This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json) Hash identifier: s3FWFJz6ymI+c4V9mv+W7hMX+jgCkRm10qANNAJxo/Q= Subject key identifier: 27:2A:4E:99:7B:4A:C4:53:46:4E:51:9E:31:1B:76:EC:F1:1C:A6:96 Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84 Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84 Certificate serial: 019AF1D21AAEDF45FF654EE93F3C52FD93AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft Manifest number: 0AA4 Signing time: Sat 06 Dec 2025 04:01:09 +0000 Manifest this update: Sat 06 Dec 2025 04:01:09 +0000 Manifest next update: Sun 07 Dec 2025 04:01:09 +0000 Files and hashes: 1: NmyYIbuzbIXUj9jJPjF3BR9optE.roa (hash: wSdjb/vMyeBBwt44mj9k7sBn6y3WZbUfXBs3kYVLtv8=) 2: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: q3XvSlYt3CTTccW9HePLbROmKvK5yXopdMy0qHAlB80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:1a:ae:df:45:ff:65:4e:e9:3f:3c:52:fd:93:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84 Validity Not Before: Dec 6 04:01:09 2025 GMT Not After : Dec 7 04:01:09 2025 GMT Subject: CN=272a4e997b4ac453464e519e311b76ecf11ca696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:82:fa:37:fe:fb:5f:66:3b:86:2a:f7:81:53: 59:6e:bd:0e:01:d7:fc:f5:cc:e3:bd:8d:76:f3:d6: c8:bc:26:4d:f4:4b:2c:2a:05:91:57:06:83:6f:8d: 9d:0e:9e:27:78:f5:3e:5f:f6:51:94:a3:2b:fb:39: fd:60:5a:3c:20:0e:0e:c0:d2:d4:49:4b:66:38:c6: 90:a7:23:49:bf:9e:ee:b8:28:7f:1a:68:eb:8e:cf: 3e:52:8f:ae:39:db:75:72:6e:d5:40:55:ab:22:86: c2:75:2d:88:99:92:05:45:c1:54:ed:c6:75:26:a4: 16:a8:af:37:be:60:05:cd:33:dc:c5:87:0d:20:6d: 07:2e:61:66:ff:95:5d:83:34:c0:31:56:fb:2c:c7: 10:75:dc:b1:30:12:e7:61:f9:48:a0:2f:98:36:4b: e0:ba:39:06:e3:77:86:64:83:35:bc:2c:b8:67:85: 35:ba:5d:a9:63:5b:d3:14:b7:5b:92:af:c4:12:7b: f6:28:af:ba:29:b5:d5:e5:e9:cf:a3:01:54:a8:09: 67:5b:c5:bc:12:6f:08:32:7d:54:4f:83:64:5b:1f: af:78:fc:9a:17:ed:b3:d3:6c:5b:ff:fa:39:44:05: f7:fa:15:c4:05:94:26:20:25:e4:00:50:c6:8b:b3: f6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2A:4E:99:7B:4A:C4:53:46:4E:51:9E:31:1B:76:EC:F1:1C:A6:96 X509v3 Authority Key Identifier: keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:37:67:0a:36:42:1f:73:01:55:56:7a:8a:95:48:84:25:16: 5e:7b:90:cf:c8:c4:82:a0:50:0a:cb:02:ed:e1:d6:2e:4f:e7: 80:64:34:9f:01:36:49:ec:57:f7:91:66:e4:1b:77:90:a3:24: b7:d1:c6:2f:d0:69:f2:a8:2c:33:70:46:06:b7:91:92:1c:15: f7:a3:7d:d2:50:07:04:dd:7f:28:be:76:71:fb:df:0b:6a:af: 06:76:31:ae:5c:94:79:a9:ac:39:f8:b1:35:5e:5e:67:36:de: 22:48:9f:7b:c0:a1:0d:9d:5b:d5:d6:d9:9e:dc:10:04:08:12: 11:14:65:48:47:e6:2e:ae:77:47:e2:37:f5:5b:73:84:6c:29: 36:e8:a0:25:53:81:cf:dd:e3:70:54:79:9d:e2:39:ed:df:03: f7:2f:66:fe:f5:a8:2c:9e:86:db:73:90:0a:9c:f6:54:12:9d: 2d:44:e6:fd:82:ef:02:b5:f7:15:3e:0c:19:22:b1:62:c5:fe: 68:3d:c7:6d:24:4a:14:c0:d1:5c:32:0d:6d:d0:6e:ce:69:7c: ce:d2:15:fc:9f:4d:b5:9e:67:e7:d3:e7:e7:f7:81:57:e0:c7: 3a:92:bb:d6:dc:6d:95:0a:6b:94:2a:63:7e:19:5d:54:4c:95: 21:77:2e:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hqu30X/ZU7pPzxS/ZOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZmFiNTUwZDgyN2EyZGVmMGQ0ZDI2MTYwNjE0MjVjMmY2 OTRjODQwHhcNMjUxMjA2MDQwMTA5WhcNMjUxMjA3MDQwMTA5WjAzMTEwLwYDVQQD EygyNzJhNGU5OTdiNGFjNDUzNDY0ZTUxOWUzMTFiNzZlY2YxMWNhNjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIL6N/77X2Y7hir3gVNZbr0OAdf8 9czjvY1289bIvCZN9EssKgWRVwaDb42dDp4nePU+X/ZRlKMr+zn9YFo8IA4OwNLU SUtmOMaQpyNJv57uuCh/Gmjrjs8+Uo+uOdt1cm7VQFWrIobCdS2ImZIFRcFU7cZ1 JqQWqK83vmAFzTPcxYcNIG0HLmFm/5VdgzTAMVb7LMcQddyxMBLnYflIoC+YNkvg ujkG43eGZIM1vCy4Z4U1ul2pY1vTFLdbkq/EEnv2KK+6KbXV5enPowFUqAlnW8W8 Em8IMn1UT4NkWx+vePyaF+2z02xb//o5RAX3+hXEBZQmICXkAFDGi7P2RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcqTpl7SsRTRk5RnjEbduzxHKaWMB8GA1UdIwQY MBaAFID6tVDYJ6Le8NTSYWBhQlwvaUyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAt Zjc2MjkyOWYxZjA4LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAtZjc2MjkyOWYxZjA4 LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzdnCjZC H3MBVVZ6ipVIhCUWXnuQz8jEgqBQCssC7eHWLk/ngGQ0nwE2SexX95Fm5Bt3kKMk t9HGL9Bp8qgsM3BGBreRkhwV96N90lAHBN1/KL52cfvfC2qvBnYxrlyUeamsOfix NV5eZzbeIkife8ChDZ1b1dbZntwQBAgSERRlSEfmLq53R+I39VtzhGwpNuigJVOB z93jcFR5neI57d8D9y9m/vWoLJ6G23OQCpz2VBKdLUTm/YLvArX3FT4MGSKxYsX+ aD3HbSRKFMDRXDINbdBuzml8ztIV/J9NtZ5n59Pn5/eBV+DHOpK71txtlQprlCpj fhldVEyVIXcuCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:16:34 2025 by rpki-client