This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft File: gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft (raw, json) Hash identifier: JEdV73dmN30QQDXrvsyhxgYVKaD0TWGDwOT2bJtLS0g= Subject key identifier: 9C:26:F0:7C:E4:08:E9:BD:A8:3C:94:6E:AB:CF:93:C2:A8:2F:57:CE Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34 Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34 Certificate serial: 019AF08851C86DB6914463AEFDE1E933E473 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft Manifest number: 0CC5 Signing time: Fri 05 Dec 2025 22:00:56 +0000 Manifest this update: Fri 05 Dec 2025 22:00:56 +0000 Manifest next update: Sat 06 Dec 2025 22:00:56 +0000 Files and hashes: 1: gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl (hash: NxzSnJW8k/C/PR55ShwniRt0aOLSZLcBNN+y/+cocOY=) 2: gi0_EyMqvU0B6RLloJeCvIjrKZc.roa (hash: SmxwMosUzjILazIuYN/g07frRTjtu/khfxltbXPY3+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:51:c8:6d:b6:91:44:63:ae:fd:e1:e9:33:e4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34 Validity Not Before: Dec 5 22:00:56 2025 GMT Not After : Dec 6 22:00:56 2025 GMT Subject: CN=9c26f07ce408e9bda83c946eabcf93c2a82f57ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6a:57:05:93:e6:96:31:60:26:97:5c:56:8f: dd:b7:bb:73:c4:c4:d0:c7:cb:3e:6d:78:25:6d:5b: 7d:a1:9d:4f:7a:6a:83:85:4f:01:d3:ef:67:36:ed: e7:b7:88:2d:84:56:70:c5:d6:d3:bd:d4:c6:d5:76: 07:b5:45:46:37:8c:da:fc:f0:cb:3f:30:99:ea:82: 3c:2e:20:f3:19:f1:cb:a2:cd:5a:1d:73:c6:6f:da: 43:9b:88:d8:1e:20:c8:5d:8c:d8:2d:d0:39:2e:59: 53:60:92:83:c7:53:49:dc:09:f2:59:d5:26:a6:75: 67:24:1c:8e:a0:40:e5:3e:06:62:79:eb:32:79:e7: 41:9e:53:21:69:7a:66:c1:b2:09:1f:c4:2a:54:dc: af:aa:a3:f0:dc:63:13:e3:d4:48:15:24:d0:36:18: 3f:03:5f:d0:0f:31:b2:2a:cc:e3:6e:b9:2f:f0:89: 73:3f:1a:fb:14:9b:16:57:c1:43:f8:48:2f:f9:c9: 0f:dc:d5:39:c3:c3:6c:d9:2f:21:5e:f2:fa:04:22: 81:f3:f2:17:67:9d:7a:c5:3f:17:7c:02:2a:44:ad: 45:83:75:2a:f6:51:a9:d2:fd:47:dc:c0:0d:8c:bc: f9:be:3a:fa:0f:4a:f2:59:d7:b6:5d:d2:b3:e5:f0: 49:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:26:F0:7C:E4:08:E9:BD:A8:3C:94:6E:AB:CF:93:C2:A8:2F:57:CE X509v3 Authority Key Identifier: keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:7c:7e:06:9d:7f:0c:22:24:65:07:f5:14:91:50:81:25:31: fc:77:3a:ef:30:17:c4:70:53:f5:f7:26:16:21:c8:90:8c:b7: b6:67:ed:62:65:fc:7b:3d:14:03:a3:05:06:8b:b4:52:54:de: 61:b9:b8:6d:d4:28:f2:f8:c8:a9:97:5d:df:fd:cc:37:15:c9: 89:f5:94:05:0c:91:30:11:c5:bf:1f:5e:de:af:65:f4:2e:3b: e6:e3:6f:56:8b:91:cb:08:38:71:28:e3:7f:73:f2:4d:d4:28: d7:7f:e3:93:22:f7:43:51:6a:49:fe:3d:4b:df:29:a2:9e:31: 0a:4b:fa:42:c0:fd:4b:86:14:74:65:0d:b4:25:75:53:0c:ba: 96:87:8a:48:be:bd:23:6e:e1:b8:fa:b5:0e:f1:99:fa:69:0b: e6:28:00:ee:a6:da:eb:59:e8:59:1d:b9:dc:cc:62:8d:85:5f: 7a:1d:31:22:ed:8f:a7:95:c6:87:d7:6b:ec:cb:9c:e7:ef:27: fa:36:97:98:59:d4:08:e1:76:84:bd:7f:e7:92:3c:23:3a:40: 21:ca:59:59:43:1b:8e:87:46:03:1b:8d:ca:ac:c5:3c:5c:be: 81:1d:44:2b:a5:8b:7a:5d:3b:a9:88:66:ee:54:c4:1c:5b:a2: af:84:5f:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiFHIbbaRRGOu/eHpM+RzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZDFjMGI0ZWYwOTBjNDRkNzhiN2NjYjBiZjcyZjA5ZDA4 MzFmMzQwHhcNMjUxMjA1MjIwMDU2WhcNMjUxMjA2MjIwMDU2WjAzMTEwLwYDVQQD Eyg5YzI2ZjA3Y2U0MDhlOWJkYTgzYzk0NmVhYmNmOTNjMmE4MmY1N2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWpXBZPmljFgJpdcVo/dt7tzxMTQ x8s+bXglbVt9oZ1PemqDhU8B0+9nNu3nt4gthFZwxdbTvdTG1XYHtUVGN4za/PDL PzCZ6oI8LiDzGfHLos1aHXPGb9pDm4jYHiDIXYzYLdA5LllTYJKDx1NJ3AnyWdUm pnVnJByOoEDlPgZieesyeedBnlMhaXpmwbIJH8QqVNyvqqPw3GMT49RIFSTQNhg/ A1/QDzGyKszjbrkv8IlzPxr7FJsWV8FD+Egv+ckP3NU5w8Ns2S8hXvL6BCKB8/IX Z516xT8XfAIqRK1Fg3Uq9lGp0v1H3MANjLz5vjr6D0ryWde2XdKz5fBJOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwm8HzkCOm9qDyUbqvPk8KoL1fOMB8GA1UdIwQY MBaAFIDRwLTvCQxE14t8ywv3LwnQgx80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9kZTY0ZjctMzlkOS00YmJkLWIwMjMt YmVkY2JjNWEwMTc0LzEvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9kZTY0ZjctMzlkOS00YmJkLWIwMjMtYmVkY2JjNWEwMTc0 LzEvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHx+Bp1/ DCIkZQf1FJFQgSUx/Hc67zAXxHBT9fcmFiHIkIy3tmftYmX8ez0UA6MFBou0UlTe Ybm4bdQo8vjIqZdd3/3MNxXJifWUBQyRMBHFvx9e3q9l9C475uNvVouRywg4cSjj f3PyTdQo13/jkyL3Q1FqSf49S98pop4xCkv6QsD9S4YUdGUNtCV1Uwy6loeKSL69 I27huPq1DvGZ+mkL5igA7qba61noWR253MxijYVfeh0xIu2Pp5XGh9dr7Muc5+8n +jaXmFnUCOF2hL1/55I8IzpAIcpZWUMbjodGAxuNyqzFPFy+gR1EK6WLel07qYhm 7lTEHFuir4Rf0A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:14:53 2025 by rpki-client