This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft File: _gdsTrghmCibE_9ShZOQfTIU1kg.mft (raw, json) Hash identifier: gLjqiiTck5rTzp9HlY7SbvpsCjWq7fWrJhWKUAxKgIc= Subject key identifier: 40:B3:C7:F1:1E:4A:C4:37:3D:74:59:55:23:9D:A8:58:B4:BD:9F:E4 Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48 Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648 Certificate serial: 019AF19AAAB63A73095E155BF8CD0F1CF912 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft Manifest number: 0AAC Signing time: Sat 06 Dec 2025 03:00:36 +0000 Manifest this update: Sat 06 Dec 2025 03:00:36 +0000 Manifest next update: Sun 07 Dec 2025 03:00:36 +0000 Files and hashes: 1: VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa (hash: DxNlqxJB1dj664CEq4HV8OObj2p+8QssDiaq98KmVj4=) 2: _gdsTrghmCibE_9ShZOQfTIU1kg.crl (hash: D1F8CGZTTZbQy0NvE6AS+kkuz0UAFGwRynJ89h2dPaA=) 3: kf6StMkwG23V9ls9smnXkUH-c_U.roa (hash: 2gWZsR5gKC4c6paVczIP5ldxDt0ZMc2sEfNeECKiQpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:aa:b6:3a:73:09:5e:15:5b:f8:cd:0f:1c:f9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648 Validity Not Before: Dec 6 03:00:36 2025 GMT Not After : Dec 7 03:00:36 2025 GMT Subject: CN=40b3c7f11e4ac4373d745955239da858b4bd9fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:da:d9:d6:6b:90:40:46:cb:d8:18:92:02: c0:64:5f:0f:39:e0:c0:7a:8b:03:98:01:ab:0c:79: 23:59:93:de:6f:2e:55:25:a1:a1:50:18:59:94:93: ea:c6:d5:47:b2:b0:bc:ab:0d:4d:63:d6:84:6f:f4: 13:1a:d3:10:b9:ec:21:c3:78:5c:50:2f:be:e2:52: a4:71:3f:a9:76:86:bb:3f:40:dd:72:c4:9a:a2:74: 67:15:6b:45:a6:83:fd:27:cf:01:9b:b5:8f:bc:97: 2e:46:82:ec:3b:50:4f:2f:a5:7f:60:41:99:bd:2e: 80:cd:80:f6:08:8f:7e:ad:5a:e7:54:4b:7c:b0:e4: b3:ae:a3:c9:40:94:8a:f3:bd:b3:6f:7e:08:1d:ac: 1b:f1:cf:2c:9c:22:cb:17:37:cb:0b:52:a2:e5:30: 78:d6:0f:dd:02:48:e1:31:4c:65:f0:73:f2:5f:95: 83:c1:ff:8e:b9:bf:ed:73:ec:7f:c4:74:b1:18:31: 33:6c:ad:f6:19:c9:1c:d4:46:45:42:d3:6c:f8:0a: 1a:a0:c6:56:5f:f6:2e:09:43:cc:38:bb:41:30:fb: 93:3f:24:b7:7d:e8:ee:9c:ca:40:ff:56:21:58:3a: cd:df:c8:da:8d:64:bd:af:03:a7:3c:12:33:dc:65: 01:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B3:C7:F1:1E:4A:C4:37:3D:74:59:55:23:9D:A8:58:B4:BD:9F:E4 X509v3 Authority Key Identifier: keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:dd:3e:ce:18:c5:bd:fa:8c:65:85:ab:58:a1:d3:71:80:e1: 