This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft File: gvJFXc9FrmWm_cz494Ic48UkAR0.mft (raw, json) Hash identifier: Qq4qavG5Ult/E/AYUGc11/c5Ji/XFiPziIDqJYZqjGU= Subject key identifier: 8A:8C:58:84:2C:27:F8:16:52:C0:BC:CE:0E:B7:5D:8E:D8:6E:9C:A2 Authority key identifier: 82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D Certificate issuer: /CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d Certificate serial: 019AF23FA5E56EBAE831BE857B967425F216 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft Manifest number: 1747 Signing time: Sat 06 Dec 2025 06:00:48 +0000 Manifest this update: Sat 06 Dec 2025 06:00:48 +0000 Manifest next update: Sun 07 Dec 2025 06:00:48 +0000 Files and hashes: 1: eS_V4C4cNESsUi7U8IjjlNIhlSE.roa (hash: wdsqtGZ831qd+AJFvCqG1OGszbCCIEt4963PPzg5D0k=) 2: gvJFXc9FrmWm_cz494Ic48UkAR0.crl (hash: VRWtHFzkpVrgLjtz9DviJNLSVU1qAr7Aio4alHD58o0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a5:e5:6e:ba:e8:31:be:85:7b:96:74:25:f2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d Validity Not Before: Dec 6 06:00:48 2025 GMT Not After : Dec 7 06:00:48 2025 GMT Subject: CN=8a8c58842c27f81652c0bcce0eb75d8ed86e9ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:29:ce:62:01:ae:07:63:6b:92:48:6a:3a:49: 68:b0:26:8c:b6:d3:6d:63:38:2c:ee:88:af:d7:48: 7c:4f:70:2a:20:0d:ff:9e:13:05:32:ed:de:87:ab: 52:6f:d3:e2:84:cf:29:83:a4:76:5f:ac:74:2e:7f: df:ef:b9:d1:7f:20:5a:1a:dd:2b:7d:43:75:06:f5: 3d:3f:7a:ef:ec:72:d5:8b:5b:87:f6:e5:15:0a:a8: 6f:19:5d:75:ae:e4:80:dc:24:28:07:36:e9:8d:47: c3:34:0a:21:3b:67:5a:0c:b9:b9:4f:6b:5b:e2:ae: 2f:bd:6a:55:1e:bd:f2:fa:1a:8a:64:ca:c3:eb:f6: fa:90:ad:63:6a:66:af:9d:f9:2c:30:01:d4:f8:39: eb:d5:66:70:52:bc:6b:5a:b9:a9:d8:71:c8:35:20: d1:18:f3:d7:4b:00:a5:27:6f:a1:54:40:2c:d4:6c: 3a:cf:8d:a4:70:78:82:6a:ba:cc:4c:e2:42:8b:f6: b1:ec:72:ad:11:ca:6d:ec:31:f7:57:95:bb:04:f3: ac:eb:66:73:15:8e:a8:5c:9f:d9:3e:7e:f0:8c:87: 91:a8:26:c1:35:30:53:e7:8e:29:f0:31:b8:1d:7b: ff:06:35:d6:d0:72:06:5d:f4:b0:8e:c1:01:23:8c: b3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8C:58:84:2C:27:F8:16:52:C0:BC:CE:0E:B7:5D:8E:D8:6E:9C:A2 X509v3 Authority Key Identifier: keyid:82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:30:e7:77:37:2f:51:4e:02:54:f2:59:18:6e:ac:56:b7:c3: 6a:f5:84:3f:cf:50:95:f6:0c:c4:fa:bc:82:b5:37:78:c6:3c: 