This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft File: gmkF0cEWiypmBwmtsg80xuTAPX8.mft (raw, json) Hash identifier: +aIcK65vKUa1pJH16T5tQK/dkgfupZb9TLAfJgbUSVA= Subject key identifier: E4:C3:95:4D:4A:2E:D2:BA:5A:56:68:96:D0:14:9F:4C:61:9A:AD:9D Authority key identifier: 82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F Certificate issuer: /CN=826905d1c1168b2a660709adb20f34c6e4c03d7f Certificate serial: 019AF0BF21ABF402A9AA7235EFACAA105953 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:00:49 +0000 Manifest this update: Fri 05 Dec 2025 23:00:49 +0000 Manifest next update: Sat 06 Dec 2025 23:00:49 +0000 Files and hashes: 1: YsPCa2LhHTzsReR9IeNzv5T3mos.roa (hash: LDFsTcsV1AxqY+xNyJv9Hm+hGyPSKYS1sTcP7lh9G1w=) 2: gmkF0cEWiypmBwmtsg80xuTAPX8.crl (hash: tSCj1eiCqphAJmdeL0khXW6zkFMrNTunub/6Q/rAExY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:21:ab:f4:02:a9:aa:72:35:ef:ac:aa:10:59:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826905d1c1168b2a660709adb20f34c6e4c03d7f Validity Not Before: Dec 5 23:00:49 2025 GMT Not After : Dec 6 23:00:49 2025 GMT Subject: CN=e4c3954d4a2ed2ba5a566896d0149f4c619aad9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:25:8b:3b:a0:cd:a7:33:ee:b7:88:68:fd:75: 64:a4:79:aa:a2:8f:ad:00:06:29:88:07:43:6e:d7: 25:5c:97:8b:65:10:1a:01:7e:58:43:05:d5:8c:24: a6:4f:2e:84:23:61:a5:78:e1:2e:bd:22:32:f3:a3: 5b:84:d2:05:7f:08:be:d5:88:ad:2b:20:38:07:1a: a0:a1:43:ad:cb:c1:87:bb:f5:c1:97:79:d4:06:50: da:59:5a:2d:ca:0a:7a:a4:99:d6:ec:f6:2a:0a:3b: d4:d7:6d:78:c6:e7:6e:8b:95:02:94:b5:41:10:86: e1:77:f8:bc:e7:7e:b4:14:03:af:c3:cd:93:38:e3: 8d:55:23:1d:8d:ea:f1:eb:8b:fd:99:fa:b5:75:27: 9c:08:3b:70:94:b9:3a:5f:1a:6e:c6:6d:f3:7f:6a: 15:d0:3d:67:b9:68:8c:56:e1:cd:98:df:6f:b7:ac: 67:cc:f1:91:ef:f6:74:c8:d1:e6:37:0a:c5:1c:6a: dd:52:dd:08:e1:75:d9:2d:6c:55:9d:28:8f:3a:e3: 92:09:d2:8f:6c:be:89:cb:c8:af:9a:12:44:49:34: c8:0c:63:e3:a1:53:b1:91:e1:35:00:33:ba:4b:84: 1d:2e:d7:07:9e:5a:71:a8:85:3c:1d:55:af:24:95: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C3:95:4D:4A:2E:D2:BA:5A:56:68:96:D0:14:9F:4C:61:9A:AD:9D X509v3 Authority Key Identifier: keyid:82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:6e:ff:22:a5:76:ce:dc:71:1d:6a:46:05:4f:20:ea:40:00: f6:c4:42:46:9c:7d:e0:86:7c:76:e3:42:ff:2a:f6:a9:c7:0d: