This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft File: gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft (raw, json) Hash identifier: lBF0beNYUcVcIan9KU3fh0DaB3opBMLRh/tIJ8C1cnY= Subject key identifier: DE:C2:E2:AC:7E:4E:51:72:4E:38:75:B9:39:7C:FE:1A:71:9A:49:E9 Authority key identifier: 80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8 Certificate issuer: /CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8 Certificate serial: 019AF50B867AE290489A7A07CF4133B4C91F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 19:02:44 +0000 Manifest this update: Sat 06 Dec 2025 19:02:44 +0000 Manifest next update: Sun 07 Dec 2025 19:02:44 +0000 Files and hashes: 1: gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl (hash: NML978U0dco8Fm5ncmNQvgdCNwWwZ7gJ1VRetY8RXEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:86:7a:e2:90:48:9a:7a:07:cf:41:33:b4:c9:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8 Validity Not Before: Dec 6 19:02:44 2025 GMT Not After : Dec 7 19:02:44 2025 GMT Subject: CN=dec2e2ac7e4e51724e3875b9397cfe1a719a49e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ae:69:ff:5a:cb:4e:fe:3d:12:3c:06:94:b7: 9a:97:66:41:99:19:ee:87:42:e7:3d:fd:24:ca:9c: 26:d6:04:24:94:15:75:91:a8:e0:90:b5:8b:01:7e: e9:6e:4e:bd:40:0d:c8:83:ab:db:14:33:c8:01:f7: 20:b6:54:22:55:92:36:da:05:1f:81:16:f6:1f:44: 56:ce:ba:1d:fc:30:68:6d:e5:9b:6a:d7:f3:92:e2: 87:09:63:d1:98:2f:20:53:7c:e3:aa:12:8a:c2:6a: 20:b3:21:26:61:a6:80:18:c1:f6:9c:a2:06:d6:88: d9:3f:bc:e2:4c:61:ad:cf:47:02:69:a4:a6:33:13: 57:2f:7a:73:40:e4:7d:59:2b:f5:00:15:64:67:c1: d2:26:ed:31:fd:1f:51:72:6a:80:5b:30:e1:05:76: de:65:92:1a:93:ce:d0:9d:22:a7:83:12:6b:f7:50: a9:ec:db:e4:0a:ee:35:d2:49:5f:5d:61:59:7a:37: 72:60:db:43:df:2d:c9:5a:72:5c:89:fa:95:2e:75: 6d:5d:bc:e2:e3:e6:f0:eb:f9:16:66:88:ae:8c:43: ea:33:78:66:8b:ea:95:9e:df:b3:c2:54:72:b5:4e: ee:bc:ef:fa:64:dd:67:6e:5c:d3:9c:b9:c3:ad:28: f6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C2:E2:AC:7E:4E:51:72:4E:38:75:B9:39:7C:FE:1A:71:9A:49:E9 X509v3 Authority Key Identifier: keyid:80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:cd:89:8e:ee:bb:9b:bf:7c:e8:45:e8:6a:37:c5:4d:70:d6: a6:6f:6b:9a:ff:eb:92:5a:aa:06:12:f8:51:05:04:16:90:a3: bb:16:43:9b:ac:f7:81:5f:7c:aa:e9:d0:7d:b5:29:e7:97:24: e6:44:9a:80:87:2b:69:36:5f:da:c9:f6:eb:29:6d:b6:ee:45: 58:68:eb:2a:60:a0:25:d2:c5:6e:e7:85:2c:8e:58:d9:e6:7d: 2d:9e:cc:f8:b7:7a:57:6b:f0:71:ed:e7:cf:8b:df:7d:62:37: 5a:f6:42:56:6f:9b:c5:34:6e:86:ad:e3:f9:13:fa:71:b5:09: 42:56:23:d2:32:63:01:8a:cd:7f:03:cc:d3:15:84:80:52:47: cd:d2:d9:d7:cb:1a:f5:33:ac:2d:70:cb:36:80:90:9d:5d:9a: ba:93:cb:56:42:42:94:6a:43:78:e2:55:6c:a8:e2:a2:b5:66: a0:05:e5:08:3f:f4:54:c2:49:19:a7:82:57:17:65:66:17:e0: 32:24:f8:d6:e7:87:cf:35:e7:1b:05:0f:8a:0b:cd:8f:83:86: 7b:b0:02:cf:23:40:30:79:0a:17:c0:bb:84:fe:86:b0:dd:b8: e3:6c:a8:2d:96:43:01:ab:74:fd:41:14:82:6a:d9:1f:49:5b: 0b:e3:c8:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C4Z64pBImnoHz0EztMkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNmMxODA2YjA2YzVhOGMyYjAzNTBhMGZjNmY3NDZhNjY3 ZTRlYzgwHhcNMjUxMjA2MTkwMjQ0WhcNMjUxMjA3MTkwMjQ0WjAzMTEwLwYDVQQD EyhkZWMyZTJhYzdlNGU1MTcyNGUzODc1YjkzOTdjZmUxYTcxOWE0OWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA065p/1rLTv49EjwGlLeal2ZBmRnu h0LnPf0kypwm1gQklBV1kajgkLWLAX7pbk69QA3Ig6vbFDPIAfcgtlQiVZI22gUf gRb2H0RWzrod/DBobeWbatfzkuKHCWPRmC8gU3zjqhKKwmogsyEmYaaAGMH2nKIG 1ojZP7ziTGGtz0cCaaSmMxNXL3pzQOR9WSv1ABVkZ8HSJu0x/R9RcmqAWzDhBXbe ZZIak87QnSKngxJr91Cp7NvkCu410klfXWFZejdyYNtD3y3JWnJcifqVLnVtXbzi 4+bw6/kWZoiujEPqM3hmi+qVnt+zwlRytU7uvO/6ZN1nblzTnLnDrSj2uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7C4qx+TlFyTjh1uTl8/hpxmknpMB8GA1UdIwQY MBaAFIBsGAawbFqMKwNQoPxvdGpmfk7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jZWMxMDEtMjRlZC00YjY0LTgxNGEt Mjg4NzhlNGZhZmRkLzEvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jZWMxMDEtMjRlZC00YjY0LTgxNGEtMjg4NzhlNGZhZmRk LzEvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs82Jju67 m7986EXoajfFTXDWpm9rmv/rklqqBhL4UQUEFpCjuxZDm6z3gV98qunQfbUp55ck 5kSagIcraTZf2sn26ylttu5FWGjrKmCgJdLFbueFLI5Y2eZ9LZ7M+Ld6V2vwce3n z4vffWI3WvZCVm+bxTRuhq3j+RP6cbUJQlYj0jJjAYrNfwPM0xWEgFJHzdLZ18sa 9TOsLXDLNoCQnV2aupPLVkJClGpDeOJVbKjiorVmoAXlCD/0VMJJGaeCVxdlZhfg MiT41ueHzzXnGwUPigvNj4OGe7ACzyNAMHkKF8C7hP6GsN2442yoLZZDAat0/UEU gmrZH0lbC+PIIA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:24:38 2025 by rpki-client