This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft File: GnU2E7QiD2jytUbQkqIwvtbtrLg.mft (raw, json) Hash identifier: aDPSqqBwmfF+W14OmmewNq1eMgLl3n7p9oqAZPl8ibM= Subject key identifier: 75:EA:C2:60:7D:A2:27:2B:C7:64:EA:EB:89:81:BC:4B:1F:F1:8F:94 Authority key identifier: 1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8 Certificate issuer: /CN=1a753613b4220f68f2b546d092a230bed6edacb8 Certificate serial: 019AF19AFAAC1F36E044EFE309A3B271689A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft Manifest number: 0AB0 Signing time: Sat 06 Dec 2025 03:00:56 +0000 Manifest this update: Sat 06 Dec 2025 03:00:56 +0000 Manifest next update: Sun 07 Dec 2025 03:00:56 +0000 Files and hashes: 1: GnU2E7QiD2jytUbQkqIwvtbtrLg.crl (hash: ECI5rmbe92U5z51Lb6IVYPO8CW7AsuSyaYTMf5xKSn0=) 2: dZV8dvdnA_9uSLTQkNXVl8a3FaI.roa (hash: Krx07PHv8S1aDWSKbtOJAHlzZWfSCAV78WJWEmqXiPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.crl rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:fa:ac:1f:36:e0:44:ef:e3:09:a3:b2:71:68:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a753613b4220f68f2b546d092a230bed6edacb8 Validity Not Before: Dec 6 03:00:56 2025 GMT Not After : Dec 7 03:00:56 2025 GMT Subject: CN=75eac2607da2272bc764eaeb8981bc4b1ff18f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:53:ef:36:5b:c0:21:6c:fe:f2:4b:95:7a:4e: c7:0b:ff:3a:9f:95:e7:9d:d0:ac:ab:c7:a9:e0:f7: 0e:7b:49:fa:a8:24:9d:4c:ed:11:49:23:a9:3c:ee: c6:95:6a:07:e6:b3:04:b7:b0:08:0e:78:0d:d2:41: cd:03:a9:94:ae:40:2e:59:fe:b5:5a:9a:75:61:c0: f0:b7:32:ec:18:db:24:17:f8:b0:56:7b:1c:85:2e: fd:4c:fd:0a:8a:a9:b0:aa:15:f5:74:12:e0:d9:85: 60:77:dc:33:0c:4b:66:c3:73:3c:a8:67:51:b4:84: 4a:2f:83:8e:bf:5c:eb:e0:35:39:72:6c:1e:71:9b: a0:a3:ea:65:3c:c5:2e:ae:ee:14:7b:d1:91:b3:5d: 7e:c9:58:15:7f:4f:32:69:b4:1a:b1:c2:63:a8:8b: 8a:eb:c5:84:dd:a7:26:10:ec:46:df:59:e7:67:19: d4:f6:17:cc:46:0c:20:c2:6d:64:b7:e3:fa:4f:ce: 63:e8:77:65:a8:fb:f9:45:bf:c8:a1:dd:0e:7f:c6: 83:ff:0a:54:80:9c:9e:0d:94:ec:7e:bf:48:b5:31: 00:a6:17:ab:ad:c5:09:6b:c2:2e:e6:ac:34:50:b7: fc:ef:73:44:65:23:3a:47:6b:6f:d2:8c:11:7e:bc: 36:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EA:C2:60:7D:A2:27:2B:C7:64:EA:EB:89:81:BC:4B:1F:F1:8F:94 X509v3 Authority Key Identifier: keyid:1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:51:43:9d:89:66:56:81:d3:18:77:d2:04:4e:c1:48:28:00: 