This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft File: _gdsTrghmCibE_9ShZOQfTIU1kg.mft (raw, json) Hash identifier: YQegX7883R2Dyp6zerNY3t+PCU6OXltrqbVBEGzv3MA= Subject key identifier: 7D:9B:A9:A6:7E:46:41:E1:F5:13:2D:19:E7:FA:14:6A:9E:14:1C:33 Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48 Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648 Certificate serial: 019B2B8A2B460BAA939379424A38AE6BFBEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft Manifest number: 0ACA Signing time: Wed 17 Dec 2025 09:00:33 +0000 Manifest this update: Wed 17 Dec 2025 09:00:33 +0000 Manifest next update: Thu 18 Dec 2025 09:00:33 +0000 Files and hashes: 1: VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa (hash: DxNlqxJB1dj664CEq4HV8OObj2p+8QssDiaq98KmVj4=) 2: _gdsTrghmCibE_9ShZOQfTIU1kg.crl (hash: RGZdnMaS5dnRNasoMybkPGzpHz12BKIQol0O344qLL4=) 3: kf6StMkwG23V9ls9smnXkUH-c_U.roa (hash: 2gWZsR5gKC4c6paVczIP5ldxDt0ZMc2sEfNeECKiQpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:2b:46:0b:aa:93:93:79:42:4a:38:ae:6b:fb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648 Validity Not Before: Dec 17 09:00:33 2025 GMT Not After : Dec 18 09:00:33 2025 GMT Subject: CN=7d9ba9a67e4641e1f5132d19e7fa146a9e141c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:dc:8f:97:46:b1:64:3d:91:45:8f:01:2a: 4d:41:c0:f7:1b:d7:e9:4d:36:4b:2b:0a:58:85:a1: 6a:4f:0b:0a:54:43:5e:52:f4:55:76:1c:5c:f9:5a: d1:98:98:43:44:fb:79:5f:cd:e7:ae:b7:78:da:38: fe:c9:b6:aa:bb:b3:d7:10:d9:71:af:f1:4d:a7:07: 4c:63:b9:84:fa:28:39:47:6f:a9:b6:34:3f:24:8c: ae:af:ad:c9:59:61:1b:e4:6d:7f:78:74:25:6d:44: 99:36:f2:6e:c2:58:94:a6:7f:21:12:be:40:de:b0: bc:d1:d9:41:b6:3a:3d:d2:a5:dd:c7:a6:02:3f:8a: c9:a0:c0:f3:2c:41:a9:61:4a:0e:17:00:0f:85:0c: c6:47:ae:54:9d:a8:cb:27:9e:5e:6c:16:65:7b:22: 26:9d:be:f7:14:f8:51:67:1e:d9:ce:0c:ad:cc:82: 9e:df:71:d6:ee:7d:e2:2b:6a:f7:1a:ca:a6:60:fd: c9:aa:29:c2:94:07:f7:0b:89:53:b3:37:9c:4d:da: fd:bc:7f:4c:a7:76:5c:aa:e7:ef:d8:44:d0:61:21: 99:30:9e:61:ad:22:c8:7d:56:d4:e2:94:fe:f3:38: ab:81:6d:5e:4d:7b:9e:17:5b:69:15:b0:4c:0e:c5: 76:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9B:A9:A6:7E:46:41:E1:F5:13:2D:19:E7:FA:14:6A:9E:14:1C:33 X509v3 Authority Key Identifier: keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:62:3a:54:1c:60:e7:ae:d9:22:45:21:c8:3d:f2:6c:b8:02: 18:84:78:4b:22:2c:74:8a:cf:9d:54:0b:1b:ee:69:9c:e0:99: