This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft File: gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft (raw, json) Hash identifier: 1pnFIsRjdnGnzjEcBWOFtuhVEZ5plkNC9Olea58VyL8= Subject key identifier: AA:BD:16:7A:14:71:C0:0E:6A:33:46:8A:7F:43:20:48:0F:F9:9A:7A Authority key identifier: 82:F0:8F:26:3C:37:45:9B:5F:D6:FC:06:FD:9F:0E:5F:6D:62:27:59 Certificate issuer: /CN=82f08f263c37459b5fd6fc06fd9f0e5f6d622759 Certificate serial: 019AF49C1E2FA78E445D9BE1E6BDC1426FF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 17:01:03 +0000 Manifest this update: Sat 06 Dec 2025 17:01:03 +0000 Manifest next update: Sun 07 Dec 2025 17:01:03 +0000 Files and hashes: 1: BX1QEArFlodqmaLywnr1dRzJ5Uc.roa (hash: kKzlkpnYRDUEMTdKdAcgkbHriGGxFSkfVVWtck+oICw=) 2: gvCPJjw3RZtf1vwG_Z8OX21iJ1k.crl (hash: nNH2AlYivBt/SJAKc5S8W0JTQYPiFjAJEfVdcaflteQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft rsync://rpki.ripe.net/repository/DEFAULT/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:1e:2f:a7:8e:44:5d:9b:e1:e6:bd:c1:42:6f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82f08f263c37459b5fd6fc06fd9f0e5f6d622759 Validity Not Before: Dec 6 17:01:03 2025 GMT Not After : Dec 7 17:01:03 2025 GMT Subject: CN=aabd167a1471c00e6a33468a7f4320480ff99a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:9e:5e:4c:27:7e:44:17:9c:1a:dc:7e:46: 30:b7:be:2a:cf:2a:3a:a3:03:63:fb:c5:92:73:4a: 1a:52:66:25:cd:68:8e:e8:33:d3:cc:6c:cd:45:2f: 86:c1:23:9b:70:ce:fe:ab:69:a0:cb:b5:88:84:c6: 39:06:7c:a8:17:f8:44:86:3f:b9:2d:8a:60:8f:89: bc:4d:b1:26:fa:cb:61:8c:af:fa:1b:97:1a:f4:bc: ef:fa:6c:02:81:3c:c4:bd:62:cc:ca:de:1f:35:f8: f2:d2:7a:59:34:7b:91:0e:84:2e:d3:06:9f:bf:0a: 1e:4c:df:f2:19:e5:19:32:fd:2c:36:37:32:47:ed: 26:89:a8:5f:41:5d:37:6f:a8:ac:1d:79:ac:99:31: c0:0d:33:ba:fa:9b:60:16:d2:3d:18:80:c0:81:1b: 4c:a4:90:a5:f0:95:b6:cc:85:93:ca:62:48:82:ca: 9c:71:f5:b1:10:78:32:b8:d1:be:d4:39:11:e8:82: af:86:52:77:10:ef:c5:7f:05:f8:ef:26:a8:45:35: e0:2a:7c:33:b2:e6:83:ec:bf:a1:ef:92:ed:4e:95: c8:38:17:50:cf:f0:90:c3:d4:81:99:33:58:84:13: f8:e3:8f:bb:e9:9d:d6:55:7a:b5:fd:d5:2c:a0:f0: 09:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BD:16:7A:14:71:C0:0E:6A:33:46:8A:7F:43:20:48:0F:F9:9A:7A X509v3 Authority Key Identifier: keyid:82:F0:8F:26:3C:37:45:9B:5F:D6:FC:06:FD:9F:0E:5F:6D:62:27:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:db:b7:b7:63:36:e1:07:31:d8:63:c1:5c:c6:49:96:d2:a5: 