This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft File: gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json) Hash identifier: +vRxKtkPe8Wz9xX3B+gRMZNf0el5DOdOWYPQlzhiBZ0= Subject key identifier: BE:0E:18:14:E8:2C:8B:04:D1:05:DF:B8:C0:C4:E4:D7:34:DF:F4:9E Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8 Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8 Certificate serial: 019AF5E5C13D8E9B6C76BE8A2D5CCFED6659 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 23:01:06 +0000 Manifest this update: Sat 06 Dec 2025 23:01:06 +0000 Manifest next update: Sun 07 Dec 2025 23:01:06 +0000 Files and hashes: 1: Qji-FTCQgnzWlGVff_f5I6ony7M.roa (hash: UnWSs70LgZcBG1uCBITka2HO4cPr5lx7seKqttKm19E=) 2: fgZqb1eXsifotU80oWGCNeapyHo.roa (hash: tNyodLqu2MH+TIN/vy+n1/1LvfEmsJX7JG+2Qz7k9Us=) 3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: FAT3c7G9Lt6ZEHpFgVu6QluTLN7UGpw/+Fn+CSI8enI=) 4: rhWOdvbRW_QkUa1o5T8i6dRU720.roa (hash: v5LlEHGBOX4X3JyqUu8rErhLCU66G7I7hGMGMVexdV4=) 5: wF03zlYV8_r_ZZnCmj1tslqE2ZI.roa (hash: EKYSZKyX0wz37/7aJtOTH5iytiN7NBI4neSvEUBFYGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:c1:3d:8e:9b:6c:76:be:8a:2d:5c:cf:ed:66:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8 Validity Not Before: Dec 6 23:01:06 2025 GMT Not After : Dec 7 23:01:06 2025 GMT Subject: CN=be0e1814e82c8b04d105dfb8c0c4e4d734dff49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:33:ef:70:ff:fc:87:d0:fa:5a:1f:21:cd:e6: f7:bb:1c:5d:34:e2:39:b5:83:9c:18:f2:be:f6:ee: 3f:ee:79:68:d6:d6:ce:24:6b:77:30:d4:ff:ca:eb: ec:ad:31:d2:69:cd:74:22:d1:b9:53:04:5a:fc:6b: 41:ce:14:72:25:39:3b:72:d1:f7:e8:39:38:f5:c9: 57:11:89:bb:b6:fd:09:56:8c:ce:a9:ba:88:17:fe: 55:a0:cf:1c:65:ec:ff:32:c5:31:31:e3:3e:21:20: 83:e7:7e:39:5a:02:d0:3c:f8:89:3a:1a:95:83:d6: be:ad:a3:7f:59:13:8f:49:d2:fc:2d:65:61:07:20: fc:e5:56:b7:08:bf:54:80:28:28:c6:57:b1:94:dc: a8:c3:ef:67:27:7d:ac:64:f8:d8:9c:98:34:47:50: 52:e8:63:9e:02:10:5d:a3:d5:c7:d8:ad:be:ed:f1: 9b:ca:f1:37:37:c6:73:a7:1b:c0:8e:fa:c3:53:06: ac:2c:19:a1:19:9b:28:9c:6d:c2:57:b6:84:ae:f4: af:34:78:30:c3:c9:c9:93:bf:08:da:29:5e:b8:66: 31:66:a4:27:a4:e2:9b:c1:f1:3f:af:9d:66:66:e3: 5d:84:54:17:ac:7d:ea:f2:de:3a:59:1d:5a:cf:b9: 42:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0E:18:14:E8:2C:8B:04:D1:05:DF:B8:C0:C4:E4:D7:34:DF:F4:9E