This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json) Hash identifier: n+r9xHsrUtqO+wfCABSxQRKVTi/uYvlO9dJWtcKSUI8= Subject key identifier: 98:B8:69:3B:00:6C:85:09:3B:77:10:C3:E3:6E:B1:1C:EE:5B:FB:43 Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f Certificate serial: 019AF1D259AF0230C5C3BCE0AC53A1B15477 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft Manifest number: 06B2 Signing time: Sat 06 Dec 2025 04:01:25 +0000 Manifest this update: Sat 06 Dec 2025 04:01:25 +0000 Manifest next update: Sun 07 Dec 2025 04:01:25 +0000 Files and hashes: 1: 49O5pgx96ZytOrM35WIfPYDCGFk.roa (hash: tpMUocM9+z+XdoxQXtS3c6GKQdwXFsRGvoi0LW0ME3I=) 2: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: 9Y0CTRMLKsQl1tuWR/gOZnOmPfkp1tA/4JS09QyEG7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:59:af:02:30:c5:c3:bc:e0:ac:53:a1:b1:54:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f Validity Not Before: Dec 6 04:01:25 2025 GMT Not After : Dec 7 04:01:25 2025 GMT Subject: CN=98b8693b006c85093b7710c3e36eb11cee5bfb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e6:fb:fc:23:c8:1f:4a:ab:6e:6d:17:38:c3: bb:15:1e:1e:51:19:d6:28:eb:69:c2:53:8a:7c:e0: 49:a4:28:b5:b9:3f:fd:4f:f8:32:37:66:ea:54:06: 03:6a:4e:55:a0:d1:d5:70:1f:60:e5:a3:c3:39:6e: b6:41:c5:58:55:bb:ac:f0:51:3a:ed:f6:24:b8:bb: 08:4a:59:f5:c6:b7:1a:f0:fb:40:59:ae:d7:02:82: bf:7b:3b:82:ee:24:4e:02:79:db:7f:3f:55:e8:1f: 10:b1:d4:43:cc:d7:e3:ac:19:2e:6d:60:54:b3:35: 18:04:ae:fb:a3:e6:ee:fd:e9:28:38:58:c5:36:31: 4e:8b:ca:21:8f:16:1c:a0:95:a6:f3:ce:71:39:6d: d0:57:52:81:13:49:4c:ed:5b:6b:6e:06:6d:47:f5: a9:43:77:a8:d3:0e:fc:29:6c:aa:cc:fa:f2:c4:3e: 12:b4:dd:fa:de:5e:f7:b3:cd:ca:7c:e1:b6:39:b5: 7e:91:3f:8d:53:39:3a:0b:02:55:7f:84:95:bc:a9: 0f:d8:a4:c8:f8:f4:ee:d5:25:8d:61:d2:de:1d:bd: 0c:9b:e2:6d:42:f6:84:15:99:bc:2f:97:ca:2a:81: cb:2f:30:d2:39:e5:08:4f:21:3f:67:ab:43:05:3f: 5d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B8:69:3B:00:6C:85:09:3B:77:10:C3:E3:6E:B1:1C:EE:5B:FB:43 X509v3 Authority Key Identifier: keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:07:e9:92:63:21:7b:0d:0f:a8:a0:be:f0:cc:92:d1:79:29: 10:04:18:f1:54:5b:a9:3a:a2:d6:35:8f:92:72:c9:7e:7d:15: 2d:88:04:a5:db:8b:63:48:ad:1e:66:9e:55:54:3d:ce:d4:8c: a1:c4:5e:12:4f:16:92:be:50:cf:21:13:47:73:f9:1c:8b:70: e4:a7:61:4d:80:1a:8d:9c:78:bc:15:da:59:af:2f:6d:81:45: 52:e6:ba:69:26:ce:fe:aa:ca:01:d5:e6:5b:52:11:d6:75:43: 63:f1:59:c2:bb:47:9a:e3:1d:a3:8c:c8:8d:c4:44:a3:bc:41: 58:d3:e6:df:a1:33:99:fb:2c:76:69:42:35:2a:e7:1d:19:7c: c0:c3:28:cd:d0:56:e3:31:bd:40:24:e8:2b:b5:09:bd:cd:ae: 93:46:99:8f:72:de:e0:07:4e:4f:36:19:b6:b3:0f:ce:6c:7f: 6f:1c:82:d6:f7:ae:16:2c:76:87:0d:d9:40:ba:2d:39:c7:b2: a4:5a:2e:34:87:6e:49:82:66:81:be:8c:3e:2e:06:93:8d:25: 35:7b:ed:89:ad:99:66:56:df:23:46:f9:0b:29:3e:f5:39:61: 59:b5:a1:39:b5:69:a8:cf:ee:cf:f3:32:db:56:70:0a:93:56: c6:41:e7:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lmvAjDFw7zgrFOhsVR3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZDcyNTM3Y2M1NGFjMTBiNGFiZmFjYzcyYzFiNzU0YzE3 MWFmOGYwHhcNMjUxMjA2MDQwMTI1WhcNMjUxMjA3MDQwMTI1WjAzMTEwLwYDVQQD Eyg5OGI4NjkzYjAwNmM4NTA5M2I3NzEwYzNlMzZlYjExY2VlNWJmYjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOb7/CPIH0qrbm0XOMO7FR4eURnW KOtpwlOKfOBJpCi1uT/9T/gyN2bqVAYDak5VoNHVcB9g5aPDOW62QcVYVbus8FE6 7fYkuLsISln1xrca8PtAWa7XAoK/ezuC7iROAnnbfz9V6B8QsdRDzNfjrBkubWBU szUYBK77o+bu/ekoOFjFNjFOi8ohjxYcoJWm885xOW3QV1KBE0lM7VtrbgZtR/Wp Q3eo0w78KWyqzPryxD4StN363l73s83KfOG2ObV+kT+NUzk6CwJVf4SVvKkP2KTI +PTu1SWNYdLeHb0Mm+JtQvaEFZm8L5fKKoHLLzDSOeUITyE/Z6tDBT9dHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJi4aTsAbIUJO3cQw+NusRzuW/tDMB8GA1UdIwQY MBaAFIDXJTfMVKwQtKv6zHLBt1TBca+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ05jbE44eFVyQkMwcV9yTWNzRzNWTUZ4cjQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMDBmYTQtNDU3OC00YWU4LTlmZmIt MmVkMjY5Mzg0YTc0LzEvZ05jbE44eFVyQkMwcV9yTWNzRzNWTUZ4cjQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8yMDBmYTQtNDU3OC00YWU4LTlmZmItMmVkMjY5Mzg0YTc0 LzEvZ05jbE44eFVyQkMwcV9yTWNzRzNWTUZ4cjQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwfpkmMh ew0PqKC+8MyS0XkpEAQY8VRbqTqi1jWPknLJfn0VLYgEpduLY0itHmaeVVQ9ztSM ocReEk8Wkr5QzyETR3P5HItw5KdhTYAajZx4vBXaWa8vbYFFUua6aSbO/qrKAdXm W1IR1nVDY/FZwrtHmuMdo4zIjcREo7xBWNPm36EzmfssdmlCNSrnHRl8wMMozdBW 4zG9QCToK7UJvc2uk0aZj3Le4AdOTzYZtrMPzmx/bxyC1veuFix2hw3ZQLotOcey pFouNIduSYJmgb6MPi4Gk40lNXvtia2ZZlbfI0b5Cyk+9TlhWbWhObVpqM/uz/My 21ZwCpNWxkHnZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:12 2025 by rpki-client