71:74:fb:5a:93:80:16:a0:aa:d8:4e:a0:06:93:69:78:2e:df: 80:c4:8d:e8:b8:24:f4:0b:44:3c:40:d0:77:f6:76:b5:f9:7d: 92:da:68:a3:f3:e3:ca:a9:16:f7:59:90:87:5b:0c:a8:9f:e0: f6:4d:8f:52:90:b4:00:84:b3:8a:fc:95:bf:31:58:be:2f:96: 86:c2:d1:dd:26:9f:8b:7c:9a:b8:25:15:d2:5d:96:be:89:b3: c2:c2:76:bc:bf:7d:cd:56:51:85:6e:02:76:ab:66:8e:8a:2d: bf:77:78:47:43:4b:84:f3:3a:f3:e6:8d:fb:b2:b4:7a:c6:ff: 30:83:14:50:d0:f0:9e:db:63:a0:31:60:5f:39:d9:dd:17:6d: 26:dc:a0:23:c4:67:72:69:4c:fd:70:a8:40:e3:40:a9:42:63: 31:95:f3:32:11:8f:57:80:bc:bb:ea:94:8f:c5:01:89:99:42: c7:11:e0:7e:62:ec:4a:3e:29:08:18:60:2e:52:3b:3e:6a:29: 41:d4:06:fa:f1:42:c3:9f:4c:c2:ff:45:f4:bf:96:dd:21:96: 39:07:32:f5:f0:db:21:3e:bd:e5:28:f7:12:90:94:58:43:63: 97:cc:90:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvqsHzbgRO/jCaOycWiaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNzUzNjEzYjQyMjBmNjhmMmI1NDZkMDkyYTIzMGJlZDZl ZGFjYjgwHhcNMjUxMjA2MDMwMDU2WhcNMjUxMjA3MDMwMDU2WjAzMTEwLwYDVQQD Eyg3NWVhYzI2MDdkYTIyNzJiYzc2NGVhZWI4OTgxYmM0YjFmZjE4Zjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FPvNlvAIWz+8kuVek7HC/86n5Xn ndCsq8ep4PcOe0n6qCSdTO0RSSOpPO7GlWoH5rMEt7AIDngN0kHNA6mUrkAuWf61 Wpp1YcDwtzLsGNskF/iwVnschS79TP0KiqmwqhX1dBLg2YVgd9wzDEtmw3M8qGdR tIRKL4OOv1zr4DU5cmwecZugo+plPMUuru4Ue9GRs11+yVgVf08yabQascJjqIuK 68WE3acmEOxG31nnZxnU9hfMRgwgwm1kt+P6T85j6HdlqPv5Rb/Iod0Of8aD/wpU gJyeDZTsfr9ItTEApherrcUJa8Iu5qw0ULf873NEZSM6R2tv0owRfrw2pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXqwmB9oicrx2Tq64mBvEsf8Y+UMB8GA1UdIwQY MBaAFBp1NhO0Ig9o8rVG0JKiML7W7ay4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR25VMkU3UWlEMmp5dFViUWtxSXd2dGJ0ckxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83M2MzZTMtODFlNi00ZWI0LWE5NDYt NjA5ZmE0ZTU0MDY3LzEvR25VMkU3UWlEMmp5dFViUWtxSXd2dGJ0ckxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83M2MzZTMtODFlNi00ZWI0LWE5NDYtNjA5ZmE0ZTU0MDY3 LzEvR25VMkU3UWlEMmp5dFViUWtxSXd2dGJ0ckxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFFDnYlm VoHTGHfSBE7BSCgAcXT7WpOAFqCq2E6gBpNpeC7fgMSN6Lgk9AtEPEDQd/Z2tfl9 ktpoo/PjyqkW91mQh1sMqJ/g9k2PUpC0AISzivyVvzFYvi+WhsLR3Safi3yauCUV 0l2WvomzwsJ2vL99zVZRhW4Cdqtmjootv3d4R0NLhPM68+aN+7K0esb/MIMUUNDw nttjoDFgXznZ3RdtJtygI8RncmlM/XCoQONAqUJjMZXzMhGPV4C8u+qUj8UBiZlC xxHgfmLsSj4pCBhgLlI7PmopQdQG+vFCw59Mwv9F9L+W3SGWOQcy9fDbIT695Sj3 EpCUWENjl8yQIg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:48 2025 by rpki-client