This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json) Hash identifier: OyQunPoifMevIIl181/WLk5ETALoO4TuXoz8If+DwZM= Subject key identifier: 29:12:12:37:79:C0:D9:F5:64:DC:D1:4A:45:B0:74:22:DC:F7:97:D1 Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a Certificate serial: 019B2BF8E8951CFF09F6C3D41160D2045200 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 11:01:31 +0000 Manifest this update: Wed 17 Dec 2025 11:01:31 +0000 Manifest next update: Thu 18 Dec 2025 11:01:31 +0000 Files and hashes: 1: Ihlsr9rpvmkWxK02pmiA4lbKi7A.roa (hash: 1gw28Etq9hJVkaq3S2dfCHriH+wtNxKLqiZRcbkKaJU=) 2: SaJps5NdZ3bVeOz3Y_T6YWQuimI.roa (hash: oi4EjPg7CTNf9EIHp927YsWRKdaqfzD1cBc8zdJg5ac=) 3: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: 0df0Z7Jy6CpaHlpym5+lLvxo18fgU8irT4Nqq51h8a0=) 4: ncstDbEEJNmrMxxK2UE_gBED9t8.roa (hash: bytivv4P7l0F7luhHCBlkP+IGUZ4L9tUQ43UhSBpNYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:e8:95:1c:ff:09:f6:c3:d4:11:60:d2:04:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a Validity Not Before: Dec 17 11:01:31 2025 GMT Not After : Dec 18 11:01:31 2025 GMT Subject: CN=2912123779c0d9f564dcd14a45b07422dcf797d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:40:2b:b4:d0:7b:35:fd:c6:67:23:82:5a:d6: c9:8c:00:d9:78:c9:20:2d:32:c8:74:28:03:c9:af: 7e:9a:a7:8c:fe:da:0f:0a:64:b5:f0:67:f0:e5:39: ee:f9:90:61:5c:79:e5:8a:7c:12:42:b2:25:b7:54: 76:17:0e:b7:b8:38:67:91:5b:e8:25:f7:c8:e7:77: 8e:b1:66:d9:9b:83:6a:6f:e2:e0:0d:67:23:2e:a8: f6:c1:1f:b5:4c:55:ce:28:3f:ac:09:24:f4:08:b8: fd:18:75:67:62:62:61:09:ad:51:d5:2c:e4:f8:98: 28:cc:7f:46:08:43:b1:5c:22:4d:f5:46:49:71:c5: e9:c9:ef:86:f9:5a:6d:88:16:03:df:e3:1d:e9:0d: 4a:a9:09:4e:ff:b8:52:4d:71:21:7a:cc:d2:c2:00: 61:22:a1:57:48:52:a2:cc:88:71:46:ea:49:e2:9c: 1e:34:63:cc:59:41:54:80:ab:4d:b7:dd:96:16:d5: 46:ab:74:4d:9f:bc:f8:70:01:b3:24:2a:ed:6d:10: 8e:bb:b1:bf:9c:2b:2f:c7:53:b2:44:7b:9d:cb:f7: eb:8b:ee:d8:92:f5:04:b0:17:a9:19:28:3c:61:cd: c5:fe:04:6f:84:21:c3:d6:7d:48:71:a6:4f:6d:2f: c0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:12:12:37:79:C0:D9:F5:64:DC:D1:4A:45:B0:74:22:DC:F7:97:D1 X509v3 Authority Key Identifier: keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:60:e4:59:04:ab:bf:e7:d1:c1:55:a1:66:5c:78:ea:b4:a7: 4d:62:80:32:c7:ea:ec:6e:13:1b:b2:cf:c7:a0:07:71:ef:c4: e0:dc:91:fe:45:d0:f3:f7:e7:36:c3:80:c0:a3:80:8a:0f:7a: 0b:24:95:51:8b:c3:f8:01:0d:21:91:b2:0b:a5:f3:b8:3f:a5: 9e:22:83:e5:0b:d5:00:fb:81:f6:67:a9:01:4f:9d:54:a9:09: fd:0e:06:85:ab:3a:5f:d9:c4:2f:e6:0e:ef:2b:a7:e0:98:3b: e0:d1:b8:39:64:8b:52:08:b3:73:b1:12:7b:79:d1:13:a6:4e: 7e:3e:4f:ba:19:04:4c:df:5e:e5:ff:b8:a8:74:4d:06:11:5e: be:60:b2:67:e3:cb:30:95:ff:04:fd:c6:9f:ef:59:07:dc:04: 69:9e:fe:57:1e:07:ac:dd:c2:59:10:24:ff:f6:9c:0e:7b:2b: 74:7d:f7:ae:3c:c9:b7:30:bb:1a:18:c7:25:e9:d3:a4:85:b8: 6d:4f:6e:21:38:10:17:d4:b2:52:2e:f9:05:55:db:db:2a:06: 6d:09:be:0c:31:07:57:3f:9b:e4:c5:64:4c:20:b1:4e:da:5e: c1:60:1c:9e:da:32:76:d7:cd:f6:06:10:0e:2c:5b:94:b8:7c: e6:7f:6e:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+OiVHP8J9sPUEWDSBFIAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UwZTQ4MDQxMWI5Yzg4ZTkxNmRlZjkwZmMzYTkwMTAy NjM5NGEwHhcNMjUxMjE3MTEwMTMxWhcNMjUxMjE4MTEwMTMxWjAzMTEwLwYDVQQD EygyOTEyMTIzNzc5YzBkOWY1NjRkY2QxNGE0NWIwNzQyMmRjZjc5N2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkArtNB7Nf3GZyOCWtbJjADZeMkg LTLIdCgDya9+mqeM/toPCmS18Gfw5Tnu+ZBhXHnlinwSQrIlt1R2Fw63uDhnkVvo JffI53eOsWbZm4Nqb+LgDWcjLqj2wR+1TFXOKD+sCST0CLj9GHVnYmJhCa1R1Szk +JgozH9GCEOxXCJN9UZJccXpye+G+VptiBYD3+Md6Q1KqQlO/7hSTXEheszSwgBh IqFXSFKizIhxRupJ4pweNGPMWUFUgKtNt92WFtVGq3RNn7z4cAGzJCrtbRCOu7G/ nCsvx1OyRHudy/fri+7YkvUEsBepGSg8Yc3F/gRvhCHD1n1IcaZPbS/APQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkSEjd5wNn1ZNzRSkWwdCLc95fRMB8GA1UdIwQY MBaAFIM+DkgEEbnIjpFt75D8OpAQJjlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMt NmMyMGViYWYzMGE5LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMtNmMyMGViYWYzMGE5 LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmDkWQSr v+fRwVWhZlx46rSnTWKAMsfq7G4TG7LPx6AHce/E4NyR/kXQ8/fnNsOAwKOAig96 CySVUYvD+AENIZGyC6XzuD+lniKD5QvVAPuB9mepAU+dVKkJ/Q4Ghas6X9nEL+YO 7yun4Jg74NG4OWSLUgizc7ESe3nRE6ZOfj5PuhkETN9e5f+4qHRNBhFevmCyZ+PL MJX/BP3Gn+9ZB9wEaZ7+Vx4HrN3CWRAk//acDnsrdH33rjzJtzC7GhjHJenTpIW4 bU9uITgQF9SyUi75BVXb2yoGbQm+DDEHVz+b5MVkTCCxTtpewWAcntoydtfN9gYQ DixblLh85n9ueg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:19:40 2025 by rpki-client