This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft File: GQAdVXoGmNrXfEs-3fKn02tyqwA.mft (raw, json) Hash identifier: Zl8cjqKLTS6dXkSs97pUHs0EVFQW332ul9mvJM3N9GM= Subject key identifier: 37:AB:1F:E7:DE:24:29:1E:10:55:6B:CD:F3:AA:EB:5C:C3:79:54:26 Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00 Certificate issuer: /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00 Certificate serial: 019AF389AF18804507A22ABA750FFD130D32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft Manifest number: 06A2 Signing time: Sat 06 Dec 2025 12:01:18 +0000 Manifest this update: Sat 06 Dec 2025 12:01:18 +0000 Manifest next update: Sun 07 Dec 2025 12:01:18 +0000 Files and hashes: 1: GQAdVXoGmNrXfEs-3fKn02tyqwA.crl (hash: FuDBJggX7+yRJYh2zc0eq4T0PS2e+w/SiyjpSgdCApY=) 2: _Y3WU0rL_Z5yMospeFK2kheOtgM.roa (hash: qqDo+PPhN0qvkLG+7KSZ3FS8hY7kC2hitlOvSMnc4pQ=) 3: cqleo2TkA-Dax9YzlbPC4oCeXks.roa (hash: WDLbfAf8uLhRV57uZSklRDXJ7tKTUOclgtS0od1R4M4=) 4: spoNsBquI5wjgn7gu8viZ3BO3l4.roa (hash: G+9zvvKyQogrHpfux1dzt3BVRrnfOK8LLcMasK0KKtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:af:18:80:45:07:a2:2a:ba:75:0f:fd:13:0d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00 Validity Not Before: Dec 6 12:01:18 2025 GMT Not After : Dec 7 12:01:18 2025 GMT Subject: CN=37ab1fe7de24291e10556bcdf3aaeb5cc3795426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:c0:ed:cb:53:0b:77:e3:46:a3:31:a7:40: 08:d7:d1:19:cf:7d:ce:e7:89:91:c8:7a:e1:21:c0: 72:66:b0:55:3b:5a:7f:b6:b9:e9:05:ae:5d:8a:ad: 59:2b:51:24:ac:2b:f0:d6:a9:0f:e3:4f:13:ad:46: eb:0f:22:4a:13:9d:c7:22:63:d1:a0:c7:00:aa:1f: c6:6c:f6:a9:49:69:c9:f8:1a:e8:d6:f0:76:ae:67: 4c:c7:69:92:92:8b:68:ed:11:40:d1:cb:86:76:25: f1:c3:1f:d3:cc:b8:1f:3c:44:2b:d2:bb:8e:b5:26: ae:b4:94:44:97:aa:76:2c:69:4d:89:ee:48:73:7d: 1c:b1:2b:be:46:56:77:aa:93:f8:c3:8e:c4:06:d0: 2c:a6:07:a9:85:8c:4a:59:1c:bd:49:ed:4b:8a:27: b0:84:0b:6e:d6:36:69:13:5f:7c:c2:d3:03:04:f9: 04:59:42:4d:9b:8e:bf:63:9a:6c:ea:50:7e:a0:e2: 82:92:39:1b:3f:31:75:5c:bc:9a:9c:a1:3a:4d:62: 3b:ca:29:71:0f:ca:de:95:e9:d7:35:dd:5b:9a:43: f8:0a:3e:53:18:39:03:6b:af:5e:08:bf:b2:0a:c3: 30:ed:c9:c5:e1:7e:6e:23:c5:7c:8c:02:a4:dc:6b: 51:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AB:1F:E7:DE:24:29:1E:10:55:6B:CD:F3:AA:EB:5C:C3:79:54:26 X509v3 Authority Key Identifier: keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:71:c3:d6:3c:ee:5e:29:dd:81:b7:eb:55:37:c7:66:c6:b8: e0:ac:85:51:63:8f:4f:02:72:06:86:5e:6b:99:0f:36:8c:e1: 0c:0d:c9:e8:77:5a:18:88:70:ba:4b:05:a0:16:c6:ad:db:24: b4:72:bb:c6:f0:7e:5a:57:da:7b:04:2e:fb:61:9f:4f:b0:4f: 65:9d:c7:18:8c:48:0a:74:6b:58:21:b2:fa:49:4c:92:b7:61: 8b:54:62:40:88:69:09:cc:f1:b4:70:cd:01:9b:e2:46:35:be: 3a:07:3b:a0:e6:d1:51:59:f2:37:49:d8:3f:e8:92:17:08:c2: aa:f0:e1:9c:cb:b8:fd:4f:85:71:b0:9e:3e:a4:01:d2:1f:69: 3d:68:3e:80:58:80:f5:5b:54:c5:b1:d9:89:c5:be:d2:1d:89: cc:71:ec:84:5e:98:08:5f:81:67:61:ac:65:dd:1b:70:b7:cc: 72:2d:17:23:90:b7:55:33:13:ae:99:11:fe:d5:e4:11:7e:91: 93:a4:bc:3d:8a:5b:9b:ec:f1:b3:d1:d4:d8:ce:c1:55:78:0c: 26:3d:2f:33:da:50:08:d0:93:2e:15:48:d4:66:5d:01:27:2a: f7:d3:d1:0f:21:76:d3:4d:c0:40:b2:5c:8a:16:5b:75:36:09: 9f:41:31:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzia8YgEUHoiq6dQ/9Ew0yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDAxZDU1N2EwNjk4ZGFkNzdjNGIzZWRkZjJhN2QzNmI3 MmFiMDAwHhcNMjUxMjA2MTIwMTE4WhcNMjUxMjA3MTIwMTE4WjAzMTEwLwYDVQQD EygzN2FiMWZlN2RlMjQyOTFlMTA1NTZiY2RmM2FhZWI1Y2MzNzk1NDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplXA7ctTC3fjRqMxp0AI19EZz33O 54mRyHrhIcByZrBVO1p/trnpBa5diq1ZK1EkrCvw1qkP408TrUbrDyJKE53HImPR oMcAqh/GbPapSWnJ+Bro1vB2rmdMx2mSkoto7RFA0cuGdiXxwx/TzLgfPEQr0ruO tSautJREl6p2LGlNie5Ic30csSu+RlZ3qpP4w47EBtAspgephYxKWRy9Se1Liiew hAtu1jZpE198wtMDBPkEWUJNm46/Y5ps6lB+oOKCkjkbPzF1XLyanKE6TWI7yilx D8relenXNd1bmkP4Cj5TGDkDa69eCL+yCsMw7cnF4X5uI8V8jAKk3GtRFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDerH+feJCkeEFVrzfOq61zDeVQmMB8GA1UdIwQY MBaAFBkAHVV6Bpja13xLPt3yp9NrcqsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iY2RlY2QtNjY4OS00Y2Q4LWExMDkt MjBkZTY5NzI2MDliLzEvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iY2RlY2QtNjY4OS00Y2Q4LWExMDktMjBkZTY5NzI2MDli LzEvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3HD1jzu XindgbfrVTfHZsa44KyFUWOPTwJyBoZea5kPNozhDA3J6HdaGIhwuksFoBbGrdsk tHK7xvB+WlfaewQu+2GfT7BPZZ3HGIxICnRrWCGy+klMkrdhi1RiQIhpCczxtHDN AZviRjW+Ogc7oObRUVnyN0nYP+iSFwjCqvDhnMu4/U+FcbCePqQB0h9pPWg+gFiA 9VtUxbHZicW+0h2JzHHshF6YCF+BZ2GsZd0bcLfMci0XI5C3VTMTrpkR/tXkEX6R k6S8PYpbm+zxs9HU2M7BVXgMJj0vM9pQCNCTLhVI1GZdAScq99PRDyF2003AQLJc ihZbdTYJn0ExUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:50:24 2025 by rpki-client