This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft File: gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft (raw, json) Hash identifier: puixg/EefnQNASHiatcYi08PyzNq+Ao+rOABTK+0s0k= Subject key identifier: 7E:C3:87:DA:CA:C8:0B:9B:BD:29:B5:3B:D5:D7:44:DC:A4:C3:48:69 Authority key identifier: 81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E Certificate issuer: /CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e Certificate serial: 019AF5410B68694A223BA26045C1F4604B0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft Manifest number: 0181 Signing time: Sat 06 Dec 2025 20:01:11 +0000 Manifest this update: Sat 06 Dec 2025 20:01:11 +0000 Manifest next update: Sun 07 Dec 2025 20:01:11 +0000 Files and hashes: 1: LstQmx0npx1wBzXFQnWiCMni4rU.roa (hash: P0DAqw5mgnz/NGIMrf6y81li0lGZ6anTPEV88CrVJ8o=) 2: gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl (hash: MkPIYX4+n9bOWes6A/bF2OvnL7YJ1TxGRFswx6oJBUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:0b:68:69:4a:22:3b:a2:60:45:c1:f4:60:4b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e Validity Not Before: Dec 6 20:01:11 2025 GMT Not After : Dec 7 20:01:11 2025 GMT Subject: CN=7ec387dacac80b9bbd29b53bd5d744dca4c34869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:35:b8:c7:be:87:d7:f0:b2:3e:b6:66:28: 0c:e0:4c:cf:a1:b0:f6:7f:1c:47:2d:2d:b0:0a:66: e9:f8:f9:f8:f0:12:c0:f5:19:40:29:50:c0:44:ff: 91:9c:8f:a6:d7:61:21:6b:e4:83:c7:a5:17:45:b4: c0:5d:ac:84:e0:3d:90:53:cf:af:a8:da:22:b7:ed: 61:e5:5e:4e:d8:21:c9:2d:3b:5d:5d:02:27:23:b8: 57:af:db:3a:38:d7:7f:6f:79:a4:bd:98:19:12:5a: ec:fc:ef:6c:e3:9b:5d:38:b2:18:42:4d:c7:c2:c5: e4:9c:39:2e:52:db:6e:61:e4:e3:ee:be:3c:2e:e9: 48:47:4d:30:0c:56:db:a5:47:b1:96:3d:8e:12:b8: d4:32:c9:bb:38:7a:8c:4d:66:d1:66:b8:74:c0:dd: c6:34:f0:cf:36:b8:27:01:52:31:b3:a8:2d:6d:b6: 64:9b:43:5b:79:ae:f9:15:4a:bd:e7:5e:f2:c9:e6: 35:9b:bc:e2:7c:9b:e3:ec:20:31:8c:c7:ae:e4:68: d2:ae:dc:ea:1f:6e:00:6a:63:92:24:bd:42:25:78: e8:18:7b:fd:d1:b5:e7:76:83:91:b3:d9:4e:91:ba: 82:5a:8d:68:11:be:94:1d:5a:c6:e3:8d:ea:6c:ae: 20:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C3:87:DA:CA:C8:0B:9B:BD:29:B5:3B:D5:D7:44:DC:A4:C3:48:69 X509v3 Authority Key Identifier: keyid:81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:82:18:e4:ae:f8:cc:61:c5:e7:27:5f:82:f2:3d:fa:d2:8d: 42:7e:fa:41:68:df:26:c1:96:59:0d:39:86:59:ec:b9:22:10: c1:8c:39:47:8d:62:ce:8f:bb:79:b9:35:6a:cd:92:93:39:3c: f5:a4:9d:88:c9:98:11:8a:b7:cd:97:1d:09:67:e2:13:82:fe: 84:c1:ae:ef:7c:cc:22:dd:92:2d:5a:56:33:02:bb:4f:ff:ce: bf:da:e6:7d:48:2a:b6:5a:89:9d:7f:a1:7f:9c:f2:cd:4e:8d: 14:ed:6e:2b:8f:f3:61:1e:b1:ca:f9:ac:f4:60:a4:73:68:00: 2a:49:db:74:1c:65:5f:fe:05:37:4e:5a:4e:ba:7f:79:41:5d: 4b:ca:b4:99:b6:01:f4:dd:64:85:4b:c8:72:5a:f9:ac:a2:89: 06:68:e3:fb:96:fd:45:09:d9:fd:0b:3f:d5:b0:0a:c0:e9:0b: 7c:44:7b:14:b8:34:d8:14:76:fa:4a:7d:47:43:a8:1f:5f:74: 68:44:6b:91:57:32:d5:65:e5:6c:81:c0:ba:37:d1:c3:11:42: 66:03:77:92:1c:76:37:7d:da:58:18:48:fe:ae:f2:e1:06:57: ac:44:2c:57:b6:bc:c4:25:80:aa:ff:a0:6f:96:00:b7:7d:a5: 59:98:87:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QQtoaUoiO6JgRcH0YEsNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMGU1MGY4YmUyMWU2NTU2YTJhM2I1ZTYwZTFkZTc2NWFl MDJkNGUwHhcNMjUxMjA2MjAwMTExWhcNMjUxMjA3MjAwMTExWjAzMTEwLwYDVQQD Eyg3ZWMzODdkYWNhYzgwYjliYmQyOWI1M2JkNWQ3NDRkY2E0YzM0ODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVs1uMe+h9fwsj62ZigM4EzPobD2 fxxHLS2wCmbp+Pn48BLA9RlAKVDARP+RnI+m12Eha+SDx6UXRbTAXayE4D2QU8+v qNoit+1h5V5O2CHJLTtdXQInI7hXr9s6ONd/b3mkvZgZElrs/O9s45tdOLIYQk3H wsXknDkuUttuYeTj7r48LulIR00wDFbbpUexlj2OErjUMsm7OHqMTWbRZrh0wN3G NPDPNrgnAVIxs6gtbbZkm0Nbea75FUq9517yyeY1m7zifJvj7CAxjMeu5GjSrtzq H24AamOSJL1CJXjoGHv90bXndoORs9lOkbqCWo1oEb6UHVrG443qbK4gfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7Dh9rKyAubvSm1O9XXRNykw0hpMB8GA1UdIwQY MBaAFIEOUPi+IeZVaio7XmDh3nZa4C1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ODBkZjQtZTMzNC00YTc3LThmNGEt N2RmZGU4YjEyZTJjLzEvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84ODBkZjQtZTMzNC00YTc3LThmNGEtN2RmZGU4YjEyZTJj LzEvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoIY5K74 zGHF5ydfgvI9+tKNQn76QWjfJsGWWQ05hlnsuSIQwYw5R41izo+7ebk1as2Skzk8 9aSdiMmYEYq3zZcdCWfiE4L+hMGu73zMIt2SLVpWMwK7T//Ov9rmfUgqtlqJnX+h f5zyzU6NFO1uK4/zYR6xyvms9GCkc2gAKknbdBxlX/4FN05aTrp/eUFdS8q0mbYB 9N1khUvIclr5rKKJBmjj+5b9RQnZ/Qs/1bAKwOkLfER7FLg02BR2+kp9R0OoH190 aERrkVcy1WXlbIHAujfRwxFCZgN3khx2N33aWBhI/q7y4QZXrEQsV7a8xCWAqv+g b5YAt32lWZiHUg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:19:31 2025 by rpki-client