This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft File: GQ1bBUO9hajs-WmruFA8nerQ35g.mft (raw, json) Hash identifier: Qnlz6YaMBnMK1TecaS/mAsuC8oovWvA0nKjFQKDSwiI= Subject key identifier: C1:AB:1E:8A:6B:09:43:9D:5F:CE:D2:28:71:56:BB:35:49:80:4C:8F Authority key identifier: 19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98 Certificate issuer: /CN=190d5b0543bd85a8ecf969abb8503c9dead0df98 Certificate serial: 019AF12EBD874F4CE3A83B26E1452EA57357 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 01:02:43 +0000 Manifest this update: Sat 06 Dec 2025 01:02:43 +0000 Manifest next update: Sun 07 Dec 2025 01:02:43 +0000 Files and hashes: 1: DRozhMtaZ2qQi39QkdO5G1jc7k0.roa (hash: PuORiX2E31wDt+P9sStv2sIXh7s2xmzWRFumBtIrOBQ=) 2: GQ1bBUO9hajs-WmruFA8nerQ35g.crl (hash: pjWlmXFhit2GTGvVajSGLEiylyPpmvfJluVoYlNZqnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:bd:87:4f:4c:e3:a8:3b:26:e1:45:2e:a5:73:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=190d5b0543bd85a8ecf969abb8503c9dead0df98 Validity Not Before: Dec 6 01:02:43 2025 GMT Not After : Dec 7 01:02:43 2025 GMT Subject: CN=c1ab1e8a6b09439d5fced2287156bb3549804c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:56:9b:0b:c8:c6:6f:1f:c0:42:d6:8b:8d: aa:34:7a:90:c4:40:7d:91:32:31:fc:15:e9:2c:8b: b6:07:4d:0b:d0:f7:94:cc:eb:fe:0f:f7:4b:8e:cc: dd:81:0e:e1:28:5e:59:49:67:c9:b0:26:27:71:0c: 26:67:e2:a5:bf:59:db:2f:5e:51:9d:a0:64:37:be: 33:54:a6:0b:fd:72:b0:38:f0:e5:e2:49:67:cc:17: ef:d2:aa:6f:83:5e:c2:d3:50:eb:cd:74:08:c5:da: 6e:fc:f8:cc:c9:6e:8b:ef:a3:e1:91:17:32:10:a8: 1f:87:5a:83:85:1a:86:03:62:83:f7:60:fb:80:b0: 73:12:e5:b9:32:3b:96:cd:a1:45:9a:16:f4:d2:72: 02:8e:90:b4:12:dd:f3:fa:0b:1c:15:04:d9:7f:01: 87:6a:02:2a:ce:eb:dc:1a:47:b4:85:48:f8:da:5c: 6c:91:dd:66:a1:83:c5:8e:2c:14:91:ed:43:d8:cf: e1:9e:be:da:32:d6:cb:1d:40:1f:ee:0e:49:b5:3d: b2:53:01:48:fe:98:59:47:bc:2d:8b:a9:3d:08:c8: 1a:f0:30:7a:83:35:bf:b1:42:a0:db:d6:9f:c7:ff: d3:5f:2f:8a:83:36:88:55:33:47:d8:ab:09:44:8c: 48:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AB:1E:8A:6B:09:43:9D:5F:CE:D2:28:71:56:BB:35:49:80:4C:8F X509v3 Authority Key Identifier: keyid:19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:70:98:fe:26:a8:04:3e:6f:da:6b:ae:98:08:96:df:fb:95: c5:a9:00:1b:f7:93:5a:32:fb:ae:2c:f2:0b:bb:6f:90:71:d5: b8:9b:0c:37:c1:c9:be:d9:fb:3c:9a:a3:aa:0d:11:4e:e7:97: c3:64:c7:50:84:fe:d3:7a:c8:a8:d2:3b:e9:98:ab:da:be:25: b5:68:23:dc:68:82:17:f4:34:a0:cc:cc:44:ea:49:65:66:ac: ee:71:3b:3a:d9:e3:3f:6c:43:aa:47:cb:63:9b:78:4b:a1:cf: 3c:62:1d:3d:73:53:00:bf:52:7c:76:26:fd:67:eb:d8:36:be: b6:0a:df:45:f7:6c:49:97:84:fc:1f:b1:d0:fd:25:06:fe:1d: ff:fb:f9:21:26:12:eb:e6:26:6e:06:8b:f3:39:7a:b7:a4:90: e1:2f:33:dd:e3:23:56:4e:2a:ba:2d:50:03:5d:26:7b:8a:2a: 77:35:55:8d:52:74:ab:70:76:8c:12:7b:e9:04:a5:4f:f8:53: b2:11:e2:c0:b2:0b:f9:5f:2c:68:00:15:6c:9e:14:cd:58:67: 72:4e:54:7f:99:5a:18:70:d6:1b:35:e2:0c:16:63:1e:8f:82: de:8a:cb:83:b1:ba:4d:ec:8b:df:95:64:25:3e:a0:ac:44:2a: 62:32:84:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLr2HT0zjqDsm4UUupXNXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MGQ1YjA1NDNiZDg1YThlY2Y5NjlhYmI4NTAzYzlkZWFk MGRmOTgwHhcNMjUxMjA2MDEwMjQzWhcNMjUxMjA3MDEwMjQzWjAzMTEwLwYDVQQD EyhjMWFiMWU4YTZiMDk0MzlkNWZjZWQyMjg3MTU2YmIzNTQ5ODA0YzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCtWmwvIxm8fwELWi42qNHqQxEB9 kTIx/BXpLIu2B00L0PeUzOv+D/dLjszdgQ7hKF5ZSWfJsCYncQwmZ+Klv1nbL15R naBkN74zVKYL/XKwOPDl4klnzBfv0qpvg17C01DrzXQIxdpu/PjMyW6L76PhkRcy EKgfh1qDhRqGA2KD92D7gLBzEuW5MjuWzaFFmhb00nICjpC0Et3z+gscFQTZfwGH agIqzuvcGke0hUj42lxskd1moYPFjiwUke1D2M/hnr7aMtbLHUAf7g5JtT2yUwFI /phZR7wti6k9CMga8DB6gzW/sUKg29afx//TXy+KgzaIVTNH2KsJRIxI1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGrHoprCUOdX87SKHFWuzVJgEyPMB8GA1UdIwQY MBaAFBkNWwVDvYWo7Plpq7hQPJ3q0N+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MDA3ZmYtNWYwYy00YTczLWEzZjIt Y2NjNTgxNDA5NGFkLzEvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82MDA3ZmYtNWYwYy00YTczLWEzZjItY2NjNTgxNDA5NGFk LzEvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnCY/iao BD5v2muumAiW3/uVxakAG/eTWjL7rizyC7tvkHHVuJsMN8HJvtn7PJqjqg0RTueX w2THUIT+03rIqNI76Zir2r4ltWgj3GiCF/Q0oMzMROpJZWas7nE7OtnjP2xDqkfL Y5t4S6HPPGIdPXNTAL9SfHYm/Wfr2Da+tgrfRfdsSZeE/B+x0P0lBv4d//v5ISYS 6+YmbgaL8zl6t6SQ4S8z3eMjVk4qui1QA10me4oqdzVVjVJ0q3B2jBJ76QSlT/hT shHiwLIL+V8saAAVbJ4UzVhnck5Uf5laGHDWGzXiDBZjHo+C3orLg7G6TeyL35Vk JT6grEQqYjKE1A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:41 2025 by rpki-client