This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft File: GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json) Hash identifier: YWl01+J6uu5spxIQ1vIwYorrYHorTz5qB98AtEbTGms= Subject key identifier: 84:2F:18:78:A1:96:21:26:BC:C3:09:B2:47:4A:A5:B3:80:47:B0:55 Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD Certificate issuer: /CN=1904ce28eae682c97acd2d862fee2897c3b096fd Certificate serial: 019AF5777E493D7B7AF38EFE19674AEBEF25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 21:00:40 +0000 Manifest this update: Sat 06 Dec 2025 21:00:40 +0000 Manifest next update: Sun 07 Dec 2025 21:00:40 +0000 Files and hashes: 1: 5ekJj6RYdmJBNmKWcQ0sEc6eWgU.roa (hash: gPGy8PS0+ecmm07tEkgKLMFDWfNcEFuAsE09yhAQrNo=) 2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: KvPRjphcw22+IbgTSzqOZMk2suXsfJuRmL3DbnVKWhM=) 3: _YBrb9GHmCpqMjy8GFwAvwaPx90.roa (hash: XWiWSnDHqy5A+xwKGiqSBQrfe6N7eyh2EySgoK4VNNw=) 4: lCgKihl6lv9I1HmInNqD60nii-E.roa (hash: +eRiAGt7XlmYsCebRhtIL5+eM1SWrg49PToO3o+8iRc=) 5: mmY1ARivIWLIbuStJrmVTjbcqd0.roa (hash: pdFIZbB/0pJ15uLsSovmly6F7hKCHQG6LxPg19m7f9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:7e:49:3d:7b:7a:f3:8e:fe:19:67:4a:eb:ef:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd Validity Not Before: Dec 6 21:00:40 2025 GMT Not After : Dec 7 21:00:40 2025 GMT Subject: CN=842f1878a1962126bcc309b2474aa5b38047b055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:7d:e0:a3:3f:9f:94:2c:e1:8d:0f:69:b6: c9:99:76:27:93:14:1a:99:7c:45:5a:dd:36:af:5a: 28:88:9e:0f:93:4f:7b:57:29:eb:4d:e8:ec:dc:6f: a8:93:1c:77:17:3b:a5:37:b3:d2:80:06:96:ed:6a: d7:79:74:4e:f2:bb:b0:26:66:cd:e2:65:84:0d:92: 89:6e:da:b7:a3:c4:9d:af:17:4b:3a:f3:b1:48:8d: ca:5b:0e:4e:18:ca:c4:15:a1:b1:fb:e2:2c:a6:fa: da:64:ac:b5:d1:f4:cd:8b:94:a4:33:c0:82:63:14: 51:ca:84:7a:71:79:d9:88:36:2e:7c:4e:e5:1d:6f: a2:93:d3:31:42:b1:65:62:94:58:09:0e:0c:89:e2: b1:49:b8:ac:d1:fa:ed:84:09:6d:2b:f3:b9:a2:53: 7e:ef:2a:1b:d9:bd:2f:2f:a2:e4:d6:4e:bb:2a:c1: 87:3b:14:4f:39:ab:93:3c:3d:70:ec:18:40:de:e5: bb:7f:f9:9e:db:34:cc:a2:a5:09:c0:02:58:36:2b: da:51:82:fe:9c:e9:29:ab:65:06:01:15:4c:3d:9f: 8c:42:a8:fe:26:10:4c:fb:bc:96:7a:8f:0d:fd:51: 01:17:ee:99:46:c3:d8:dc:17:79:cb:a5:1e:b0:ab: 61:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2F:18:78:A1:96:21:26:BC:C3:09:B2:47:4A:A5:B3:80:47:B0:55 