This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft File: gqSUodrlSHPfot61bQMTNAdqyVs.mft (raw, json) Hash identifier: 97TSRq+DUWhj5C6U66yfWRZfJthjwIRWC53JAfdvqpE= Subject key identifier: 4A:AD:95:4D:BB:E4:80:0B:8B:5C:BA:A5:34:43:BB:4D:83:0A:A7:8F Authority key identifier: 82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B Certificate issuer: /CN=82a494a1dae54873dfa2deb56d031334076ac95b Certificate serial: 019AF3C05ECD001FC59CF855D937528A8285 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft Manifest number: 090D Signing time: Sat 06 Dec 2025 13:01:01 +0000 Manifest this update: Sat 06 Dec 2025 13:01:01 +0000 Manifest next update: Sun 07 Dec 2025 13:01:01 +0000 Files and hashes: 1: gqSUodrlSHPfot61bQMTNAdqyVs.crl (hash: rFeoYgagVs/J0S6agldMEy0djfvfQTkZ0H0LwYDL4sI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:5e:cd:00:1f:c5:9c:f8:55:d9:37:52:8a:82:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82a494a1dae54873dfa2deb56d031334076ac95b Validity Not Before: Dec 6 13:01:01 2025 GMT Not After : Dec 7 13:01:01 2025 GMT Subject: CN=4aad954dbbe4800b8b5cbaa53443bb4d830aa78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:63:d9:1d:46:17:3d:8d:1e:00:58:4e:dc:31: 3e:e8:ef:cd:c9:17:00:e4:bf:a3:39:4c:e2:23:73: 14:76:22:a2:a0:95:60:4b:22:11:75:5a:d0:81:ae: ec:12:df:9b:e2:c6:86:e7:c0:67:4f:57:05:ce:c9: b2:b9:cc:61:90:c8:c0:89:4f:ac:57:15:70:2b:01: 24:10:56:f3:63:60:8f:97:2d:59:9d:6a:d5:17:5d: 17:81:71:4d:2b:2f:a4:c1:a1:b5:66:67:d9:9c:f9: 19:07:52:66:5e:33:60:ff:84:5f:9e:27:e6:84:4d: 51:1e:74:86:2d:e0:26:9a:c4:b2:9c:d8:46:d9:89: 04:99:6d:59:2c:4f:1d:aa:c6:f3:d7:dd:23:3b:b7: e7:7f:bf:27:98:1b:1c:8c:fa:aa:96:0e:ed:ad:b3: e1:6a:21:78:46:6a:5c:79:75:dd:74:d8:58:39:3a: c3:cc:c1:73:5e:d5:0e:f4:49:d2:6e:7e:0d:cf:ca: 9e:80:4e:50:91:25:85:4e:76:dd:89:f8:0a:54:58: 6e:59:94:c9:a5:65:fb:8d:10:c7:5c:34:ab:a5:7d: 77:1b:13:44:4c:28:99:9f:5a:8f:42:6f:02:d9:fe: 20:fa:ac:3b:d8:77:87:cb:19:1d:85:93:2a:fa:9b: 73:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AD:95:4D:BB:E4:80:0B:8B:5C:BA:A5:34:43:BB:4D:83:0A:A7:8F X509v3 Authority Key Identifier: keyid:82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:3e:3e:47:84:80:74:32:1a:50:cf:2a:88:20:c6:27:92:84: 19:8e:1a:e5:d1:77:15:ea:87:a6:36:15:92:b9:74:09:39:9e: 74:79:2f:f2:68:d5:5c:55:83:b4:1f:41:a2:20:fc:b7:ef:d9: 