This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json) Hash identifier: QIQN8+6P3J0u1u6gn/rvapkutkXWDUi7w65aGrF1dho= Subject key identifier: 09:A8:48:B9:18:E2:29:FE:1F:2D:69:CB:A9:B8:AA:E4:7F:57:6F:99 Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39 Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39 Certificate serial: 019B273FBBB74CA2004B9791853125B24E4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft Manifest number: 04A5 Signing time: Tue 16 Dec 2025 13:00:46 +0000 Manifest this update: Tue 16 Dec 2025 13:00:46 +0000 Manifest next update: Wed 17 Dec 2025 13:00:46 +0000 Files and hashes: 1: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: vmn4Ckh/5+y05hTqKREw+pcT3YClfijBssK+/MEOVZM=) 2: dD6GIMFFXfcUZKikgptCTP1SjMg.roa (hash: R7h9/T2YRhEDBxQsNxpJ6+ajaERwVVA7HS/wWVJDGB8=) 3: n1LYpQBp74CBUc1iCkyyz1kpuDI.roa (hash: dntlfrX6kYRLASagUJhBDGwAMZaEo7XW+NU8zsgCpzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:bb:b7:4c:a2:00:4b:97:91:85:31:25:b2:4e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39 Validity Not Before: Dec 16 13:00:46 2025 GMT Not After : Dec 17 13:00:46 2025 GMT Subject: CN=09a848b918e229fe1f2d69cba9b8aae47f576f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:42:a2:f7:0b:4b:ff:d3:0b:c1:a3:1d:b2:47: ae:4a:fe:9c:a4:ea:0c:b0:fe:93:a1:a7:fb:14:52: 1f:31:7b:12:d0:01:ba:c2:2f:ad:96:0d:0c:9a:d7: 43:45:22:ea:cf:81:9e:29:a4:9e:83:a2:de:fa:a9: cc:41:f3:2f:00:a2:4f:24:f7:98:ca:bb:de:9e:34: fb:df:b0:4a:97:cb:d2:22:bf:18:79:5a:0b:71:6e: 0d:53:ce:2f:e8:86:72:35:35:d4:69:26:10:15:67: 0a:03:c2:e0:2f:85:bb:a3:03:e1:56:17:a1:c1:63: b1:19:4a:4c:53:6d:30:bc:fe:2a:f9:ca:70:4c:b9: 54:86:6a:f2:fb:cd:4b:5d:09:23:d1:b7:9b:fc:96: b1:8c:17:ca:64:2e:c3:84:cd:12:ef:02:f6:c0:e0: 24:1b:08:e9:e3:49:05:e2:ed:52:51:72:68:f8:5f: 90:e3:8c:bd:10:10:0e:b2:75:6b:97:cb:b3:13:14: 80:2a:b4:42:a9:87:f4:a7:08:1f:d7:94:71:6c:a7: bc:e6:8f:91:c4:33:85:b2:4a:5d:d0:df:72:50:ea: d4:51:7c:a9:1e:55:e9:32:78:10:bb:84:02:5b:bf: 42:09:1d:50:fb:1e:af:7c:c5:ac:63:18:89:cb:54: 7e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A8:48:B9:18:E2:29:FE:1F:2D:69:CB:A9:B8:AA:E4:7F:57:6F:99 X509v3 Authority Key Identifier: keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:19:f8:14:4a:34:68:e7:b0:9e:04:18:0f:3d:4f:37:bc:5e: 59:63:72:42:51:4d:e4:8f:fd:45:0a:9f:e4:d3:6a:ea:7e:87: 26:d8:13:cc:18:03:e8:7d:70:3a:36:dc:84:79:75:ae:7c:ec: dd:8d:67:cc:d7:c1:25:c2:97:11:f0:e1:18:7f:a0:62:e0:df: 34:20:e4:93:54:11:f3:0b:4b:78:1d:b0:16:61:e4:aa:e9:19: 62:e7:4e:38:2b:01:49:70:cb:82:2a:4f:58:71:05:ba:49:fd: bc:47:f3:59:88:ac:21:11:bc:cb:55:4f:a4:3d:48:8a:67:df: 52:44:c6:c3:48:45:d8:a4:f3:22:54:4e:04:1e:15:5c:76:9e: de:45:56:77:2e:6d:bc:f0:3a:84:fb:a9:57:f6:8b:a3:19:ca: c9:73:9c:66:53:da:e7:e1:0f:2b:8f:e1:65:c7:c0:ef:02:80: 1d:32:2f:b0:c2:35:b1:2d:a2:55:2d:6a:19:a8:9c:dc:d7:00: 8c:09:f8:1a:91:30:38:cc:fb:e9:db:71:67:02:25:4f:27:e9: f1:f4:ee:fc:59:7b:ab:07:a0:a4:d4:eb:6c:1b:38:da:08:02: 3a:21:88:78:67:55:90:bb:36:d4:c5:40:d6:57:9f:38:52:46: 45:7a:38:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP7u3TKIAS5eRhTElsk5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YTYwNDZlMzdjN2UyMDc1YjQxZDZmZWY3MGQyMzEyMzAz YzVmMzkwHhcNMjUxMjE2MTMwMDQ2WhcNMjUxMjE3MTMwMDQ2WjAzMTEwLwYDVQQD EygwOWE4NDhiOTE4ZTIyOWZlMWYyZDY5Y2JhOWI4YWFlNDdmNTc2Zjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUKi9wtL/9MLwaMdskeuSv6cpOoM sP6Toaf7FFIfMXsS0AG6wi+tlg0MmtdDRSLqz4GeKaSeg6Le+qnMQfMvAKJPJPeY yrvenjT737BKl8vSIr8YeVoLcW4NU84v6IZyNTXUaSYQFWcKA8LgL4W7owPhVheh wWOxGUpMU20wvP4q+cpwTLlUhmry+81LXQkj0beb/JaxjBfKZC7DhM0S7wL2wOAk Gwjp40kF4u1SUXJo+F+Q44y9EBAOsnVrl8uzExSAKrRCqYf0pwgf15RxbKe85o+R xDOFskpd0N9yUOrUUXypHlXpMngQu4QCW79CCR1Q+x6vfMWsYxiJy1R+PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmoSLkY4in+Hy1py6m4quR/V2+ZMB8GA1UdIwQY MBaAFBmmBG43x+IHW0HW/vcNIxIwPF85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83OTllNWMtMTU5NC00MDlmLThjNTQt M2ZlYzU4NjE0YzRiLzEvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83OTllNWMtMTU5NC00MDlmLThjNTQtM2ZlYzU4NjE0YzRi LzEvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRn4FEo0 aOewngQYDz1PN7xeWWNyQlFN5I/9RQqf5NNq6n6HJtgTzBgD6H1wOjbchHl1rnzs 3Y1nzNfBJcKXEfDhGH+gYuDfNCDkk1QR8wtLeB2wFmHkqukZYudOOCsBSXDLgipP WHEFukn9vEfzWYisIRG8y1VPpD1IimffUkTGw0hF2KTzIlROBB4VXHae3kVWdy5t vPA6hPupV/aLoxnKyXOcZlPa5+EPK4/hZcfA7wKAHTIvsMI1sS2iVS1qGaic3NcA jAn4GpEwOMz76dtxZwIlTyfp8fTu/Fl7qwegpNTrbBs42ggCOiGIeGdVkLs21MVA 1lefOFJGRXo4nA== -----END CERTIFICATE-----Generated at Tue Dec 16 21:01:19 2025 by rpki-client