This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft File: gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft (raw, json) Hash identifier: WO5ILVk7rIW3AIa97xN6wpL9FbFwI1U5/52nexXqBAk= Subject key identifier: 58:62:7F:1D:52:1A:A8:6B:84:F1:6A:54:F1:8E:58:4B:B9:8D:B5:94 Authority key identifier: 83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA Certificate issuer: /CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa Certificate serial: 019AF19AD7B931122D43CD5D78F255D72D23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft Manifest number: 0467 Signing time: Sat 06 Dec 2025 03:00:48 +0000 Manifest this update: Sat 06 Dec 2025 03:00:48 +0000 Manifest next update: Sun 07 Dec 2025 03:00:48 +0000 Files and hashes: 1: AUMiWbM4e52RdzmaQ6UG45QPmwI.roa (hash: GsuF2sv+ICThkJKWildnPjGLnNEqrWMzCEJm1Y27s1Y=) 2: gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl (hash: 9y3FEpUZ9t4SnSCWe2dwmBY6yD4fni6mVExngrUGxAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d7:b9:31:12:2d:43:cd:5d:78:f2:55:d7:2d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa Validity Not Before: Dec 6 03:00:48 2025 GMT Not After : Dec 7 03:00:48 2025 GMT Subject: CN=58627f1d521aa86b84f16a54f18e584bb98db594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:77:bb:cc:cf:b6:d4:17:f3:24:14:21:c7:6b: 1a:75:65:97:20:ca:7f:af:2c:75:99:21:13:1e:8a: c9:7b:60:ac:81:4f:0e:3b:9d:03:f1:ee:90:d6:b4: 81:3e:78:40:a6:53:13:b2:0e:64:d1:c1:6e:39:55: 53:fd:0a:8c:61:31:cd:bc:3f:8a:08:a0:55:89:96: 25:96:fc:34:45:5f:e6:36:00:72:22:e6:96:66:8c: 2f:7b:40:d7:f9:eb:2b:ee:3c:b2:98:5f:02:40:83: 14:d7:ba:32:a2:7f:ea:47:ba:83:6e:da:08:92:f7: 5c:01:13:94:cb:9e:98:8e:16:d0:8f:40:a4:6c:5e: 9c:59:ad:0f:20:ad:fd:67:66:22:e7:00:be:2f:3c: 2f:46:01:05:5a:1e:c1:05:6b:7e:4c:92:85:a3:1e: 77:4e:3b:d6:fa:d5:83:12:cf:4b:f2:68:90:6f:4d: 62:8a:ff:bc:a4:47:f4:df:5f:ed:cc:59:ac:09:de: e0:18:6a:e4:dc:b9:f0:8f:92:25:8f:0e:97:67:61: 7a:19:bf:0f:4a:19:8c:b2:eb:e0:0f:48:bd:c1:99: 91:19:35:18:71:6e:5b:b5:51:2a:dd:56:52:3f:73: de:bd:e6:7e:9d:b6:07:69:14:8b:38:38:92:98:d1: 6b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:62:7F:1D:52:1A:A8:6B:84:F1:6A:54:F1:8E:58:4B:B9:8D:B5:94 X509v3 Authority Key Identifier: keyid:83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:80:4a:19:dc:c2:6a:35:da:db:db:b2:72:ec:75:d7:15:10: 22:a3:30:6c:7c:58:2d:f2:fb:c1:f8:50:3b:e2:31:33:bf:f1: 2f:cb:ef:48:b0:31:19:e6:b0:e0:6d:10:d1:74:48:be:55:8d: 7e:29:4a:42:f4:d8:80:81:ba:d7:c7:c8:46:f7:3e:42:be:5b: e7:78:04:94:25:90:6d:db:b2:93:0e:43:f0:f9:65:88:99:84: 36:12:33:85:1e:8f:70:5c:f8:ad:84:19:b0:37:65:2a:e5:9f: 1f:15:5f:e2:e3:82:44:ea:1d:2a:db:59:73:c0:78:4d:41:f3: 56:74:b2:7d:0b:62:eb:9d:ed:58:44:0d:a7:58:51:6d:e4:a5: c8:f0:54:db:a9:44:75:7f:c5:d8:9a:c4:fc:12:a8:80:b7:2e: 29:95:aa:c6:ba:df:d7:08:c1:35:5c:9c:84:4a:70:3c:50:7a: e2:60:05:1a:b8:96:11:bd:77:45:22:c7:0b:6f:3f:6c:be:f4: 9f:ae:74:a4:b5:ff:46:93:52:5a:e0:7f:76:7d:35:93:87:3b: 0f:1c:0e:93:63:72:58:e1:ea:3a:df:12:ed:ac:6f:bd:e9:68: 53:b9:04:ca:9f:71:b6:35:a2:c7:85:9e:19:d0:ec:89:c4:1d: 79:48:4c:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmte5MRItQ81dePJV1y0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2U1MzVkYjdlMWI3MTVhZTM0ZTlmMWRkYmQ4NDM2OTJm NmZlZmEwHhcNMjUxMjA2MDMwMDQ4WhcNMjUxMjA3MDMwMDQ4WjAzMTEwLwYDVQQD Eyg1ODYyN2YxZDUyMWFhODZiODRmMTZhNTRmMThlNTg0YmI5OGRiNTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3e7zM+21BfzJBQhx2sadWWXIMp/ ryx1mSETHorJe2CsgU8OO50D8e6Q1rSBPnhAplMTsg5k0cFuOVVT/QqMYTHNvD+K CKBViZYllvw0RV/mNgByIuaWZowve0DX+esr7jyymF8CQIMU17oyon/qR7qDbtoI kvdcAROUy56YjhbQj0CkbF6cWa0PIK39Z2Yi5wC+LzwvRgEFWh7BBWt+TJKFox53 TjvW+tWDEs9L8miQb01iiv+8pEf031/tzFmsCd7gGGrk3Lnwj5Iljw6XZ2F6Gb8P ShmMsuvgD0i9wZmRGTUYcW5btVEq3VZSP3PeveZ+nbYHaRSLODiSmNFrBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhifx1SGqhrhPFqVPGOWEu5jbWUMB8GA1UdIwQY MBaAFIM+U1234bcVrjTp8d29hDaS9v76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o1VFhiZmh0eFd1Tk9ueDNiMkVOcEwyX3ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82YmRhYzctNjJkNC00MDMzLWI5YWQt MzEwMzRjMzU2ZmEzLzEvZ3o1VFhiZmh0eFd1Tk9ueDNiMkVOcEwyX3ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82YmRhYzctNjJkNC00MDMzLWI5YWQtMzEwMzRjMzU2ZmEz LzEvZ3o1VFhiZmh0eFd1Tk9ueDNiMkVOcEwyX3ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIBKGdzC ajXa29uycux11xUQIqMwbHxYLfL7wfhQO+IxM7/xL8vvSLAxGeaw4G0Q0XRIvlWN filKQvTYgIG618fIRvc+Qr5b53gElCWQbduykw5D8PlliJmENhIzhR6PcFz4rYQZ sDdlKuWfHxVf4uOCROodKttZc8B4TUHzVnSyfQti653tWEQNp1hRbeSlyPBU26lE dX/F2JrE/BKogLcuKZWqxrrf1wjBNVychEpwPFB64mAFGriWEb13RSLHC28/bL70 n650pLX/RpNSWuB/dn01k4c7DxwOk2NyWOHqOt8S7axvveloU7kEyp9xtjWix4We GdDsicQdeUhMhg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:17 2025 by rpki-client