This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft File: gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json) Hash identifier: ROJOJ0rtCL8orW9Dak2QAnFFJWOPYHHLjegaRV66WXM= Subject key identifier: 13:F3:6F:D6:7E:AB:51:3F:C5:28:6B:76:44:9E:E2:46:10:99:A1:2B Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9 Certificate issuer: /CN=81060a518528e86a8ea77f188a0263790c08f6b9 Certificate serial: 019AF31B20B16C2DD2B7CD86401134D2D6CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft Manifest number: 115C Signing time: Sat 06 Dec 2025 10:00:32 +0000 Manifest this update: Sat 06 Dec 2025 10:00:32 +0000 Manifest next update: Sun 07 Dec 2025 10:00:32 +0000 Files and hashes: 1: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: toxQTtzpTDcHdmwE5SUxC50ShBSYGdW/myMwosW0LPk=) 2: mzS0mg7LzekXtU0-AI8vjQNsdnI.roa (hash: W1Odlm/4gNw2/x1K4BE4WalP/0rHvCKJa9lik2Xno0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:20:b1:6c:2d:d2:b7:cd:86:40:11:34:d2:d6:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9 Validity Not Before: Dec 6 10:00:32 2025 GMT Not After : Dec 7 10:00:32 2025 GMT Subject: CN=13f36fd67eab513fc5286b76449ee2461099a12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:04:00:d5:a5:2f:f5:23:0a:f8:e1:c3:48:d7: 6f:ef:ae:60:06:94:36:90:3b:13:9b:e3:59:33:3a: 8a:3c:58:23:e7:5f:87:66:c5:da:7a:80:a2:a3:c1: e5:2a:f6:c6:b2:a6:91:11:29:a0:4b:86:77:0d:e2: 1a:87:0c:44:1d:01:fe:0b:12:ce:af:08:ec:f2:4c: c7:11:9e:0a:e3:d5:19:08:74:9c:25:9b:57:28:0e: ea:c9:ef:07:58:a4:b3:b0:c2:56:b5:0e:88:a0:7d: 07:f7:58:8c:4d:81:c9:56:25:9e:32:5e:89:fb:90: 3a:8e:a8:24:9b:f3:c4:d4:89:ee:c3:a2:a1:cf:c4: 82:84:cc:c7:69:47:6b:86:15:c9:e8:b0:4f:4d:0e: 00:9c:47:f6:fd:43:a1:b3:1d:eb:4b:6a:92:75:c4: b5:8b:7e:3e:7d:d4:aa:cc:0b:dd:43:86:80:bf:6e: fb:3b:a3:3e:01:a7:cb:03:b1:32:14:a1:f7:10:80: 61:3c:ba:c0:52:c2:2b:dc:09:81:a5:c4:3a:f9:78: 3e:db:14:73:b6:b9:f4:ea:a5:30:4f:2c:dc:18:2b: af:b7:e3:0e:e9:cd:51:02:e5:a0:09:4c:54:79:a3: 70:d8:a9:51:28:40:a7:46:a6:04:2e:a4:7f:31:4d: e7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F3:6F:D6:7E:AB:51:3F:C5:28:6B:76:44:9E:E2:46:10:99:A1:2B X509v3 Authority Key Identifier: keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:bd:54:1e:db:99:88:66:92:82:1d:6c:01:66:65:f1:22:56: 96:6c:69:21:c9:38:8e:ef:35:5b:d9:32:58:fb:db:32:ea:75: 96:4d:f5:7b:50:bd:ea:6d:74:78:22:a6:7b:ca:e1:82:32:0d: 8c:cf:da:13:16:c8:b8:2b:5e:fc:ba:ea:29:22:16:36:21:f7: b6:3f:83:76:8c:09:16:a5:49:8f:29:3b:07:c8:6c:5f:87:65: 5a:fa:e7:6d:60:b2:73:4b:24:bd:21:c3:9c:8e:9c:56:d8:e6: ba:40:2a:65:ba:33:dd:cb:a9:1f:fd:1b:b5:20:75:eb:32:57: 32:de:88:77:2d:c5:81:2c:b4:27:fb:c2:55:3d:33:48:3e:93: 3f:51:e5:74:a1:74:8f:22:e3:e8:2d:87:27:98:61:e8:dd:14: 9f:6c:06:47:97:d2:97:82:c3:6d:2d:b0:ab:16:ec:71:4b:99: 24:f0:b4:5d:15:62:ba:d6:f6:4e:5e:3a:2f:6e:1b:07:d0:36: 4d:89:69:53:5d:06:d9:6e:21:32:62:99:b2:cd:89:54:df:3c: f7:a8:7a:da:97:a8:b9:79:87:9a:b4:ed:43:e5:91:b4:42:b9: 93:9b:93:35:07:56:bd:7f:0c:ea:24:86:6f:9b:74:e0:9b:54: e4:99:91:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGyCxbC3St82GQBE00tbKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMDYwYTUxODUyOGU4NmE4ZWE3N2YxODhhMDI2Mzc5MGMw OGY2YjkwHhcNMjUxMjA2MTAwMDMyWhcNMjUxMjA3MTAwMDMyWjAzMTEwLwYDVQQD EygxM2YzNmZkNjdlYWI1MTNmYzUyODZiNzY0NDllZTI0NjEwOTlhMTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwQA1aUv9SMK+OHDSNdv765gBpQ2 kDsTm+NZMzqKPFgj51+HZsXaeoCio8HlKvbGsqaRESmgS4Z3DeIahwxEHQH+CxLO rwjs8kzHEZ4K49UZCHScJZtXKA7qye8HWKSzsMJWtQ6IoH0H91iMTYHJViWeMl6J +5A6jqgkm/PE1Inuw6Khz8SChMzHaUdrhhXJ6LBPTQ4AnEf2/UOhsx3rS2qSdcS1 i34+fdSqzAvdQ4aAv277O6M+AafLA7EyFKH3EIBhPLrAUsIr3AmBpcQ6+Xg+2xRz trn06qUwTyzcGCuvt+MO6c1RAuWgCUxUeaNw2KlRKECnRqYELqR/MU3nSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPzb9Z+q1E/xShrdkSe4kYQmaErMB8GA1UdIwQY MBaAFIEGClGFKOhqjqd/GIoCY3kMCPa5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lNWUyZDAtZjQzOS00NWU0LTg1NDAt ZjE5NjAwYzdhZDU0LzEvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9lNWUyZDAtZjQzOS00NWU0LTg1NDAtZjE5NjAwYzdhZDU0 LzEvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa71UHtuZ iGaSgh1sAWZl8SJWlmxpIck4ju81W9kyWPvbMup1lk31e1C96m10eCKme8rhgjIN jM/aExbIuCte/LrqKSIWNiH3tj+DdowJFqVJjyk7B8hsX4dlWvrnbWCyc0skvSHD nI6cVtjmukAqZboz3cupH/0btSB16zJXMt6Idy3FgSy0J/vCVT0zSD6TP1HldKF0 jyLj6C2HJ5hh6N0Un2wGR5fSl4LDbS2wqxbscUuZJPC0XRViutb2Tl46L24bB9A2 TYlpU10G2W4hMmKZss2JVN8896h62peouXmHmrTtQ+WRtEK5k5uTNQdWvX8M6iSG b5t04JtU5JmRfw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:13:19 2025 by rpki-client