This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json) Hash identifier: vOFFoQ6mTD4Hniea4hR/C6Aa4p5JBcXQIjkRfTd6hAY= Subject key identifier: 37:C4:6A:40:D8:54:FD:CB:93:0D:D4:2D:AD:8E:F1:AA:08:41:7B:93 Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b Certificate serial: 019AF42E163EEB46150191EE31519DBDFBC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 15:00:52 +0000 Manifest this update: Sat 06 Dec 2025 15:00:52 +0000 Manifest next update: Sun 07 Dec 2025 15:00:52 +0000 Files and hashes: 1: Kt54sJQgRqTUq_5CeKj_uNxTFL4.roa (hash: 4RVmGcZHz9ixKOs2qOpourGK4cJrBwsGs1fzppEGkHY=) 2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: 3sv8lm/RRw/J/QSSKOYaWoLgSm1BJstjZ4o3s10msJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:16:3e:eb:46:15:01:91:ee:31:51:9d:bd:fb:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b Validity Not Before: Dec 6 15:00:52 2025 GMT Not After : Dec 7 15:00:52 2025 GMT Subject: CN=37c46a40d854fdcb930dd42dad8ef1aa08417b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:ee:48:82:34:85:39:63:6b:24:fa:10:da: 6e:10:63:b9:ac:bf:f2:45:be:a3:2d:e8:64:99:71: 2a:ba:1d:04:9c:34:68:23:07:43:e4:66:03:da:cc: d1:d5:ba:e7:32:5b:00:54:27:1b:91:05:ce:30:34: a1:ea:8b:a6:ab:47:98:e4:be:23:53:f6:e9:20:bd: d8:d3:6e:90:2f:88:4f:2d:09:e4:1e:ae:e8:54:52: 0b:4a:b5:c6:eb:3a:f6:0c:ef:fc:10:42:7b:c9:f2: 80:37:23:61:79:21:b9:25:29:2d:15:f4:68:7d:1c: 7b:ab:5a:57:59:a5:e7:68:e9:d4:c6:5f:8e:ec:a3: 25:1c:85:17:d4:26:d8:b3:23:4b:ba:f1:c4:15:40: b2:8b:c2:bb:35:8d:e8:fe:b0:1e:e0:ef:f4:f0:56: 9c:0d:96:c1:39:aa:38:d5:61:f2:bd:88:b8:d3:13: 22:1e:dd:ef:8f:23:f7:15:c7:b9:fc:69:33:46:00: fa:bb:4a:19:0b:83:a1:00:48:56:c4:bd:49:1f:1c: a5:9f:0f:61:d9:5d:37:97:b0:5a:78:f9:fd:4b:77: 41:87:e7:00:6b:53:f8:d9:a9:74:88:f6:44:0b:15: 84:df:09:ea:3f:02:49:ba:4d:75:79:24:d8:ea:94: 83:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C4:6A:40:D8:54:FD:CB:93:0D:D4:2D:AD:8E:F1:AA:08:41:7B:93 X509v3 Authority Key Identifier: keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:bd:e4:6b:ea:77:16:4b:b7:94:0f:20:d7:28:bd:84:d1:23: 77:c3:9f:a2:23:84:71:d8:6d:18:76:9d:e5:50:84:f0:69:6d: 3b:a9:0b:08:2a:ea:bf:c3:66:97:6c:61:d5:d2:61:6f:ab:14: 9e:6c:63:20:54:03:0f:86:b0:89:c0:4c:1e:36:c6:62:fb:81: a8:5a:0a:f8:de:4b:dc:11:a6:70:24:e0:93:24:74:a7:2b:0f: 4f:ad:47:e9:ad:b6:63:66:b8:45:d6:f2:0d:4d:18:ab:e8:25: 9a:cf:d8:11:76:d5:1c:ec:9b:ef:d1:fd:bc:18:91:4b:59:d8: 75:20:0a:9f:3c:c5:99:34:94:ee:98:b8:7b:01:98:81:9b:e7: ca:cd:4b:c3:3a:f4:43:92:ce:5d:02:b4:ea:59:7e:ee:bf:a8: 38:b3:af:5e:00:d4:62:36:fd:c2:b6:a4:b3:ae:5c:ee:b0:b7: c8:3d:9d:ca:b2:0f:8b:25:37:b3:f9:cd:12:70:4a:3c:c0:c6: a7:75:58:ce:e9:23:29:ab:1d:fd:76:0b:e0:85:67:1a:9d:b7: 8b:68:58:99:d0:e9:b4:1c:dc:0f:06:c0:a6:24:0f:cd:15:79: 03:70:fe:9b:0e:ef:2e:1b:17:05:d3:82:1c:c6:f2:a6:cd:3d: c5:e7:19:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LhY+60YVAZHuMVGdvfvHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMDZkOTk0YTEyMTkyNTdhM2NlYzllZDkxY2QxODliYzNk OTNiMGIwHhcNMjUxMjA2MTUwMDUyWhcNMjUxMjA3MTUwMDUyWjAzMTEwLwYDVQQD EygzN2M0NmE0MGQ4NTRmZGNiOTMwZGQ0MmRhZDhlZjFhYTA4NDE3YjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIPuSII0hTljayT6ENpuEGO5rL/y Rb6jLehkmXEquh0EnDRoIwdD5GYD2szR1brnMlsAVCcbkQXOMDSh6oumq0eY5L4j U/bpIL3Y026QL4hPLQnkHq7oVFILSrXG6zr2DO/8EEJ7yfKANyNheSG5JSktFfRo fRx7q1pXWaXnaOnUxl+O7KMlHIUX1CbYsyNLuvHEFUCyi8K7NY3o/rAe4O/08Fac DZbBOao41WHyvYi40xMiHt3vjyP3Fce5/GkzRgD6u0oZC4OhAEhWxL1JHxylnw9h 2V03l7BaePn9S3dBh+cAa1P42al0iPZECxWE3wnqPwJJuk11eSTY6pSD1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfEakDYVP3Lkw3ULa2O8aoIQXuTMB8GA1UdIwQY MBaAFIEG2ZShIZJXo87J7ZHNGJvD2TsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEt YjM1NGI3OGNjOTY5LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEtYjM1NGI3OGNjOTY5 LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjL3ka+p3 Fku3lA8g1yi9hNEjd8OfoiOEcdhtGHad5VCE8GltO6kLCCrqv8Nml2xh1dJhb6sU nmxjIFQDD4awicBMHjbGYvuBqFoK+N5L3BGmcCTgkyR0pysPT61H6a22Y2a4Rdby DU0Yq+glms/YEXbVHOyb79H9vBiRS1nYdSAKnzzFmTSU7pi4ewGYgZvnys1Lwzr0 Q5LOXQK06ll+7r+oOLOvXgDUYjb9wraks65c7rC3yD2dyrIPiyU3s/nNEnBKPMDG p3VYzukjKasd/XYL4IVnGp23i2hYmdDptBzcDwbApiQPzRV5A3D+mw7vLhsXBdOC HMbyps09xecZIw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:37:53 2025 by rpki-client