This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json) Hash identifier: IDY+UpLA7URwsG4141R+pyYoP0+AvMKIQOzWO12Q1SM= Subject key identifier: 54:CC:2D:DF:2E:87:5D:4A:36:62:C8:9A:A5:DD:1D:B0:46:0F:1A:6B Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39 Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39 Certificate serial: 019AF31B48E07D8541A3144F480F695F0D71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft Manifest number: 048A Signing time: Sat 06 Dec 2025 10:00:42 +0000 Manifest this update: Sat 06 Dec 2025 10:00:42 +0000 Manifest next update: Sun 07 Dec 2025 10:00:42 +0000 Files and hashes: 1: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: n+zTWq9fvOMZdlm7neEpcmtrS4NgT2WQoVAKVMOp3yI=) 2: dD6GIMFFXfcUZKikgptCTP1SjMg.roa (hash: R7h9/T2YRhEDBxQsNxpJ6+ajaERwVVA7HS/wWVJDGB8=) 3: n1LYpQBp74CBUc1iCkyyz1kpuDI.roa (hash: dntlfrX6kYRLASagUJhBDGwAMZaEo7XW+NU8zsgCpzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:48:e0:7d:85:41:a3:14:4f:48:0f:69:5f:0d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39 Validity Not Before: Dec 6 10:00:42 2025 GMT Not After : Dec 7 10:00:42 2025 GMT Subject: CN=54cc2ddf2e875d4a3662c89aa5dd1db0460f1a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:85:40:b0:9f:a7:a1:d5:0e:7b:2b:57:d6:83: ec:47:6e:0a:4f:1b:be:f7:ca:3e:cf:67:a7:b4:9b: ad:60:8e:bc:8d:35:7c:d6:ee:01:4f:2c:5f:cc:3c: fe:50:78:e0:cb:63:15:11:66:72:81:b3:d9:fb:35: 93:e3:6c:5c:e1:cd:23:b3:d6:a7:68:24:60:93:84: b4:12:04:f9:ce:2d:c2:68:a3:d8:69:84:fe:01:dc: 9c:07:dc:ab:fe:24:ad:66:cb:2f:8d:fa:c1:b1:fb: a4:f1:b8:5b:44:6c:4f:c6:0d:d3:b8:03:a7:1f:ac: a7:60:ac:bf:c2:7b:33:ff:42:0e:58:46:76:09:d1: fc:74:49:97:af:36:be:da:5d:e9:19:d5:69:5f:b0: 36:92:3c:7c:6f:b7:a3:8d:7d:c1:8f:42:97:37:5f: cf:d8:8d:83:67:ec:22:e2:03:29:64:a1:3e:3e:bd: 67:12:2d:7a:3c:9e:bf:36:1f:b9:0d:c6:29:df:c7: 8b:cb:ec:bc:07:d2:ac:87:31:2d:c9:f7:20:f3:d7: a7:a9:80:3d:d1:e0:c0:0a:98:90:da:08:be:63:78: eb:0e:1d:74:d5:80:10:a4:51:3c:e6:61:e8:bb:d5: 0d:51:8b:cb:1c:d5:3d:a4:96:2c:82:64:e1:a9:d6: 53:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CC:2D:DF:2E:87:5D:4A:36:62:C8:9A:A5:DD:1D:B0:46:0F:1A:6B X509v3 Authority Key Identifier: keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:67:4d:a2:10:80:8e:a0:d3:bf:3e:63:da:f9:b6:c0:32:03: 27:0a:84:3a:9a:93:0f:6f:a6:e4:86:a1:02:e4:46:27:be:a6: fa:2b:e9:c6:c5:2c:c1:5d:c3:68:7b:60:52:a8:26:7c:95:12: cf:b3:59:d8:ef:5a:66:cf:a9:2c:fc:0b:2a:a8:f4:76:79:38: d5:32:87:b2:4c:b9:27:09:31:c3:17:67:e5:ac:a6:97:37:eb: 8d:e3:fc:b3:77:94:41:49:2a:d6:dc:42:98:3c:59:8c:5a:d1: 08:a4:bd:0f:b6:05:38:7e:d2:eb:90:cd:81:1b:a9:06:fa:c1: 34:8c:c7:5c:ba:40:cb:1a:e2:b9:f1:c3:ea:1c:f3:52:a0:b5: 36:2d:ac:eb:5d:e2:9f:03:1e:64:b4:fa:1d:ed:9b:36:f4:da: bc:3d:9d:d6:85:eb:65:b2:5f:73:1e:1b:9f:17:ee:b8:d3:ad: 3e:9c:5f:3b:d0:16:56:4d:1b:c3:07:29:2f:0b:5a:05:ec:d4: 87:97:18:8e:38:ab:5a:d5:7e:3f:05:20:75:ba:fc:d3:39:ee: ab:48:7d:0b:f9:17:14:df:ef:d6:46:1d:3b:66:a6:74:2b:8e: e2:0c:47:51:e2:14:97:d6:91:a4:a5:47:48:3c:b6:cf:f6:5d: 6e:88:b6:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0jgfYVBoxRPSA9pXw1xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YTYwNDZlMzdjN2UyMDc1YjQxZDZmZWY3MGQyMzEyMzAz YzVmMzkwHhcNMjUxMjA2MTAwMDQyWhcNMjUxMjA3MTAwMDQyWjAzMTEwLwYDVQQD Eyg1NGNjMmRkZjJlODc1ZDRhMzY2MmM4OWFhNWRkMWRiMDQ2MGYxYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYVAsJ+nodUOeytX1oPsR24KTxu+ 98o+z2entJutYI68jTV81u4BTyxfzDz+UHjgy2MVEWZygbPZ+zWT42xc4c0js9an aCRgk4S0EgT5zi3CaKPYaYT+AdycB9yr/iStZssvjfrBsfuk8bhbRGxPxg3TuAOn H6ynYKy/wnsz/0IOWEZ2CdH8dEmXrza+2l3pGdVpX7A2kjx8b7ejjX3Bj0KXN1/P 2I2DZ+wi4gMpZKE+Pr1nEi16PJ6/Nh+5DcYp38eLy+y8B9KshzEtyfcg89enqYA9 0eDACpiQ2gi+Y3jrDh101YAQpFE85mHou9UNUYvLHNU9pJYsgmThqdZTPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTMLd8uh11KNmLImqXdHbBGDxprMB8GA1UdIwQY MBaAFBmmBG43x+IHW0HW/vcNIxIwPF85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83OTllNWMtMTU5NC00MDlmLThjNTQt M2ZlYzU4NjE0YzRiLzEvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83OTllNWMtMTU5NC00MDlmLThjNTQtM2ZlYzU4NjE0YzRi LzEvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGdNohCA jqDTvz5j2vm2wDIDJwqEOpqTD2+m5IahAuRGJ76m+ivpxsUswV3DaHtgUqgmfJUS z7NZ2O9aZs+pLPwLKqj0dnk41TKHsky5Jwkxwxdn5aymlzfrjeP8s3eUQUkq1txC mDxZjFrRCKS9D7YFOH7S65DNgRupBvrBNIzHXLpAyxriufHD6hzzUqC1Ni2s613i nwMeZLT6He2bNvTavD2d1oXrZbJfcx4bnxfuuNOtPpxfO9AWVk0bwwcpLwtaBezU h5cYjjirWtV+PwUgdbr80znuq0h9C/kXFN/v1kYdO2amdCuO4gxHUeIUl9aRpKVH SDy2z/Zdboi2Yw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:19:49 2025 by rpki-client