e8:66:c4:ed:ca:3b:93:4e:41:8c:05:60:ad:4d:85:bf:b3:00: 9c:df:5e:01:b4:19:ed:d8:a6:9f:8a:43:0c:38:d7:79:b5:c1: 4f:2b:7f:ce:00:a7:38:21:72:d8:09:53:aa:a5:d9:1d:ad:25: d1:5d:54:07:cd:99:4c:45:b9:31:e3:32:31:59:d9:01:41:ea: 72:47:d2:df:30:7d:32:c6:89:69:0e:86:53:47:9c:99:62:ce: 3d:8a:36:40:83:e6:88:9c:cd:02:7b:2e:0c:ed:2c:72:62:9a: 89:5a:21:9d:80:37:d5:d3:9e:8c:84:e2:28:a5:5b:3e:4c:21: 20:02:92:b3:da:ad:4e:c6:15:ed:66:57:03:a5:38:2c:f8:3d: dc:20:4d:c1:e0:67:a3:85:35:ab:85:51:ec:ec:b8:ca:2e:0e: 12:fb:de:8d:e2:90:30:2f:44:1a:b2:d2:b0:36:75:99:2a:e7: 9c:8a:66:8a:00:e2:24:ce:84:17:b1:82:2f:78:1e:67:51:d0: 31:b3:59:7c:ba:d3:ad:0b:79:08:83:c8:28:97:a1:d0:e6:2e: 14:9a:8b:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyGr9AKpqnI176yqEFlTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjkwNWQxYzExNjhiMmE2NjA3MDlhZGIyMGYzNGM2ZTRj MDNkN2YwHhcNMjUxMjA1MjMwMDQ5WhcNMjUxMjA2MjMwMDQ5WjAzMTEwLwYDVQQD EyhlNGMzOTU0ZDRhMmVkMmJhNWE1NjY4OTZkMDE0OWY0YzYxOWFhZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCWLO6DNpzPut4ho/XVkpHmqoo+t AAYpiAdDbtclXJeLZRAaAX5YQwXVjCSmTy6EI2GleOEuvSIy86NbhNIFfwi+1Yit KyA4BxqgoUOty8GHu/XBl3nUBlDaWVotygp6pJnW7PYqCjvU1214xudui5UClLVB EIbhd/i85360FAOvw82TOOONVSMdjerx64v9mfq1dSecCDtwlLk6Xxpuxm3zf2oV 0D1nuWiMVuHNmN9vt6xnzPGR7/Z0yNHmNwrFHGrdUt0I4XXZLWxVnSiPOuOSCdKP bL6Jy8ivmhJESTTIDGPjoVOxkeE1ADO6S4QdLtcHnlpxqIU8HVWvJJXnNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTDlU1KLtK6WlZoltAUn0xhmq2dMB8GA1UdIwQY MBaAFIJpBdHBFosqZgcJrbIPNMbkwD1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21rRjBjRVdpeXBtQndtdHNnODB4dVRBUFg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9mYzI4MmMtY2Q3Yy00MzVhLWFhYjQt YjI1ZTlkY2I0NjZlLzEvZ21rRjBjRVdpeXBtQndtdHNnODB4dVRBUFg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9mYzI4MmMtY2Q3Yy00MzVhLWFhYjQtYjI1ZTlkY2I0NjZl LzEvZ21rRjBjRVdpeXBtQndtdHNnODB4dVRBUFg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApm7/IqV2 ztxxHWpGBU8g6kAA9sRCRpx94IZ8duNC/yr2qccN6GbE7co7k05BjAVgrU2Fv7MA nN9eAbQZ7dimn4pDDDjXebXBTyt/zgCnOCFy2AlTqqXZHa0l0V1UB82ZTEW5MeMy MVnZAUHqckfS3zB9MsaJaQ6GU0ecmWLOPYo2QIPmiJzNAnsuDO0scmKaiVohnYA3 1dOejITiKKVbPkwhIAKSs9qtTsYV7WZXA6U4LPg93CBNweBno4U1q4VR7Oy4yi4O EvvejeKQMC9EGrLSsDZ1mSrnnIpmigDiJM6EF7GCL3geZ1HQMbNZfLrTrQt5CIPI KJeh0OYuFJqLBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:37 2025 by rpki-client