This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft File: gnfY854_j7Zjj3CDq58WwEfQ02Q.mft (raw, json) Hash identifier: LD63XZ9lp98SyZ940PwcbcN3ZnbdtolfICYNhssLNK4= Subject key identifier: C5:C3:35:B4:F8:CC:C2:AA:AC:8D:9E:45:07:15:3B:24:3E:CD:AC:B2 Authority key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64 Certificate issuer: /CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364 Certificate serial: 019AF465506E55DEB35962879BDBAAAFECDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft Manifest number: 1242 Signing time: Sat 06 Dec 2025 16:01:11 +0000 Manifest this update: Sat 06 Dec 2025 16:01:11 +0000 Manifest next update: Sun 07 Dec 2025 16:01:11 +0000 Files and hashes: 1: 9flLcmlhEqT9lrkmfyvcqwcZaPE.roa (hash: s8DMn0SNfjEZl7A0rydWGLHujZ1siiQiNSjrpdgAWxo=) 2: gnfY854_j7Zjj3CDq58WwEfQ02Q.crl (hash: 9QcoeuToZ+6k+2SynzxvKf4nPTxUpncSjsj6kXsMf30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:50:6e:55:de:b3:59:62:87:9b:db:aa:af:ec:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364 Validity Not Before: Dec 6 16:01:11 2025 GMT Not After : Dec 7 16:01:11 2025 GMT Subject: CN=c5c335b4f8ccc2aaac8d9e4507153b243ecdacb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9f:1c:61:b6:a8:88:d4:e0:2d:72:a6:2a:7a: 12:47:67:ca:16:26:28:37:c0:a1:84:ab:22:f0:a0: 61:13:d3:27:a6:d3:5c:ad:78:c0:15:84:83:dc:1b: 87:b2:b2:ad:0b:7e:2e:1b:53:1b:a2:bd:8f:48:17: fd:00:2f:9d:95:46:fc:a7:b5:70:1e:32:65:0f:9c: 62:d6:07:b5:3d:3f:67:90:a3:60:67:99:fd:68:05: d9:58:70:c5:ca:47:6d:17:ac:4b:15:08:ed:c6:50: 60:7c:91:81:72:39:bd:95:32:15:7b:7a:f7:d4:2e: 3d:d9:bd:d6:85:6a:53:cb:8c:71:61:16:32:12:e7: 65:8c:aa:b0:3c:d3:eb:70:9d:bf:04:09:4b:36:1b: c9:df:f5:3a:85:fa:be:d7:eb:2b:e6:b2:45:0e:7c: 3f:3d:dc:96:8e:59:f9:0f:74:7b:26:ff:04:19:d7: b2:28:9b:17:0b:c9:49:94:76:09:ec:cf:fa:93:9f: 4b:7f:f1:f0:a0:85:c6:5b:94:0a:7f:fc:7d:da:bb: 8e:9f:d9:15:66:65:a2:60:14:66:ac:43:07:a2:fb: df:14:ee:f3:64:fb:86:8c:24:e1:77:e3:c2:c2:88: 44:a6:27:2c:64:57:51:ff:f2:fc:7c:e9:44:a1:9a: e8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C3:35:B4:F8:CC:C2:AA:AC:8D:9E:45:07:15:3B:24:3E:CD:AC:B2 X509v3 Authority Key Identifier: keyid:82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:58:c4:50:d6:2b:a1:59:04:a2:71:8c:0f:43:9b:37:4a:32: 2e:da:c1:de:e9:4b:8a:41:29:c0:b1:c6:73:5c:83:d3:5d:c9: 5f:03:4e:36:d6:57:cc:97:13:e7:0b:65:e8:c3:84:1b:5a:da: 05:c4:92:7e:53:9c:58:b4:d0:aa:11:ba:1b:87:06:b5:dc:0b: f3:9f:5b:10:bb:96:38:47:70:6a:16:20:c1:3a:f8:40:b8:41: 34:23:ed:21:c7:fb:0d:bf:2e:ac:6d:4e:8a:f6:9d:fc:ad:d5: 7f:1e:da:b7:29:4d:9c:11:d7:88:6b:4f:7a:03:4b:3e:18:51: 1b:d4:b8:7c:0a:0a:5e:14:2d:69:92:6c:3a:af:23:b3:30:20: f1:ba:23:eb:59:0b:42:45:d9:e8:a5:cf:c0:1f:8e:52:2b:dd: db:29:40:e0:35:02:8e:1e:20:9e:a6:0a:1f:c5:0a:bb:7a:f7: 98:7a:8e:4b:47:0d:01:ae:4f:b3:22:53:28:e5:ca:ad:c0:17: 1f:c8:2b:50:98:03:fb:2e:ef:31:07:46:77:1b:c4:8a:b5:83: a7:b9:23:16:76:de:0f:74:8d:02:da:ec:fb:8a:5d:20:36:3a: 49:50:e3:59:55:f5:5a:f3:d8:9c:1d:3c:b1:90:1a:c1:31:2b: 1e:1c:af:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZVBuVd6zWWKHm9uqr+zbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzdkOGYzOWUzZjhmYjY2MzhmNzA4M2FiOWYxNmMwNDdk MGQzNjQwHhcNMjUxMjA2MTYwMTExWhcNMjUxMjA3MTYwMTExWjAzMTEwLwYDVQQD EyhjNWMzMzViNGY4Y2NjMmFhYWM4ZDllNDUwNzE1M2IyNDNlY2RhY2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ8cYbaoiNTgLXKmKnoSR2fKFiYo N8ChhKsi8KBhE9MnptNcrXjAFYSD3BuHsrKtC34uG1Mbor2PSBf9AC+dlUb8p7Vw HjJlD5xi1ge1PT9nkKNgZ5n9aAXZWHDFykdtF6xLFQjtxlBgfJGBcjm9lTIVe3r3 1C492b3WhWpTy4xxYRYyEudljKqwPNPrcJ2/BAlLNhvJ3/U6hfq+1+sr5rJFDnw/ PdyWjln5D3R7Jv8EGdeyKJsXC8lJlHYJ7M/6k59Lf/HwoIXGW5QKf/x92ruOn9kV ZmWiYBRmrEMHovvfFO7zZPuGjCThd+PCwohEpicsZFdR//L8fOlEoZrozwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXDNbT4zMKqrI2eRQcVOyQ+zayyMB8GA1UdIwQY MBaAFIJ32POeP4+2Y49wg6ufFsBH0NNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNDkxYmYtODRhZC00OGEzLWE2MTkt NTc3ZGExMmUzNjQ4LzEvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8xNDkxYmYtODRhZC00OGEzLWE2MTktNTc3ZGExMmUzNjQ4 LzEvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1jEUNYr oVkEonGMD0ObN0oyLtrB3ulLikEpwLHGc1yD013JXwNONtZXzJcT5wtl6MOEG1ra BcSSflOcWLTQqhG6G4cGtdwL859bELuWOEdwahYgwTr4QLhBNCPtIcf7Db8urG1O ivad/K3Vfx7atylNnBHXiGtPegNLPhhRG9S4fAoKXhQtaZJsOq8jszAg8boj61kL QkXZ6KXPwB+OUivd2ylA4DUCjh4gnqYKH8UKu3r3mHqOS0cNAa5PsyJTKOXKrcAX H8grUJgD+y7vMQdGdxvEirWDp7kjFnbeD3SNAtrs+4pdIDY6SVDjWVX1WvPYnB08 sZAawTErHhyvUA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:14 2025 by rpki-client