This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json) Hash identifier: qtWA6iNf0l1W1b79oxkwC1P8sDXfHmDRD84uyh3PEm4= Subject key identifier: F4:ED:D8:CE:42:95:FA:A2:C5:C8:1B:43:4A:06:10:CB:08:69:4C:F8 Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c Certificate serial: 019AF088B7C237237F7385DC9E68CF2176D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft Manifest number: 0E91 Signing time: Fri 05 Dec 2025 22:01:22 +0000 Manifest this update: Fri 05 Dec 2025 22:01:22 +0000 Manifest next update: Sat 06 Dec 2025 22:01:22 +0000 Files and hashes: 1: JQj924cUZ739dTo2CAmTW-Nn1zw.roa (hash: wLvSRyuv0hEPp/uJ8ZfBwX5TJv2CK5mAgRM5bxes1Tg=) 2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: vyVmY0lnQQbvVTeeEn84oKPXrsWqGL9goPzSIYLhnQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:b7:c2:37:23:7f:73:85:dc:9e:68:cf:21:76:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c Validity Not Before: Dec 5 22:01:22 2025 GMT Not After : Dec 6 22:01:22 2025 GMT Subject: CN=f4edd8ce4295faa2c5c81b434a0610cb08694cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:75:d2:20:ab:82:aa:b4:b9:06:34:94:45:63: 34:49:7c:01:9f:42:d0:cc:02:da:23:e0:b2:b0:52: 6a:0c:08:c3:e8:84:88:53:88:e5:78:79:04:a1:42: 29:47:0a:11:bf:a1:67:18:c7:bc:d4:8e:08:83:25: 93:8f:7d:e9:f7:10:51:b1:4a:03:c0:af:94:52:cf: 0e:b8:98:a1:ce:21:3a:03:6d:89:6d:c6:b3:38:a2: 87:57:e7:6b:f5:99:db:9b:91:5d:a2:16:1a:3a:a4: 55:d0:c1:ac:54:de:db:e4:6c:8e:94:10:2f:7e:5d: 2b:82:1c:e3:fe:80:2d:89:2b:e9:29:d7:cf:66:e1: 7c:87:02:cd:c3:ee:e1:af:e9:17:b0:24:dd:eb:ab: 62:57:c3:52:05:93:16:33:1a:5b:74:2f:70:fd:9a: b2:7c:41:ba:8e:ab:af:e0:1f:4b:a5:48:fd:49:ab: 4c:92:6f:94:e0:16:04:ab:c9:f6:73:90:2d:df:e6: d9:0a:89:ed:cb:b3:aa:73:f1:0f:61:3d:57:cd:73: e7:89:6c:d9:af:98:0c:5c:3d:40:b8:ef:e9:54:76: 2c:02:8a:d1:f0:ed:1d:98:c6:ee:4c:4f:9e:52:68: 96:50:62:b8:76:f1:8b:be:a4:2a:be:bf:ad:3c:85: a8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:ED:D8:CE:42:95:FA:A2:C5:C8:1B:43:4A:06:10:CB:08:69:4C:F8 X509v3 Authority Key Identifier: keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:db:bd:1a:1b:37:1f:e0:65:f8:92:b3:d9:c5:83:f0:61:2b: c4:36:bc:a0:0a:7a:dd:4d:f1:1c:9a:38:f7:bb:17:80:18:84: 71:c8:1f:84:c9:8e:e0:59:ba:95:13:a3:f9:0d:b2:ac:9f:14: d6:21:77:77:15:0d:e1:a9:71:45:8f:3f:c4:84:9e:6c:90:58: 8d:39:11:ad:b5:b6:83:3e:32:a0:d8:21:5d:f0:84:d8:f8:b5: 9e:5b:43:50:d1:27:36:21:df:64:8d:3e:7d:a6:b0:7f:ef:4c: 82:b7:3c:b6:a8:ba:32:cb:01:fd:4d:0d:51:b7:94:ab:ee:c9: 70:05:a0:d3:57:ef:91:05:7e:e5:e7:51:da:71:a6:47:79:8f: 05:12:cf:ef:c4:96:8b:2c:e5:1d:c1:7f:8a:8b:80:19:af:84: 44:02:dd:09:5a:a2:cf:74:4b:85:2d:96:f0:98:3b:a0:43:4f: 23:76:f0:78:4e:d9:5c:48:42:4c:cd:cb:10:c9:d8:72:a1:2e: a3:4b:55:8d:a6:39:af:4f:0c:15:0e:e6:9b:21:f7:ae:7b:5f: 9c:aa:27:cf:8b:c7:e3:dd:71:f6:9d:95:f3:d5:3b:86:2d:b4: 99:5b:fd:03:53:95:e1:3d:33:40:94:f4:b8:9b:99:4e:76:74: cb:34:ba:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiLfCNyN/c4XcnmjPIXbTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNTNkOWI1MWY0N2FhNTVmOWU1MjcwNDc1NDg2OWY1NTM2 YmFlNGMwHhcNMjUxMjA1MjIwMTIyWhcNMjUxMjA2MjIwMTIyWjAzMTEwLwYDVQQD EyhmNGVkZDhjZTQyOTVmYWEyYzVjODFiNDM0YTA2MTBjYjA4Njk0Y2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXXSIKuCqrS5BjSURWM0SXwBn0LQ zALaI+CysFJqDAjD6ISIU4jleHkEoUIpRwoRv6FnGMe81I4IgyWTj33p9xBRsUoD wK+UUs8OuJihziE6A22JbcazOKKHV+dr9Znbm5FdohYaOqRV0MGsVN7b5GyOlBAv fl0rghzj/oAtiSvpKdfPZuF8hwLNw+7hr+kXsCTd66tiV8NSBZMWMxpbdC9w/Zqy fEG6jquv4B9LpUj9SatMkm+U4BYEq8n2c5At3+bZConty7Oqc/EPYT1XzXPniWzZ r5gMXD1AuO/pVHYsAorR8O0dmMbuTE+eUmiWUGK4dvGLvqQqvr+tPIWoxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTt2M5ClfqixcgbQ0oGEMsIaUz4MB8GA1UdIwQY MBaAFIBT2bUfR6pV+eUnBHVIafVTa65MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWIt YTE1YWY1ZThmMTNjLzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWItYTE1YWY1ZThmMTNj LzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwNu9Ghs3 H+Bl+JKz2cWD8GErxDa8oAp63U3xHJo497sXgBiEccgfhMmO4Fm6lROj+Q2yrJ8U 1iF3dxUN4alxRY8/xISebJBYjTkRrbW2gz4yoNghXfCE2Pi1nltDUNEnNiHfZI0+ faawf+9Mgrc8tqi6MssB/U0NUbeUq+7JcAWg01fvkQV+5edR2nGmR3mPBRLP78SW iyzlHcF/iouAGa+ERALdCVqiz3RLhS2W8Jg7oENPI3bweE7ZXEhCTM3LEMnYcqEu o0tVjaY5r08MFQ7mmyH3rntfnKonz4vH491x9p2V89U7hi20mVv9A1OV4T0zQJT0 uJuZTnZ0yzS63g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:24 2025 by rpki-client