This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft File: gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft (raw, json) Hash identifier: 7hBa4h4qL9US1Yp5x3jBUPcRY3hrG3s4+d7Yx7EVPDg= Subject key identifier: 41:13:7B:89:74:4C:EA:5E:D3:1D:76:BE:75:82:4C:30:55:95:92:43 Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7 Certificate issuer: /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7 Certificate serial: 019AF2094C55E28B3664DBDB398256F65CB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:26 +0000 Manifest this update: Sat 06 Dec 2025 05:01:26 +0000 Manifest next update: Sun 07 Dec 2025 05:01:26 +0000 Files and hashes: 1: 1GcdqVYrNeFzAfzIvWc1uwT98aA.roa (hash: 4uQf4DSwbX7BKGTdoGDfjY+9K4u0Qbg5gbpIHJoyB/8=) 2: gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl (hash: VkSWZSUe+ncY2naj+kkkkKoDaZZRM6yYo7JKhj8rPr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4c:55:e2:8b:36:64:db:db:39:82:56:f6:5c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7 Validity Not Before: Dec 6 05:01:26 2025 GMT Not After : Dec 7 05:01:26 2025 GMT Subject: CN=41137b89744cea5ed31d76be75824c3055959243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:bf:e5:ef:70:f8:89:35:9b:24:e5:3e:0e: a9:29:bf:e4:59:25:41:00:20:c7:1c:7e:cf:2b:0e: e8:f3:2f:c9:ee:89:e0:18:24:8e:48:9a:a7:36:4d: 95:6f:92:63:df:2f:5f:55:d7:59:f7:d8:82:33:73: 6f:82:d2:4c:d4:99:00:fc:ae:02:e5:b8:76:ef:69: 53:5f:78:e1:18:70:de:19:6d:cb:15:37:2f:72:61: 2d:3a:6b:ea:02:ca:a4:4c:b2:3d:2f:c8:96:50:27: fe:f5:a6:05:eb:47:84:15:66:8c:86:1c:12:cf:c1: 14:48:cf:89:5e:18:7b:c4:63:01:a5:19:61:b4:38: e1:02:90:53:d6:f3:7c:b9:6b:07:7e:0c:12:5f:87: 8f:db:96:7a:a5:a3:fa:85:b2:7e:a3:3c:3e:eb:0a: 8c:b5:bc:c5:6e:20:d5:7f:97:d8:60:ea:b9:04:bc: 20:34:d8:f1:fd:b6:a8:06:49:68:64:e7:97:74:e1: 8a:f7:6e:c6:07:97:44:02:3f:7e:bb:39:71:41:aa: 3e:71:b4:fd:5a:b2:94:bd:d2:a3:63:1e:01:c2:ee: 84:18:99:25:86:98:8a:ab:80:9f:49:13:a4:82:b1: e6:b3:2a:3f:ec:c7:22:23:25:54:4f:f6:7b:9c:09: 91:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:13:7B:89:74:4C:EA:5E:D3:1D:76:BE:75:82:4C:30:55:95:92:43 X509v3 Authority Key Identifier: keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:54:77:20:0b:45:f7:fb:3e:32:71:5e:ab:50:e8:1a:f9:e1: 4b:6d:2b:08:78:c0:a6:f2:6f:44:c3:c9:46:58:87:0f:e9:89: 48:d6:11:ca:4a:9f:50:d8:ac:4e:95:5f:28:ee:e1:93:fb:a1: df:ea:7e:17:54:28:19:13:46:f8:44:c2:3b:54:d2:b3:eb:77: 34:5c:a9:2e:02:bc:31:b5:29:01:07:10:f6:c1:77:41:b0:bd: 12:12:44:b1:90:05:51:06:77:7a:1e:2d:56:98:0e:86:64:a7: 13:f0:df:25:d6:46:74:4c:73:98:ac:11:39:e9:a4:52:be:6f: f0:b5:73:92:bf:15:13:79:ea:3d:7b:c2:26:71:c9:e3:83:ad: 53:49:92:bf:fc:f2:a7:8d:14:a2:4e:dd:a9:9c:b3:51:7a:4c: 58:a4:2e:f2:b6:c9:c9:81:47:74:ce:93:27:88:38:e9:cd:54: 2a:83:41:21:85:cb:e6:5e:76:7b:b4:a6:b9:89:d6:43:db:03: 70:fc:c7:c2:8c:c7:53:55:bf:fa:b1:8d:3d:dc:b4:03:d4:77: 04:d3:45:47:d9:48:df:d3:a7:09:0d:c3:c4:df:c1:5b:69:b9: bd:8a:02:43:c2:54:ab:cd:1b:a2:fd:53:4e:29:b4:3f:d4:d2: d4:41:fd:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUxV4os2ZNvbOYJW9ly4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzllYWQ4MzVhOGZjZmFlMGQ5ZWUyODM5Y2QxNjg4MWJh MTFkZDcwHhcNMjUxMjA2MDUwMTI2WhcNMjUxMjA3MDUwMTI2WjAzMTEwLwYDVQQD Eyg0MTEzN2I4OTc0NGNlYTVlZDMxZDc2YmU3NTgyNGMzMDU1OTU5MjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqK/5e9w+Ik1myTlPg6pKb/kWSVB ACDHHH7PKw7o8y/J7ongGCSOSJqnNk2Vb5Jj3y9fVddZ99iCM3NvgtJM1JkA/K4C 5bh272lTX3jhGHDeGW3LFTcvcmEtOmvqAsqkTLI9L8iWUCf+9aYF60eEFWaMhhwS z8EUSM+JXhh7xGMBpRlhtDjhApBT1vN8uWsHfgwSX4eP25Z6paP6hbJ+ozw+6wqM tbzFbiDVf5fYYOq5BLwgNNjx/baoBkloZOeXdOGK927GB5dEAj9+uzlxQao+cbT9 WrKUvdKjYx4Bwu6EGJklhpiKq4CfSROkgrHmsyo/7MciIyVUT/Z7nAmRiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEETe4l0TOpe0x12vnWCTDBVlZJDMB8GA1UdIwQY MBaAFIJ56tg1qPz64NnuKDnNFogboR3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUt ZWUyOWM5MTM2ZThiLzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUtZWUyOWM5MTM2ZThi LzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1R3IAtF 9/s+MnFeq1DoGvnhS20rCHjApvJvRMPJRliHD+mJSNYRykqfUNisTpVfKO7hk/uh 3+p+F1QoGRNG+ETCO1TSs+t3NFypLgK8MbUpAQcQ9sF3QbC9EhJEsZAFUQZ3eh4t VpgOhmSnE/DfJdZGdExzmKwROemkUr5v8LVzkr8VE3nqPXvCJnHJ44OtU0mSv/zy p40Uok7dqZyzUXpMWKQu8rbJyYFHdM6TJ4g46c1UKoNBIYXL5l52e7SmuYnWQ9sD cPzHwozHU1W/+rGNPdy0A9R3BNNFR9lI39OnCQ3DxN/BW2m5vYoCQ8JUq80bov1T Tim0P9TS1EH94Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:44 2025 by rpki-client