This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cfc59-4595-4bd3-8a22-09619fe64d73/1/gHxaewQd3kDvSjWe6yGZ1Foz0dM.mft File: gHxaewQd3kDvSjWe6yGZ1Foz0dM.mft (raw, json) Hash identifier: MygEyfVmHXUSw/gPvey9N/7ieZeqd7jGs0kOvJ1Mbx8= Subject key identifier: 2E:92:2A:A6:07:4C:50:74:80:0C:EA:B7:6A:0F:2D:DF:C4:CF:85:32 Authority key identifier: 80:7C:5A:7B:04:1D:DE:40:EF:4A:35:9E:EB:21:99:D4:5A:33:D1:D3 Certificate issuer: /CN=807c5a7b041dde40ef4a359eeb2199d45a33d1d3 Certificate serial: 019AF0880526726008FA6D05FF2546EE1390 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHxaewQd3kDvSjWe6yGZ1Foz0dM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cfc59-4595-4bd3-8a22-09619fe64d73/1/gHxaewQd3kDvSjWe6yGZ1Foz0dM.mft Manifest number: 45 Signing time: Fri 05 Dec 2025 22:00:37 +0000 Manifest this update: Fri 05 Dec 2025 22:00:37 +0000 Manifest next update: Sat 06 Dec 2025 22:00:37 +0000 Files and hashes: 1: gHxaewQd3kDvSjWe6yGZ1Foz0dM.crl (hash: KPrEV1oHH99+Wl2sB7cRFWuVTe0uaCe88KLKpYEsR9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cfc59-4595-4bd3-8a22-09619fe64d73/1/gHxaewQd3kDvSjWe6yGZ1Foz0dM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/6cfc59-4595-4bd3-8a22-09619fe64d73/1/gHxaewQd3kDvSjWe6yGZ1Foz0dM.mft rsync://rpki.ripe.net/repository/DEFAULT/gHxaewQd3kDvSjWe6yGZ1Foz0dM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:05:26:72:60:08:fa:6d:05:ff:25:46:ee:13:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=807c5a7b041dde40ef4a359eeb2199d45a33d1d3 Validity Not Before: Dec 5 22:00:37 2025 GMT Not After : Dec 6 22:00:37 2025 GMT Subject: CN=2e922aa6074c5074800ceab76a0f2ddfc4cf8532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e1:53:30:7f:a4:5a:74:a9:ab:af:d8:63:a9: 4a:5d:8e:95:84:45:fb:69:a4:12:73:03:01:50:37: d7:22:32:6c:f1:d1:5f:b6:27:e4:eb:58:06:10:7b: 04:ed:32:bc:75:e7:03:5b:64:10:ec:48:e8:f8:e9: e0:de:0a:aa:8e:c9:18:5a:5c:fd:06:9e:15:f6:3e: c7:6a:1e:cc:e1:7d:02:06:e2:28:6c:d9:48:e5:d2: 06:84:f1:2f:98:ed:f8:94:8a:e3:2f:cb:e2:14:2f: bb:40:12:7e:d3:dd:41:4a:ac:72:e1:44:49:98:0a: 73:86:90:97:e6:3a:79:2c:7e:3c:90:dd:d4:21:58: 7e:9f:59:8d:02:63:68:62:b7:9a:6a:f2:ec:fe:85: 4c:ad:fd:2f:b5:90:5d:33:f7:8e:dc:ea:66:2f:25: b6:7a:6e:5b:9e:3e:6c:f6:52:30:12:ac:20:a5:44: 09:b4:91:55:6e:a5:05:42:6e:41:3f:51:c3:d7:a9: 86:16:30:d0:7f:ef:e7:31:a8:b8:c2:68:24:5b:36: f2:44:05:d5:01:22:34:53:ec:99:60:fc:8e:e0:eb: 93:20:fb:36:35:6b:58:a8:83:5e:26:90:64:e4:eb: 58:50:75:d0:3c:db:28:20:eb:2d:bf:76:53:4b:fc: db:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:92:2A:A6:07:4C:50:74:80:0C:EA:B7:6A:0F:2D:DF:C4:CF:85:32 X509v3 Authority Key Identifier: keyid:80:7C:5A:7B:04:1D:DE:40:EF:4A:35:9E:EB:21:99:D4:5A:33:D1:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHxaewQd3kDvSjWe6yGZ1Foz0dM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cfc59-4595-4bd3-8a22-09619fe64d73/1/gHxaewQd3kDvSjWe6yGZ1Foz0dM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cfc59-4595-4bd3-8a22-09619fe64d73/1/gHxaewQd3kDvSjWe6yGZ1Foz0dM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:82:cb:3a:5a:2e:6f:e7:57:be:ff:d3:a5:4a:40:76:6a:b8: 6f:75:8d:a1:5d:72:f9:52:36:f2:ec:21:6b:6f:6e:14:8a:42: c3:5d:45:4a:b3:7f:9d:b9:db:a4:a3:ff:2d:2a:53:0b:98:8a: 5d:eb:12:f7:cd:97:76:6b:c6:3b:fb:c3:5b:1a:bd:ef:ab:04: 7b:49:3d:5a:69:e4:86:00:06:49:b3:b0:9e:cd:d5:e6:e2:4f: 5c:a3:f0:af:5d:f7:ea:8f:c2:66:a0:73:27:c7:30:fc:34:fb: 38:2b:4a:b4:1c:ec:4c:47:c0:58:aa:7d:6c:c4:47:e1:5d:de: 82:3b:ac:bc:3a:19:a9:ae:73:19:e8:23:8a:5c:16:35:81:56: 56:93:24:41:aa:f0:89:4d:01:e7:b9:d2:2e:5a:05:ad:8f:d9: b3:67:87:87:3f:4c:38:67:e0:91:00:cd:fc:84:8e:e8:3a:9a: 5e:bd:23:53:8b:3e:c9:0c:bd:00:23:dc:b9:a6:af:fd:3d:03: c3:36:49:e8:6c:50:f9:4e:84:5d:3c:dc:e8:3f:f2:47:7d:14: 34:91:a5:cd:9d:f1:d2:b7:20:99:56:8d:e9:e2:9c:45:f0:71: 24:e2:cc:d3:3c:2e:64:99:f5:21:26:75:a3:cf:7e:b1:5d:87: 8c:3a:86:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiAUmcmAI+m0F/yVG7hOQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwN2M1YTdiMDQxZGRlNDBlZjRhMzU5ZWViMjE5OWQ0NWEz M2QxZDMwHhcNMjUxMjA1MjIwMDM3WhcNMjUxMjA2MjIwMDM3WjAzMTEwLwYDVQQD EygyZTkyMmFhNjA3NGM1MDc0ODAwY2VhYjc2YTBmMmRkZmM0Y2Y4NTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OFTMH+kWnSpq6/YY6lKXY6VhEX7 aaQScwMBUDfXIjJs8dFftifk61gGEHsE7TK8decDW2QQ7Ejo+Ong3gqqjskYWlz9 Bp4V9j7Hah7M4X0CBuIobNlI5dIGhPEvmO34lIrjL8viFC+7QBJ+091BSqxy4URJ mApzhpCX5jp5LH48kN3UIVh+n1mNAmNoYreaavLs/oVMrf0vtZBdM/eO3OpmLyW2 em5bnj5s9lIwEqwgpUQJtJFVbqUFQm5BP1HD16mGFjDQf+/nMai4wmgkWzbyRAXV ASI0U+yZYPyO4OuTIPs2NWtYqINeJpBk5OtYUHXQPNsoIOstv3ZTS/zb4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6SKqYHTFB0gAzqt2oPLd/Ez4UyMB8GA1UdIwQY MBaAFIB8WnsEHd5A70o1nushmdRaM9HTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0h4YWV3UWQza0R2U2pXZTZ5R1oxRm96MGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82Y2ZjNTktNDU5NS00YmQzLThhMjIt MDk2MTlmZTY0ZDczLzEvZ0h4YWV3UWQza0R2U2pXZTZ5R1oxRm96MGRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy82Y2ZjNTktNDU5NS00YmQzLThhMjItMDk2MTlmZTY0ZDcz LzEvZ0h4YWV3UWQza0R2U2pXZTZ5R1oxRm96MGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYLLOlou b+dXvv/TpUpAdmq4b3WNoV1y+VI28uwha29uFIpCw11FSrN/nbnbpKP/LSpTC5iK XesS982XdmvGO/vDWxq976sEe0k9WmnkhgAGSbOwns3V5uJPXKPwr1336o/CZqBz J8cw/DT7OCtKtBzsTEfAWKp9bMRH4V3egjusvDoZqa5zGegjilwWNYFWVpMkQarw iU0B57nSLloFrY/Zs2eHhz9MOGfgkQDN/ISO6DqaXr0jU4s+yQy9ACPcuaav/T0D wzZJ6GxQ+U6EXTzc6D/yR30UNJGlzZ3x0rcgmVaN6eKcRfBxJOLM0zwuZJn1ISZ1 o89+sV2HjDqGqA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:41 2025 by rpki-client