This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
File: gPPzEUyqjpJigXJfcn1gjZM5URg.mft (raw, json)
Hash identifier: 37WeaE1kMaalPqDu7QZABgbJrclvAIWMtDLZ2UukE+o=
Subject key identifier: 27:1E:E7:DF:B2:82:E9:68:77:5C:25:CF:61:F0:B4:B7:2B:0B:9B:8F
Authority key identifier: 80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
Certificate issuer: /CN=80f3f3114caa8e926281725f727d608d93395118
Certificate serial: 019AF540DA494E6AA4B676F7B27EFF71184C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
Manifest number: 03AE
Signing time: Sat 06 Dec 2025 20:00:59 +0000
Manifest this update: Sat 06 Dec 2025 20:00:59 +0000
Manifest next update: Sun 07 Dec 2025 20:00:59 +0000
Files and hashes: 1: gPPzEUyqjpJigXJfcn1gjZM5URg.crl (hash: AHANuDRFuHGAQ0t9L/ZZ3BGSy8ED2d+1F5Iy1+TcdxQ=)
2: qQBsyu_cVKZnC2YtWnBhQBpOfUQ.roa (hash: TjgATufRss8r1iBf8Y/PyScO/pIDEQWkrsAtyOXWrVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:40:da:49:4e:6a:a4:b6:76:f7:b2:7e:ff:71:18:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f3f3114caa8e926281725f727d608d93395118
Validity
Not Before: Dec 6 20:00:59 2025 GMT
Not After : Dec 7 20:00:59 2025 GMT
Subject: CN=271ee7dfb282e968775c25cf61f0b4b72b0b9b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:3d:cd:37:de:52:54:12:58:00:88:44:98:
46:8b:a1:c8:2b:2c:50:e6:73:fd:c4:40:10:d8:fe:
3c:ff:b3:a8:c4:c3:6e:62:49:af:8f:5f:d7:72:ec:
05:69:5c:29:52:60:10:46:96:e0:99:2b:be:a8:ff:
d0:9c:62:73:40:84:12:b1:44:43:ec:a8:60:e2:da:
fb:e7:66:9d:4a:44:f3:f7:8f:fe:ec:74:f9:71:72:
99:6c:8e:01:ff:b4:53:94:cc:d9:f0:5a:9f:07:af:
04:5d:eb:92:9d:c6:18:31:ba:07:c5:8d:be:7d:6d:
30:64:7a:a2:0a:cf:df:28:16:c8:50:5f:2d:aa:87:
3e:fc:39:25:5a:44:0f:c6:c5:ba:ff:0b:6a:16:4a:
bf:19:a6:57:d8:fb:66:c5:32:7c:7d:f7:06:b2:10:
ec:b1:06:a0:1d:f8:88:c1:7d:23:5c:63:73:01:14:
5e:71:85:79:81:43:7d:c5:3b:a9:cc:06:28:b6:97:
c9:f1:d9:27:22:44:57:78:96:65:cd:5c:33:3f:32:
53:8c:6f:22:4d:63:7b:d9:79:36:37:60:7d:f9:31:
5e:cc:ee:2d:f0:0c:d1:35:82:0d:71:76:85:5c:88:
3d:39:3e:2b:e7:01:cb:7c:72:29:8e:0b:69:7f:ee:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1E:E7:DF:B2:82:E9:68:77:5C:25:CF:61:F0:B4:B7:2B:0B:9B:8F
X509v3 Authority Key Identifier:
keyid:80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1c:7d:dc:95:f6:29:8a:04:45:9d:8a:ed:ed:86:19:99:02:
28:24:5f:a8:38:15:d1:55:be:e8:a4:ce:6e:3c:07:95:d1:f0:
