This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft File: GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json) Hash identifier: t9YTbe3VO0X+CMDnfA2S6RmmgZQa6ozxalFcA/0jirA= Subject key identifier: 8B:EE:63:E8:42:E9:08:E2:1F:0E:E2:BE:71:87:AD:CB:FB:84:D8:B1 Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96 Certificate issuer: /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96 Certificate serial: 019AF208B1F0AA858CFC75228673D0824A5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft Manifest number: 09CB Signing time: Sat 06 Dec 2025 05:00:47 +0000 Manifest this update: Sat 06 Dec 2025 05:00:47 +0000 Manifest next update: Sun 07 Dec 2025 05:00:47 +0000 Files and hashes: 1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: YCf+ZKtFxh4YxN+xt6IrtGzNHScE6BibtMHKgwo5kkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b1:f0:aa:85:8c:fc:75:22:86:73:d0:82:4a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96 Validity Not Before: Dec 6 05:00:47 2025 GMT Not After : Dec 7 05:00:47 2025 GMT Subject: CN=8bee63e842e908e21f0ee2be7187adcbfb84d8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4f:ea:05:54:1d:b2:9f:94:b4:42:83:94:e2: 1c:38:16:d1:e3:c4:dd:0f:2c:35:ce:a4:57:b8:4e: c2:25:69:9e:71:14:c6:cc:ee:0c:d7:f5:b8:fe:dd: 0c:37:44:f9:06:cf:4d:82:3b:5b:12:90:28:fa:95: 76:d6:37:3b:73:12:38:25:c3:5f:e5:94:43:ce:8b: 7f:59:19:f0:02:72:c7:47:14:85:9c:97:7d:c5:4e: 2e:0a:42:b2:ee:2e:5d:a3:9b:49:a5:54:0b:ff:0a: d1:7e:eb:1f:fc:e6:db:ae:cf:9e:00:f1:46:ee:7d: cb:75:57:5a:96:37:5f:a1:e0:42:90:ed:7b:33:db: ac:0e:44:5a:cc:f6:fb:f5:bd:1e:81:f8:c2:af:1f: 03:f4:ee:77:69:53:64:48:9e:dd:4f:34:d4:f5:cf: 53:2e:5e:8a:f5:cf:c4:bd:2b:66:ae:80:da:54:40: 3b:e5:a6:c7:40:ce:3d:ba:d3:4f:06:a7:cb:f9:16: c7:b2:23:e6:1f:e3:3e:19:4e:1d:14:f5:25:4b:32: ca:b1:a9:e2:54:1a:b0:61:d0:74:61:12:df:67:0e: 16:fe:b2:41:82:aa:76:d3:f5:48:cd:28:52:37:d5: c4:48:c8:47:c6:1e:e6:4b:38:23:9c:ef:4d:e0:4b: e5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EE:63:E8:42:E9:08:E2:1F:0E:E2:BE:71:87:AD:CB:FB:84:D8:B1 X509v3 Authority Key Identifier: keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:68:e6:7c:0d:aa:ea:17:08:5b:f9:56:9f:ce:f0:47:c2:16: 88:34:7b:44:aa:98:8e:fa:ae:88:2f:68:33:33:d6:44:2d:bb: 87:be:51:1a:e0:19:95:c7:11:68:5a:89:d1:ee:cd:ab:79:8d: 26:d6:91:50:79:2f:fa:37:ea:55:ca:c0:11:da:e3:15:21:1c: c9:48:46:85:fe:15:d5:a9:15:d5:c2:e8:0d:13:7a:dc:62:7a: 65:54:40:c8:a7:be:7f:46:6f:49:e5:d4:95:8d:03:49:8b:31: 8e:67:9a:4b:18:ab:ce:f4:53:54:d1:0b:8a:4e:82:e1:71:8e: ff:15:6d:e7:cc:19:d5:35:90:7d:dd:8a:69:5a:8e:96:27:5c: 54:f9:c8:bb:0b:3d:7e:a1:db:76:e6:2b:60:99:13:17:71:79: ee:38:67:b9:da:a1:fb:ed:7e:3f:87:2a:bc:19:c8:84:81:4e: 8e:3b:08:45:e9:0f:13:44:30:3a:5b:43:0f:bb:ba:c5:1c:87: 12:6d:e5:79:cc:94:6b:89:0e:d8:af:2e:af:e0:cd:cd:fd:22: 1c:ab:0d:26:24:e2:16:97:91:a7:28:e2:be:0d:2d:0a:11:eb: 64:ee:98:67:c0:90:5c:6a:88:ab:43:0e:0c:e3:78:e8:84:49: ed:fe:ba:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLHwqoWM/HUihnPQgkpfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDlmNjBjOGI4NWVmZWQzNjFkZjViNmI1MWM5ZmVkYWUx YzdmOTYwHhcNMjUxMjA2MDUwMDQ3WhcNMjUxMjA3MDUwMDQ3WjAzMTEwLwYDVQQD Eyg4YmVlNjNlODQyZTkwOGUyMWYwZWUyYmU3MTg3YWRjYmZiODRkOGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0/qBVQdsp+UtEKDlOIcOBbR48Td Dyw1zqRXuE7CJWmecRTGzO4M1/W4/t0MN0T5Bs9NgjtbEpAo+pV21jc7cxI4JcNf 5ZRDzot/WRnwAnLHRxSFnJd9xU4uCkKy7i5do5tJpVQL/wrRfusf/Obbrs+eAPFG 7n3LdVdaljdfoeBCkO17M9usDkRazPb79b0egfjCrx8D9O53aVNkSJ7dTzTU9c9T Ll6K9c/EvStmroDaVEA75abHQM49utNPBqfL+RbHsiPmH+M+GU4dFPUlSzLKsani VBqwYdB0YRLfZw4W/rJBgqp20/VIzShSN9XESMhHxh7mSzgjnO9N4EvlWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvuY+hC6QjiHw7ivnGHrcv7hNixMB8GA1UdIwQY MBaAFBkJ9gyLhe/tNh31trUcn+2uHH+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy83MDIxZTItZWZmZS00MTYzLThiYjMt NThlN2RiMzBlYTQ0LzEvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy83MDIxZTItZWZmZS00MTYzLThiYjMtNThlN2RiMzBlYTQ0 LzEvR1FuMkRJdUY3LTAySGZXMnRSeWY3YTRjZjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGjmfA2q 6hcIW/lWn87wR8IWiDR7RKqYjvquiC9oMzPWRC27h75RGuAZlccRaFqJ0e7Nq3mN JtaRUHkv+jfqVcrAEdrjFSEcyUhGhf4V1akV1cLoDRN63GJ6ZVRAyKe+f0ZvSeXU lY0DSYsxjmeaSxirzvRTVNELik6C4XGO/xVt58wZ1TWQfd2KaVqOlidcVPnIuws9 fqHbduYrYJkTF3F57jhnudqh++1+P4cqvBnIhIFOjjsIRekPE0QwOltDD7u6xRyH Em3lecyUa4kO2K8ur+DNzf0iHKsNJiTiFpeRpyjivg0tChHrZO6YZ8CQXGqIq0MO DON46IRJ7f66Rg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:06 2025 by rpki-client