This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft File: gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft (raw, json) Hash identifier: sKBnXAOqTOf02Ce7yS9k5ZT159yyYKRhehWnYdm+BZI= Subject key identifier: 79:05:63:4B:57:92:9F:AC:AD:91:77:5C:3C:20:CE:7F:DE:A4:79:3A Authority key identifier: 81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E Certificate issuer: /CN=81523888eed5311f92a16615ef2cf0175c6fe41e Certificate serial: 019AF5AE9428A972DB2067B876CDCE06BD2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft Manifest number: 0EF0 Signing time: Sat 06 Dec 2025 22:00:50 +0000 Manifest this update: Sat 06 Dec 2025 22:00:50 +0000 Manifest next update: Sun 07 Dec 2025 22:00:50 +0000 Files and hashes: 1: YTi5kVsPsdj_lVOXlLvthRcyZYk.roa (hash: yclAP/FevQD565z0O5X4lV8O1DrwrH9X8Lbd0rW1rtQ=) 2: gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl (hash: KrDXQfhwLzV8rR8+Bqv/hFcBxvce4ukqGstlXHZlyo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:94:28:a9:72:db:20:67:b8:76:cd:ce:06:bd:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81523888eed5311f92a16615ef2cf0175c6fe41e Validity Not Before: Dec 6 22:00:50 2025 GMT Not After : Dec 7 22:00:50 2025 GMT Subject: CN=7905634b57929facad91775c3c20ce7fdea4793a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:8f:43:53:90:ea:72:82:c8:55:07:55:98: ac:74:b3:1b:3e:b6:64:43:0d:b9:3c:a1:d7:ac:f6: 28:b8:fe:36:15:0f:f6:07:a9:9a:a9:0c:3d:ec:00: 59:c9:c5:07:55:c5:bf:43:3d:51:2e:1f:a0:3d:86: a6:85:74:e2:0f:9f:51:73:ac:09:81:63:34:d4:d7: dd:ce:14:22:91:7a:65:92:4a:04:73:86:d9:db:70: 57:16:98:c6:9d:21:50:3b:72:fd:84:4a:a4:f5:2f: cc:cc:ed:bb:a9:1c:fa:de:ff:dc:ef:fb:27:ae:05: c0:60:1a:8a:28:7a:32:97:12:8f:dd:53:88:8a:ea: 30:b8:31:87:03:d5:3f:24:d5:e0:32:bd:3a:96:b7: cc:a9:63:79:bb:77:33:7a:db:8f:ca:57:c2:6a:f4: 39:a3:4b:2e:9e:17:1f:67:72:4d:ef:11:25:35:23: b9:a0:c8:97:a7:4f:da:60:6d:82:61:f8:61:39:ea: e5:6b:4a:ac:0b:61:a1:de:c7:b6:7d:d9:9b:e0:3c: c4:32:48:21:12:e5:70:c4:f6:43:57:a2:74:d6:ef: c0:c2:c8:1c:44:b1:26:77:9f:88:ba:a9:e5:a4:33: 21:47:95:ae:c9:71:4c:0b:92:30:c1:ce:62:29:1a: 0d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:05:63:4B:57:92:9F:AC:AD:91:77:5C:3C:20:CE:7F:DE:A4:79:3A X509v3 Authority Key Identifier: keyid:81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d4:ea:f9:ad:d4:8d:c6:2f:37:3d:14:b5:fc:9a:e1:81:1d: 