05:07:3b:32:3d:2e:ea:5e:de:2f:3c:6e:8a:a1:54:1a:c1:fa:
3c:a1:82:85:b0:8e:df:f7:01:fe:98:65:9f:39:ea:b4:f3:73:
3b:8c:94:ed:ca:53:4d:f0:c1:68:e8:5d:9c:5c:43:57:fd:dd:
f2:bb:8a:14:f4:f2:5f:ce:2b:e6:fb:71:36:ee:ce:8a:5f:72:
00:ef:d2:b0:09:a4:a8:aa:a3:e8:e3:27:e7:39:51:0e:5b:c9:
84:70:33:7f:b5:73:2c:95:00:59:52:9b:ac:13:7e:0f:ed:93:
ce:f7:89:ea:0f:9c:61:83:e4:e4:6a:51:96:f0:35:cc:92:f8:
17:2f:a4:6c:29:a4:72:fe:de:54:2a:0f:a6:72:de:b5:be:29:
c8:04:b2:a0:ab:4e:15:b1:45:4b:c3:26:b2:ea:14:3f:61:e7:
51:1d:75:90:52:10:4f:fa:5b:52:69:14:0f:04:4a:d8:ef:36:
82:b8:27:24:26:e2:18:9c:f7:d5:7c:56:2c:3d:4d:b8:4a:4f:
05:b2:83:b4:3d:f4:76:0b:a1:81:78:bf:f0:93:83:e7:3e:b2:
d1:8b:84:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1QNpJTmqktnb3sn7/cRhMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZjNmMzExNGNhYThlOTI2MjgxNzI1ZjcyN2Q2MDhkOTMz
OTUxMTgwHhcNMjUxMjA2MjAwMDU5WhcNMjUxMjA3MjAwMDU5WjAzMTEwLwYDVQQD
EygyNzFlZTdkZmIyODJlOTY4Nzc1YzI1Y2Y2MWYwYjRiNzJiMGI5YjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqc9zTfeUlQSWACIRJhGi6HIKyxQ
5nP9xEAQ2P48/7OoxMNuYkmvj1/XcuwFaVwpUmAQRpbgmSu+qP/QnGJzQIQSsURD
7Khg4tr752adSkTz94/+7HT5cXKZbI4B/7RTlMzZ8FqfB68EXeuSncYYMboHxY2+
fW0wZHqiCs/fKBbIUF8tqoc+/DklWkQPxsW6/wtqFkq/GaZX2PtmxTJ8ffcGshDs
sQagHfiIwX0jXGNzARRecYV5gUN9xTupzAYotpfJ8dknIkRXeJZlzVwzPzJTjG8i
TWN72Xk2N2B9+TFezO4t8AzRNYINcXaFXIg9OT4r5wHLfHIpjgtpf+5I8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCce59+ygulod1wlz2HwtLcrC5uPMB8GA1UdIwQY
MBaAFIDz8xFMqo6SYoFyX3J9YI2TOVEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BQekVVeXFqcEppZ1hKZmNuMWdqWk01VVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mZTdiNzktMTU2OC00ZWI2LWJjMGYt
NTQ4OWUyMmNhYjgxLzEvZ1BQekVVeXFqcEppZ1hKZmNuMWdqWk01VVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mZTdiNzktMTU2OC00ZWI2LWJjMGYtNTQ4OWUyMmNhYjgx
LzEvZ1BQekVVeXFqcEppZ1hKZmNuMWdqWk01VVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRx93JX2
KYoERZ2K7e2GGZkCKCRfqDgV0VW+6KTObjwHldHwBQc7Mj0u6l7eLzxuiqFUGsH6
PKGChbCO3/cB/phlnznqtPNzO4yU7cpTTfDBaOhdnFxDV/3d8ruKFPTyX84r5vtx
Nu7Oil9yAO/SsAmkqKqj6OMn5zlRDlvJhHAzf7VzLJUAWVKbrBN+D+2TzveJ6g+c
YYPk5GpRlvA1zJL4Fy+kbCmkcv7eVCoPpnLetb4pyASyoKtOFbFFS8MmsuoUP2Hn
UR11kFIQT/pbUmkUDwRK2O82grgnJCbiGJz31XxWLD1NuEpPBbKDtD30dguhgXi/
8JOD5z6y0YuEDw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:02:48 2025 by rpki-client