a6:29:49:ca:6c:50:dd:67:8f:68:27:be:ca:27:9e:68:00:69: ce:9c:5b:79:65:5e:26:b6:3e:6d:f2:a0:65:a3:b6:d3:88:83: 2a:b6:1a:2d:ed:62:31:ec:a0:1a:aa:ab:da:f0:92:9d:7f:1d: 4c:1b:84:d3:1c:2c:71:7f:e2:b4:f6:3c:f8:a5:e5:d1:b1:c1: 8e:bc:ff:b4:c4:bb:93:0b:65:9b:1f:e9:37:15:1d:24:7b:aa: 92:29:d8:0e:98:ab:d0:b9:ee:d8:78:62:78:84:d0:e7:0e:7d: eb:09:7e:ce:77:f3:36:79:21:16:30:c7:fe:64:a9:a7:25:5d: e8:ca:5a:70:d5:8a:ad:ed:76:15:70:e6:52:06:e7:ff:09:90: d7:4d:27:f1:90:ce:9f:21:cd:cf:b1:a9:fa:5a:07:a9:c7:24: 2f:f3:cc:5f:b3:e3:5f:f8:02:76:2d:ce:a2:30:f5:93:52:6b: 51:59:75:2d:5a:c5:dd:a1:c8:38:33:c6:f3:0c:e5:03:ce:d9: af:52:d2:31:0a:ad:c3:a0:25:54:9f:9a:49:e7:89:06:b4:5e: 25:a2:16:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriitGC6qTk3lCSjiua/vrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMDc2YzRlYjgyMTk4Mjg5YjEzZmY1Mjg1OTM5MDdkMzIx NGQ2NDgwHhcNMjUxMjE3MDkwMDMzWhcNMjUxMjE4MDkwMDMzWjAzMTEwLwYDVQQD Eyg3ZDliYTlhNjdlNDY0MWUxZjUxMzJkMTllN2ZhMTQ2YTllMTQxYzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW7cj5dGsWQ9kUWPASpNQcD3G9fp TTZLKwpYhaFqTwsKVENeUvRVdhxc+VrRmJhDRPt5X83nrrd42jj+ybaqu7PXENlx r/FNpwdMY7mE+ig5R2+ptjQ/JIyur63JWWEb5G1/eHQlbUSZNvJuwliUpn8hEr5A 3rC80dlBtjo90qXdx6YCP4rJoMDzLEGpYUoOFwAPhQzGR65UnajLJ55ebBZleyIm nb73FPhRZx7ZzgytzIKe33HW7n3iK2r3GsqmYP3JqinClAf3C4lTszecTdr9vH9M p3Zcqufv2ETQYSGZMJ5hrSLIfVbU4pT+8zirgW1eTXueF1tpFbBMDsV2WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2bqaZ+RkHh9RMtGef6FGqeFBwzMB8GA1UdIwQY MBaAFP4HbE64IZgomxP/UoWTkH0yFNZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2dkc1RyZ2htQ2liRV85U2haT1FmVElVMWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lNDdiN2QtMzYwYS00YTQxLWI3NmIt MzY3YTQxMWY5ZWM2LzEvX2dkc1RyZ2htQ2liRV85U2haT1FmVElVMWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lNDdiN2QtMzYwYS00YTQxLWI3NmItMzY3YTQxMWY5ZWM2 LzEvX2dkc1RyZ2htQ2liRV85U2haT1FmVElVMWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWI6VBxg 567ZIkUhyD3ybLgCGIR4SyIsdIrPnVQLG+5pnOCZpilJymxQ3WePaCe+yieeaABp zpxbeWVeJrY+bfKgZaO204iDKrYaLe1iMeygGqqr2vCSnX8dTBuE0xwscX/itPY8 +KXl0bHBjrz/tMS7kwtlmx/pNxUdJHuqkinYDpir0Lnu2HhieITQ5w596wl+znfz NnkhFjDH/mSppyVd6MpacNWKre12FXDmUgbn/wmQ100n8ZDOnyHNz7Gp+loHqcck L/PMX7PjX/gCdi3OojD1k1JrUVl1LVrF3aHIODPG8wzlA87Zr1LSMQqtw6AlVJ+a SeeJBrReJaIW+g== -----END CERTIFICATE-----Generated at Wed Dec 17 18:32:04 2025 by rpki-client