This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft File: gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json) Hash identifier: qBwk32P6lBtpP1VpkvM6cx2isXq1IOITTTdg58G7YTo= Subject key identifier: 38:AD:62:C5:A6:4C:46:8D:17:37:32:75:DA:85:BF:20:59:99:ED:DE Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6 Certificate issuer: /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6 Certificate serial: 019AF50B7F6677C6838747B2F4D8BA94391D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft Manifest number: 08A9 Signing time: Sat 06 Dec 2025 19:02:42 +0000 Manifest this update: Sat 06 Dec 2025 19:02:42 +0000 Manifest next update: Sun 07 Dec 2025 19:02:42 +0000 Files and hashes: 1: 248bDK_2X4s3D78cLTN1zTJo8ls.roa (hash: kLQEr1R8+53FUqqBvs455Xwu5a5on81N6ifpRavsyZA=) 2: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: 3PLzn80zZi6VydOVLpOYh5+3RkkKhhzLcUivnywQoWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:7f:66:77:c6:83:87:47:b2:f4:d8:ba:94:39:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6 Validity Not Before: Dec 6 19:02:42 2025 GMT Not After : Dec 7 19:02:42 2025 GMT Subject: CN=38ad62c5a64c468d17373275da85bf205999edde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:64:a9:99:d6:17:05:0e:4a:5e:7a:74:5b:4d: dc:b6:5e:fa:1a:23:4f:bb:78:71:4d:9a:38:b9:41: 08:39:4b:26:ca:76:c4:a8:d6:e0:ca:53:ed:77:33: 77:3a:1f:f2:be:32:7b:20:34:ef:53:a9:69:2b:5d: 22:e1:67:ff:6a:fe:0d:c2:fb:2b:39:48:e5:7c:e0: 73:40:12:ac:55:89:15:04:01:b7:a0:6b:f8:25:d5: 34:15:38:6d:69:5d:94:84:6c:f5:b0:e7:37:05:a6: 63:8a:65:09:da:5f:be:67:3a:23:a3:7b:07:28:42: 26:8d:ed:42:d9:54:39:74:52:bf:f1:c0:1c:af:d1: 33:e9:a1:df:b9:6d:6c:6c:ad:82:30:bd:2a:be:56: b9:14:10:4b:8f:9c:96:33:67:92:00:7d:08:e5:70: d6:d9:90:a2:2d:4b:ac:f2:42:bb:8b:01:f7:41:96: 7f:40:d0:be:a3:56:06:f0:8b:02:54:50:79:30:4a: 36:26:95:4c:a9:fb:97:2a:71:53:27:4c:35:50:17: d5:2d:28:27:d9:d9:18:8d:63:ff:69:0c:d6:1e:38: 32:16:6d:c8:cd:63:42:9e:9d:b2:82:31:bf:3c:85: 3b:c1:1f:6a:d7:58:c7:ae:c4:6c:96:b9:c1:99:b0: ba:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AD:62:C5:A6:4C:46:8D:17:37:32:75:DA:85:BF:20:59:99:ED:DE X509v3 Authority Key Identifier: keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:0c:33:69:b5:f2:72:f1:c4:a7:ed:0e:c6:c5:d5:e5:66:70: e6:04:e3:45:01:ea:50:87:09:78:72:f4:8d:05:c5:47:51:36: 61:4d:8c:8c:24:f7:25:6b:c1:53:87:3b:41:cb:91:1c:64:13: 53:a7:84:65:31:af:f3:89:5c:eb:47:e9:d0:21:e2:fb:87:05: 26:75:f7:0e:f6:d2:39:22:eb:c9:da:2a:69:f0:28:d1:fd:5c: 72:f7:e5:e9:cd:10:57:02:3f:bd:d2:a3:26:f8:21:4a:22:d9: 21:96:25:25:b2:cd:61:be:7c:d6:db:a7:02:00:2f:4b:67:47: d3:1d:27:13:93:36:8f:38:ec:b3:b6:5e:27:7a:e0:7d:82:ef: 72:62:52:3f:e5:3e:24:13:72:15:9d:fe:00:03:07:c6:71:3e: 28:df:87:d2:61:99:5c:e7:73:32:92:79:49:e6:32:c9:f1:89: c3:96:14:57:c5:4b:60:35:21:e3:c9:1c:b9:f6:f3:b0:56:34: 1f:bc:da:93:11:8d:18:1f:cb:fe:22:c8:f2:fb:a3:72:ab:33: 23:ce:1a:a6:89:2f:9a:bd:68:a1:72:d6:b0:32:28:74:87:d4: 46:83:6e:c6:ec:28:44:cc:7e:67:90:0f:41:29:41:a3:95:4d: e5:dd:02:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C39md8aDh0ey9Ni6lDkdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZmU3ZDAwZTk0Y2QyYTdjYmY3ZjllODJjZjA5OTI0MTc0 MThkZjYwHhcNMjUxMjA2MTkwMjQyWhcNMjUxMjA3MTkwMjQyWjAzMTEwLwYDVQQD EygzOGFkNjJjNWE2NGM0NjhkMTczNzMyNzVkYTg1YmYyMDU5OTllZGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GSpmdYXBQ5KXnp0W03ctl76GiNP u3hxTZo4uUEIOUsmynbEqNbgylPtdzN3Oh/yvjJ7IDTvU6lpK10i4Wf/av4Nwvsr OUjlfOBzQBKsVYkVBAG3oGv4JdU0FThtaV2UhGz1sOc3BaZjimUJ2l++Zzojo3sH KEImje1C2VQ5dFK/8cAcr9Ez6aHfuW1sbK2CML0qvla5FBBLj5yWM2eSAH0I5XDW 2ZCiLUus8kK7iwH3QZZ/QNC+o1YG8IsCVFB5MEo2JpVMqfuXKnFTJ0w1UBfVLSgn 2dkYjWP/aQzWHjgyFm3IzWNCnp2ygjG/PIU7wR9q11jHrsRslrnBmbC6lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDitYsWmTEaNFzcyddqFvyBZme3eMB8GA1UdIwQY MBaAFIL+fQDpTNKny/f56CzwmSQXQY32MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzct NjNkZjYwMzE2MWM5LzEvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzctNjNkZjYwMzE2MWM5 LzEvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQwzabXy cvHEp+0OxsXV5WZw5gTjRQHqUIcJeHL0jQXFR1E2YU2MjCT3JWvBU4c7QcuRHGQT U6eEZTGv84lc60fp0CHi+4cFJnX3DvbSOSLrydoqafAo0f1ccvfl6c0QVwI/vdKj JvghSiLZIZYlJbLNYb581tunAgAvS2dH0x0nE5M2jzjss7ZeJ3rgfYLvcmJSP+U+ JBNyFZ3+AAMHxnE+KN+H0mGZXOdzMpJ5SeYyyfGJw5YUV8VLYDUh48kcufbzsFY0 H7zakxGNGB/L/iLI8vujcqszI84apokvmr1ooXLWsDIodIfURoNuxuwoRMx+Z5AP QSlBo5VN5d0CAg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:52 2025 by rpki-client