X509v3 Authority Key Identifier: keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:53:91:2c:7d:d6:fa:00:d4:d1:64:5d:ce:3c:3d:83:c0:66: fb:f8:99:f3:98:69:78:8c:4d:0e:9f:fe:5c:e5:e6:76:06:8f: 4f:54:5c:d0:57:79:29:09:9a:d5:90:46:32:3b:01:59:54:c8: 4d:84:21:6e:2c:85:84:b2:88:8f:f0:06:11:67:f3:e3:5a:48: c3:30:1d:31:60:ee:a4:88:95:c0:31:71:32:66:bc:86:3f:e3: 24:d4:15:9b:2f:77:51:67:a8:ed:96:ef:26:35:b3:94:94:10: 83:4b:13:9c:62:b8:c1:5c:00:34:d3:7f:4f:06:fb:6b:96:f2: 78:1f:3f:92:0b:24:ca:78:26:9e:cf:c0:0a:47:b4:6d:c9:71: 8c:92:1a:2b:b2:4f:44:dd:b8:a2:75:8f:c6:4f:54:6a:26:f6: a6:e1:16:9c:97:09:40:eb:a9:38:3b:0b:22:9c:b1:6b:b3:32: ec:ae:63:b6:a5:8a:8f:9b:47:2b:fc:49:51:dc:bb:fd:00:3c: 90:e5:8d:c6:08:81:fe:48:75:b0:89:a9:d9:07:61:11:79:bd: 9d:0f:85:7f:7d:62:46:89:4e:35:d7:05:b3:9a:a0:d4:48:2c: a8:b5:00:31:5c:7e:42:05:65:af:ab:9d:ac:fa:b5:0f:5b:33: 0a:5e:16:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d35JPXt6847+GWdK6+8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDRjZTI4ZWFlNjgyYzk3YWNkMmQ4NjJmZWUyODk3YzNi MDk2ZmQwHhcNMjUxMjA2MjEwMDQwWhcNMjUxMjA3MjEwMDQwWjAzMTEwLwYDVQQD Eyg4NDJmMTg3OGExOTYyMTI2YmNjMzA5YjI0NzRhYTViMzgwNDdiMDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSF94KM/n5Qs4Y0PabbJmXYnkxQa mXxFWt02r1ooiJ4Pk097VynrTejs3G+okxx3FzulN7PSgAaW7WrXeXRO8ruwJmbN 4mWEDZKJbtq3o8SdrxdLOvOxSI3KWw5OGMrEFaGx++IspvraZKy10fTNi5SkM8CC YxRRyoR6cXnZiDYufE7lHW+ik9MxQrFlYpRYCQ4MieKxSbis0frthAltK/O5olN+ 7yob2b0vL6Lk1k67KsGHOxRPOauTPD1w7BhA3uW7f/me2zTMoqUJwAJYNivaUYL+ nOkpq2UGARVMPZ+MQqj+JhBM+7yWeo8N/VEBF+6ZRsPY3Bd5y6UesKthOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQvGHihliEmvMMJskdKpbOAR7BVMB8GA1UdIwQY MBaAFBkEzijq5oLJes0thi/uKJfDsJb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDkt MTVkNWRlYjIyOGRkLzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDktMTVkNWRlYjIyOGRk LzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFORLH3W +gDU0WRdzjw9g8Bm+/iZ85hpeIxNDp/+XOXmdgaPT1Rc0Fd5KQma1ZBGMjsBWVTI TYQhbiyFhLKIj/AGEWfz41pIwzAdMWDupIiVwDFxMma8hj/jJNQVmy93UWeo7Zbv JjWzlJQQg0sTnGK4wVwANNN/Twb7a5byeB8/kgskyngmns/ACke0bclxjJIaK7JP RN24onWPxk9Uaib2puEWnJcJQOupODsLIpyxa7My7K5jtqWKj5tHK/xJUdy7/QA8 kOWNxgiB/kh1sImp2QdhEXm9nQ+Ff31iRolONdcFs5qg1EgsqLUAMVx+QgVlr6ud rPq1D1szCl4WfA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:55 2025 by rpki-client