This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft File: gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft (raw, json) Hash identifier: NXtO5AHZ1xrnr70OAFfX9e/gFSuPfsB6G88f3IhdM7w= Subject key identifier: FC:CA:9D:ED:08:55:6E:B6:A2:49:FC:88:2B:C2:BC:2D:01:03:02:7F Authority key identifier: 80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC Certificate issuer: /CN=80792bdcb621cbf21c0456333b843ca32c131afc Certificate serial: 019AF1D240FC2812C7EC390D7A817824EA6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft Manifest number: 11D7 Signing time: Sat 06 Dec 2025 04:01:19 +0000 Manifest this update: Sat 06 Dec 2025 04:01:19 +0000 Manifest next update: Sun 07 Dec 2025 04:01:19 +0000 Files and hashes: 1: gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl (hash: srla/9IkrR4SnzDa0k6otZKxEuDlXoFNEfYBJ87aVHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:40:fc:28:12:c7:ec:39:0d:7a:81:78:24:ea:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80792bdcb621cbf21c0456333b843ca32c131afc Validity Not Before: Dec 6 04:01:19 2025 GMT Not After : Dec 7 04:01:19 2025 GMT Subject: CN=fcca9ded08556eb6a249fc882bc2bc2d0103027f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a3:f7:4b:af:bc:64:5d:99:15:d6:c6:b7:66: 79:e0:95:f4:cb:5e:07:78:9d:10:a7:9b:d6:b1:7a: c0:b9:a4:01:dd:3f:3e:f1:28:fb:b7:02:d3:f1:b9: bd:19:45:3d:35:e9:b2:60:bd:d6:74:d2:a8:80:8c: da:47:f5:f3:71:87:4d:d1:6c:62:12:ae:b6:ab:86: df:ef:ae:2f:11:7c:8c:1c:74:a2:36:20:4c:6f:5a: 9d:c4:f2:2c:ca:2b:0b:1b:06:e6:80:d3:48:3a:df: 12:bb:31:53:bc:c0:1c:c5:ae:aa:0c:d9:a9:79:98: 6f:88:35:8c:43:a7:e1:84:d0:21:03:46:b6:9d:0b: 36:13:6a:f7:29:06:8a:0d:95:fb:13:0a:a2:9d:e4: 5e:3c:17:ea:f4:12:29:4a:87:8a:4a:8c:2f:34:ba: dd:9c:48:96:bc:1b:aa:16:dd:8d:31:cb:6d:62:df: 55:49:67:6f:ef:b8:82:c9:5c:3e:b0:c9:07:c3:ec: 42:c3:b7:d7:93:6b:81:6a:47:36:27:3f:58:d3:a4: 8c:6b:e8:c1:bc:66:01:8e:1f:96:cb:2d:2c:54:ee: 32:96:e2:be:26:a0:06:a4:65:e1:27:ff:95:ff:2d: cc:92:55:e5:58:7c:7f:b1:23:c8:c6:2f:46:43:78: 9d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CA:9D:ED:08:55:6E:B6:A2:49:FC:88:2B:C2:BC:2D:01:03:02:7F X509v3 Authority Key Identifier: keyid:80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f4:25:d6:6f:2e:2d:a5:b1:d7:9f:85:2b:c0:1e:0a:d0:f9: 79:7b:48:e6:6f:9c:74:d3:a2:6c:44:8d:51:0e:57:da:15:92: 28:a2:13:f7:37:de:61:9a:03:97:2b:57:f1:42:d3:0b:38:04: 1f:eb:b4:50:5c:57:16:30:4e:4b:06:27:87:79:e8:e8:f8:cf: 9f:fb:0c:72:e0:bf:57:d7:d6:1e:41:74:73:27:48:60:85:ef: 5c:fd:3f:e3:f8:8c:a4:0f:12:32:82:21:ee:2a:ff:4f:ec:90: 03:20:eb:dc:2d:a8:fc:67:7a:6d:1e:04:c8:eb:d5:aa:b3:7f: 9c:fb:ea:5f:60:d2:91:60:b1:5d:ae:13:ed:65:04:6c:26:30: 93:ff:d7:a5:9d:91:dd:be:c8:4f:a5:4d:72:bd:82:09:4a:28: 8e:24:34:c3:56:2b:62:f7:ae:f3:82:30:ba:60:a3:91:b6:25: 76:c7:0d:b9:11:d6:8c:89:96:86:08:f1:a5:06:06:de:a7:9b: 93:47:56:83:c2:70:13:5a:cc:45:4e:69:e7:f6:5c:0a:1f:43: 2d:49:42:4b:f5:d9:56:9b:f2:b1:6a:61:db:64:b6:94:b6:ef: a3:18:c9:49:79:4f:08:22:83:94:85:7c:81:09:a6:9c:13:0e: e4:6a:41:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kD8KBLH7DkNeoF4JOpuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNzkyYmRjYjYyMWNiZjIxYzA0NTYzMzNiODQzY2EzMmMx MzFhZmMwHhcNMjUxMjA2MDQwMTE5WhcNMjUxMjA3MDQwMTE5WjAzMTEwLwYDVQQD EyhmY2NhOWRlZDA4NTU2ZWI2YTI0OWZjODgyYmMyYmMyZDAxMDMwMjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKP3S6+8ZF2ZFdbGt2Z54JX0y14H eJ0Qp5vWsXrAuaQB3T8+8Sj7twLT8bm9GUU9NemyYL3WdNKogIzaR/XzcYdN0Wxi Eq62q4bf764vEXyMHHSiNiBMb1qdxPIsyisLGwbmgNNIOt8SuzFTvMAcxa6qDNmp eZhviDWMQ6fhhNAhA0a2nQs2E2r3KQaKDZX7EwqineRePBfq9BIpSoeKSowvNLrd nEiWvBuqFt2NMcttYt9VSWdv77iCyVw+sMkHw+xCw7fXk2uBakc2Jz9Y06SMa+jB vGYBjh+Wyy0sVO4yluK+JqAGpGXhJ/+V/y3MklXlWHx/sSPIxi9GQ3idCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzKne0IVW62okn8iCvCvC0BAwJ/MB8GA1UdIwQY MBaAFIB5K9y2IcvyHARWMzuEPKMsExr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0hrcjNMWWh5X0ljQkZZek80UThveXdUR3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9jNDhlMDItNDk4Mi00NGE1LWExMjEt N2RhOWU4OGQ2NWI5LzEvZ0hrcjNMWWh5X0ljQkZZek80UThveXdUR3Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9jNDhlMDItNDk4Mi00NGE1LWExMjEtN2RhOWU4OGQ2NWI5 LzEvZ0hrcjNMWWh5X0ljQkZZek80UThveXdUR3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPQl1m8u LaWx15+FK8AeCtD5eXtI5m+cdNOibESNUQ5X2hWSKKIT9zfeYZoDlytX8ULTCzgE H+u0UFxXFjBOSwYnh3no6PjPn/sMcuC/V9fWHkF0cydIYIXvXP0/4/iMpA8SMoIh 7ir/T+yQAyDr3C2o/Gd6bR4EyOvVqrN/nPvqX2DSkWCxXa4T7WUEbCYwk//XpZ2R 3b7IT6VNcr2CCUoojiQ0w1YrYveu84IwumCjkbYldscNuRHWjImWhgjxpQYG3qeb k0dWg8JwE1rMRU5p5/ZcCh9DLUlCS/XZVpvysWph22S2lLbvoxjJSXlPCCKDlIV8 gQmmnBMO5GpBIg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:30:48 2025 by rpki-client