This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft File: gV_CISVyYlbWo189oo91E90xwf4.mft (raw, json) Hash identifier: lxn6LEnzJU5kCo+6qta30Ac5fL/rx6KhCKxO570cQBI= Subject key identifier: 07:5B:B4:04:3E:F0:50:3E:A6:A8:88:F1:65:AA:30:E3:80:CA:61:23 Authority key identifier: 81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE Certificate issuer: /CN=815fc22125726256d6a35f3da28f7513dd31c1fe Certificate serial: 019AF5E5E3DF2890B717E16520B80FF8B2ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 23:01:15 +0000 Manifest this update: Sat 06 Dec 2025 23:01:15 +0000 Manifest next update: Sun 07 Dec 2025 23:01:15 +0000 Files and hashes: 1: aBrEW06-xKv77MgMEwK2_lYbz-I.roa (hash: RP6KdM7YV2WY/3+umq6rKSdZ3FIW7gCCmbirjcfrx/0=) 2: gV_CISVyYlbWo189oo91E90xwf4.crl (hash: 8PFxfBl0dCatc50zqHHKq+2WArGNdJGqjwUarN3LPvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:e3:df:28:90:b7:17:e1:65:20:b8:0f:f8:b2:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=815fc22125726256d6a35f3da28f7513dd31c1fe Validity Not Before: Dec 6 23:01:15 2025 GMT Not After : Dec 7 23:01:15 2025 GMT Subject: CN=075bb4043ef0503ea6a888f165aa30e380ca6123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b9:c2:7a:20:ec:93:fd:82:c6:af:26:86:17: d1:e2:e9:9e:de:66:b8:10:b5:56:2b:57:0d:50:ab: 79:d0:70:3f:66:c3:e0:2e:ab:88:f2:9d:03:17:ba: 23:9e:96:c4:1c:fd:34:14:92:b7:00:e2:c6:6e:47: 82:8e:e5:b8:31:56:27:0d:33:21:be:e5:4e:a9:67: 9c:4f:06:da:bc:3c:56:57:c5:60:f7:6a:68:0b:03: f2:15:7f:fc:b3:52:11:ab:69:c3:7d:d3:83:05:e1: 30:03:be:55:21:4d:33:99:94:28:6a:59:83:5e:3e: 94:f3:18:44:83:27:21:76:10:d6:b4:e6:65:10:52: f0:97:a5:6b:b7:64:47:4d:7d:c9:68:4f:19:c4:34: 34:1f:fe:fc:2f:e4:0c:e9:be:f7:f9:ea:17:1e:28: 2f:0b:cb:1d:cf:91:83:58:08:57:27:e7:21:0c:b2: 04:03:87:fe:59:61:aa:ca:a1:af:d2:b2:83:ab:9f: 84:14:a1:d2:70:0a:35:01:33:6d:16:dd:d2:2b:ab: 14:11:b6:0d:0a:20:fb:d1:eb:cd:4f:6a:cb:26:eb: 1f:c0:dc:af:b0:c9:ba:b9:6c:e1:c8:7b:ca:cc:c4: b6:59:49:d3:e4:71:ca:06:1a:47:54:48:a5:c7:c7: 25:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5B:B4:04:3E:F0:50:3E:A6:A8:88:F1:65:AA:30:E3:80:CA:61:23 X509v3 Authority Key Identifier: keyid:81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:9b:42:80:80:8a:03:1b:b7:8b:9d:38:41:b0:63:6e:41:80: 25:c8:44:60:35:e1:8b:ab:ce:06:4c:bf:e3:45:60:93:f5:5d: cb:23:eb:af:9f:a3:60:21:7e:fd:6b:ad:ef:14:3b:c4:1c:41: e3:75:f4:1a:45:b8:c8:8f:9d:1f:6c:00:f8:e5:09:84:82:8e: 70:fc:4b:d7:5e:f8:8f:76:9d:f0:60:db:23:4a:f3:92:ab:ad: dd:4c:dd:31:dd:c4:8f:91:1c:9a:5b:72:f9:a5:c5:2d:84:ba: ad:d0:5a:98:3b:5d:e1:e6:10:0e:17:ce:83:04:ed:ed:d4:e4: da:64:b1:49:20:4d:c8:49:e6:0a:b9:48:21:00:4c:15:b6:5a: 1e:ee:3f:a1:ca:a5:c6:33:c1:eb:ca:27:7f:9a:b0:00:a8:c4: 5a:b2:fb:9e:c4:8e:ba:1d:35:69:75:a5:3c:9c:b7:d7:a2:6e: 10:db:08:dc:4e:e2:83:12:52:04:bd:92:d9:a4:3d:ea:53:50: dc:5f:a1:d7:4b:e5:6c:93:8f:c4:bf:87:9c:51:71:a2:f6:94: ef:eb:7c:5d:0a:7c:d9:93:1c:9c:74:c3:76:76:e3:25:6a:e1: 4e:6a:d1:e4:b3:53:76:e5:fb:97:76:fc:a7:f5:62:7a:3e:8c: 31:85:95:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15ePfKJC3F+FlILgP+LLtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNWZjMjIxMjU3MjYyNTZkNmEzNWYzZGEyOGY3NTEzZGQz MWMxZmUwHhcNMjUxMjA2MjMwMTE1WhcNMjUxMjA3MjMwMTE1WjAzMTEwLwYDVQQD EygwNzViYjQwNDNlZjA1MDNlYTZhODg4ZjE2NWFhMzBlMzgwY2E2MTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17nCeiDsk/2Cxq8mhhfR4ume3ma4 ELVWK1cNUKt50HA/ZsPgLquI8p0DF7ojnpbEHP00FJK3AOLGbkeCjuW4MVYnDTMh vuVOqWecTwbavDxWV8Vg92poCwPyFX/8s1IRq2nDfdODBeEwA75VIU0zmZQoalmD Xj6U8xhEgychdhDWtOZlEFLwl6Vrt2RHTX3JaE8ZxDQ0H/78L+QM6b73+eoXHigv C8sdz5GDWAhXJ+chDLIEA4f+WWGqyqGv0rKDq5+EFKHScAo1ATNtFt3SK6sUEbYN CiD70evNT2rLJusfwNyvsMm6uWzhyHvKzMS2WUnT5HHKBhpHVEilx8clFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdbtAQ+8FA+pqiI8WWqMOOAymEjMB8GA1UdIwQY MBaAFIFfwiElcmJW1qNfPaKPdRPdMcH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1ZfQ0lTVnlZbGJXbzE4OW9vOTFFOTB4d2Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iM2M4YTYtZTMyZS00NzAwLWI1ZWQt NmE5OTRlNWVjNDcyLzEvZ1ZfQ0lTVnlZbGJXbzE4OW9vOTFFOTB4d2Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9iM2M4YTYtZTMyZS00NzAwLWI1ZWQtNmE5OTRlNWVjNDcy LzEvZ1ZfQ0lTVnlZbGJXbzE4OW9vOTFFOTB4d2Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoptCgICK Axu3i504QbBjbkGAJchEYDXhi6vOBky/40Vgk/VdyyPrr5+jYCF+/Wut7xQ7xBxB 43X0GkW4yI+dH2wA+OUJhIKOcPxL1174j3ad8GDbI0rzkqut3UzdMd3Ej5Ecmlty +aXFLYS6rdBamDtd4eYQDhfOgwTt7dTk2mSxSSBNyEnmCrlIIQBMFbZaHu4/ocql xjPB68onf5qwAKjEWrL7nsSOuh01aXWlPJy316JuENsI3E7igxJSBL2S2aQ96lNQ 3F+h10vlbJOPxL+HnFFxovaU7+t8XQp82ZMcnHTDdnbjJWrhTmrR5LNTduX7l3b8 p/Viej6MMYWV2g== -----END CERTIFICATE-----Generated at Sun Dec 7 06:00:54 2025 by rpki-client