This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft File: gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft (raw, json) Hash identifier: auyVLKbMmul0aLPQU3I6hPkKoZU+s9lK7rnfxYmdy7E= Subject key identifier: 77:50:A7:C7:9A:B8:98:33:E3:2F:59:06:8C:B5:6B:0B:1A:FC:C2:3D Authority key identifier: 80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC Certificate issuer: /CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc Certificate serial: 019AF1D21D2E5747B60BB4C999511B8F857E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft Manifest number: 54 Signing time: Sat 06 Dec 2025 04:01:10 +0000 Manifest this update: Sat 06 Dec 2025 04:01:10 +0000 Manifest next update: Sun 07 Dec 2025 04:01:10 +0000 Files and hashes: 1: ZPxgsnjv7jwo30luYis5CI0t_T4.roa (hash: EMPPfN7XNvjOmVJeUGZArk1l9zfLaFwM7b+rjzdo6CA=) 2: gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl (hash: 4TqJs3Eiljh2BZPVsKrLmyVhaDrjr8DeTqVnE7dU6Vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:1d:2e:57:47:b6:0b:b4:c9:99:51:1b:8f:85:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc Validity Not Before: Dec 6 04:01:10 2025 GMT Not After : Dec 7 04:01:10 2025 GMT Subject: CN=7750a7c79ab89833e32f59068cb56b0b1afcc23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:5a:4f:66:d7:33:47:39:81:25:39:6e:89: 09:45:63:a2:de:03:f8:dd:3f:90:7d:82:05:82:dd: f4:11:ba:ee:c0:d4:ae:ce:b8:af:2b:95:09:e8:d5: 72:e5:28:c7:d7:db:c6:5b:d3:6f:96:e8:8e:30:6f: 31:69:bc:38:2f:96:92:7e:7e:de:bc:ba:ed:79:e3: eb:7d:df:36:f0:e4:bf:97:11:6c:76:54:2e:64:b1: e9:a0:5f:f5:6e:bc:72:19:2d:45:ba:49:ea:c6:c9: c3:33:90:34:31:75:27:68:76:33:11:e8:c3:59:52: a5:27:0f:4e:68:75:6e:ae:c6:60:59:ac:e1:aa:3e: be:5d:63:97:d6:a4:57:11:04:f5:50:c9:9b:ac:d3: bd:e7:f5:56:3a:a1:73:02:46:31:f9:2c:06:af:60: 27:c8:a1:6c:a8:b9:aa:e2:12:c1:9b:db:74:82:03: 40:21:9c:ab:d6:9a:b5:3e:65:c4:f6:a8:71:dd:8a: 71:f4:57:8c:ec:d2:3c:5c:4d:60:01:37:13:f7:bc: 69:1a:1a:05:ec:f8:6f:83:bc:27:08:87:cf:c6:1f: e8:a6:6c:cd:cb:bf:dc:c8:56:83:91:4c:85:7b:13: 96:3c:e6:a4:32:45:6c:c6:44:d8:8f:ea:9a:e3:38: bf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:50:A7:C7:9A:B8:98:33:E3:2F:59:06:8C:B5:6B:0B:1A:FC:C2:3D X509v3 Authority Key Identifier: keyid:80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ce:31:63:ea:68:8c:26:54:ad:34:ee:42:66:b5:72:c1:89: a3:cd:d9:01:85:fc:f3:78:b9:13:3f:d5:83:40:db:9a:0a:f2: 32:04:4e:a2:01:72:1e:19:e8:6b:ea:28:a5:28:28:7d:88:ad: 9d:d6:25:e1:f8:d1:83:3b:0e:e9:1d:32:48:29:6b:43:d3:d6: 58:95:68:bd:e0:3e:2f:5f:4c:6e:99:2a:99:12:46:c3:61:c9: fa:d7:ae:ee:1b:ab:4b:c8:54:4c:23:45:5e:76:6f:08:e5:b8: 10:8c:7b:f1:c9:39:47:3e:ca:44:dc:a7:1d:f4:67:e8:18:ae: 81:ff:7f:9b:97:97:89:1c:dd:18:54:a1:cc:90:bd:20:6d:05: ee:75:1f:4d:0f:ae:5d:d7:93:ed:28:41:3d:13:49:e0:c8:f4: 67:ef:5d:45:90:c6:06:49:38:51:ba:30:d9:21:9c:39:a6:6b: 53:86:00:de:4b:5e:62:b9:25:41:98:db:c7:3f:26:98:80:73: 84:51:de:f5:03:3d:13:d1:28:ea:09:63:17:c3:a1:15:59:34: 62:f4:87:be:6e:c9:47:ad:56:9d:c2:19:c5:cf:bc:0e:22:87: 74:0e:4c:5e:8c:6a:fe:ba:13:d4:ff:3c:52:bc:ce:5d:3a:95: 30:d4:2c:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0h0uV0e2C7TJmVEbj4V+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZjM1OGIyY2UwMmJhOGZmMGJhMTRlZWM1ZjMzN2E4ZGEx MWMwZGMwHhcNMjUxMjA2MDQwMTEwWhcNMjUxMjA3MDQwMTEwWjAzMTEwLwYDVQQD Eyg3NzUwYTdjNzlhYjg5ODMzZTMyZjU5MDY4Y2I1NmIwYjFhZmNjMjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S9aT2bXM0c5gSU5bokJRWOi3gP4 3T+QfYIFgt30EbruwNSuzrivK5UJ6NVy5SjH19vGW9NvluiOMG8xabw4L5aSfn7e vLrteePrfd828OS/lxFsdlQuZLHpoF/1brxyGS1FuknqxsnDM5A0MXUnaHYzEejD WVKlJw9OaHVursZgWazhqj6+XWOX1qRXEQT1UMmbrNO95/VWOqFzAkYx+SwGr2An yKFsqLmq4hLBm9t0ggNAIZyr1pq1PmXE9qhx3Ypx9FeM7NI8XE1gATcT97xpGhoF 7Phvg7wnCIfPxh/opmzNy7/cyFaDkUyFexOWPOakMkVsxkTYj+qa4zi/5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdQp8eauJgz4y9ZBoy1awsa/MI9MB8GA1UdIwQY MBaAFIDzWLLOArqP8LoU7sXzN6jaEcDcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BOWXNzNEN1b193dWhUdXhmTTNxTm9Sd053LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kODc5M2QtNDdkOC00ZDc4LTlhZGUt MzUxYmZkODNmY2MxLzEvZ1BOWXNzNEN1b193dWhUdXhmTTNxTm9Sd053Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kODc5M2QtNDdkOC00ZDc4LTlhZGUtMzUxYmZkODNmY2Mx LzEvZ1BOWXNzNEN1b193dWhUdXhmTTNxTm9Sd053LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG84xY+po jCZUrTTuQma1csGJo83ZAYX883i5Ez/Vg0DbmgryMgROogFyHhnoa+oopSgofYit ndYl4fjRgzsO6R0ySClrQ9PWWJVoveA+L19MbpkqmRJGw2HJ+teu7hurS8hUTCNF XnZvCOW4EIx78ck5Rz7KRNynHfRn6Biugf9/m5eXiRzdGFShzJC9IG0F7nUfTQ+u XdeT7ShBPRNJ4Mj0Z+9dRZDGBkk4Ubow2SGcOaZrU4YA3kteYrklQZjbxz8mmIBz hFHe9QM9E9Eo6gljF8OhFVk0YvSHvm7JR61WncIZxc+8DiKHdA5MXoxq/roT1P88 UrzOXTqVMNQsQA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:53 2025 by rpki-client