This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft File: gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft (raw, json) Hash identifier: 8gYFkqZLJklGKYO4bvsZuGMBc9ZrErtIssi1dRbienw= Subject key identifier: BC:D0:C0:2C:29:92:D2:DF:EE:EE:B5:1E:68:C2:75:E3:01:CE:31:5C Authority key identifier: 80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E Certificate issuer: /CN=806757de8ffcdd1fd9af78b645536bda7c76c30e Certificate serial: 019AF2ADAEDD36EF050BA0F099605FC32A14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft Manifest number: 0675 Signing time: Sat 06 Dec 2025 08:00:59 +0000 Manifest this update: Sat 06 Dec 2025 08:00:59 +0000 Manifest next update: Sun 07 Dec 2025 08:00:59 +0000 Files and hashes: 1: gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl (hash: eV+lN4yKgLwRxUUcZ/5W90O9G4uHXMdo2hBPDC8vtEE=) 2: kwCip9bpks_MxIN5r8NE5b6pcCA.roa (hash: ZeSOKj/aYYMZXd7Dug4q1iZDEoHYeGkqnVSfcCaU2uA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ae:dd:36:ef:05:0b:a0:f0:99:60:5f:c3:2a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=806757de8ffcdd1fd9af78b645536bda7c76c30e Validity Not Before: Dec 6 08:00:59 2025 GMT Not After : Dec 7 08:00:59 2025 GMT Subject: CN=bcd0c02c2992d2dfeeeeb51e68c275e301ce315c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4a:08:9d:09:31:a9:be:c8:cf:f7:60:11:98: dd:89:60:23:a1:68:0f:71:db:6e:e6:4b:5f:27:2e: e7:50:05:0a:3d:ac:40:ae:ef:ca:b5:cb:72:95:aa: 58:cd:22:b6:f6:b9:b1:cf:4f:cd:73:1d:ae:dc:a5: 70:bf:97:b4:c6:1a:c2:f1:2c:0a:ce:50:9d:93:56: 30:f5:55:4e:b2:f0:a9:0f:a1:a1:8a:3d:d8:4d:ba: 54:2a:a6:66:1e:6a:f3:7e:e5:e6:ff:84:d0:05:e4: b6:64:05:2f:78:45:ce:8b:b9:13:37:5f:de:72:17: 78:7b:3e:25:04:95:93:ca:af:45:c4:c2:21:0c:c3: bd:ce:fa:6e:af:75:ec:c1:5a:e0:79:3f:d6:21:cc: 96:ac:55:4e:3d:0b:75:ee:62:de:50:a2:30:1a:e6: 14:58:ae:a3:77:0c:50:f9:39:72:b2:c2:bd:f2:e4: 92:c8:99:4c:8e:18:53:80:6a:ab:eb:bc:ff:cb:d4: e6:80:f8:0f:19:53:f9:57:2b:7c:cd:65:88:85:d7: 8c:9a:1e:5c:89:1a:89:fd:85:87:78:9d:ba:c2:5e: 7e:26:33:4e:6f:b2:5e:f0:5b:01:b8:5a:cc:41:f4: da:ca:5f:e9:8d:dd:d0:57:bf:78:e7:cd:21:f0:b9: c1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D0:C0:2C:29:92:D2:DF:EE:EE:B5:1E:68:C2:75:E3:01:CE:31:5C X509v3 Authority Key Identifier: keyid:80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f9:19:67:04:8f:dd:61:81:aa:ed:8f:44:34:ff:5e:8e:12: e3:e3:87:bb:69:29:3b:c4:08:14:5e:44:53:c6:9d:56:79:3c: f4:13:be:5e:99:4f:a3:e2:54:e8:70:dd:ac:b0:aa:74:34:4f: a3:9e:24:af:7e:7e:e0:c7:e1:81:1d:3a:7a:d6:cd:42:81:0f: b1:f8:06:e0:93:8b:b8:4b:51:56:1c:d0:1b:dc:e5:3a:55:36: 57:a5:f0:0b:90:6d:4a:af:51:1d:e4:92:5f:94:6b:86:e2:42: cb:73:a2:01:21:fa:e6:0c:c2:d6:83:99:bb:21:1f:3b:4c:2d: b4:9d:52:9b:66:b6:9b:b6:36:34:f7:12:b4:68:f5:03:fa:0f: 15:b0:b1:dd:06:95:f6:ed:8f:d2:a3:c6:d6:ff:4f:c8:ae:18: fd:db:ba:cc:ea:ab:49:2a:c9:47:7f:26:43:7e:aa:f9:e8:67: 9d:90:35:d2:24:e0:2a:78:ae:8a:a7:33:fb:9f:22:c5:93:9d: 68:01:24:3e:e7:61:da:6c:e8:97:2c:71:d4:d0:22:bf:79:c5: 5f:a6:e0:5c:b3:85:ae:bd:fe:92:1e:7e:d8:4b:20:79:43:5f: 00:5d:20:00:68:41:db:79:6e:31:65:29:59:b1:da:9e:07:7a: cb:c4:51:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryra7dNu8FC6DwmWBfwyoUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNjc1N2RlOGZmY2RkMWZkOWFmNzhiNjQ1NTM2YmRhN2M3 NmMzMGUwHhcNMjUxMjA2MDgwMDU5WhcNMjUxMjA3MDgwMDU5WjAzMTEwLwYDVQQD EyhiY2QwYzAyYzI5OTJkMmRmZWVlZWI1MWU2OGMyNzVlMzAxY2UzMTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkoInQkxqb7Iz/dgEZjdiWAjoWgP cdtu5ktfJy7nUAUKPaxAru/KtctylapYzSK29rmxz0/Ncx2u3KVwv5e0xhrC8SwK zlCdk1Yw9VVOsvCpD6Ghij3YTbpUKqZmHmrzfuXm/4TQBeS2ZAUveEXOi7kTN1/e chd4ez4lBJWTyq9FxMIhDMO9zvpur3XswVrgeT/WIcyWrFVOPQt17mLeUKIwGuYU WK6jdwxQ+TlyssK98uSSyJlMjhhTgGqr67z/y9TmgPgPGVP5Vyt8zWWIhdeMmh5c iRqJ/YWHeJ26wl5+JjNOb7Je8FsBuFrMQfTayl/pjd3QV794580h8LnBNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzQwCwpktLf7u61HmjCdeMBzjFcMB8GA1UdIwQY MBaAFIBnV96P/N0f2a94tkVTa9p8dsMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0dkWDNvXzgzUl9acjNpMlJWTnIybngyd3c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80YTNjYWYtZjg0Yy00Yzc2LTgwNjUt OTYyMjA2YjE2ODZiLzEvZ0dkWDNvXzgzUl9acjNpMlJWTnIybngyd3c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80YTNjYWYtZjg0Yy00Yzc2LTgwNjUtOTYyMjA2YjE2ODZi LzEvZ0dkWDNvXzgzUl9acjNpMlJWTnIybngyd3c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvkZZwSP 3WGBqu2PRDT/Xo4S4+OHu2kpO8QIFF5EU8adVnk89BO+XplPo+JU6HDdrLCqdDRP o54kr35+4MfhgR06etbNQoEPsfgG4JOLuEtRVhzQG9zlOlU2V6XwC5BtSq9RHeSS X5RrhuJCy3OiASH65gzC1oOZuyEfO0wttJ1Sm2a2m7Y2NPcStGj1A/oPFbCx3QaV 9u2P0qPG1v9PyK4Y/du6zOqrSSrJR38mQ36q+ehnnZA10iTgKniuiqcz+58ixZOd aAEkPudh2mzolyxx1NAiv3nFX6bgXLOFrr3+kh5+2EsgeUNfAF0gAGhB23luMWUp WbHangd6y8RRqg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:21 2025 by rpki-client