This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft File: gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft (raw, json) Hash identifier: NUEZrc0okxeeLbQjGULhe2NWD56IT2qYoTDpfiBI5eE= Subject key identifier: 2E:E5:F7:55:93:1F:C5:75:DF:CB:93:56:75:F0:AE:29:37:15:8C:0D Authority key identifier: 80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E Certificate issuer: /CN=806757de8ffcdd1fd9af78b645536bda7c76c30e Certificate serial: 019B3456E1A75D7413AA3D36965187A149D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft Manifest number: 0697 Signing time: Fri 19 Dec 2025 02:01:07 +0000 Manifest this update: Fri 19 Dec 2025 02:01:07 +0000 Manifest next update: Sat 20 Dec 2025 02:01:07 +0000 Files and hashes: 1: gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl (hash: 4SVbmq7Lompr8EJjX9dV5wRjfKtS8Rj7WRqqn9zC5ok=) 2: kwCip9bpks_MxIN5r8NE5b6pcCA.roa (hash: ZeSOKj/aYYMZXd7Dug4q1iZDEoHYeGkqnVSfcCaU2uA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:e1:a7:5d:74:13:aa:3d:36:96:51:87:a1:49:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=806757de8ffcdd1fd9af78b645536bda7c76c30e Validity Not Before: Dec 19 02:01:07 2025 GMT Not After : Dec 20 02:01:07 2025 GMT Subject: CN=2ee5f755931fc575dfcb935675f0ae2937158c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:9e:e8:00:06:fe:b5:7c:f2:fa:8b:b9:b2: 88:8d:ae:68:b2:c7:72:96:33:b2:17:5c:99:86:d0: 0f:65:69:01:cc:e1:a2:8e:c0:42:a3:6d:e1:94:00: ab:9e:53:85:fc:b6:b2:aa:b6:69:9f:93:c9:2a:d4: 9c:3a:a3:0a:db:6c:37:65:05:e6:14:42:95:9c:55: f1:c4:11:f9:74:e1:8a:bb:20:3e:d6:46:d4:5c:ef: d4:0b:65:85:d7:31:b3:a9:44:e2:49:6e:cb:19:4a: bf:b8:40:82:ee:82:79:0e:e7:5d:49:6d:93:a0:a9: c8:4b:94:35:62:0d:13:99:4e:87:ba:7c:e9:24:97: 32:6a:96:9f:1d:10:6b:6d:38:7a:2b:5c:e6:a0:8c: 29:89:87:af:22:57:26:df:34:29:61:b8:c6:a9:51: 54:57:1a:b7:df:ed:67:8b:d3:79:67:d8:c9:52:a0: c8:44:bb:31:06:52:8f:30:82:70:21:c1:1a:51:d8: fc:df:8a:a2:cf:cb:38:ea:ba:23:98:04:d6:56:0c: cd:ef:64:1c:39:a3:2e:f6:a8:95:51:c5:af:99:fc: 56:7c:ff:8a:60:f6:e0:bc:c0:8e:52:f9:3d:79:27: 25:64:e7:3e:44:1c:05:30:99:2b:24:f2:49:6e:66: e3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E5:F7:55:93:1F:C5:75:DF:CB:93:56:75:F0:AE:29:37:15:8C:0D X509v3 Authority Key Identifier: keyid:80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c1:ec:23:54:c1:ed:1f:78:0b:f6:c5:d2:f1:f7:b3:4c:d7: e7:e2:bd:a2:10:1a:e8:ba:d9:f9:2a:ac:4a:14:e9:ac:ec:c4: cb:88:cd:8f:cc:c4:fc:04:b6:4f:7f:6c:5a:99:57:ba:16:da: 4e:55:ca:8a:5c:6c:aa:fd:94:7d:e9:15:b0:99:62:68:0c:87: 26:cd:66:90:fa:78:ce:4b:ed:14:64:2f:4b:fd:18:14:f7:3c: ef:9d:6a:39:3c:3c:fb:3b:bb:74:3f:23:56:0e:56:72:ba:01: 89:26:0d:8a:03:cd:62:f3:39:63:05:4c:9a:63:c1:91:10:fa: ff:a9:c2:fc:ca:ad:f3:fd:24:db:d6:0e:82:0b:d1:1d:38:5d: f0:28:d1:f2:ba:12:7e:bb:04:f8:6d:4a:d3:2b:71:10:4c:56: 1f:d9:95:a3:b0:33:b7:37:dd:a2:59:e8:ed:a8:7d:78:8d:03: 18:54:d6:75:07:cb:41:0a:9d:90:af:ef:10:36:b7:bc:ac:76: 4a:63:02:48:b2:22:bf:2d:ab:9a:0a:55:36:1d:dc:16:8e:10: 32:69:ee:bf:50:dd:32:08:a5:d7:2b:7f:f7:b0:4e:81:4a:ff: ef:af:f3:e2:90:78:99:78:b6:e1:e8:71:af:b6:50:2b:a4:44: b3:df:a5:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VuGnXXQTqj02llGHoUnWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNjc1N2RlOGZmY2RkMWZkOWFmNzhiNjQ1NTM2YmRhN2M3 NmMzMGUwHhcNMjUxMjE5MDIwMTA3WhcNMjUxMjIwMDIwMTA3WjAzMTEwLwYDVQQD EygyZWU1Zjc1NTkzMWZjNTc1ZGZjYjkzNTY3NWYwYWUyOTM3MTU4YzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH6e6AAG/rV88vqLubKIja5ossdy ljOyF1yZhtAPZWkBzOGijsBCo23hlACrnlOF/LayqrZpn5PJKtScOqMK22w3ZQXm FEKVnFXxxBH5dOGKuyA+1kbUXO/UC2WF1zGzqUTiSW7LGUq/uECC7oJ5DuddSW2T oKnIS5Q1Yg0TmU6HunzpJJcyapafHRBrbTh6K1zmoIwpiYevIlcm3zQpYbjGqVFU Vxq33+1ni9N5Z9jJUqDIRLsxBlKPMIJwIcEaUdj834qiz8s46rojmATWVgzN72Qc OaMu9qiVUcWvmfxWfP+KYPbgvMCOUvk9eSclZOc+RBwFMJkrJPJJbmbjcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7l91WTH8V138uTVnXwrik3FYwNMB8GA1UdIwQY MBaAFIBnV96P/N0f2a94tkVTa9p8dsMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0dkWDNvXzgzUl9acjNpMlJWTnIybngyd3c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80YTNjYWYtZjg0Yy00Yzc2LTgwNjUt OTYyMjA2YjE2ODZiLzEvZ0dkWDNvXzgzUl9acjNpMlJWTnIybngyd3c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80YTNjYWYtZjg0Yy00Yzc2LTgwNjUtOTYyMjA2YjE2ODZi LzEvZ0dkWDNvXzgzUl9acjNpMlJWTnIybngyd3c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH8HsI1TB 7R94C/bF0vH3s0zX5+K9ohAa6LrZ+SqsShTprOzEy4jNj8zE/AS2T39sWplXuhba TlXKilxsqv2UfekVsJliaAyHJs1mkPp4zkvtFGQvS/0YFPc8751qOTw8+zu7dD8j Vg5WcroBiSYNigPNYvM5YwVMmmPBkRD6/6nC/Mqt8/0k29YOggvRHThd8CjR8roS frsE+G1K0ytxEExWH9mVo7Aztzfdolno7ah9eI0DGFTWdQfLQQqdkK/vEDa3vKx2 SmMCSLIivy2rmgpVNh3cFo4QMmnuv1DdMgil1yt/97BOgUr/76/z4pB4mXi24ehx r7ZQK6REs9+lig== -----END CERTIFICATE-----Generated at Fri Dec 19 11:58:41 2025 by rpki-client