37:bb:d0:51:db:5f:6c:30:7d:9e:7c:34:90:eb:c9:f6:a9:cc: 8f:4c:fa:55:fb:d7:71:3f:50:ee:cb:28:73:61:d1:f8:e2:f3: 36:c4:ad:d7:28:bc:97:74:2a:b2:81:55:b4:1c:23:ff:8c:af: d4:2c:ab:1e:31:b8:60:43:87:a1:fa:61:c2:cd:36:e7:d4:a3: 66:aa:42:be:f4:a9:a0:99:65:a3:25:d1:e7:fe:d9:65:57:5d: 84:59:bf:3f:d6:42:f6:0b:de:62:2b:e8:e3:8b:c0:ef:63:c5: d0:a0:ec:7e:a4:2b:6d:7a:1c:ec:93:df:a7:43:f3:32:e5:29: 07:f8:2f:cd:e9:35:14:c2:f5:dc:d9:e7:52:53:84:d5:d0:87: b5:b9:79:f8:8a:0c:99:eb:c8:c1:9f:3c:29:58:5c:ba:ff:a5: 92:c5:28:dc:08:9c:85:3d:3d:8f:10:54:cb:9a:fa:02:37:5c: 8a:e5:ae:de:b3:33:4c:46:d0:96:17:cf:e5:2f:50:22:ff:1d: 55:8f:f2:f8:8e:71:77:ef:14:04:07:19:d6:64:f1:59:26:54: 58:01:63:48:62:f9:92:0c:0a:2b:0b:92:78:d1:5a:cb:32:1b: 68:3d:e3:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rpQoqXLbIGe4ds3OBr0uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNTIzODg4ZWVkNTMxMWY5MmExNjYxNWVmMmNmMDE3NWM2 ZmU0MWUwHhcNMjUxMjA2MjIwMDUwWhcNMjUxMjA3MjIwMDUwWjAzMTEwLwYDVQQD Eyg3OTA1NjM0YjU3OTI5ZmFjYWQ5MTc3NWMzYzIwY2U3ZmRlYTQ3OTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYWPQ1OQ6nKCyFUHVZisdLMbPrZk Qw25PKHXrPYouP42FQ/2B6maqQw97ABZycUHVcW/Qz1RLh+gPYamhXTiD59Rc6wJ gWM01NfdzhQikXplkkoEc4bZ23BXFpjGnSFQO3L9hEqk9S/MzO27qRz63v/c7/sn rgXAYBqKKHoylxKP3VOIiuowuDGHA9U/JNXgMr06lrfMqWN5u3czetuPylfCavQ5 o0sunhcfZ3JN7xElNSO5oMiXp0/aYG2CYfhhOerla0qsC2Gh3se2fdmb4DzEMkgh EuVwxPZDV6J01u/AwsgcRLEmd5+IuqnlpDMhR5WuyXFMC5Iwwc5iKRoNEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkFY0tXkp+srZF3XDwgzn/epHk6MB8GA1UdIwQY MBaAFIFSOIju1TEfkqFmFe8s8Bdcb+QeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1ZJNGlPN1ZNUi1Tb1dZVjd5endGMXh2NUI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84ODBiMDAtNThhYi00N2RlLTk3Mjgt MGNhZDZjYTdlY2Q3LzEvZ1ZJNGlPN1ZNUi1Tb1dZVjd5endGMXh2NUI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS84ODBiMDAtNThhYi00N2RlLTk3MjgtMGNhZDZjYTdlY2Q3 LzEvZ1ZJNGlPN1ZNUi1Tb1dZVjd5endGMXh2NUI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNTq+a3U jcYvNz0Utfya4YEdN7vQUdtfbDB9nnw0kOvJ9qnMj0z6VfvXcT9Q7ssoc2HR+OLz NsSt1yi8l3QqsoFVtBwj/4yv1CyrHjG4YEOHofphws0259SjZqpCvvSpoJlloyXR 5/7ZZVddhFm/P9ZC9gveYivo44vA72PF0KDsfqQrbXoc7JPfp0PzMuUpB/gvzek1 FML13NnnUlOE1dCHtbl5+IoMmevIwZ88KVhcuv+lksUo3AichT09jxBUy5r6Ajdc iuWu3rMzTEbQlhfP5S9QIv8dVY/y+I5xd+8UBAcZ1mTxWSZUWAFjSGL5kgwKKwuS eNFayzIbaD3jtA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:59:03 2025 by rpki-client