This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json) Hash identifier: MJc6sfojKDuK/aHp/RhWnKbypDzDpRAxymUkUK1BthI= Subject key identifier: 6E:E9:51:B8:6B:CB:D8:90:0C:43:74:DE:03:1F:3F:A9:31:CC:7F:78 Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9 Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9 Certificate serial: 019AF19B8553868526F6B98F9AF4A99AAA5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft Manifest number: 0182 Signing time: Sat 06 Dec 2025 03:01:32 +0000 Manifest this update: Sat 06 Dec 2025 03:01:32 +0000 Manifest next update: Sun 07 Dec 2025 03:01:32 +0000 Files and hashes: 1: YdAjbfCRxVQuhwuJCOd8n6-9uGc.roa (hash: ryQI+IE9GniEW1zRKSAQBzSoJ8r45pp9QujhZtOYmEk=) 2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: B5QpERh6aCLC/xWPUlreybTt7XTJdgwqW0FZYc46dhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:85:53:86:85:26:f6:b9:8f:9a:f4:a9:9a:aa:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9 Validity Not Before: Dec 6 03:01:32 2025 GMT Not After : Dec 7 03:01:32 2025 GMT Subject: CN=6ee951b86bcbd8900c4374de031f3fa931cc7f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:be:38:9b:24:4a:7c:e4:09:89:03:7d:37:c9: 79:95:0b:fc:b8:46:96:dc:52:c2:2d:3b:cb:3f:85: 56:cf:a8:53:2f:df:4a:61:da:51:45:64:7b:44:e6: 1c:da:24:4f:18:96:b9:77:8a:d4:86:21:78:e0:c9: 2b:e7:f6:a5:df:0d:a5:42:94:38:48:6e:fa:2d:5b: e9:f9:a9:d4:cd:fc:7f:0e:48:f0:be:7b:45:90:e6: 88:fd:71:1f:ac:f2:1e:f2:98:cc:b8:1a:7e:f1:05: 19:33:d0:4c:35:ed:66:5a:e7:e3:55:06:e4:58:ef: 78:98:f6:b6:41:1f:c0:84:d7:4d:34:7b:af:43:ec: 87:c0:d5:77:7b:07:11:d2:62:10:c7:35:d8:1d:98: eb:a4:42:d5:5f:4e:42:bc:73:e7:73:e4:2b:c2:3b: 53:38:f7:14:0d:1a:fc:da:0a:ff:78:a5:59:fa:14: c5:d9:24:a1:43:30:a2:74:57:55:de:7c:9a:a7:2e: d5:b9:b7:a4:81:01:84:d6:c8:96:43:39:48:58:fe: a5:9e:d3:03:3a:b4:64:18:77:6d:08:c6:5f:fc:06: 75:71:86:f9:7b:dd:f5:af:4d:11:61:36:cf:37:20: 72:09:0e:8b:bd:22:9f:d5:98:3f:c6:b9:16:0b:a5: 89:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E9:51:B8:6B:CB:D8:90:0C:43:74:DE:03:1F:3F:A9:31:CC:7F:78 X509v3 Authority Key Identifier: keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:aa:4f:67:66:3e:48:c3:1e:6b:d8:e2:29:a7:a5:dd:a9:79: b4:e1:61:ad:69:c7:e7:53:86:84:93:8a:71:b6:ec:30:99:29: 6d:4f:a1:2d:84:dd:cd:a9:6c:66:6f:f5:5b:f3:ee:69:63:2d: 15:6f:59:e4:47:66:8e:0f:33:4a:94:56:ea:6c:97:65:eb:47: 2c:fe:34:80:87:b0:00:63:f3:63:5a:ca:ac:ab:00:de:52:f5: 8e:74:5f:64:12:01:7f:52:b2:c2:8c:d2:ff:ad:1c:51:fd:cd: 3e:1f:6b:f6:0b:3e:58:05:2d:b4:22:b5:82:2b:38:aa:3f:c6: 64:a4:22:de:bc:69:fc:95:18:46:60:f0:94:cb:22:5d:84:34: c2:26:2f:ba:ac:ba:dc:40:32:f4:fa:82:4e:47:58:a5:de:5c: bd:11:f6:3d:74:82:7d:89:4a:bf:2c:5e:38:eb:dc:c7:da:ae: ce:fa:b6:42:d1:e2:f5:ea:4f:19:60:ed:9e:39:7d:5b:ae:ab: a5:b1:03:b5:36:e4:5d:68:c1:81:cb:e3:e1:b6:0f:64:98:d6: 82:8e:31:4e:e7:3f:f9:fd:ec:ca:64:e4:62:66:41:59:24:90: a4:b4:ec:fa:e4:57:98:67:67:27:d9:7c:3f:f5:90:37:f4:7a: 20:c8:59:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4VThoUm9rmPmvSpmqpfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYWZhNzA4ZTA5OGU1Njk0MmIxNjJmMzRlNDYzMzQ5N2Yz YWUyZDkwHhcNMjUxMjA2MDMwMTMyWhcNMjUxMjA3MDMwMTMyWjAzMTEwLwYDVQQD Eyg2ZWU5NTFiODZiY2JkODkwMGM0Mzc0ZGUwMzFmM2ZhOTMxY2M3Zjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1744myRKfOQJiQN9N8l5lQv8uEaW 3FLCLTvLP4VWz6hTL99KYdpRRWR7ROYc2iRPGJa5d4rUhiF44Mkr5/al3w2lQpQ4 SG76LVvp+anUzfx/DkjwvntFkOaI/XEfrPIe8pjMuBp+8QUZM9BMNe1mWufjVQbk WO94mPa2QR/AhNdNNHuvQ+yHwNV3ewcR0mIQxzXYHZjrpELVX05CvHPnc+QrwjtT OPcUDRr82gr/eKVZ+hTF2SShQzCidFdV3nyapy7VubekgQGE1siWQzlIWP6lntMD OrRkGHdtCMZf/AZ1cYb5e931r00RYTbPNyByCQ6LvSKf1Zg/xrkWC6WJwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7pUbhry9iQDEN03gMfP6kxzH94MB8GA1UdIwQY MBaAFICvpwjgmOVpQrFi805GM0l/OuLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0stbkNPQ1k1V2xDc1dMelRrWXpTWDg2NHRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8zNmU0YjgtNGJlYi00M2ZiLWE2OGUt MmE4YTIyNTNmZTBhLzEvZ0stbkNPQ1k1V2xDc1dMelRrWXpTWDg2NHRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8zNmU0YjgtNGJlYi00M2ZiLWE2OGUtMmE4YTIyNTNmZTBh LzEvZ0stbkNPQ1k1V2xDc1dMelRrWXpTWDg2NHRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6pPZ2Y+ SMMea9jiKael3al5tOFhrWnH51OGhJOKcbbsMJkpbU+hLYTdzalsZm/1W/PuaWMt FW9Z5Edmjg8zSpRW6myXZetHLP40gIewAGPzY1rKrKsA3lL1jnRfZBIBf1KywozS /60cUf3NPh9r9gs+WAUttCK1gis4qj/GZKQi3rxp/JUYRmDwlMsiXYQ0wiYvuqy6 3EAy9PqCTkdYpd5cvRH2PXSCfYlKvyxeOOvcx9quzvq2QtHi9epPGWDtnjl9W66r pbEDtTbkXWjBgcvj4bYPZJjWgo4xTuc/+f3symTkYmZBWSSQpLTs+uRXmGdnJ9l8 P/WQN/R6IMhZ9g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:48 2025 by rpki-client