This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft File: gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft (raw, json) Hash identifier: mlXDDLi3O6uSroQm5aw1mhuT/I5jQ7MX8oYRQw0vBvI= Subject key identifier: 25:C0:02:6F:29:2B:13:2D:55:D5:1A:CC:22:8B:CC:AB:FA:FA:42:1E Authority key identifier: 81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5 Certificate issuer: /CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5 Certificate serial: 019AF208FE2A1DE844CEF899CB8DE888EAC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft Manifest number: 14A4 Signing time: Sat 06 Dec 2025 05:01:06 +0000 Manifest this update: Sat 06 Dec 2025 05:01:06 +0000 Manifest next update: Sun 07 Dec 2025 05:01:06 +0000 Files and hashes: 1: OWKqkK-Ww3RQmH16xNxVWiLvO8I.roa (hash: GAxHkIIERYjerOgQkJ6KzahFSgbI1tnYkcltOUuSvzI=) 2: gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl (hash: bpL61jrARayuIdgSJdxhQxysmdVAfF4xQa6waY2RH94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:fe:2a:1d:e8:44:ce:f8:99:cb:8d:e8:88:ea:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5 Validity Not Before: Dec 6 05:01:06 2025 GMT Not After : Dec 7 05:01:06 2025 GMT Subject: CN=25c0026f292b132d55d51acc228bccabfafa421e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:0b:81:00:07:49:76:b0:1c:85:64:f0:f8: 93:00:a6:32:db:c0:b5:b5:93:c4:3d:a5:98:20:50: b8:f8:10:5a:31:0a:57:12:b8:fd:e6:e6:3f:00:d6: c8:12:1d:19:fc:69:57:53:be:a6:3e:0f:f3:6c:69: 51:31:56:26:03:0a:6b:13:1b:89:49:9f:d2:b6:f2: 22:fa:35:04:78:3d:40:30:fd:4e:8f:e5:e7:32:bb: 7c:b7:88:0f:08:0d:c9:6f:04:a4:52:24:0a:25:9c: 27:e6:bf:7d:e8:8f:da:c2:70:5a:7b:f1:4c:70:78: dc:63:fc:3a:1a:b0:c5:40:b9:ea:ba:86:cb:70:4c: f2:91:ca:5d:05:b1:0a:5c:d3:f1:06:c2:a9:c4:67: 5f:99:54:df:bc:6e:02:ba:d2:bd:91:97:1f:fe:b0: 05:4c:a2:f2:9a:1d:94:9d:6d:54:2e:b6:e3:5c:8f: 60:70:4a:05:74:3d:30:d4:69:ff:3e:3c:44:78:af: f6:b5:b6:f9:e1:cf:bc:82:f2:8b:be:8a:9e:64:e0: 46:66:d6:f5:a5:da:6b:d7:f3:b4:eb:3f:c0:14:2f: 5b:2b:1a:a7:4b:8b:0f:a2:15:b8:b2:f2:99:7a:be: 67:12:c0:fb:85:0a:cb:ab:87:4f:f4:cd:81:87:40: 8a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C0:02:6F:29:2B:13:2D:55:D5:1A:CC:22:8B:CC:AB:FA:FA:42:1E X509v3 Authority Key Identifier: keyid:81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b8:e7:d2:eb:2e:28:26:9c:d6:2c:9b:1d:b1:a2:70:62:e6: 5c:13:e8:77:5a:36:e8:fa:c4:d0:f3:14:83:4b:d8:a6:2c:ad: 43:45:14:75:7c:04:b7:58:b2:8c:4c:d3:23:88:3c:d7:25:cb: aa:57:da:b5:08:c3:7e:29:31:2e:70:9f:23:29:00:95:a6:d7: 44:48:0c:d9:85:08:ff:d8:38:6d:cc:b6:87:d9:31:0b:51:d0: e4:49:61:89:76:1d:76:4c:ac:1b:5d:39:36:a0:dc:1c:9a:57: 10:6a:ab:7f:c9:e9:c9:dc:51:7a:81:6e:1f:41:72:a0:e5:38: ce:2b:52:e3:44:88:c3:b0:09:92:e0:51:a7:b5:08:a2:a2:89: b0:2a:19:e7:77:66:e3:01:29:e1:ba:50:5b:73:d8:ab:c0:5a: d5:71:88:80:5e:1a:61:fe:95:0a:e4:43:e3:5b:ee:f7:44:86: 25:54:c0:61:40:73:04:58:80:aa:28:d3:8e:13:fc:e0:34:71: b0:36:e8:8f:1f:c4:55:94:8b:5b:aa:93:ab:79:c9:1c:26:30: 54:a7:53:f9:a5:4e:2b:86:1c:2a:02:1e:6b:00:b5:7d:31:d1: 59:ce:32:d3:45:33:e8:82:84:38:cd:08:0a:ca:7c:ce:55:c7: 02:18:d8:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCP4qHehEzviZy43oiOrDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYTAyMWQ1NDBlZDdkODJjNjkwYWRjMDRmYmQ5ZGQ2ZWU1 MGU4ZDUwHhcNMjUxMjA2MDUwMTA2WhcNMjUxMjA3MDUwMTA2WjAzMTEwLwYDVQQD EygyNWMwMDI2ZjI5MmIxMzJkNTVkNTFhY2MyMjhiY2NhYmZhZmE0MjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjQLgQAHSXawHIVk8PiTAKYy28C1 tZPEPaWYIFC4+BBaMQpXErj95uY/ANbIEh0Z/GlXU76mPg/zbGlRMVYmAwprExuJ SZ/StvIi+jUEeD1AMP1Oj+XnMrt8t4gPCA3JbwSkUiQKJZwn5r996I/awnBae/FM cHjcY/w6GrDFQLnquobLcEzykcpdBbEKXNPxBsKpxGdfmVTfvG4CutK9kZcf/rAF TKLymh2UnW1ULrbjXI9gcEoFdD0w1Gn/PjxEeK/2tbb54c+8gvKLvoqeZOBGZtb1 pdpr1/O06z/AFC9bKxqnS4sPohW4svKZer5nEsD7hQrLq4dP9M2Bh0CKvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXAAm8pKxMtVdUazCKLzKv6+kIeMB8GA1UdIwQY MBaAFIGgIdVA7X2CxpCtwE+9ndbuUOjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2FBaDFVRHRmWUxHa0szQVQ3MmQxdTVRNk5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMmI5NDYtMWI0YS00MjE0LTkyMzQt YWQwMjczMjdmOWQ4LzEvZ2FBaDFVRHRmWUxHa0szQVQ3MmQxdTVRNk5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lMmI5NDYtMWI0YS00MjE0LTkyMzQtYWQwMjczMjdmOWQ4 LzEvZ2FBaDFVRHRmWUxHa0szQVQ3MmQxdTVRNk5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7jn0usu KCac1iybHbGicGLmXBPod1o26PrE0PMUg0vYpiytQ0UUdXwEt1iyjEzTI4g81yXL qlfatQjDfikxLnCfIykAlabXREgM2YUI/9g4bcy2h9kxC1HQ5ElhiXYddkysG105 NqDcHJpXEGqrf8npydxReoFuH0FyoOU4zitS40SIw7AJkuBRp7UIoqKJsCoZ53dm 4wEp4bpQW3PYq8Ba1XGIgF4aYf6VCuRD41vu90SGJVTAYUBzBFiAqijTjhP84DRx sDbojx/EVZSLW6qTq3nJHCYwVKdT+aVOK4YcKgIeawC1fTHRWc4y00Uz6IKEOM0I Csp8zlXHAhjY9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:17 2025 by rpki-client