This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json) Hash identifier: 1cgMDT+AAvYsQwwR/WtxhDuTqNzE03dLXQisxsYzkgk= Subject key identifier: 1B:58:D3:9A:04:EA:1B:46:E0:F2:A3:67:A8:90:7B:1E:10:F7:49:7F Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4 Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4 Certificate serial: 019AF0BF4EF1FF6090D52538E0DCBA887F74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft Manifest number: 1578 Signing time: Fri 05 Dec 2025 23:01:00 +0000 Manifest this update: Fri 05 Dec 2025 23:01:00 +0000 Manifest next update: Sat 06 Dec 2025 23:01:00 +0000 Files and hashes: 1: 1-n1FQJdtrmSwdnekLdBoJCXaZLE.roa (hash: vl5yvgIUqNuSQTIxMaS41AEZa6z2Ung/hJMgS4H/xOQ=) 2: KUPJ1lDWM9H_O_nug1XhCm8CDY0.roa (hash: N5MTKqEvC4tpTv0nenMYPQJAtm9LjBH+zL/o+EsRhto=) 3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: GS/TimdxPc5+JvyDwJ8Mkp8rCiw+6yrPV8aVpG987wI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:4e:f1:ff:60:90:d5:25:38:e0:dc:ba:88:7f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4 Validity Not Before: Dec 5 23:01:00 2025 GMT Not After : Dec 6 23:01:00 2025 GMT Subject: CN=1b58d39a04ea1b46e0f2a367a8907b1e10f7497f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f0:03:6e:d8:d2:5d:f8:50:00:83:e6:56:12: 9a:75:a6:27:47:fa:68:fa:bc:50:b0:c4:36:65:d7: 2d:7c:9c:26:11:64:89:f6:a8:06:d2:59:79:00:d7: 41:f5:fd:58:83:21:d0:f2:94:d5:3c:1c:78:bf:d5: 10:b3:dc:46:5c:24:63:0a:71:43:cb:4d:ba:6a:32: 6e:fa:37:72:95:14:37:43:e3:9d:90:a7:3a:41:d0: 09:59:79:ac:7a:08:2b:c1:52:0d:b6:81:2a:ef:0d: 7b:3a:14:29:0a:15:4b:3d:75:0a:8f:01:f1:3f:ef: ba:7d:0a:68:52:9e:21:ec:64:bd:c7:e4:c6:d0:ff: 1d:b2:f3:87:9d:f4:ff:bc:cc:2f:ce:15:18:1d:ee: f6:16:07:d3:f8:77:af:a7:d6:f8:de:dd:9b:6f:ba: c9:69:12:36:11:11:5c:ba:d1:66:61:70:82:48:21: a5:57:3c:7a:fa:e4:48:b5:55:ac:84:2f:3e:97:30: da:20:d5:4a:3f:dc:9d:17:50:3e:3f:d0:58:e7:e8: 9c:76:f6:0c:92:89:6c:7f:f4:b5:12:1f:a7:02:1d: 2b:3f:1b:d9:bd:0a:6e:0c:64:2f:21:8b:32:d8:f1: fa:cf:cc:9d:c3:93:26:af:82:7a:d7:00:8a:f9:d6: aa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:58:D3:9A:04:EA:1B:46:E0:F2:A3:67:A8:90:7B:1E:10:F7:49:7F X509v3 Authority Key Identifier: keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:c7:c6:c5:f7:47:6b:f6:f7:c7:dc:76:0f:dc:4c:82:8c:38: e6:d8:46:1c:2f:0d:a5:56:55:d4:87:95:ac:7b:a8:52:bb:1d: 5b:5b:43:40:4c:ec:2c:92:42:69:00:53:18:5e:15:37:c6:e7: 5c:17:c7:1c:c7:0c:41:c0:21:57:a5:04:d7:b8:5b:95:f1:78: 67:30:64:99:5d:05:a7:39:a2:95:72:d8:2b:07:e9:50:e9:b9: ba:fe:e0:a5:b0:60:4a:2e:e6:e3:33:6e:cb:5f:62:24:f1:1e: 40:61:aa:1a:3a:1e:28:a9:70:b8:62:b2:26:4a:1b:bb:7b:f6: 43:6f:06:83:10:2c:a5:2c:db:32:0c:11:66:49:f3:d6:05:1d: 83:b6:d8:45:2f:5e:8c:5e:a1:47:eb:a9:d7:9c:9e:69:86:29: f6:cd:3d:ed:90:09:fd:4b:5e:fa:c9:c6:86:4b:b6:bd:78:37: ba:7f:55:d9:50:6b:16:48:73:2f:2d:85:29:a8:b2:60:ea:8d: 2a:7a:44:15:05:92:c6:e7:d4:2e:92:a9:f4:1d:9c:a3:4f:73: da:a4:02:6e:76:dc:e7:d2:5e:ec:bf:b3:4e:9a:e9:e4:66:6a: f0:ab:59:ed:3f:3c:64:a3:3a:78:2b:e9:10:0f:eb:57:74:f0: b9:c5:a6:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv07x/2CQ1SU44Ny6iH90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMjNiOTczMWIxOTZiMWFjYmM4MjlmNWIyOGIzMjVmZDlk M2UzZDQwHhcNMjUxMjA1MjMwMTAwWhcNMjUxMjA2MjMwMTAwWjAzMTEwLwYDVQQD EygxYjU4ZDM5YTA0ZWExYjQ2ZTBmMmEzNjdhODkwN2IxZTEwZjc0OTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vADbtjSXfhQAIPmVhKadaYnR/po +rxQsMQ2ZdctfJwmEWSJ9qgG0ll5ANdB9f1YgyHQ8pTVPBx4v9UQs9xGXCRjCnFD y026ajJu+jdylRQ3Q+OdkKc6QdAJWXmseggrwVINtoEq7w17OhQpChVLPXUKjwHx P++6fQpoUp4h7GS9x+TG0P8dsvOHnfT/vMwvzhUYHe72FgfT+Hevp9b43t2bb7rJ aRI2ERFcutFmYXCCSCGlVzx6+uRItVWshC8+lzDaINVKP9ydF1A+P9BY5+icdvYM kolsf/S1Eh+nAh0rPxvZvQpuDGQvIYsy2PH6z8ydw5Mmr4J61wCK+daqCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtY05oE6htG4PKjZ6iQex4Q90l/MB8GA1UdIwQY MBaAFIMjuXMbGWsay8gp9bKLMl/Z0+PUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2Yt Y2ExZTVmMDgxOTUwLzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2YtY2ExZTVmMDgxOTUw LzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMfGxfdH a/b3x9x2D9xMgow45thGHC8NpVZV1IeVrHuoUrsdW1tDQEzsLJJCaQBTGF4VN8bn XBfHHMcMQcAhV6UE17hblfF4ZzBkmV0FpzmilXLYKwfpUOm5uv7gpbBgSi7m4zNu y19iJPEeQGGqGjoeKKlwuGKyJkobu3v2Q28GgxAspSzbMgwRZknz1gUdg7bYRS9e jF6hR+up15yeaYYp9s097ZAJ/Ute+snGhku2vXg3un9V2VBrFkhzLy2FKaiyYOqN KnpEFQWSxufULpKp9B2co09z2qQCbnbc59Je7L+zTprp5GZq8KtZ7T88ZKM6eCvp EA/rV3TwucWm6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:24 2025 by rpki-client