This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft File: gPNFqCznFt0-djMXL4cDBH9rfZQ.mft (raw, json) Hash identifier: Q+Tr6wPiPpvJyQdx+9DMqgQ/HRj6MHkrlYybOpMs0MY= Subject key identifier: C7:24:B7:81:6A:39:27:BB:9B:AD:49:2C:A3:A1:FF:8D:4E:A6:F0:CA Authority key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94 Certificate issuer: /CN=80f345a82ce716dd3e7633172f8703047f6b7d94 Certificate serial: 019AF12DD56333CE8E01D557C7CAF8B41790 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 01:01:43 +0000 Manifest this update: Sat 06 Dec 2025 01:01:43 +0000 Manifest next update: Sun 07 Dec 2025 01:01:43 +0000 Files and hashes: 1: gPNFqCznFt0-djMXL4cDBH9rfZQ.crl (hash: YfLEu56wI2k6i3LCxTvEsjIzs+KgLIVml+mzcr6rzRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d5:63:33:ce:8e:01:d5:57:c7:ca:f8:b4:17:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80f345a82ce716dd3e7633172f8703047f6b7d94 Validity Not Before: Dec 6 01:01:43 2025 GMT Not After : Dec 7 01:01:43 2025 GMT Subject: CN=c724b7816a3927bb9bad492ca3a1ff8d4ea6f0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:a2:b7:a3:4e:42:24:77:ef:3f:b7:37:fc: cf:28:b2:39:61:58:f2:87:cb:3a:e1:f5:13:45:99: ef:83:33:af:98:bd:99:76:ef:5c:bc:d8:54:67:2c: e1:f2:57:1d:4c:8d:6f:bb:d3:1d:cf:67:11:88:bf: 14:d4:64:be:62:e9:40:12:a4:a2:66:8a:83:4d:15: cc:76:4d:79:85:81:3d:b9:c2:3b:19:7c:b6:f8:79: c0:58:57:cc:5c:30:be:f2:2d:1f:00:1c:3b:b4:c9: ca:8e:4e:ff:12:d4:0f:bc:da:19:4d:99:fe:cf:e8: a9:2d:63:6e:8c:40:a3:d3:71:96:f4:32:30:fe:a6: 9f:1c:c8:0f:d2:53:d5:3a:fc:e9:ac:d8:1e:30:e7: c1:9d:1c:ea:4e:99:1b:a2:e3:cc:99:bc:d1:3f:4f: 50:57:d2:17:02:69:7b:07:c8:3c:76:76:bb:fa:89: 5d:79:ca:b1:49:89:92:ad:83:ec:ec:1b:f6:a8:4a: ec:df:87:cc:b6:4a:ed:59:25:ca:24:62:b5:76:88: c2:9d:dc:5f:2a:71:50:bd:8b:84:8f:67:6f:83:e1: 46:39:16:54:04:fb:96:d1:1a:f9:84:06:51:56:2a: 03:60:ec:89:ed:9d:f4:81:56:fd:ef:42:8d:10:a8: ca:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:24:B7:81:6A:39:27:BB:9B:AD:49:2C:A3:A1:FF:8D:4E:A6:F0:CA X509v3 Authority Key Identifier: keyid:80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ec:3b:e6:b6:30:67:09:4e:85:5b:6a:6b:29:70:fe:f7:93: 4d:f3:28:55:41:0e:48:c8:ba:78:02:cc:87:f5:0f:1d:b5:5f: cf:31:15:41:ee:2b:79:65:d9:38:a8:0f:3b:aa:dd:75:83:7d: f1:82:a5:5c:4b:6f:58:fd:36:41:5e:e7:b6:20:91:72:0f:87: fb:75:b3:a8:dc:a5:7e:98:e1:ca:ad:8e:7b:6c:6f:ac:79:4d: 30:ad:47:51:0e:4f:bd:94:1e:48:9d:75:8f:d3:e1:b3:6b:c8: 96:26:83:6f:c9:05:7a:06:f3:91:6a:fc:dc:68:f6:42:81:19: fe:86:d7:e7:cb:84:d4:94:7c:20:68:43:a8:d2:1a:39:34:bc: 19:bd:b1:90:59:f5:17:05:27:4e:71:07:3c:19:86:e7:cb:70: e3:eb:27:f6:3b:6e:c0:0e:47:60:72:f7:1e:cc:df:15:db:0f: ee:0b:db:cc:66:a1:98:e2:da:f3:65:ad:11:29:ac:60:cc:2a: 87:c1:33:0f:ef:e2:d6:13:c3:c9:d1:f2:d1:0b:01:f7:fc:c7: 6d:ea:02:4a:b0:07:e6:a6:e6:e8:43:a7:b8:a5:3f:58:52:f1: 33:06:b8:43:a1:5e:06:01:5e:67:ca:42:6e:bc:e2:8c:03:21: ac:85:aa:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdVjM86OAdVXx8r4tBeQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZjM0NWE4MmNlNzE2ZGQzZTc2MzMxNzJmODcwMzA0N2Y2 YjdkOTQwHhcNMjUxMjA2MDEwMTQzWhcNMjUxMjA3MDEwMTQzWjAzMTEwLwYDVQQD EyhjNzI0Yjc4MTZhMzkyN2JiOWJhZDQ5MmNhM2ExZmY4ZDRlYTZmMGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQKit6NOQiR37z+3N/zPKLI5YVjy h8s64fUTRZnvgzOvmL2Zdu9cvNhUZyzh8lcdTI1vu9Mdz2cRiL8U1GS+YulAEqSi ZoqDTRXMdk15hYE9ucI7GXy2+HnAWFfMXDC+8i0fABw7tMnKjk7/EtQPvNoZTZn+ z+ipLWNujECj03GW9DIw/qafHMgP0lPVOvzprNgeMOfBnRzqTpkbouPMmbzRP09Q V9IXAml7B8g8dna7+oldecqxSYmSrYPs7Bv2qErs34fMtkrtWSXKJGK1dojCndxf KnFQvYuEj2dvg+FGORZUBPuW0Rr5hAZRVioDYOyJ7Z30gVb970KNEKjKRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMckt4FqOSe7m61JLKOh/41OpvDKMB8GA1UdIwQY MBaAFIDzRags5xbdPnYzFy+HAwR/a32UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wOTEzMzAtNWY4My00YWQxLTllMTAt NzRjNWRiN2MwOTNhLzEvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8wOTEzMzAtNWY4My00YWQxLTllMTAtNzRjNWRiN2MwOTNh LzEvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+w75rYw ZwlOhVtqaylw/veTTfMoVUEOSMi6eALMh/UPHbVfzzEVQe4reWXZOKgPO6rddYN9 8YKlXEtvWP02QV7ntiCRcg+H+3WzqNylfpjhyq2Oe2xvrHlNMK1HUQ5PvZQeSJ11 j9Phs2vIliaDb8kFegbzkWr83Gj2QoEZ/obX58uE1JR8IGhDqNIaOTS8Gb2xkFn1 FwUnTnEHPBmG58tw4+sn9jtuwA5HYHL3HszfFdsP7gvbzGahmOLa82WtESmsYMwq h8EzD+/i1hPDydHy0QsB9/zHbeoCSrAH5qbm6EOnuKU/WFLxMwa4Q6FeBgFeZ8pC brzijAMhrIWqcw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:36 2025 by rpki-client