This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft File: gJ7XCYERxniJisDwrsl_3Ts7bQI.mft (raw, json) Hash identifier: dSgtVRiPj9mkUlBujMN87oo/5bIuFTFkOcgMQEAdMe4= Subject key identifier: 03:93:69:7C:77:1A:BB:67:79:A9:84:30:3E:21:BE:C8:BA:E1:3C:F4 Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02 Certificate issuer: /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02 Certificate serial: 019AF841E3C8EFE22AB83B654FF0A779B482 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 10:00:58 +0000 Manifest this update: Sun 07 Dec 2025 10:00:58 +0000 Manifest next update: Mon 08 Dec 2025 10:00:58 +0000 Files and hashes: 1: 2rggwcJ8T590aTL5AQq3jnB50qI.roa (hash: Qg0ek4Wah1pBMdvyjGZuqYduAMoQDr2QwiISx+slnhM=) 2: gJ7XCYERxniJisDwrsl_3Ts7bQI.crl (hash: 08H0DVZ5Pe3ovnlhTCM/F4MXR8vOdpr8VeVlpll0ePs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:41:e3:c8:ef:e2:2a:b8:3b:65:4f:f0:a7:79:b4:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02 Validity Not Before: Dec 7 10:00:58 2025 GMT Not After : Dec 8 10:00:58 2025 GMT Subject: CN=0393697c771abb6779a984303e21bec8bae13cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:70:5f:54:d1:22:d5:7a:a2:7a:fa:46:6e:20: 6f:dc:85:c8:49:dd:75:d1:ea:e6:6a:f1:f1:03:98: d1:67:4f:03:9d:f3:60:83:fa:53:35:9c:81:b3:2f: a5:c5:28:cf:10:4f:fc:d0:b1:70:c2:e5:dd:07:f3: 69:a9:62:12:3b:6a:be:d1:c7:1b:b5:e1:9e:cb:99: d2:bd:b9:d9:b4:a2:02:e9:3e:c5:a4:fa:e8:e4:16: 7f:b8:ec:23:54:b3:9a:94:b2:17:89:b8:08:3e:01: 9b:cf:f2:27:11:8f:7b:38:2b:84:e9:5f:a6:e4:0c: ba:cd:a4:95:17:1a:0b:33:ea:82:a2:0a:d4:d9:2a: f5:b2:4e:f0:c6:4e:2a:c6:b8:05:a5:97:4d:e6:6f: ec:0b:36:1c:bc:2e:4c:94:15:c4:6b:80:0f:b4:19: 76:2a:ab:ef:4a:39:e4:ae:4c:d1:69:8e:ed:d7:33: cc:16:c1:a9:1b:dd:c9:1f:1a:76:08:1e:3d:4c:b9: 13:0f:e4:52:f4:e3:2a:98:eb:80:e4:c5:87:ac:d5: 78:0e:e5:95:22:58:77:41:73:24:df:92:8e:d9:ce: 43:ff:03:47:81:fe:7d:9b:32:22:aa:73:09:0a:19: be:d6:3c:94:9c:33:97:60:12:8f:3c:c0:d6:d4:33: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:93:69:7C:77:1A:BB:67:79:A9:84:30:3E:21:BE:C8:BA:E1:3C:F4 X509v3 Authority Key Identifier: keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6f:df:6d:fa:f7:0e:13:ef:4d:cc:f9:44:36:04:32:8d:68: cb:f1:3e:b8:14:d7:63:08:a8:31:7b:3c:56:02:6e:b6:63:5e: 08:73:62:b1:a6:67:35:af:01:de:8d:15:89:aa:15:3e:54:57: 