X509v3 Authority Key Identifier: keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:bb:00:ee:0e:b1:e4:f1:52:64:2b:b6:43:86:0c:6d:48:cb: 1e:a9:12:0c:4e:60:64:7d:6f:57:53:2a:ff:14:11:1b:cd:92: 79:ed:6c:48:4a:a9:7e:59:a6:77:91:86:ba:bd:31:a0:e3:33: 34:1a:a6:a7:6b:59:a1:e8:18:c7:f5:88:61:31:40:a4:ad:cf: 0b:3d:8e:ff:37:a5:07:28:3d:87:5d:0f:43:8c:92:e7:d5:c3: 11:5e:9c:6e:dd:ee:ab:9c:57:d1:7e:1b:40:91:00:52:85:12: 3c:c7:57:fa:cd:b3:c0:1b:41:db:be:9c:33:70:9d:aa:83:05: 7d:65:4c:01:98:28:93:7d:54:af:27:ce:d9:3e:ca:2e:1c:2c: 7d:1e:5f:d8:d7:b1:13:ae:ed:47:e0:f6:14:20:93:bf:c5:aa: d5:86:0d:1d:ee:48:7b:c7:05:76:18:ce:e3:d1:8d:ad:0a:67: 7d:75:19:90:7c:10:09:3a:e0:98:63:6e:4c:d2:ff:8f:ce:ae: 29:54:6e:47:6e:95:da:8f:35:2f:97:8b:75:ae:94:9e:e3:94: 56:cd:f2:6e:15:30:45:83:c2:3d:07:71:59:dd:07:f3:9c:c3: d6:82:37:c6:d9:3a:6f:23:12:2b:db:56:31:ad:23:45:0e:76: 49:9d:b9:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15cE9jptsdr6KLVzP7WZZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNjY4NGEyOTU4ZTAxOTBmMjcwYTgwYTk4Nzg5MzE5ZTFj ZWU0ZDgwHhcNMjUxMjA2MjMwMTA2WhcNMjUxMjA3MjMwMTA2WjAzMTEwLwYDVQQD EyhiZTBlMTgxNGU4MmM4YjA0ZDEwNWRmYjhjMGM0ZTRkNzM0ZGZmNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzPvcP/8h9D6Wh8hzeb3uxxdNOI5 tYOcGPK+9u4/7nlo1tbOJGt3MNT/yuvsrTHSac10ItG5UwRa/GtBzhRyJTk7ctH3 6Dk49clXEYm7tv0JVozOqbqIF/5VoM8cZez/MsUxMeM+ISCD5345WgLQPPiJOhqV g9a+raN/WROPSdL8LWVhByD85Va3CL9UgCgoxlexlNyow+9nJ32sZPjYnJg0R1BS 6GOeAhBdo9XH2K2+7fGbyvE3N8ZzpxvAjvrDUwasLBmhGZsonG3CV7aErvSvNHgw w8nJk78I2ileuGYxZqQnpOKbwfE/r51mZuNdhFQXrH3q8t46WR1az7lC4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4OGBToLIsE0QXfuMDE5Nc03/SeMB8GA1UdIwQY MBaAFIFmhKKVjgGQ8nCoCph4kxnhzuTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUt ZDU5MDMwNjYxOTQ5LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUtZDU5MDMwNjYxOTQ5 LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbsA7g6x 5PFSZCu2Q4YMbUjLHqkSDE5gZH1vV1Mq/xQRG82See1sSEqpflmmd5GGur0xoOMz NBqmp2tZoegYx/WIYTFApK3PCz2O/zelByg9h10PQ4yS59XDEV6cbt3uq5xX0X4b QJEAUoUSPMdX+s2zwBtB276cM3CdqoMFfWVMAZgok31UryfO2T7KLhwsfR5f2Nex E67tR+D2FCCTv8Wq1YYNHe5Ie8cFdhjO49GNrQpnfXUZkHwQCTrgmGNuTNL/j86u KVRuR26V2o81L5eLda6UnuOUVs3ybhUwRYPCPQdxWd0H85zD1oI3xtk6byMSK9tW Ma0jRQ52SZ258A== -----END CERTIFICATE-----Generated at Sun Dec 7 03:25:34 2025 by rpki-client