This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft File: gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json) Hash identifier: OFu4B7DZLaWZ64bHwwC/wA5r9oqPah/tZODuRXKrTBw= Subject key identifier: 62:82:78:9D:0F:55:FB:21:6A:EF:24:79:1F:CD:4F:F3:36:E8:50:B4 Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0 Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0 Certificate serial: 019B2BF8584CB05C5C04667B76289DB2ED2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 11:00:54 +0000 Manifest this update: Wed 17 Dec 2025 11:00:54 +0000 Manifest next update: Thu 18 Dec 2025 11:00:54 +0000 Files and hashes: 1: 3mULbMkLr_MPSOSnvFYfAUenRp4.roa (hash: 6qqpV0wkHRjm2TnedKwLS/E8U5BGoXw+wiRnm1KNFsU=) 2: JjY_rmjM0m285v9bnJnGMH-MzW4.roa (hash: Wfm9h1Fvy7QUJSpQZVDtJ3sdWPEGrotdzPy8ZnW4oPI=) 3: OSPVEMKxRvS3K2S9RynwSClpPy0.roa (hash: I2dq/kcaAdZwjzuTK1RJZZE0wsjKNorsCYjqSblF2e4=) 4: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: cr8L7+6vTyJhdJttNEYtETflrFuoPoTdOKYEUNRdD5I=) 5: wlPsVBZE3IB9ajxNMFuhywUiQmU.roa (hash: Vf+lexsaTCbsX6oyeji8k6+eXormbDvLL1F56QDbmpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:58:4c:b0:5c:5c:04:66:7b:76:28:9d:b2:ed:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0 Validity Not Before: Dec 17 11:00:54 2025 GMT Not After : Dec 18 11:00:54 2025 GMT Subject: CN=6282789d0f55fb216aef24791fcd4ff336e850b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c3:a2:e6:7a:d3:f4:c3:c9:07:78:e5:1f:56: 7a:aa:a5:a5:3d:12:f0:ac:28:a9:ac:54:3a:2f:5e: 86:f7:a9:63:5e:63:f7:87:71:e7:97:ff:7b:8b:0b: 07:5d:55:37:97:3f:26:f5:86:9d:af:63:14:a5:d3: ac:73:a3:69:78:6f:82:57:c0:ef:1c:21:3e:9b:c9: 79:42:9d:55:61:3c:80:cf:33:c6:76:37:e0:bd:c1: 00:28:b7:06:25:f6:a8:f4:a9:fa:ba:ff:3b:60:53: 5b:8a:48:df:4a:43:d6:d2:0a:12:b1:e5:ef:b6:36: 43:3c:01:6a:a6:a8:19:ae:cd:b8:85:52:0f:62:41: a6:7b:be:1a:9c:54:7a:1f:9b:47:91:90:b5:e0:93: d8:48:e7:30:1e:ca:88:ef:d5:ce:51:8c:3d:fd:d0: 6a:0e:ed:84:a2:14:fe:be:51:6e:00:3a:73:56:8a: 0a:12:7f:6b:a3:15:75:4e:b6:48:4b:f0:ae:3f:21: fa:f4:1a:a8:0b:46:37:3a:b7:70:81:0b:b5:d7:48: 3f:87:ee:69:e6:31:24:08:18:5e:5a:67:1f:db:ca: 58:0e:dc:08:c7:d0:6a:c9:95:68:d0:ac:7c:ce:34: 28:5b:0a:96:f6:9f:52:cc:c2:53:04:f9:70:59:04: c2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:82:78:9D:0F:55:FB:21:6A:EF:24:79:1F:CD:4F:F3:36:E8:50:B4 