This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f961af-e8dd-4f64-9547-7363373155be/1/gnSkfvUV7gcuLOK8w74KNN1zQfs.mft File: gnSkfvUV7gcuLOK8w74KNN1zQfs.mft (raw, json) Hash identifier: DAQFMfZhk1TzWT9K+KgUc/WDS0mtIPcg6wPrl7Ig+68= Subject key identifier: 84:76:59:FF:57:00:E9:A7:2F:1B:F2:AD:C8:55:45:C3:CE:88:49:07 Authority key identifier: 82:74:A4:7E:F5:15:EE:07:2E:2C:E2:BC:C3:BE:0A:34:DD:73:41:FB Certificate issuer: /CN=8274a47ef515ee072e2ce2bcc3be0a34dd7341fb Certificate serial: 019AF4652A8F38370E0EC71015ACAC2202F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnSkfvUV7gcuLOK8w74KNN1zQfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f961af-e8dd-4f64-9547-7363373155be/1/gnSkfvUV7gcuLOK8w74KNN1zQfs.mft Manifest number: B2 Signing time: Sat 06 Dec 2025 16:01:01 +0000 Manifest this update: Sat 06 Dec 2025 16:01:01 +0000 Manifest next update: Sun 07 Dec 2025 16:01:01 +0000 Files and hashes: 1: gnSkfvUV7gcuLOK8w74KNN1zQfs.crl (hash: 0UHeK01RnPHKnCZQDewQeKC+mMZEqpTmj8dIDw37pfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f961af-e8dd-4f64-9547-7363373155be/1/gnSkfvUV7gcuLOK8w74KNN1zQfs.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f961af-e8dd-4f64-9547-7363373155be/1/gnSkfvUV7gcuLOK8w74KNN1zQfs.mft rsync://rpki.ripe.net/repository/DEFAULT/gnSkfvUV7gcuLOK8w74KNN1zQfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:2a:8f:38:37:0e:0e:c7:10:15:ac:ac:22:02:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8274a47ef515ee072e2ce2bcc3be0a34dd7341fb Validity Not Before: Dec 6 16:01:01 2025 GMT Not After : Dec 7 16:01:01 2025 GMT Subject: CN=847659ff5700e9a72f1bf2adc85545c3ce884907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:45:dc:af:88:9a:d9:1a:3d:f8:58:d7:5f: a0:ff:b5:d8:38:c1:98:6d:8c:ae:6b:9b:e4:71:d2: 13:ac:e0:f0:77:89:d6:e0:38:dd:a7:a3:79:90:1e: e0:8f:4d:00:a4:21:e2:b5:c7:e1:4b:f4:79:f1:1c: cb:7f:58:b0:f8:5e:a3:fa:d7:01:e7:dc:81:09:ce: 62:b0:d8:b5:61:45:1f:11:fd:0c:2b:20:74:e5:d7: 09:2f:b6:fb:36:26:6e:eb:d9:44:c7:f7:cf:2b:79: 83:c1:eb:2e:fb:6b:90:55:94:39:ee:df:b9:d8:d8: 09:48:74:13:0e:62:38:5b:1d:41:7d:d5:d8:92:70: 1e:f6:55:1a:73:e0:3d:d6:69:95:55:79:11:ec:08: f8:c1:53:f3:cb:cf:cc:11:59:16:4b:5d:c1:28:40: 93:cc:b7:50:74:a3:ec:3c:24:bc:44:c7:4b:02:5d: a9:74:75:28:4f:32:8a:e0:1a:49:8c:30:5b:9a:bd: ac:3e:06:d8:cb:82:cc:49:03:9b:e6:48:64:21:43: 59:ad:37:e4:b6:69:0d:f9:b9:6a:be:6d:c3:a6:41: e3:1d:c3:74:28:a6:79:f5:5a:12:04:81:29:db:35: d0:86:14:f4:7d:16:cd:b3:5e:93:55:57:da:d5:d2: 7b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:76:59:FF:57:00:E9:A7:2F:1B:F2:AD:C8:55:45:C3:CE:88:49:07 X509v3 Authority Key Identifier: keyid:82:74:A4:7E:F5:15:EE:07:2E:2C:E2:BC:C3:BE:0A:34:DD:73:41:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnSkfvUV7gcuLOK8w74KNN1zQfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f961af-e8dd-4f64-9547-7363373155be/1/gnSkfvUV7gcuLOK8w74KNN1zQfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f961af-e8dd-4f64-9547-7363373155be/1/gnSkfvUV7gcuLOK8w74KNN1zQfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:0a:8e:26:cf:4e:0d:bc:a3:b9:aa:f2:73:c7:fd:e6:6e:d7: 62:59:1d:7e:cc:3c:96:dc:1a:e5:41:d3:d7:83:e8:6a:c5:37: 20:32:61:59:18:d4:af:99:b4:12:65:bb:36:c8:60:07:9e:7a: ce:99:2c:c8:4e:00:34:37:ca:f7:c5:be:f9:2a:4d:d5:b6:f1: e4:12:13:72:68:f3:9a:4f:80:b1:df:9b:8c:f6:b3:d7:d6:fa: d5:f2:33:bb:9a:97:69:ff:13:e7:e4:75:9e:86:78:c1:44:23: 95:3b:70:70:7f:4a:73:08:3a:ca:84:61:66:44:e6:08:8e:7c: d6:88:5c:6f:6c:52:cb:30:51:2f:3c:3e:fb:74:28:17:2a:ce: f1:a7:83:3f:43:98:79:45:94:c6:e9:c7:30:e5:8f:f9:ca:29: 39:62:0b:5e:60:88:53:16:2e:ec:64:2c:cb:6e:81:7e:39:34: 2c:e9:57:07:0a:7a:e5:b5:9a:f8:40:0f:92:63:38:c5:f5:6c: bc:2d:a4:30:16:73:fe:52:ff:dc:f9:28:d5:06:8b:d1:89:3f: 97:da:c4:e6:dc:96:c8:6b:47:4e:2a:07:55:d2:2e:73:4f:2c: 22:cf:7c:db:bd:dd:15:92:10:b6:88:3e:a6:58:44:5d:a4:c4: c1:3b:38:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZSqPODcODscQFaysIgL1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzRhNDdlZjUxNWVlMDcyZTJjZTJiY2MzYmUwYTM0ZGQ3 MzQxZmIwHhcNMjUxMjA2MTYwMTAxWhcNMjUxMjA3MTYwMTAxWjAzMTEwLwYDVQQD Eyg4NDc2NTlmZjU3MDBlOWE3MmYxYmYyYWRjODU1NDVjM2NlODg0OTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo9F3K+ImtkaPfhY11+g/7XYOMGY bYyua5vkcdITrODwd4nW4Djdp6N5kB7gj00ApCHitcfhS/R58RzLf1iw+F6j+tcB 59yBCc5isNi1YUUfEf0MKyB05dcJL7b7NiZu69lEx/fPK3mDwesu+2uQVZQ57t+5 2NgJSHQTDmI4Wx1BfdXYknAe9lUac+A91mmVVXkR7Aj4wVPzy8/MEVkWS13BKECT zLdQdKPsPCS8RMdLAl2pdHUoTzKK4BpJjDBbmr2sPgbYy4LMSQOb5khkIUNZrTfk tmkN+blqvm3DpkHjHcN0KKZ59VoSBIEp2zXQhhT0fRbNs16TVVfa1dJ79QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIR2Wf9XAOmnLxvyrchVRcPOiEkHMB8GA1UdIwQY MBaAFIJ0pH71Fe4HLizivMO+CjTdc0H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25Ta2Z2VVY3Z2N1TE9LOHc3NEtOTjF6UWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mOTYxYWYtZThkZC00ZjY0LTk1NDct NzM2MzM3MzE1NWJlLzEvZ25Ta2Z2VVY3Z2N1TE9LOHc3NEtOTjF6UWZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mOTYxYWYtZThkZC00ZjY0LTk1NDctNzM2MzM3MzE1NWJl LzEvZ25Ta2Z2VVY3Z2N1TE9LOHc3NEtOTjF6UWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAqOJs9O Dbyjuaryc8f95m7XYlkdfsw8ltwa5UHT14PoasU3IDJhWRjUr5m0EmW7NshgB556 zpksyE4ANDfK98W++SpN1bbx5BITcmjzmk+Asd+bjPaz19b61fIzu5qXaf8T5+R1 noZ4wUQjlTtwcH9Kcwg6yoRhZkTmCI581ohcb2xSyzBRLzw++3QoFyrO8aeDP0OY eUWUxunHMOWP+copOWILXmCIUxYu7GQsy26Bfjk0LOlXBwp65bWa+EAPkmM4xfVs vC2kMBZz/lL/3Pko1QaL0Yk/l9rE5tyWyGtHTioHVdIuc08sIs98273dFZIQtog+ plhEXaTEwTs4hQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:18 2025 by rpki-client