18:36:d2:f6:86:65:c9:e9:90:13:2e:2a:bf:ab:cb:f2:cf:ea: 4c:83:fa:31:33:7b:20:fb:cc:79:48:ed:8c:06:a4:25:a7:0d: 5e:d5:81:f1:34:ac:ae:65:37:7f:8d:fb:c7:39:f1:b1:e6:98: bf:75:80:09:fc:ce:be:3b:bc:85:59:46:90:fd:59:5d:25:4b: 84:bb:ef:3f:c5:26:76:8a:97:fc:fb:d1:ed:89:e1:99:6e:68: 8f:fd:fc:f8:67:30:3f:a6:52:f5:7b:d6:96:bc:a0:3f:f9:ad: b8:15:00:e9:5e:82:d3:40:d0:fd:6a:90:f6:fd:e2:53:75:30: 07:df:d9:5e:9f:59:2a:81:6e:d1:f9:ea:b4:80:41:7b:14:06: 82:f4:da:81:d1:73:ec:dd:d6:ae:7b:f5:9c:07:4b:5b:61:07: 81:fc:d2:74:25:45:10:6f:27:18:d1:3e:4d:4a:c6:d9:79:01: d5:0b:ac:2c:1d:4c:03:a8:95:eb:3e:a7:8b:ac:31:8e:24:0a: 73:5a:58:c9:46:96:f8:3c:06:bc:b1:4c:5b:c5:84:b7:09:9a: 8f:74:4d:6d:05:6c:d9:e9:83:e5:39:a1:39:a7:fc:d9:18:db: c0:d9:06:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqq2OnMJXhVb+M0PHPkSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMDc2YzRlYjgyMTk4Mjg5YjEzZmY1Mjg1OTM5MDdkMzIx NGQ2NDgwHhcNMjUxMjA2MDMwMDM2WhcNMjUxMjA3MDMwMDM2WjAzMTEwLwYDVQQD Eyg0MGIzYzdmMTFlNGFjNDM3M2Q3NDU5NTUyMzlkYTg1OGI0YmQ5ZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkna2dZrkEBGy9gYkgLAZF8POeDA eosDmAGrDHkjWZPeby5VJaGhUBhZlJPqxtVHsrC8qw1NY9aEb/QTGtMQuewhw3hc UC++4lKkcT+pdoa7P0DdcsSaonRnFWtFpoP9J88Bm7WPvJcuRoLsO1BPL6V/YEGZ vS6AzYD2CI9+rVrnVEt8sOSzrqPJQJSK872zb34IHawb8c8snCLLFzfLC1Ki5TB4 1g/dAkjhMUxl8HPyX5WDwf+Oub/tc+x/xHSxGDEzbK32Gckc1EZFQtNs+AoaoMZW X/YuCUPMOLtBMPuTPyS3fejunMpA/1YhWDrN38jajWS9rwOnPBIz3GUBDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECzx/EeSsQ3PXRZVSOdqFi0vZ/kMB8GA1UdIwQY MBaAFP4HbE64IZgomxP/UoWTkH0yFNZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2dkc1RyZ2htQ2liRV85U2haT1FmVElVMWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lNDdiN2QtMzYwYS00YTQxLWI3NmIt MzY3YTQxMWY5ZWM2LzEvX2dkc1RyZ2htQ2liRV85U2haT1FmVElVMWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lNDdiN2QtMzYwYS00YTQxLWI3NmItMzY3YTQxMWY5ZWM2 LzEvX2dkc1RyZ2htQ2liRV85U2haT1FmVElVMWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGt0+zhjF vfqMZYWrWKHTcYDhGDbS9oZlyemQEy4qv6vL8s/qTIP6MTN7IPvMeUjtjAakJacN XtWB8TSsrmU3f437xznxseaYv3WACfzOvju8hVlGkP1ZXSVLhLvvP8UmdoqX/PvR 7YnhmW5oj/38+GcwP6ZS9XvWlrygP/mtuBUA6V6C00DQ/WqQ9v3iU3UwB9/ZXp9Z KoFu0fnqtIBBexQGgvTagdFz7N3Wrnv1nAdLW2EHgfzSdCVFEG8nGNE+TUrG2XkB 1QusLB1MA6iV6z6ni6wxjiQKc1pYyUaW+DwGvLFMW8WEtwmaj3RNbQVs2emD5Tmh Oaf82RjbwNkGFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:18 2025 by rpki-client