This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft File: gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json) Hash identifier: H7HY7ShDHp+Du9zCgxeCq8NNpdC2E+zK3DWFdJ2fpvQ= Subject key identifier: C5:C4:B4:85:FF:FB:30:DD:AC:36:C4:FF:14:9F:0B:08:5A:D8:73:1C Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1 Certificate issuer: /CN=8293905afa134944f0630c949f3abda40646dac1 Certificate serial: 019AF49BC59B7BB8E766D98E2EC5CB8443B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 17:00:40 +0000 Manifest this update: Sat 06 Dec 2025 17:00:40 +0000 Manifest next update: Sun 07 Dec 2025 17:00:40 +0000 Files and hashes: 1: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: 00qqfAcdpZEfocdj71+6hhjLz58s7s4x3cvmZohx5Kw=) 2: xqh-TDqxA6PFl_pLopVGhxzgy70.roa (hash: PFQ4rC1LE7WPTBJwr+kRgUbb+SgESq5u6lAAWw+3gVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:c5:9b:7b:b8:e7:66:d9:8e:2e:c5:cb:84:43:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8293905afa134944f0630c949f3abda40646dac1 Validity Not Before: Dec 6 17:00:40 2025 GMT Not After : Dec 7 17:00:40 2025 GMT Subject: CN=c5c4b485fffb30ddac36c4ff149f0b085ad8731c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ce:d5:50:7d:8f:57:5c:be:31:6c:97:43:db: f8:b1:db:e7:4f:c7:b9:9d:1c:95:89:af:37:4c:d5: 9a:09:96:cd:01:12:58:76:5b:04:3a:e6:07:f6:d7: 02:a8:c1:fb:6d:4e:39:9b:34:03:7a:b4:b7:d8:b2: cd:a1:2e:49:98:47:ad:c7:fe:7b:97:26:b4:d8:1a: d3:3c:b2:15:8c:b8:bc:eb:27:c6:2c:5e:50:3f:e9: 5a:19:65:0c:22:06:50:cd:bc:e2:57:8f:de:e3:de: 91:1b:5f:b1:6a:4e:27:7b:ad:1b:3f:c1:f2:75:32: 90:78:bd:a4:35:48:48:b7:06:a6:d2:ed:ec:0b:6a: 48:97:f0:ba:b8:99:b7:78:05:fd:6f:df:bf:0b:f0: 9b:00:82:4b:0b:af:14:0c:da:7a:ab:28:66:f3:9b: 5b:12:72:8f:ee:13:d9:8e:e3:34:a8:21:0d:83:44: 44:98:c8:b9:d3:29:0f:3c:91:0d:cb:bd:49:dd:e2: ff:17:15:f3:c6:0a:a2:d5:c7:e0:66:98:35:bc:e4: a5:d3:3a:97:00:0d:5a:fe:fd:bb:b1:28:d7:b5:f6: f6:7d:5d:a6:40:7c:31:92:87:29:ad:ed:3e:24:b6: 06:48:fc:d8:19:74:cd:01:9c:9a:f8:71:3a:7f:33: f2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C4:B4:85:FF:FB:30:DD:AC:36:C4:FF:14:9F:0B:08:5A:D8:73:1C X509v3 Authority Key Identifier: keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f6:eb:22:d8:70:40:41:f0:4d:e3:7e:0e:ce:78:4a:24:18: 8e:cb:4f:39:f9:c7:7d:c0:a9:47:da:75:3d:ec:86:20:ea:09: 