This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft File: gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json) Hash identifier: tU9kOdEjPnKIfXX5syHQhqrt/KgueShvidwzl5E9UKg= Subject key identifier: A9:E2:FE:D2:D7:37:B0:79:09:C1:37:0A:CA:3E:BE:76:28:C7:93:84 Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E Certificate issuer: /CN=81665d6cf26d937484dbb4633743e0657eccdc5e Certificate serial: 019AF12DF8810E7A0FE50E9743259AA1FABD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft Manifest number: 172E Signing time: Sat 06 Dec 2025 01:01:52 +0000 Manifest this update: Sat 06 Dec 2025 01:01:52 +0000 Manifest next update: Sun 07 Dec 2025 01:01:52 +0000 Files and hashes: 1: 8FLRYVQdX3uKC3EUcIINM4PPH70.roa (hash: AvJSbDISdiRpzDgo8gSH1kCL/FtFtirNCOoP+EDCSag=) 2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: dvvWoaMHpr+KnEPeRp+fiDG+SupbKgl58iK8PbssIPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f8:81:0e:7a:0f:e5:0e:97:43:25:9a:a1:fa:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e Validity Not Before: Dec 6 01:01:52 2025 GMT Not After : Dec 7 01:01:52 2025 GMT Subject: CN=a9e2fed2d737b07909c1370aca3ebe7628c79384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:96:e9:0d:64:52:0f:37:4d:2a:ab:66:a7:04: b2:36:4a:ab:ef:8e:f4:33:b1:c2:06:37:a8:bf:f7: e2:f9:ef:52:c9:d0:74:58:a9:34:61:16:40:69:37: b7:33:b5:ea:0d:03:11:9a:29:ef:f6:c2:9d:38:1d: 5a:30:fe:d1:d3:18:69:bc:ee:b7:fa:9a:81:ed:48: d9:7f:3f:7b:23:5b:75:a8:60:c6:3b:da:2c:49:58: 68:50:81:bc:1f:2b:9a:9d:7c:3c:c2:48:e1:15:e3: 9d:82:c6:ec:81:f0:93:12:f4:37:74:8b:7a:bd:a7: ce:ce:65:32:6e:dc:32:5e:a8:12:86:67:91:ab:ce: 2e:c8:cc:f7:4b:1f:b0:fc:7f:b4:25:98:36:ee:b6: 12:91:46:71:6f:8a:7d:39:e4:71:76:39:76:9e:7f: 13:29:82:af:02:20:d2:7e:06:cc:50:16:02:d4:03: 12:4f:08:ae:78:d6:8a:a1:29:d0:7c:3b:8d:35:b7: 47:29:d4:c7:2b:39:d8:d8:c5:19:bf:4b:f1:b6:f4: b1:67:73:89:98:35:0c:0e:b6:bb:ba:e6:16:da:4e: 95:29:a8:a3:34:81:91:58:4b:0f:bd:1e:ed:2e:c7: 5d:45:bc:b4:83:ce:df:2c:53:67:8e:ca:cb:fb:50: 31:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E2:FE:D2:D7:37:B0:79:09:C1:37:0A:CA:3E:BE:76:28:C7:93:84 X509v3 Authority Key Identifier: keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:d3:c8:62:18:b3:3f:dc:1a:29:d0:fc:81:79:11:74:9b:0c: b3:53:3d:1d:b0:de:8c:05:b0:77:65:85:4e:d3:de:05:89:d2: 21:90:f0:82:1c:47:e0:52:78:5a:36:65:cd:2c:27:c6:36:e1: 0e:5f:5b:7b:ca:58:a1:13:fa:4e:07:fa:6b:ea:1b:93:5f:48: a0:b8:2e:81:5a:cb:ff:3e:30:68:f5:a9:c4:11:5f:0d:6e:44: ac:0e:6d:2e:0b:75:66:cc:eb:95:ba:e4:9f:97:e4:8d:9f:a8: 25:9f:a3:72:80:29:fa:7e:16:1e:b2:1c:13:13:1f:3b:62:c8: 84:d3:bb:28:c9:f5:95:51:f2:40:f2:80:6d:e7:9f:23:28:dc: 06:31:63:ef:9d:1e:c2:1c:97:4a:02:da:b9:f6:8f:18:a2:33: 37:6e:a1:12:9d:ee:fa:eb:a6:ac:74:91:af:fb:ff:89:b2:0b: 89:de:0c:04:f4:19:3e:f6:bb:e1:f3:67:7f:a8:2d:97:6b:42: 06:c7:6b:93:99:e1:27:c9:db:ad:43:c9:38:75:5e:28:91:90: c6:b7:ec:66:bb:ad:50:d6:8e:6a:42:80:db:b3:fe:89:53:73: 4d:63:e6:4a:e3:c2:8c:57:fd:f9:f5:a0:c6:59:43:d9:35:84: 35:69:1e:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfiBDnoP5Q6XQyWaofq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNjY1ZDZjZjI2ZDkzNzQ4NGRiYjQ2MzM3NDNlMDY1N2Vj Y2RjNWUwHhcNMjUxMjA2MDEwMTUyWhcNMjUxMjA3MDEwMTUyWjAzMTEwLwYDVQQD EyhhOWUyZmVkMmQ3MzdiMDc5MDljMTM3MGFjYTNlYmU3NjI4Yzc5Mzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZbpDWRSDzdNKqtmpwSyNkqr7470 M7HCBjeov/fi+e9SydB0WKk0YRZAaTe3M7XqDQMRminv9sKdOB1aMP7R0xhpvO63 +pqB7UjZfz97I1t1qGDGO9osSVhoUIG8HyuanXw8wkjhFeOdgsbsgfCTEvQ3dIt6 vafOzmUybtwyXqgShmeRq84uyMz3Sx+w/H+0JZg27rYSkUZxb4p9OeRxdjl2nn8T KYKvAiDSfgbMUBYC1AMSTwiueNaKoSnQfDuNNbdHKdTHKznY2MUZv0vxtvSxZ3OJ mDUMDra7uuYW2k6VKaijNIGRWEsPvR7tLsddRby0g87fLFNnjsrL+1Ax9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKni/tLXN7B5CcE3Cso+vnYox5OEMB8GA1UdIwQY MBaAFIFmXWzybZN0hNu0YzdD4GV+zNxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1daZGJQSnRrM1NFMjdSak4wUGdaWDdNM0Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wMGY2NmItZmU4My00Y2NkLTgyZWUt YzU2ZjA1ZGEzZDI1LzEvZ1daZGJQSnRrM1NFMjdSak4wUGdaWDdNM0Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wMGY2NmItZmU4My00Y2NkLTgyZWUtYzU2ZjA1ZGEzZDI1 LzEvZ1daZGJQSnRrM1NFMjdSak4wUGdaWDdNM0Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtPIYhiz P9waKdD8gXkRdJsMs1M9HbDejAWwd2WFTtPeBYnSIZDwghxH4FJ4WjZlzSwnxjbh Dl9be8pYoRP6Tgf6a+obk19IoLgugVrL/z4waPWpxBFfDW5ErA5tLgt1Zszrlbrk n5fkjZ+oJZ+jcoAp+n4WHrIcExMfO2LIhNO7KMn1lVHyQPKAbeefIyjcBjFj750e whyXSgLaufaPGKIzN26hEp3u+uumrHSRr/v/ibILid4MBPQZPva74fNnf6gtl2tC Bsdrk5nhJ8nbrUPJOHVeKJGQxrfsZrutUNaOakKA27P+iVNzTWPmSuPCjFf9+fWg xllD2TWENWke8A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:17 2025 by rpki-client