X509v3 Authority Key Identifier: keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:6c:3d:78:51:3a:02:a4:1c:8e:9c:18:a3:4b:de:7c:9e:5f: 33:97:30:ef:f9:da:98:df:ef:62:20:13:2e:71:59:c2:ed:ec: f6:03:23:db:54:ed:5a:73:9f:87:db:41:86:0d:85:00:b9:9d: 7d:ec:42:a8:43:09:03:1c:f9:92:16:0e:8e:3e:3c:9a:43:e0: 80:b2:37:d8:f4:42:83:69:55:53:64:63:5a:61:c3:6f:81:12: 98:c8:43:50:12:c3:ff:11:e6:78:51:38:c5:00:83:21:79:97: 73:a4:62:5a:ce:1c:5e:6b:fe:88:7a:c6:a6:53:69:21:47:51: 10:80:8a:57:c7:6f:0d:7c:a7:01:0b:84:68:3a:3a:87:ab:6e: ed:3a:e9:d9:38:13:38:fa:48:51:07:2d:8a:2e:3e:2f:61:f1: 49:c7:cc:d8:ca:f6:8d:d8:9b:73:0d:12:97:b8:8a:b0:7a:cb: e0:55:11:ed:22:dc:54:d9:f1:aa:eb:bc:9d:14:83:fd:38:d9: 96:86:11:c7:d0:20:de:c3:fc:42:08:e6:38:ee:62:0f:c8:9a: 01:1c:56:5d:4d:86:2a:8b:76:6d:60:7f:39:9b:f3:dc:11:76: 5d:57:b4:bf:22:ac:d5:3a:3c:19:d3:cf:f7:a4:4f:19:b6:49: 59:05:c9:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+FhMsFxcBGZ7diidsu0tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyN2FmMTdmMDQ5OTYyN2U0YjNjOGNjNWMzMzNlYzRiOGU3 NjM1ZTAwHhcNMjUxMjE3MTEwMDU0WhcNMjUxMjE4MTEwMDU0WjAzMTEwLwYDVQQD Eyg2MjgyNzg5ZDBmNTVmYjIxNmFlZjI0NzkxZmNkNGZmMzM2ZTg1MGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosOi5nrT9MPJB3jlH1Z6qqWlPRLw rCiprFQ6L16G96ljXmP3h3Hnl/97iwsHXVU3lz8m9Yadr2MUpdOsc6NpeG+CV8Dv HCE+m8l5Qp1VYTyAzzPGdjfgvcEAKLcGJfao9Kn6uv87YFNbikjfSkPW0goSseXv tjZDPAFqpqgZrs24hVIPYkGme74anFR6H5tHkZC14JPYSOcwHsqI79XOUYw9/dBq Du2EohT+vlFuADpzVooKEn9roxV1TrZIS/CuPyH69BqoC0Y3OrdwgQu110g/h+5p 5jEkCBheWmcf28pYDtwIx9BqyZVo0Kx8zjQoWwqW9p9SzMJTBPlwWQTCiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKCeJ0PVfshau8keR/NT/M26FC0MB8GA1UdIwQY MBaAFIJ68X8EmWJ+SzyMxcMz7EuOdjXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgt NzMxM2M3ZjNjYTNmLzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgtNzMxM2M3ZjNjYTNm LzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx2w9eFE6 AqQcjpwYo0vefJ5fM5cw7/namN/vYiATLnFZwu3s9gMj21TtWnOfh9tBhg2FALmd fexCqEMJAxz5khYOjj48mkPggLI32PRCg2lVU2RjWmHDb4ESmMhDUBLD/xHmeFE4 xQCDIXmXc6RiWs4cXmv+iHrGplNpIUdREICKV8dvDXynAQuEaDo6h6tu7Trp2TgT OPpIUQctii4+L2HxScfM2Mr2jdibcw0Sl7iKsHrL4FUR7SLcVNnxquu8nRSD/TjZ loYRx9Ag3sP8QgjmOO5iD8iaARxWXU2GKot2bWB/OZvz3BF2XVe0vyKs1To8GdPP 96RPGbZJWQXJ3g== -----END CERTIFICATE-----Generated at Wed Dec 17 18:28:31 2025 by rpki-client