This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft File: GYe7aFnJOMi2PlqqVtkHvQRE484.mft (raw, json) Hash identifier: WI/HlrM3k33qy9R+8VZjKmzWWTyhf2gjNaewIPUnu2c= Subject key identifier: F8:C8:CD:ED:F8:BB:AC:BF:8D:BD:FB:58:30:7A:A1:47:98:5B:3C:43 Authority key identifier: 19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE Certificate issuer: /CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce Certificate serial: 019AF2767D6FDF756B39A1E0C82437545B95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft Manifest number: 16A0 Signing time: Sat 06 Dec 2025 07:00:42 +0000 Manifest this update: Sat 06 Dec 2025 07:00:42 +0000 Manifest next update: Sun 07 Dec 2025 07:00:42 +0000 Files and hashes: 1: GYe7aFnJOMi2PlqqVtkHvQRE484.crl (hash: rGyJGJ5iFbM9GYhtQEq56TzjRO2Edvcq19aDfAW5ybM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7d:6f:df:75:6b:39:a1:e0:c8:24:37:54:5b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce Validity Not Before: Dec 6 07:00:42 2025 GMT Not After : Dec 7 07:00:42 2025 GMT Subject: CN=f8c8cdedf8bbacbf8dbdfb58307aa147985b3c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:53:1c:18:2b:26:fe:9a:9d:e1:e9:4a:41:41: 17:03:c6:13:e1:15:4d:5d:1d:80:4b:9a:85:86:ba: b4:00:2e:1d:14:77:12:87:64:c5:9b:91:47:23:8e: ac:10:03:04:c7:86:3c:08:60:8b:c9:61:38:a4:24: c2:d3:8a:df:67:f6:b1:53:47:b9:46:13:8f:36:51: 0d:e5:25:c1:15:64:c3:16:b5:bf:17:77:0d:32:49: ab:18:48:fe:3d:b7:dd:f9:2e:1f:e6:e0:54:6e:12: 42:d6:59:63:58:89:50:ef:ab:9d:df:46:8d:f4:ed: ab:56:90:a5:cf:32:6e:34:07:52:d1:c3:95:6c:18: 17:43:9c:d8:fc:f6:12:c1:79:f2:64:03:3d:bd:20: c0:78:8a:95:c2:31:f5:45:e3:1d:b6:10:8d:24:76: a4:52:7d:82:3b:66:56:41:d3:29:7b:73:79:dc:9b: c6:a5:e7:bf:9c:c6:38:31:df:a9:d3:97:88:c9:f9: 8e:91:1a:6f:d6:20:b6:51:3a:3f:4c:ab:74:3e:ba: f4:a1:e5:68:95:ba:bc:d6:96:e4:cc:df:08:18:21: 40:5c:1b:fc:05:82:c5:9a:0a:48:59:90:a4:a2:19: 22:28:11:53:83:b9:03:4b:7b:bf:6f:e6:71:c3:ef: e2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C8:CD:ED:F8:BB:AC:BF:8D:BD:FB:58:30:7A:A1:47:98:5B:3C:43 X509v3 Authority Key Identifier: keyid:19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:6c:0c:60:90:75:35:49:31:fa:30:12:68:cd:1d:bf:7f:c1: 63:3d:f2:0b:50:8f:fb:b5:b4:ca:33:bb:22:af:f6:cb:eb:ec: b1:95:80:4e:b4:36:86:6c:dc:cf:a8:6a:38:1c:c4:43:ca:5e: 48:d3:1b:82:03:6e:13:ef:b2:b5:61:81:3f:07:4f:d8:7a:53: 2d:33:fa:34:b9:66:d4:f3:9b:e3:7a:0b:1b:b9:31:4b:07:dc: 89:4c:0d:3a:9c:9d:f6:9f:22:48:85:6b:85:34:5f:8b:76:44: f8:70:22:27:47:79:51:a0:9a:15:97:99:a9:b6:d7:d2:48:df: 28:80:e7:18:a5:b2:a7:9e:6c:6e:c3:65:d6:3c:06:d8:6a:ff: a3:e5:fe:25:b1:2f:a4:15:e4:89:77:f9:9d:a7:7e:88:a6:e2: 1b:c0:a5:57:0d:13:d6:fe:0f:10:f5:6b:02:85:5f:86:e1:b3: 71:d4:5b:18:a0:5f:eb:e1:37:b9:45:e8:56:67:76:aa:49:25: ce:e2:9a:4a:b8:c6:22:69:ba:46:38:0c:c0:e3:e4:fe:87:cd: bc:a7:a2:5e:95:f3:b9:66:39:43:67:a5:8d:f8:7a:94:68:51: 59:ff:1a:32:49:4e:ae:6f:b6:6b:2f:69:62:cf:ea:da:1d:54: 6f:ff:93:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydn1v33VrOaHgyCQ3VFuVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ODdiYjY4NTljOTM4YzhiNjNlNWFhYTU2ZDkwN2JkMDQ0 NGUzY2UwHhcNMjUxMjA2MDcwMDQyWhcNMjUxMjA3MDcwMDQyWjAzMTEwLwYDVQQD EyhmOGM4Y2RlZGY4YmJhY2JmOGRiZGZiNTgzMDdhYTE0Nzk4NWIzYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VMcGCsm/pqd4elKQUEXA8YT4RVN XR2AS5qFhrq0AC4dFHcSh2TFm5FHI46sEAMEx4Y8CGCLyWE4pCTC04rfZ/axU0e5 RhOPNlEN5SXBFWTDFrW/F3cNMkmrGEj+Pbfd+S4f5uBUbhJC1lljWIlQ76ud30aN 9O2rVpClzzJuNAdS0cOVbBgXQ5zY/PYSwXnyZAM9vSDAeIqVwjH1ReMdthCNJHak Un2CO2ZWQdMpe3N53JvGpee/nMY4Md+p05eIyfmOkRpv1iC2UTo/TKt0Prr0oeVo lbq81pbkzN8IGCFAXBv8BYLFmgpIWZCkohkiKBFTg7kDS3u/b+Zxw+/iTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjIze34u6y/jb37WDB6oUeYWzxDMB8GA1UdIwQY MBaAFBmHu2hZyTjItj5aqlbZB70EROPOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1llN2FGbkpPTWkyUGxxcVZ0a0h2UVJFNDg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lZjIyZGItZTNiMC00MzlmLWEwYzIt YmY0ZDQ1N2U5NTE4LzEvR1llN2FGbkpPTWkyUGxxcVZ0a0h2UVJFNDg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9lZjIyZGItZTNiMC00MzlmLWEwYzItYmY0ZDQ1N2U5NTE4 LzEvR1llN2FGbkpPTWkyUGxxcVZ0a0h2UVJFNDg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGwMYJB1 NUkx+jASaM0dv3/BYz3yC1CP+7W0yjO7Iq/2y+vssZWATrQ2hmzcz6hqOBzEQ8pe SNMbggNuE++ytWGBPwdP2HpTLTP6NLlm1POb43oLG7kxSwfciUwNOpyd9p8iSIVr hTRfi3ZE+HAiJ0d5UaCaFZeZqbbX0kjfKIDnGKWyp55sbsNl1jwG2Gr/o+X+JbEv pBXkiXf5nad+iKbiG8ClVw0T1v4PEPVrAoVfhuGzcdRbGKBf6+E3uUXoVmd2qkkl zuKaSrjGImm6RjgMwOPk/ofNvKeiXpXzuWY5Q2eljfh6lGhRWf8aMklOrm+2ay9p Ys/q2h1Ub/+T5A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:12 2025 by rpki-client