This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json) Hash identifier: fCet9T5CqRzslqa5tOr/nEUFgIR3QZvwgsTZsvalORA= Subject key identifier: 63:2B:6A:7B:C4:4D:52:7E:25:F0:3D:DB:E3:3C:CD:A5:5D:E2:07:95 Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a Certificate serial: 019AF3F83193A16E63B0B313BC645443B743 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 14:02:00 +0000 Manifest this update: Sat 06 Dec 2025 14:02:00 +0000 Manifest next update: Sun 07 Dec 2025 14:02:00 +0000 Files and hashes: 1: Ihlsr9rpvmkWxK02pmiA4lbKi7A.roa (hash: 1gw28Etq9hJVkaq3S2dfCHriH+wtNxKLqiZRcbkKaJU=) 2: SaJps5NdZ3bVeOz3Y_T6YWQuimI.roa (hash: oi4EjPg7CTNf9EIHp927YsWRKdaqfzD1cBc8zdJg5ac=) 3: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: lMa/9o7WbqwZtb7nV9SKiIEEU0Mnl88HN4dxWKzbhhg=) 4: ncstDbEEJNmrMxxK2UE_gBED9t8.roa (hash: bytivv4P7l0F7luhHCBlkP+IGUZ4L9tUQ43UhSBpNYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:31:93:a1:6e:63:b0:b3:13:bc:64:54:43:b7:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a Validity Not Before: Dec 6 14:02:00 2025 GMT Not After : Dec 7 14:02:00 2025 GMT Subject: CN=632b6a7bc44d527e25f03ddbe33ccda55de20795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:0b:95:40:3b:2b:52:09:74:96:9f:0f:27: 53:0b:28:23:00:1f:15:3f:57:db:1a:77:19:12:5b: a1:60:89:ef:f6:97:79:2a:09:3d:88:48:3a:15:df: 01:a7:e6:f5:a7:61:1e:e7:66:68:5b:08:de:ad:c0: df:cf:e7:42:9a:bd:5a:5e:4b:7e:76:a8:20:90:cf: 14:03:26:a4:28:78:6b:a3:c4:aa:e4:2a:5b:f4:d8: 0b:c7:6b:ab:d8:4f:d0:b1:fe:14:1e:f0:9e:e6:f2: f0:6d:f5:a3:36:9d:8d:8a:9c:e8:f4:a9:a3:f2:71: d4:49:c8:b8:e9:bc:ca:b7:89:ee:e3:61:14:49:cb: 8a:57:51:c1:b6:e5:1c:a2:5b:37:d0:e9:d0:65:4f: 79:e2:42:b8:b4:6c:70:e8:39:bf:d3:7d:f4:d7:1f: 65:91:e4:0c:8e:c8:45:8f:10:1f:43:f7:d1:5f:ef: 61:8c:84:fc:8d:e7:4d:db:d3:07:53:33:d9:93:71: 48:08:b7:1c:00:70:15:1e:97:a7:43:ba:ef:23:63: c7:e0:da:ce:f7:b3:16:a8:52:3a:79:c8:32:9d:ae: a1:eb:b2:43:3e:7e:fb:d8:23:59:3b:6c:2a:59:d5: a5:33:b6:d2:75:19:07:10:bd:4f:45:4f:44:0c:a2: 5f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2B:6A:7B:C4:4D:52:7E:25:F0:3D:DB:E3:3C:CD:A5:5D:E2:07:95 X509v3 Authority Key Identifier: keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:1e:d7:02:4e:98:18:1f:93:b9:6b:19:e9:46:db:cf:58:88: 6c:ef:9d:5f:57:8a:c8:dd:e3:59:dd:c6:3c:74:e6:85:e3:24: 44:6d:4d:24:cd:52:29:c9:72:98:81:ee:b6:9b:28:50:cd:19: 0e:ff:49:ca:13:37:d2:ec:a7:a2:5b:fc:13:25:8e:ae:ca:7f: 44:99:93:d8:38:4c:d8:bf:74:08:cd:49:0d:5e:99:53:57:0f: a9:b9:00:a4:e2:65:2e:69:94:f5:23:d4:c5:c0:fa:21:1e:c3: 84:40:a2:2c:86:0d:90:60:a6:81:10:19:19:8e:a0:53:d0:3d: fa:d5:2c:b7:20:64:03:45:09:d1:48:99:cf:ce:5a:de:4c:e2: 40:c2:c0:53:fd:f7:55:12:08:b8:c3:ec:cd:bb:16:3d:d6:19: 36:5f:8c:b7:25:ac:bd:c0:5b:45:ac:52:ae:13:59:04:d4:2b: 6e:27:d7:a1:7e:d6:33:ca:61:3b:bb:df:09:a6:c9:2f:3d:21: c2:21:dd:e3:0f:e1:9a:09:e4:d7:40:e1:a8:d4:1a:51:30:c3: 52:ed:3c:e5:e8:10:5c:17:f1:cf:c4:c2:9c:2c:10:67:28:38: 3b:1a:13:a8:c6:e2:ca:0e:e7:52:e1:16:5a:ab:65:85:95:9d: 2c:7d:c8:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+DGToW5jsLMTvGRUQ7dDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UwZTQ4MDQxMWI5Yzg4ZTkxNmRlZjkwZmMzYTkwMTAy NjM5NGEwHhcNMjUxMjA2MTQwMjAwWhcNMjUxMjA3MTQwMjAwWjAzMTEwLwYDVQQD Eyg2MzJiNmE3YmM0NGQ1MjdlMjVmMDNkZGJlMzNjY2RhNTVkZTIwNzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JgLlUA7K1IJdJafDydTCygjAB8V P1fbGncZEluhYInv9pd5Kgk9iEg6Fd8Bp+b1p2Ee52ZoWwjercDfz+dCmr1aXkt+ dqggkM8UAyakKHhro8Sq5Cpb9NgLx2ur2E/Qsf4UHvCe5vLwbfWjNp2Nipzo9Kmj 8nHUSci46bzKt4nu42EUScuKV1HBtuUcols30OnQZU954kK4tGxw6Dm/03301x9l keQMjshFjxAfQ/fRX+9hjIT8jedN29MHUzPZk3FICLccAHAVHpenQ7rvI2PH4NrO 97MWqFI6ecgyna6h67JDPn772CNZO2wqWdWlM7bSdRkHEL1PRU9EDKJfkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMranvETVJ+JfA92+M8zaVd4geVMB8GA1UdIwQY MBaAFIM+DkgEEbnIjpFt75D8OpAQJjlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMt NmMyMGViYWYzMGE5LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMtNmMyMGViYWYzMGE5 LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyx7XAk6Y GB+TuWsZ6Ubbz1iIbO+dX1eKyN3jWd3GPHTmheMkRG1NJM1SKclymIHutpsoUM0Z Dv9JyhM30uynolv8EyWOrsp/RJmT2DhM2L90CM1JDV6ZU1cPqbkApOJlLmmU9SPU xcD6IR7DhECiLIYNkGCmgRAZGY6gU9A9+tUstyBkA0UJ0UiZz85a3kziQMLAU/33 VRIIuMPszbsWPdYZNl+MtyWsvcBbRaxSrhNZBNQrbifXoX7WM8phO7vfCabJLz0h wiHd4w/hmgnk10DhqNQaUTDDUu085egQXBfxz8TCnCwQZyg4OxoTqMbiyg7nUuEW WqtlhZWdLH3I4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 16:20:42 2025 by rpki-client