This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json) Hash identifier: ogD9InLZIVx5PcdCNL1OMmzRdTX0Wcj5Sppu4j4ByS4= Subject key identifier: C3:E9:BF:67:F5:DE:2F:08:20:4E:4E:7D:83:40:08:8C:96:5C:1F:1E Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e Certificate serial: 019AF19B7B56721BB2DE5764740DD6F5DA17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:29 +0000 Manifest this update: Sat 06 Dec 2025 03:01:29 +0000 Manifest next update: Sun 07 Dec 2025 03:01:29 +0000 Files and hashes: 1: 3BCTdWPdAwRCl8UX_2fwNUPfXDk.roa (hash: auwwYg2jmDefujiM9dhtcg3qGUezv1eAv9OXRPuNl5Q=) 2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: L09K7/TU7L9bwALPuNO8o78tifF2CHBsSkROvAp5YVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:7b:56:72:1b:b2:de:57:64:74:0d:d6:f5:da:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e Validity Not Before: Dec 6 03:01:29 2025 GMT Not After : Dec 7 03:01:29 2025 GMT Subject: CN=c3e9bf67f5de2f08204e4e7d8340088c965c1f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:78:e0:f6:0d:44:b8:e1:22:32:30:1d:12:e3: 83:18:1f:ce:fb:90:f6:e3:26:81:65:54:29:87:21: b6:2e:8e:7c:4f:23:15:ee:13:05:62:22:76:e4:63: 6b:bd:08:7b:35:d0:a3:61:a9:78:98:59:92:47:f8: 37:e9:d7:64:fb:50:34:f3:f3:18:39:94:b3:af:fa: 2b:87:7d:2e:73:3b:78:5e:59:91:87:42:8f:ea:05: e6:a6:fc:f0:f9:1f:61:a8:98:cf:fa:c8:0e:5d:94: ec:89:ea:00:d2:c7:4d:96:d2:44:ad:ff:4f:f5:d6: 7e:46:87:64:bb:83:f7:96:1b:cc:c6:5c:8a:59:fc: 2a:bf:d8:a9:06:7e:6d:5f:1e:5b:04:8e:78:27:e9: b3:9d:32:92:ea:00:01:ca:b9:88:5a:1c:93:7f:65: c2:17:98:c2:ab:e9:88:08:45:69:5a:47:fe:aa:4e: f7:18:65:df:35:8a:d2:bf:84:76:42:4b:93:26:cb: 01:26:1b:b5:4f:83:40:8f:29:83:13:f9:3e:6e:fd: c8:2a:a4:cb:d6:9a:1f:b1:5f:a7:cc:28:db:a3:54: b3:b5:66:89:78:75:71:5c:6b:9e:6f:a2:2d:cf:f3: 1a:98:33:33:99:de:cf:14:0c:be:0c:e9:fc:ca:72: 41:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E9:BF:67:F5:DE:2F:08:20:4E:4E:7D:83:40:08:8C:96:5C:1F:1E X509v3 Authority Key Identifier: keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:91:5a:34:e1:88:f4:46:13:c4:31:86:f0:30:87:e6:5f:5b: 19:22:e0:1f:51:ef:88:02:a1:12:9d:7d:34:b1:3c:5a:85:8b: 10:6b:b6:be:c7:b5:61:0a:60:4e:fb:75:b9:12:a6:86:e5:9f: 09:c7:26:d9:0f:0d:05:71:a6:a9:86:e6:a3:93:3d:4f:0a:97: e0:2e:7c:a8:d1:92:15:31:f8:81:35:05:92:0b:47:8c:a8:60: 18:0f:fe:84:ba:7c:74:c4:1e:4b:69:9f:03:73:0f:51:6d:96: 20:6e:e2:4f:f6:4e:f1:8c:39:5b:31:dc:6d:8f:27:8d:24:66: f6:48:1c:0d:f1:79:ec:1b:21:35:55:5d:e5:c3:de:52:7d:6c: fe:46:66:6e:51:72:17:89:20:93:cf:2a:97:28:69:30:2a:cc: 32:02:8a:6a:8d:e7:fb:c7:dc:67:15:69:98:70:7c:28:f6:c0: 88:c0:03:6b:46:ab:4e:40:d3:54:46:49:a2:c8:e0:6d:43:5f: e6:67:a9:a0:c4:bb:71:c2:e3:ec:2c:c9:3a:96:a6:31:33:39: a2:0f:f1:43:5e:73:59:5e:18:7d:78:47:e7:9c:de:c1:bc:e5: 45:10:10:65:da:b0:d4:ce:23:aa:d1:ec:cb:60:b6:c8:96:0b: 09:b2:b5:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3tWchuy3ldkdA3W9doXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNWMwYzlmMjM3NjNjMDM3YmQ2ODg0NzQ1Y2Y4NDY0ZDJk YjY2M2UwHhcNMjUxMjA2MDMwMTI5WhcNMjUxMjA3MDMwMTI5WjAzMTEwLwYDVQQD EyhjM2U5YmY2N2Y1ZGUyZjA4MjA0ZTRlN2Q4MzQwMDg4Yzk2NWMxZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXjg9g1EuOEiMjAdEuODGB/O+5D2 4yaBZVQphyG2Lo58TyMV7hMFYiJ25GNrvQh7NdCjYal4mFmSR/g36ddk+1A08/MY OZSzr/orh30uczt4XlmRh0KP6gXmpvzw+R9hqJjP+sgOXZTsieoA0sdNltJErf9P 9dZ+Rodku4P3lhvMxlyKWfwqv9ipBn5tXx5bBI54J+mznTKS6gAByrmIWhyTf2XC F5jCq+mICEVpWkf+qk73GGXfNYrSv4R2QkuTJssBJhu1T4NAjymDE/k+bv3IKqTL 1pofsV+nzCjbo1SztWaJeHVxXGueb6Itz/MamDMzmd7PFAy+DOn8ynJBhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPpv2f13i8IIE5OfYNACIyWXB8eMB8GA1UdIwQY MBaAFIBcDJ8jdjwDe9aIR0XPhGTS22Y+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MjQ3ZDUtZTI4My00YjI5LWFjZmQt ODJlMWUyMDA1MDRlLzEvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83MjQ3ZDUtZTI4My00YjI5LWFjZmQtODJlMWUyMDA1MDRl LzEvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZFaNOGI 9EYTxDGG8DCH5l9bGSLgH1HviAKhEp19NLE8WoWLEGu2vse1YQpgTvt1uRKmhuWf Cccm2Q8NBXGmqYbmo5M9TwqX4C58qNGSFTH4gTUFkgtHjKhgGA/+hLp8dMQeS2mf A3MPUW2WIG7iT/ZO8Yw5WzHcbY8njSRm9kgcDfF57BshNVVd5cPeUn1s/kZmblFy F4kgk88qlyhpMCrMMgKKao3n+8fcZxVpmHB8KPbAiMADa0arTkDTVEZJosjgbUNf 5mepoMS7ccLj7CzJOpamMTM5og/xQ15zWV4YfXhH55zewbzlRRAQZdqw1M4jqtHs y2C2yJYLCbK15w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:54 2025 by rpki-client