This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft File: gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json) Hash identifier: NVQ8ADo6h82jnFz6u1SVWAxljshI/T4q2FqIilG1Wow= Subject key identifier: B8:2C:57:49:3A:5C:C8:D9:90:24:4E:50:76:6B:9F:F0:55:B8:E4:FF Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0 Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0 Certificate serial: 019AF208D54981F49979C6F16E617DD41AA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: 3mULbMkLr_MPSOSnvFYfAUenRp4.roa (hash: 6qqpV0wkHRjm2TnedKwLS/E8U5BGoXw+wiRnm1KNFsU=) 2: JjY_rmjM0m285v9bnJnGMH-MzW4.roa (hash: Wfm9h1Fvy7QUJSpQZVDtJ3sdWPEGrotdzPy8ZnW4oPI=) 3: OSPVEMKxRvS3K2S9RynwSClpPy0.roa (hash: I2dq/kcaAdZwjzuTK1RJZZE0wsjKNorsCYjqSblF2e4=) 4: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: L/XARHg6alFKBVVLsCkS+moHHKuDRZ7tQVA/uYk09VY=) 5: wlPsVBZE3IB9ajxNMFuhywUiQmU.roa (hash: Vf+lexsaTCbsX6oyeji8k6+eXormbDvLL1F56QDbmpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d5:49:81:f4:99:79:c6:f1:6e:61:7d:d4:1a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0 Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=b82c57493a5cc8d990244e50766b9ff055b8e4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dd:4a:a8:69:81:16:e2:cf:cf:21:5f:39:5f: d0:ad:81:5e:b3:60:8e:d0:d9:e4:68:b1:84:46:06: d6:0a:61:d9:3a:7a:14:65:64:72:d4:41:0f:24:de: 81:94:7f:76:54:e5:4a:54:d1:4f:36:90:3b:cf:d7: 90:a8:83:30:40:a3:67:0c:7e:82:4d:96:10:de:21: b8:fc:b7:30:68:f6:8b:48:53:61:e9:66:5d:61:1d: e7:a4:c6:49:0a:e7:ad:69:13:ab:93:77:63:d3:0c: c9:f5:f6:eb:cd:94:d9:4f:a9:c6:45:f8:bd:d9:ec: a1:ad:bf:7e:d8:e3:56:fc:6d:b2:07:12:36:17:91: 38:f0:6c:04:c3:8c:75:eb:20:a8:e6:6a:e5:1c:b1: ce:f6:5b:48:dc:9f:b0:8a:4e:e8:b8:70:13:30:18: ac:38:e1:35:89:07:06:ed:1f:2c:37:c5:24:c7:4b: d2:a6:e7:50:12:b0:aa:fb:6d:c4:e3:be:1d:95:f6: 60:f9:37:d9:0a:5b:0c:1e:dc:98:7e:a6:85:d6:53: 56:2d:4c:21:66:dd:f9:9c:85:84:8e:d8:e6:4b:c5: 5c:59:ec:50:42:8c:61:ad:d8:6c:46:24:7e:4e:f6: 01:b9:f3:22:21:e9:69:4f:21:31:47:e7:f4:60:7a: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2C:57:49:3A:5C:C8:D9:90:24:4E:50:76:6B:9F:F0:55:B8:E4:FF X509v3 Authority Key Identifier: keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:7e:45:b1:2c:fc:db:fa:90:01:07:56:29:98:7c:32:2c:f4: 4c:33:82:c0:02:78:d8:5a:06:e4:f7:d1:0e:29:28:ec:2b:0d: d6:c3:d6:2c:43:5f:c9:55:82:3f:ab:e4:d8:ba:3f:63:c8:9b: 77:50:c3:1e:c7:d1:f7:f5:2d:dc:09:7e:99:a8:87:ab:91:34: 01:90:5e:f7:cf:b0:9a:77:f6:5b:12:ec:70:e0:e7:ac:75:67: 43:8e:a3:be:7b:22:d7:ea:de:10:72:43:d6:b3:0f:1c:cb:b2: 36:78:65:b4:4c:aa:f2:ba:b1:fc:d8:e0:43:2c:e3:b1:48:f1: e9:e3:9d:f2:c3:dc:0f:32:a8:01:50:b1:74:16:43:89:fe:61: a0:cb:e7:ae:18:00:5c:6f:24:7e:75:81:9f:03:6d:f9:e6:75: e6:b9:1e:b3:26:96:f8:20:19:41:11:0f:96:0f:68:a6:0f:0d: 2c:eb:2f:7b:6a:f3:8d:17:15:16:2e:3a:fd:4c:4e:5c:a4:49: 2f:26:dd:c4:65:b0:de:de:2b:7e:e8:cd:d1:75:01:77:57:47: b3:de:19:98:67:8b:db:2c:b4:69:b0:ac:30:57:93:c8:84:1b: aa:d4:db:74:e2:06:f1:f6:99:d0:2b:8f:11:c7:be:e2:56:2f: d0:62:7a:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNVJgfSZecbxbmF91BqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyN2FmMTdmMDQ5OTYyN2U0YjNjOGNjNWMzMzNlYzRiOGU3 NjM1ZTAwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD EyhiODJjNTc0OTNhNWNjOGQ5OTAyNDRlNTA3NjZiOWZmMDU1YjhlNGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt1KqGmBFuLPzyFfOV/QrYFes2CO 0NnkaLGERgbWCmHZOnoUZWRy1EEPJN6BlH92VOVKVNFPNpA7z9eQqIMwQKNnDH6C TZYQ3iG4/LcwaPaLSFNh6WZdYR3npMZJCuetaROrk3dj0wzJ9fbrzZTZT6nGRfi9 2eyhrb9+2ONW/G2yBxI2F5E48GwEw4x16yCo5mrlHLHO9ltI3J+wik7ouHATMBis OOE1iQcG7R8sN8Ukx0vSpudQErCq+23E474dlfZg+TfZClsMHtyYfqaF1lNWLUwh Zt35nIWEjtjmS8VcWexQQoxhrdhsRiR+TvYBufMiIelpTyExR+f0YHpwFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgsV0k6XMjZkCROUHZrn/BVuOT/MB8GA1UdIwQY MBaAFIJ68X8EmWJ+SzyMxcMz7EuOdjXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgt NzMxM2M3ZjNjYTNmLzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgtNzMxM2M3ZjNjYTNm LzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQX5FsSz8 2/qQAQdWKZh8Miz0TDOCwAJ42FoG5PfRDiko7CsN1sPWLENfyVWCP6vk2Lo/Y8ib d1DDHsfR9/Ut3Al+maiHq5E0AZBe98+wmnf2WxLscODnrHVnQ46jvnsi1+reEHJD 1rMPHMuyNnhltEyq8rqx/NjgQyzjsUjx6eOd8sPcDzKoAVCxdBZDif5hoMvnrhgA XG8kfnWBnwNt+eZ15rkesyaW+CAZQREPlg9opg8NLOsve2rzjRcVFi46/UxOXKRJ LybdxGWw3t4rfujN0XUBd1dHs94ZmGeL2yy0abCsMFeTyIQbqtTbdOIG8faZ0CuP Ece+4lYv0GJ6IA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:37 2025 by rpki-client