This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json) Hash identifier: uHmbxKUx39N8jmSPR2wZgyg/Yg3RnAJnXVZ8Vrjj+1w= Subject key identifier: 0B:A1:97:BD:BB:B6:72:22:A9:C7:DC:AB:C8:A6:D0:16:24:88:A6:C1 Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63 Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63 Certificate serial: 019AF4655BB9EA3315BD824EA7153C861C07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft Manifest number: 09ED Signing time: Sat 06 Dec 2025 16:01:14 +0000 Manifest this update: Sat 06 Dec 2025 16:01:14 +0000 Manifest next update: Sun 07 Dec 2025 16:01:14 +0000 Files and hashes: 1: 7NcD3v3bTwDr9ocN3-x63vupO1g.roa (hash: HvV0nfI75827YQCzKbYVEWTCzA0c8O1WIDzuDKlaH5w=) 2: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: dJ3swcIc7W5Z1a4Z2UwbLoaHnPq4aB3y+FyrZYpLKkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:5b:b9:ea:33:15:bd:82:4e:a7:15:3c:86:1c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63 Validity Not Before: Dec 6 16:01:14 2025 GMT Not After : Dec 7 16:01:14 2025 GMT Subject: CN=0ba197bdbbb67222a9c7dcabc8a6d0162488a6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:55:57:e0:99:6a:16:2e:3a:88:80:46:57: e1:f7:07:94:c5:34:0b:da:d0:44:5d:ee:62:24:30: c1:b5:b4:12:a4:22:9f:ad:cd:6e:57:ac:fa:ef:8d: 62:21:a0:9d:6c:1b:28:b3:a5:1b:33:b4:d5:71:72: 41:8d:63:8f:18:b2:99:3a:28:be:e1:c8:74:ff:66: f1:56:02:b9:44:d7:2c:9c:3c:b0:29:a9:17:14:5d: 02:a5:e1:78:e7:1d:e1:8b:ae:7e:ef:f0:df:84:e0: 3c:15:33:22:b4:e3:3e:ae:35:7b:29:ff:cc:59:2b: 9e:2c:e6:4a:7e:1f:25:a6:5f:94:d5:cc:23:b9:02: 5b:d4:98:46:23:6b:8b:46:c0:f2:6f:94:dd:96:b8: 7a:fc:38:67:ec:dc:f9:ea:40:d2:a2:5d:98:53:b7: f8:55:80:98:74:54:19:08:d0:85:47:d7:58:0f:08: 0b:8a:5b:80:fe:1d:0f:69:59:54:c3:1b:57:22:4e: df:96:83:b4:98:43:a5:9c:6c:e9:7e:50:8a:2a:fd: c2:28:e2:6b:83:3a:b6:11:89:9e:bc:c3:15:78:91: 12:17:d1:71:f4:1f:4b:82:16:0c:d5:c2:cd:5b:37: b9:e4:ca:f9:3c:75:2b:a4:06:d1:09:88:0f:7d:cf: 5d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A1:97:BD:BB:B6:72:22:A9:C7:DC:AB:C8:A6:D0:16:24:88:A6:C1 X509v3 Authority Key Identifier: keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:38:e0:ed:8e:12:71:7c:8e:80:4c:a7:a0:db:5b:58:a4:4c: eb:6b:72:38:55:26:9b:30:49:81:fa:e4:d1:e9:6b:a3:12:d7: 18:09:9f:ef:7b:4e:d5:e5:24:ea:f6:0d:7c:9e:f6:cf:56:da: 34:b8:1a:34:21:e8:55:e5:e2:fa:ad:b9:79:0a:ba:dc:11:9a: 95:cc:d7:10:24:54:4d:da:a7:a1:85:7f:85:66:53:93:d1:61: fc:63:5f:88:da:f4:9e:c9:b2:7f:ee:68:ef:1c:9e:be:04:bb: 65:9f:1a:85:a0:be:5f:8e:69:e6:e1:70:1c:7e:15:aa:5f:29: b2:64:08:06:71:40:cc:1e:d7:9b:31:70:c1:f2:37:bf:d6:84: 5c:36:03:58:e3:07:eb:de:19:59:05:a3:ec:5a:12:67:b9:34: 22:33:f5:57:a9:09:19:76:be:7d:da:6b:c3:9d:7f:c3:b0:a3: 0d:7d:2c:c1:c8:25:f4:14:ec:36:0a:d5:00:b5:a4:35:c1:03: 87:1a:52:b1:b7:a5:8f:9d:1a:3c:16:b6:61:76:85:73:ec:72: f4:6e:ba:00:21:c1:90:a8:9f:5f:e9:22:04:02:e3:62:e2:aa: 79:0c:d4:2d:2e:6b:99:15:f7:8f:33:f1:dd:ba:c7:af:bf:c1: b4:1b:ba:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZVu56jMVvYJOpxU8hhwHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ODM2MDRmMDgzZTU4YzNjZDE5ZDM5NDgwYmFhYWRmMzhh MTliNjMwHhcNMjUxMjA2MTYwMTE0WhcNMjUxMjA3MTYwMTE0WjAzMTEwLwYDVQQD EygwYmExOTdiZGJiYjY3MjIyYTljN2RjYWJjOGE2ZDAxNjI0ODhhNmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArotVV+CZahYuOoiARlfh9weUxTQL 2tBEXe5iJDDBtbQSpCKfrc1uV6z6741iIaCdbBsos6UbM7TVcXJBjWOPGLKZOii+ 4ch0/2bxVgK5RNcsnDywKakXFF0CpeF45x3hi65+7/DfhOA8FTMitOM+rjV7Kf/M WSueLOZKfh8lpl+U1cwjuQJb1JhGI2uLRsDyb5Tdlrh6/Dhn7Nz56kDSol2YU7f4 VYCYdFQZCNCFR9dYDwgLiluA/h0PaVlUwxtXIk7floO0mEOlnGzpflCKKv3CKOJr gzq2EYmevMMVeJESF9Fx9B9LghYM1cLNWze55Mr5PHUrpAbRCYgPfc9d7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuhl727tnIiqcfcq8im0BYkiKbBMB8GA1UdIwQY MBaAFBmDYE8IPljDzRnTlIC6qt84oZtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85YWM4NmEtODVlZC00YTFjLTg3M2Yt NzUyOTA1MzMwMzkyLzEvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS85YWM4NmEtODVlZC00YTFjLTg3M2YtNzUyOTA1MzMwMzky LzEvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajjg7Y4S cXyOgEynoNtbWKRM62tyOFUmmzBJgfrk0elroxLXGAmf73tO1eUk6vYNfJ72z1ba NLgaNCHoVeXi+q25eQq63BGalczXECRUTdqnoYV/hWZTk9Fh/GNfiNr0nsmyf+5o 7xyevgS7ZZ8ahaC+X45p5uFwHH4Vql8psmQIBnFAzB7XmzFwwfI3v9aEXDYDWOMH 694ZWQWj7FoSZ7k0IjP1V6kJGXa+fdprw51/w7CjDX0swcgl9BTsNgrVALWkNcED hxpSsbelj50aPBa2YXaFc+xy9G66ACHBkKifX+kiBALjYuKqeQzULS5rmRX3jzPx 3brHr7/BtBu6TA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:25 2025 by rpki-client