This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft File: GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft (raw, json) Hash identifier: gLdZG7yoczD0jqFovzS4Rm7Pkmf9DHK2EeZg5GauTHw= Subject key identifier: FE:F2:05:C2:44:7E:8E:2D:B5:0F:EF:6E:30:D7:97:C1:E8:81:95:87 Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59 Certificate issuer: /CN=1902391799337601331f5a12af11e9f4f6421159 Certificate serial: 019AF5AEDF229B746F64826BCB581D15C372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 22:01:09 +0000 Manifest this update: Sat 06 Dec 2025 22:01:09 +0000 Manifest next update: Sun 07 Dec 2025 22:01:09 +0000 Files and hashes: 1: GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl (hash: cDKe2Lq108AQtRqXoUt+I5pPuWcMB0kITv1CriRu2tc=) 2: MG8GkG1guL2JPQamlCCVL0WmXAU.roa (hash: zOqvBBG8dg13+yUZPiGoLbhSAZEkww5TYWxAzF0vCsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:df:22:9b:74:6f:64:82:6b:cb:58:1d:15:c3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1902391799337601331f5a12af11e9f4f6421159 Validity Not Before: Dec 6 22:01:09 2025 GMT Not After : Dec 7 22:01:09 2025 GMT Subject: CN=fef205c2447e8e2db50fef6e30d797c1e8819587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:94:c5:73:b1:36:df:fd:3b:f4:9b:de:80:55: 5c:cb:8a:10:88:9a:e9:6c:77:dd:7a:43:06:3e:f8: 34:f3:45:3b:6c:14:7e:67:31:dd:08:9c:f9:29:cc: 3b:51:36:95:dc:31:f5:2a:cc:95:cd:31:a8:36:eb: a4:ee:aa:02:48:c2:82:6c:97:cb:0d:17:9d:35:11: 34:e0:e1:28:2c:aa:3d:d3:b3:16:49:bf:f4:5c:c2: 87:f1:49:bf:3a:6f:e6:b4:a8:90:7d:1e:13:0f:ed: 13:51:cf:3b:68:73:fd:62:04:e3:fe:97:60:40:86: 79:b9:cf:51:a7:e3:cc:6d:67:02:6a:9e:95:05:bf: 8d:36:c4:50:cb:6a:47:4e:f6:59:bc:ad:86:0d:28: 60:10:3b:ec:90:5c:65:5a:71:79:b6:65:b4:64:77: b5:56:6c:32:2f:85:9a:c4:a1:1e:b4:7b:04:6b:a6: f4:f7:49:4a:df:13:64:b7:09:5d:f4:52:41:93:6f: f0:c1:d5:20:61:cb:25:36:cd:00:7b:af:41:1c:39: f5:c2:b4:ef:84:8a:db:b3:0a:05:53:88:3e:58:a2: 7f:50:ea:01:79:d0:21:d4:2f:6a:ce:74:b1:69:cc: 3c:a3:dd:06:47:ba:91:de:bb:08:99:e3:76:0f:93: ee:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F2:05:C2:44:7E:8E:2D:B5:0F:EF:6E:30:D7:97:C1:E8:81:95:87 X509v3 Authority Key Identifier: keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b1:25:d4:9d:d6:4b:67:0d:fa:32:ba:7c:c4:d7:d3:31:9d: 5c:e1:be:41:a1:3e:f3:47:8f:67:32:dd:1c:e0:71:67:b7:05: dd:48:9f:42:73:97:07:a7:a7:1a:21:3b:34:b2:0a:68:12:fa: c5:45:03:25:2e:f5:0a:05:2a:40:e5:bc:16:e6:bf:69:e6:a0: 26:30:88:d2:37:9d:a2:80:83:3e:e7:59:63:4a:2d:bb:64:56: 45:13:48:c4:15:86:f8:11:f1:71:63:74:a6:90:29:e5:45:79: 86:58:cc:fa:e3:d4:57:df:b7:9b:79:ef:ca:60:3e:4b:08:e7: 61:c2:2b:13:cf:10:20:9a:c2:73:24:a7:d6:ba:1f:49:e8:6c: 69:ae:67:72:36:3a:22:64:24:93:7c:73:94:b5:be:45:93:90: 96:59:0d:a5:d1:cb:0f:ea:f7:de:88:ba:83:ed:c0:46:3f:ea: 8c:9a:c9:c6:a2:c4:59:af:18:cf:17:ac:4d:84:25:78:d6:a9: 90:48:c0:7c:79:34:a4:05:de:74:f1:a5:18:aa:a2:61:75:3a: fa:74:53:33:6d:24:3f:11:84:ab:88:c7:55:43:08:70:26:0b: d3:02:a1:87:22:47:c7:0a:eb:30:01:b8:c5:e6:59:31:01:6a: 16:61:d5:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rt8im3RvZIJry1gdFcNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDIzOTE3OTkzMzc2MDEzMzFmNWExMmFmMTFlOWY0ZjY0 MjExNTkwHhcNMjUxMjA2MjIwMTA5WhcNMjUxMjA3MjIwMTA5WjAzMTEwLwYDVQQD EyhmZWYyMDVjMjQ0N2U4ZTJkYjUwZmVmNmUzMGQ3OTdjMWU4ODE5NTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZTFc7E23/079JvegFVcy4oQiJrp bHfdekMGPvg080U7bBR+ZzHdCJz5Kcw7UTaV3DH1KsyVzTGoNuuk7qoCSMKCbJfL DRedNRE04OEoLKo907MWSb/0XMKH8Um/Om/mtKiQfR4TD+0TUc87aHP9YgTj/pdg QIZ5uc9Rp+PMbWcCap6VBb+NNsRQy2pHTvZZvK2GDShgEDvskFxlWnF5tmW0ZHe1 VmwyL4WaxKEetHsEa6b090lK3xNktwld9FJBk2/wwdUgYcslNs0Ae69BHDn1wrTv hIrbswoFU4g+WKJ/UOoBedAh1C9qznSxacw8o90GR7qR3rsImeN2D5PuzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7yBcJEfo4ttQ/vbjDXl8HogZWHMB8GA1UdIwQY MBaAFBkCOReZM3YBMx9aEq8R6fT2QhFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FJNUY1a3pkZ0V6SDFvU3J4SHA5UFpDRVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hOWZmMWEtZDU4MC00YjQyLWJkODct NTU5NzI2MGY2NWVlLzEvR1FJNUY1a3pkZ0V6SDFvU3J4SHA5UFpDRVZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hOWZmMWEtZDU4MC00YjQyLWJkODctNTU5NzI2MGY2NWVl LzEvR1FJNUY1a3pkZ0V6SDFvU3J4SHA5UFpDRVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbEl1J3W S2cN+jK6fMTX0zGdXOG+QaE+80ePZzLdHOBxZ7cF3UifQnOXB6enGiE7NLIKaBL6 xUUDJS71CgUqQOW8Fua/aeagJjCI0jedooCDPudZY0otu2RWRRNIxBWG+BHxcWN0 ppAp5UV5hljM+uPUV9+3m3nvymA+SwjnYcIrE88QIJrCcySn1rofSehsaa5ncjY6 ImQkk3xzlLW+RZOQllkNpdHLD+r33oi6g+3ARj/qjJrJxqLEWa8YzxesTYQleNap kEjAfHk0pAXedPGlGKqiYXU6+nRTM20kPxGEq4jHVUMIcCYL0wKhhyJHxwrrMAG4 xeZZMQFqFmHV7g== -----END CERTIFICATE-----Generated at Sun Dec 7 00:59:23 2025 by rpki-client