50:34:cb:ee:b0:7b:39:cf:99:67:8f:71:14:47:fc:b9:df:bd: 5a:56:5f:96:51:b8:40:df:cb:65:38:55:22:b4:71:75:77:19: a2:ce:63:44:39:22:a6:62:3f:0b:1b:05:02:f8:7f:19:7f:5f: a7:7b:24:4b:ff:4e:1d:07:86:30:91:4c:81:72:8c:7e:90:03: ea:d3:b1:e5:d6:75:d3:88:be:0c:f6:3d:39:87:31:cb:aa:e4: fd:e4:90:53:a8:58:dc:0c:74:e3:10:db:a0:e9:b9:bc:c3:12: 44:83:df:b5:46:08:71:a9:58:ab:e2:9e:e1:2f:5a:e7:44:d6: 03:6b:c4:68:c2:00:16:da:f8:69:cd:bd:62:56:fc:4f:1d:34: 9a:ba:ce:3a:db:c7:c0:83:2e:61:49:f3:fe:2a:95:4c:93:db: d1:28:d0:ac:fe:8f:c6:cd:82:03:ce:ad:8e:7e:92:ef:f6:2b: a5:87:08:1e:9f:0a:aa:07:fd:2b:db:5f:d3:99:3b:f6:65:b4: 3e:3b:bd:5a:24:d7:fa:91:6b:1e:68:22:77:8a:7a:6a:ec:86: ab:26:a3:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6XlbrroMb6Fe5Z0JfIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZjI0NTVkY2Y0NWFlNjVhNmZkY2NmOGY3ODIxY2UzYzUy NDAxMWQwHhcNMjUxMjA2MDYwMDQ4WhcNMjUxMjA3MDYwMDQ4WjAzMTEwLwYDVQQD Eyg4YThjNTg4NDJjMjdmODE2NTJjMGJjY2UwZWI3NWQ4ZWQ4NmU5Y2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ynOYgGuB2NrkkhqOklosCaMttNt Yzgs7oiv10h8T3AqIA3/nhMFMu3eh6tSb9PihM8pg6R2X6x0Ln/f77nRfyBaGt0r fUN1BvU9P3rv7HLVi1uH9uUVCqhvGV11ruSA3CQoBzbpjUfDNAohO2daDLm5T2tb 4q4vvWpVHr3y+hqKZMrD6/b6kK1jamavnfksMAHU+Dnr1WZwUrxrWrmp2HHINSDR GPPXSwClJ2+hVEAs1Gw6z42kcHiCarrMTOJCi/ax7HKtEcpt7DH3V5W7BPOs62Zz FY6oXJ/ZPn7wjIeRqCbBNTBT544p8DG4HXv/BjXW0HIGXfSwjsEBI4yzdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqMWIQsJ/gWUsC8zg63XY7YbpyiMB8GA1UdIwQY MBaAFILyRV3PRa5lpv3M+PeCHOPFJAEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3ZKRlhjOUZybVdtX2N6NDk0SWM0OFVrQVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81YTI0ZGUtNDRmMC00YTU0LTkxMzct ZWNkOWZhZmYyNjJjLzEvZ3ZKRlhjOUZybVdtX2N6NDk0SWM0OFVrQVIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81YTI0ZGUtNDRmMC00YTU0LTkxMzctZWNkOWZhZmYyNjJj LzEvZ3ZKRlhjOUZybVdtX2N6NDk0SWM0OFVrQVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjDndzcv UU4CVPJZGG6sVrfDavWEP89QlfYMxPq8grU3eMY8UDTL7rB7Oc+ZZ49xFEf8ud+9 WlZfllG4QN/LZThVIrRxdXcZos5jRDkipmI/CxsFAvh/GX9fp3skS/9OHQeGMJFM gXKMfpAD6tOx5dZ104i+DPY9OYcxy6rk/eSQU6hY3Ax04xDboOm5vMMSRIPftUYI calYq+Ke4S9a50TWA2vEaMIAFtr4ac29Ylb8Tx00mrrOOtvHwIMuYUnz/iqVTJPb 0SjQrP6Pxs2CA86tjn6S7/YrpYcIHp8Kqgf9K9tf05k79mW0Pju9WiTX+pFrHmgi d4p6auyGqyajbg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:20 2025 by rpki-client