6f:5f:8f:4f:c6:d4:63:00: 63:8c:fa:0f:86:17:ec:f0:be:f5:ca:8d:57:dd:2f: c6:94:bd:21:66:e6:ee:17:3a:c5:05:b8:01:dc:44: aa:ad:c0:41:91:99:a6:86:71:2b:6d:c4:4a:44:38: f7:ec:c8:99:56:fd:a2:f8:90:b8:71:d5:ab:fa:72: 2d:fe:3b:6e:26:2f:3c:9a:2f:ae:37:cc:bf:83:42: 9d:7a:c6:78:15:86:21:d7:cf:0e:63:07:e7:25:95: 07:2c:ee:f9:73:87:f1:b3:9e:f6:a7:bc:2f:62:27: 9e:6f:78:fc:43:aa:f2:64:3e:94:d3:23:6a:ef:00: ad:16:76:dc:a8:a5:ef:21:b4:1b:f8:da:8f:49:2e: 15:df:37:3f:2b:10:bf:a8:53:2f:22:0d:77:80:22: 27:78:9f:1a:c1:12:b9:69:20:46:67:d6:01:a0:73: 9d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DE:49:20:13:C1:5F:7D:C7:72:5D:D6:70:C4:E0:FA:50:F1:AC:80 X509v3 Authority Key Identifier: keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c2:2e:f8:05:66:6f:95:ec:df:b5:28:f0:02:57:39:ef:2b: 97:3b:10:5b:3b:41:89:85:b7:0b:d1:ca:42:cd:e6:d7:f3:dc: 77:a7:8e:94:fc:06:c5:72:1c:b6:d7:bc:f4:a3:2b:44:e0:f6: f6:18:fb:4f:0d:af:87:0c:20:8a:3f:da:2e:c6:23:12:ef:91: a7:b3:39:06:60:a8:0f:27:08:eb:96:e4:43:d4:f8:28:db:6b: b4:2f:f0:dc:23:7c:d6:60:0d:95:fe:31:e2:44:04:56:3d:7b: 15:38:74:8a:ca:86:f8:56:e5:f1:1a:83:5b:1c:ba:e6:83:70: 2d:81:17:fe:d2:7e:a8:a4:78:9d:e7:b1:51:9e:98:77:0e:ad: f4:c7:08:b5:34:3d:24:66:68:ac:5d:6a:71:70:1c:1b:f8:62: d1:09:58:a6:2e:d3:4c:2e:0d:e5:01:02:d0:e7:a2:cd:3b:e5: 48:c6:46:79:e3:49:8f:d2:56:7f:7b:33:35:6c:32:28:7c:52: ab:1b:68:45:16:0d:fb:ae:4c:8a:21:15:b6:e0:58:6d:e8:42: 26:a6:2f:b1:a0:85:fb:2c:52:03:67:8b:8c:b3:ac:3c:2d:bd: 02:e0:97:7d:80:e9:06:ce:5a:8a:b0:7b:d0:ee:96:f7:1f:e5: 47:35:0a:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1de9ZdPrUP4jS/Sc3qWIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMDYwYTUxODUyOGU4NmE4ZWE3N2YxODhhMDI2Mzc5MGMw OGY2YjkwHhcNMjUxMjE4MTkwMDMzWhcNMjUxMjE5MTkwMDMzWjAzMTEwLwYDVQQD Eyg5ZmRlNDkyMDEzYzE1ZjdkYzc3MjVkZDY3MGM0ZTBmYTUwZjFhYzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKk6NewF13O9MwJIW9lht3gRZ3Mb GRsn+ttywvWKBew5WgDON2VLqYimKLbOk3iZzQYTWkH5u5AesPIShhUB1H/9mBrL QJv6kpQsGTN0zPJ2b1+PT8bUYwBjjPoPhhfs8L71yo1X3S/GlL0hZubuFzrFBbgB 3ESqrcBBkZmmhnErbcRKRDj37MiZVv2i+JC4cdWr+nIt/jtuJi88mi+uN8y/g0Kd esZ4FYYh188OYwfnJZUHLO75c4fxs572p7wvYieeb3j8Q6ryZD6U0yNq7wCtFnbc qKXvIbQb+NqPSS4V3zc/KxC/qFMvIg13gCIneJ8awRK5aSBGZ9YBoHOdcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/eSSATwV99x3Jd1nDE4PpQ8ayAMB8GA1UdIwQY MBaAFIEGClGFKOhqjqd/GIoCY3kMCPa5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lNWUyZDAtZjQzOS00NWU0LTg1NDAt ZjE5NjAwYzdhZDU0LzEvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9lNWUyZDAtZjQzOS00NWU0LTg1NDAtZjE5NjAwYzdhZDU0 LzEvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMIu+AVm b5Xs37Uo8AJXOe8rlzsQWztBiYW3C9HKQs3m1/Pcd6eOlPwGxXIctte89KMrROD2 9hj7Tw2vhwwgij/aLsYjEu+Rp7M5BmCoDycI65bkQ9T4KNtrtC/w3CN81mANlf4x 4kQEVj17FTh0isqG+Fbl8RqDWxy65oNwLYEX/tJ+qKR4neexUZ6Ydw6t9McItTQ9 JGZorF1qcXAcG/hi0QlYpi7TTC4N5QEC0OeizTvlSMZGeeNJj9JWf3szNWwyKHxS qxtoRRYN+65MiiEVtuBYbehCJqYvsaCF+yxSA2eLjLOsPC29AuCXfYDpBs5airB7 0O6W9x/lRzUKkw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:46:34 2025 by rpki-client