1a:03:80:92:9b:07:0b:18:0a:f6:a3:8b:12:64:dc:4b:e4:05: 68:c2:5f:e0:9c:2e:6b:cf:87:2b:4d:c3:73:ea:5b:d3:e5:4f: 51:d8:13:48:a8:36:b0:7f:f3:b0:db:51:27:b6:3a:f2:b9:84: ac:32:14:c2:19:8a:21:4e:0d:9e:af:e5:be:dc:2e:10:9b:3a: 66:83:0f:be:9d:c3:a1:59:5c:b6:b0:55:8a:4a:83:6e:67:05: cb:6c:ca:50:9e:5d:8d:f0:cf:b6:e5:f3:fd:1e:50:3b:8d:05: 57:a9:47:b7:92:79:a4:04:59:1c:e4:e1:ef:94:6f:9f:f9:ee: b9:f3:4f:92:c9:cd:a0:1d:5c:b4:34:f7:a4:d9:c3:9f:74:d3: 0c:8c:18:db:89:81:5e:bd:60:cd:2f:a5:cc:c9:1c:84:da:72: b8:25:59:38:e2:0e:69:e2:cc:e0:f0:59:ea:a0:b6:aa:ef:88: ab:03:7b:f3:98:c6:03:17:a6:04:5c:c3:58:28:5d:e3:8d:4e: c0:de:75:a7:78:c2:1d:83:34:4d:fc:6b:e5:7e:e5:98:5c:bc: 8d:18:d9:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m8Wbe7jnZtmOLsXLhEO0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyOTM5MDVhZmExMzQ5NDRmMDYzMGM5NDlmM2FiZGE0MDY0 NmRhYzEwHhcNMjUxMjA2MTcwMDQwWhcNMjUxMjA3MTcwMDQwWjAzMTEwLwYDVQQD EyhjNWM0YjQ4NWZmZmIzMGRkYWMzNmM0ZmYxNDlmMGIwODVhZDg3MzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA087VUH2PV1y+MWyXQ9v4sdvnT8e5 nRyVia83TNWaCZbNARJYdlsEOuYH9tcCqMH7bU45mzQDerS32LLNoS5JmEetx/57 lya02BrTPLIVjLi86yfGLF5QP+laGWUMIgZQzbziV4/e496RG1+xak4ne60bP8Hy dTKQeL2kNUhItwam0u3sC2pIl/C6uJm3eAX9b9+/C/CbAIJLC68UDNp6qyhm85tb EnKP7hPZjuM0qCENg0REmMi50ykPPJENy71J3eL/FxXzxgqi1cfgZpg1vOSl0zqX AA1a/v27sSjXtfb2fV2mQHwxkocpre0+JLYGSPzYGXTNAZya+HE6fzPyywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXEtIX/+zDdrDbE/xSfCwha2HMcMB8GA1UdIwQY MBaAFIKTkFr6E0lE8GMMlJ86vaQGRtrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3BPUVd2b1RTVVR3WXd5VW56cTlwQVpHMnNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9lMWMzNzMtNjRmOC00MjI2LTkwNDQt ODEwOTVhMTNiOWRlLzEvZ3BPUVd2b1RTVVR3WXd5VW56cTlwQVpHMnNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9lMWMzNzMtNjRmOC00MjI2LTkwNDQtODEwOTVhMTNiOWRl LzEvZ3BPUVd2b1RTVVR3WXd5VW56cTlwQVpHMnNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/brIthw QEHwTeN+Ds54SiQYjstPOfnHfcCpR9p1PeyGIOoJGgOAkpsHCxgK9qOLEmTcS+QF aMJf4Jwua8+HK03Dc+pb0+VPUdgTSKg2sH/zsNtRJ7Y68rmErDIUwhmKIU4Nnq/l vtwuEJs6ZoMPvp3DoVlctrBVikqDbmcFy2zKUJ5djfDPtuXz/R5QO40FV6lHt5J5 pARZHOTh75Rvn/nuufNPksnNoB1ctDT3pNnDn3TTDIwY24mBXr1gzS+lzMkchNpy uCVZOOIOaeLM4PBZ6qC2qu+IqwN785jGAxemBFzDWChd441OwN51p3jCHYM0Tfxr 5X7lmFy8jRjZYw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:37:25 2025 by rpki-client