85:7f:b7:8f:ab:f4:c1:78:af:0b:09:bf:d3:86:bc:b9:c5:58: 2f:a0:cd:fc:00:a4:95:6c:ad:0c:7e:41:89:9b:54:39:0d:27: 58:df:70:5d:02:72:59:33:02:2d:b2:11:4e:4d:36:f3:bc:bb: 04:52:4d:ad:a0:c4:34:48:f7:64:72:f8:6d:26:18:f6:84:71: 4a:b8:5b:80:14:0b:13:9a:58:58:c8:90:44:2e:e9:43:97:72: 94:14:e6:6a:b0:c5:e5:b9:aa:2c:ad:f0:78:44:13:5d:ad:9d: 6b:79:b6:cf:53:26:03:3f:b3:53:86:9d:38:3c:df:08:33:b5: d5:4b:25:fb:ab:ed:65:77:ad:ea:a7:84:53:56:d9:ec:8d:09: 5b:49:c2:d6:72:92:30:d6:86:7c:28:2f:3b:98:80:ad:2a:38: a3:aa:df:3f:58:10:18:a2:b0:fd:d5:d4:2e:bd:7d:f8:ff:5c: 8d:aa:0d:46:f5:42:cd:11:cd:97:0b:cf:e0:f5:90:98:ea:8e: ad:df:fa:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwF7NAB/FnPhV2TdSioKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYTQ5NGExZGFlNTQ4NzNkZmEyZGViNTZkMDMxMzM0MDc2 YWM5NWIwHhcNMjUxMjA2MTMwMTAxWhcNMjUxMjA3MTMwMTAxWjAzMTEwLwYDVQQD Eyg0YWFkOTU0ZGJiZTQ4MDBiOGI1Y2JhYTUzNDQzYmI0ZDgzMGFhNzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mPZHUYXPY0eAFhO3DE+6O/NyRcA 5L+jOUziI3MUdiKioJVgSyIRdVrQga7sEt+b4saG58BnT1cFzsmyucxhkMjAiU+s VxVwKwEkEFbzY2CPly1ZnWrVF10XgXFNKy+kwaG1ZmfZnPkZB1JmXjNg/4Rfnifm hE1RHnSGLeAmmsSynNhG2YkEmW1ZLE8dqsbz190jO7fnf78nmBscjPqqlg7trbPh aiF4RmpceXXddNhYOTrDzMFzXtUO9EnSbn4Nz8qegE5QkSWFTnbdifgKVFhuWZTJ pWX7jRDHXDSrpX13GxNETCiZn1qPQm8C2f4g+qw72HeHyxkdhZMq+ptzRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqtlU275IALi1y6pTRDu02DCqePMB8GA1UdIwQY MBaAFIKklKHa5Uhz36LetW0DEzQHaslbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3FTVW9kcmxTSFBmb3Q2MWJRTVROQWRxeVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lYWYxMDctNjcyMy00ZDQ2LTllMGMt YzBiZDAyMDE0OTcxLzEvZ3FTVW9kcmxTSFBmb3Q2MWJRTVROQWRxeVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9lYWYxMDctNjcyMy00ZDQ2LTllMGMtYzBiZDAyMDE0OTcx LzEvZ3FTVW9kcmxTSFBmb3Q2MWJRTVROQWRxeVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArj4+R4SA dDIaUM8qiCDGJ5KEGY4a5dF3FeqHpjYVkrl0CTmedHkv8mjVXFWDtB9BoiD8t+/Z hX+3j6v0wXivCwm/04a8ucVYL6DN/ACklWytDH5BiZtUOQ0nWN9wXQJyWTMCLbIR Tk0287y7BFJNraDENEj3ZHL4bSYY9oRxSrhbgBQLE5pYWMiQRC7pQ5dylBTmarDF 5bmqLK3weEQTXa2da3m2z1MmAz+zU4adODzfCDO11Usl+6vtZXet6qeEU1bZ7I0J W0nC1nKSMNaGfCgvO5iArSo4o6rfP1gQGKKw/dXULr19+P9cjaoNRvVCzRHNlwvP 4PWQmOqOrd/61Q== -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:18 2025 by rpki-client