This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft File: gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft (raw, json) Hash identifier: 4qkDHPatbjE+177gypYf4598/N1CgYlAv4OiAf3urH8= Subject key identifier: 0A:78:DB:96:CC:E7:50:72:DB:2B:F8:9E:6B:DC:25:BF:1A:EB:71:91 Authority key identifier: 80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8 Certificate issuer: /CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8 Certificate serial: 019B3C7F8D916497C163627F66FB3D9BC595 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 16:02:30 +0000 Manifest this update: Sat 20 Dec 2025 16:02:30 +0000 Manifest next update: Sun 21 Dec 2025 16:02:30 +0000 Files and hashes: 1: gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl (hash: yGwwKHCpTIvEa2alKHfTJfv4dSQwSxLtmv9iFC1h1FY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:8d:91:64:97:c1:63:62:7f:66:fb:3d:9b:c5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8 Validity Not Before: Dec 20 16:02:30 2025 GMT Not After : Dec 21 16:02:30 2025 GMT Subject: CN=0a78db96cce75072db2bf89e6bdc25bf1aeb7191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:07:bc:49:a9:61:4a:c7:5a:2d:49:65:fc:63: ef:48:17:b6:a4:3c:b7:20:ba:35:6d:98:41:1d:82: 31:5f:a2:1f:38:c2:6b:82:aa:43:8c:03:4e:e2:84: 29:34:c5:c8:aa:dc:74:fe:60:4f:27:f3:18:10:d0: 5c:30:94:3c:36:76:1c:1e:ff:d6:f9:4e:16:3e:56: 4a:e5:bd:16:d1:80:e0:cf:0d:76:82:a1:45:d6:43: 77:aa:61:c0:59:e5:b9:3e:00:33:8d:d6:cb:2d:98: 7a:8c:2d:8f:09:4e:21:14:e3:bf:fd:ec:d9:3f:2d: 74:3f:ae:7e:d9:c3:60:40:ec:f9:9c:98:fb:6e:e9: 32:b2:e4:e2:dd:e2:f6:65:20:af:81:dd:5d:22:ba: 30:a8:40:14:b7:30:c3:cf:42:6f:e8:86:ee:7b:1b: bc:7a:60:fb:86:09:6e:eb:51:cd:da:0f:9e:98:ad: 96:da:58:d9:72:0e:17:2c:8f:31:c8:5b:04:ae:72: b0:75:11:6f:f4:05:8d:b5:6b:7f:8d:d9:dd:a2:b7: f5:8b:83:63:dd:52:7c:80:be:b1:78:2d:d0:f9:97: 1a:8d:80:7d:6e:e6:83:70:b9:3a:da:1d:97:a6:33: 50:a5:d7:5b:f5:a2:73:af:13:56:79:c7:fc:eb:a0: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:78:DB:96:CC:E7:50:72:DB:2B:F8:9E:6B:DC:25:BF:1A:EB:71:91 X509v3 Authority Key Identifier: keyid:80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:be:84:2c:2c:ba:4b:43:24:52:eb:64:42:8f:50:0e:c8:83: f8:88:bc:f1:ee:3e:a8:ad:1e:6e:05:76:c4:17:49:33:d5:e9: 27:21:d8:97:08:60:53:2c:ac:f0:e4:10:0b:69:58:1b:15:3c: 4e:03:46:75:5b:ba:4c:98:21:6b:37:4f:19:8a:72:b9:86:4f: ca:05:31:d6:e1:33:ae:14:51:50:b8:25:db:32:1e:44:93:14: f8:40:9b:66:bf:fc:96:8e:3f:1b:17:38:eb:7c:f3:14:f7:1d: 99:19:41:81:e4:06:b6:03:c1:bb:73:cc:0e:6d:99:ae:14:88: 76:14:36:88:0f:66:15:2e:f0:74:e0:59:63:2b:97:bb:86:89: e9:ae:38:8c:4f:f5:66:3d:a7:fc:b6:b4:e7:93:26:f8:bb:9b: 9d:ac:e3:b7:52:74:88:ed:af:15:07:a5:8f:78:5d:5a:87:28: 3c:b5:1e:7a:72:12:6c:d0:cc:6b:0e:2e:0a:9f:07:0e:67:d2: c2:34:3c:b7:fb:c6:1b:11:62:1f:42:69:02:51:bd:5b:57:43: d0:47:ee:03:d1:a4:3f:11:2f:c9:46:fd:6d:a1:4e:85:ca:d0: 0b:5a:ef:81:48:a5:aa:25:3e:1f:93:1f:93:b6:8e:a2:dc:fa: ab:8e:5e:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f42RZJfBY2J/Zvs9m8WVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNmMxODA2YjA2YzVhOGMyYjAzNTBhMGZjNmY3NDZhNjY3 ZTRlYzgwHhcNMjUxMjIwMTYwMjMwWhcNMjUxMjIxMTYwMjMwWjAzMTEwLwYDVQQD EygwYTc4ZGI5NmNjZTc1MDcyZGIyYmY4OWU2YmRjMjViZjFhZWI3MTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5we8SalhSsdaLUll/GPvSBe2pDy3 ILo1bZhBHYIxX6IfOMJrgqpDjANO4oQpNMXIqtx0/mBPJ/MYENBcMJQ8NnYcHv/W +U4WPlZK5b0W0YDgzw12gqFF1kN3qmHAWeW5PgAzjdbLLZh6jC2PCU4hFOO//ezZ Py10P65+2cNgQOz5nJj7bukysuTi3eL2ZSCvgd1dIrowqEAUtzDDz0Jv6Ibuexu8 emD7hglu61HN2g+emK2W2ljZcg4XLI8xyFsErnKwdRFv9AWNtWt/jdndorf1i4Nj 3VJ8gL6xeC3Q+ZcajYB9buaDcLk62h2XpjNQpddb9aJzrxNWecf866BzGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAp425bM51By2yv4nmvcJb8a63GRMB8GA1UdIwQY MBaAFIBsGAawbFqMKwNQoPxvdGpmfk7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jZWMxMDEtMjRlZC00YjY0LTgxNGEt Mjg4NzhlNGZhZmRkLzEvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jZWMxMDEtMjRlZC00YjY0LTgxNGEtMjg4NzhlNGZhZmRk LzEvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABr6ELCy6 S0MkUutkQo9QDsiD+Ii88e4+qK0ebgV2xBdJM9XpJyHYlwhgUyys8OQQC2lYGxU8 TgNGdVu6TJghazdPGYpyuYZPygUx1uEzrhRRULgl2zIeRJMU+ECbZr/8lo4/Gxc4 63zzFPcdmRlBgeQGtgPBu3PMDm2ZrhSIdhQ2iA9mFS7wdOBZYyuXu4aJ6a44jE/1 Zj2n/La055Mm+Lubnazjt1J0iO2vFQelj3hdWocoPLUeenISbNDMaw4uCp8HDmfS wjQ8t/vGGxFiH0JpAlG9W1dD0EfuA9GkPxEvyUb9baFOhcrQC1rvgUilqiU+H5Mf k7aOotz6q45ehQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:29:14 2025 by rpki-client