9a:4a:0b:ce:2c:3a:9c:9b:80:5d:35:44:3f:01:31:df:5a:20: 69:4a:29:b2:2a:5d:83:85:b9:29:a0:18:75:f4:e4:64:ce:c2: d4:cf:22:d0:8b:fc:e1:c5:f0:ac:20:37:a3:b4:89:b8:de:e0: 63:18:fa:3c:f2:96:73:d0:37:0a:79:00:f4:a2:ee:61:06:b0: 24:78:18:af:50:45:02:e0:46:47:82:fe:2e:ca:c2:2a:4d:7e: 1b:9c:b5:6b:b4:5c:2a:da:82:99:a5:c1:02:49:5a:27:09:a8: 2a:a4:20:68:4f:9c:63:ad:7b:c8:3e:2f:6b:01:e3:3a:45:dc: f9:3d:52:10:77:bb:77:d4:0e:b3:e2:b3:79:ea:78:47:16:d9: c2:10:85:bb:b2:92:26:47:df:9a:05:74:c4:1c:d4:a2:05:32: cb:d2:cb:25:e3:53:31:c7:29:dd:dc:3d:3a:8b:a9:36:8d:f4: 1f:05:43:bc:4b:c6:f2:58:63:26:f3:85:21:5e:66:bf:9e:ad: 23:74:be:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4QePI7+IquDtlT/CnebSCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOWVkNzA5ODExMWM2Nzg4OThhYzBmMGFlYzk3ZmRkM2Iz YjZkMDIwHhcNMjUxMjA3MTAwMDU4WhcNMjUxMjA4MTAwMDU4WjAzMTEwLwYDVQQD EygwMzkzNjk3Yzc3MWFiYjY3NzlhOTg0MzAzZTIxYmVjOGJhZTEzY2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHBfVNEi1XqievpGbiBv3IXISd11 0ermavHxA5jRZ08DnfNgg/pTNZyBsy+lxSjPEE/80LFwwuXdB/NpqWISO2q+0ccb teGey5nSvbnZtKIC6T7FpPro5BZ/uOwjVLOalLIXibgIPgGbz/InEY97OCuE6V+m 5Ay6zaSVFxoLM+qCogrU2Sr1sk7wxk4qxrgFpZdN5m/sCzYcvC5MlBXEa4APtBl2 KqvvSjnkrkzRaY7t1zPMFsGpG93JHxp2CB49TLkTD+RS9OMqmOuA5MWHrNV4DuWV Ilh3QXMk35KO2c5D/wNHgf59mzIiqnMJChm+1jyUnDOXYBKPPMDW1DNiqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOTaXx3GrtneamEMD4hvsi64Tz0MB8GA1UdIwQY MBaAFICe1wmBEcZ4iYrA8K7Jf907O20CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0o3WENZRVJ4bmlKaXNEd3JzbF8zVHM3YlFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iNGE0NzctMDhhMi00ZThjLThjNGQt MDEwY2Q5MDc5YWJmLzEvZ0o3WENZRVJ4bmlKaXNEd3JzbF8zVHM3YlFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9iNGE0NzctMDhhMi00ZThjLThjNGQtMDEwY2Q5MDc5YWJm LzEvZ0o3WENZRVJ4bmlKaXNEd3JzbF8zVHM3YlFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIG/fbfr3 DhPvTcz5RDYEMo1oy/E+uBTXYwioMXs8VgJutmNeCHNisaZnNa8B3o0ViaoVPlRX mkoLziw6nJuAXTVEPwEx31ogaUopsipdg4W5KaAYdfTkZM7C1M8i0Iv84cXwrCA3 o7SJuN7gYxj6PPKWc9A3CnkA9KLuYQawJHgYr1BFAuBGR4L+LsrCKk1+G5y1a7Rc KtqCmaXBAklaJwmoKqQgaE+cY617yD4vawHjOkXc+T1SEHe7d9QOs+Kzeep4RxbZ whCFu7KSJkffmgV0xBzUogUyy9LLJeNTMccp3dw9OoupNo30HwVDvEvG8lhjJvOF IV5mv56tI3S+zA== -----END CERTIFICATE-----Generated at Sun Dec 7 14:42:55 2025 by rpki-client