02:5f:4d:5b:f3:0f:24:15:31:94:0a:ee:11:0f:0b:32:98:9b: 2d:d9:a1:1b:78:33:31:f1:b9:20:b4:71:12:0e:92:b0:a0:40: e8:83:96:af:98:60:1a:88:bd:b7:f1:a2:b1:c4:8a:f3:18:8e: 92:ea:dd:79:8d:87:bd:20:14:6a:76:dc:03:44:ec:d7:cb:c5: ab:cc:10:58:d2:c4:20:d5:c5:95:5a:7b:53:5f:1a:a1:a2:07: 7a:c5:4f:8f:d0:df:28:e2:e3:26:95:cf:be:be:f3:ab:98:18: 7c:5e:9e:24:1a:73:6b:84:55:40:91:9f:e4:6a:ec:aa:a9:2a: 43:f5:91:85:a9:b9:8d:b5:c9:34:6a:62:81:75:24:f3:3b:bb: 09:59:ea:bb:f1:6a:24:ab:99:83:ad:45:8d:39:fa:ca:4d:38: be:9e:09:33:1c:3b:8a:28:e9:54:9c:41:e7:18:78:ec:a8:f1: e3:92:a7:19:06:d4:7c:2b:2a:87:ab:a6:1f:0f:7a:3e:e6:07: a6:27:85:86:61:53:0b:1b:b1:01:10:2c:a1:0b:f1:8c:d1:bd: c7:b7:c3:7c:6a:06:5f:f2:93:57:86:be:60:76:f3:1d:e8:a5: 42:eb:ca:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nB4vp45EXZvh5r3BQm/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZjA4ZjI2M2MzNzQ1OWI1ZmQ2ZmMwNmZkOWYwZTVmNmQ2 MjI3NTkwHhcNMjUxMjA2MTcwMTAzWhcNMjUxMjA3MTcwMTAzWjAzMTEwLwYDVQQD EyhhYWJkMTY3YTE0NzFjMDBlNmEzMzQ2OGE3ZjQzMjA0ODBmZjk5YTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7eeXkwnfkQXnBrcfkYwt74qzyo6 owNj+8WSc0oaUmYlzWiO6DPTzGzNRS+GwSObcM7+q2mgy7WIhMY5BnyoF/hEhj+5 LYpgj4m8TbEm+sthjK/6G5ca9Lzv+mwCgTzEvWLMyt4fNfjy0npZNHuRDoQu0waf vwoeTN/yGeUZMv0sNjcyR+0miahfQV03b6isHXmsmTHADTO6+ptgFtI9GIDAgRtM pJCl8JW2zIWTymJIgsqccfWxEHgyuNG+1DkR6IKvhlJ3EO/FfwX47yaoRTXgKnwz suaD7L+h75LtTpXIOBdQz/CQw9SBmTNYhBP444+76Z3WVXq1/dUsoPAJWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKq9FnoUccAOajNGin9DIEgP+Zp6MB8GA1UdIwQY MBaAFILwjyY8N0WbX9b8Bv2fDl9tYidZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3ZDUEpqdzNSWnRmMXZ3R19aOE9YMjFpSjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jY2Y5M2ItOGZmOS00ZWI2LThjMzQt NGFhM2MzZGQ0ZDZiLzEvZ3ZDUEpqdzNSWnRmMXZ3R19aOE9YMjFpSjFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9jY2Y5M2ItOGZmOS00ZWI2LThjMzQtNGFhM2MzZGQ0ZDZi LzEvZ3ZDUEpqdzNSWnRmMXZ3R19aOE9YMjFpSjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNu3t2M2 4Qcx2GPBXMZJltKlAl9NW/MPJBUxlAruEQ8LMpibLdmhG3gzMfG5ILRxEg6SsKBA 6IOWr5hgGoi9t/GiscSK8xiOkurdeY2HvSAUanbcA0Ts18vFq8wQWNLEINXFlVp7 U18aoaIHesVPj9DfKOLjJpXPvr7zq5gYfF6eJBpza4RVQJGf5GrsqqkqQ/WRham5 jbXJNGpigXUk8zu7CVnqu/FqJKuZg61FjTn6yk04vp4JMxw7iijpVJxB5xh47Kjx 45KnGQbUfCsqh6umHw96PuYHpieFhmFTCxuxARAsoQvxjNG9x7fDfGoGX/KTV4a+ YHbzHeilQuvKvg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:37:01 2025 by rpki-client