This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft File: pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json) Hash identifier: lpyaM+HIft5fKMTvyBdw4eHgEnYhWLbauT2m/G69/dM= Subject key identifier: FD:E0:E9:6A:6D:51:C8:99:41:B2:2E:07:13:C0:87:40:4D:DB:43:5D Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a Certificate serial: 019AF42DBF5C3271F30CB648A4EC7FA5A378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 15:00:30 +0000 Manifest this update: Sat 06 Dec 2025 15:00:30 +0000 Manifest next update: Sun 07 Dec 2025 15:00:30 +0000 Files and hashes: 1: 1-KYSj48sD3jE1Gzvv9kFu9QJGtY.roa (hash: H4x96iKua2b3UDRaB1WSf9rakbeSZ8QQwLawXzA3kBc=) 2: kroCcDuLJiEm7WFd8GtQQzKukrk.roa (hash: C4/C9Nc89baYiSQf8o8T95z101LyK5Fm6SS+L143NqQ=) 3: oWikPPO3V0QeY0v8vBGwReraGUs.roa (hash: xHZgaltZECGHYZXkWizrY9iMMJdCdaYUNGOTHUNFxDM=) 4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: 5SoNHrlMyYb9HqmRCwwqBciWYjjAagRdu9+UISsFJjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:bf:5c:32:71:f3:0c:b6:48:a4:ec:7f:a5:a3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a Validity Not Before: Dec 6 15:00:30 2025 GMT Not After : Dec 7 15:00:30 2025 GMT Subject: CN=fde0e96a6d51c89941b22e0713c087404ddb435d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a0:2a:00:fc:57:5d:29:5e:f8:d3:d7:37:a1: 46:24:3e:2f:46:dc:61:06:5e:c4:9f:5c:7f:dd:fd: 68:93:d4:08:05:e5:81:4a:fb:e2:06:c8:96:33:04: 07:88:eb:cc:5c:2e:23:ca:b8:03:54:b3:97:cf:21: a4:07:79:1c:2c:fe:ac:9a:ee:d2:ce:34:ee:0c:05: e5:e8:6d:86:43:5f:14:70:75:7c:8e:da:1a:1c:5e: dd:b9:44:ec:22:47:43:fc:84:65:53:a3:56:f5:82: 1b:c7:2c:ef:57:d0:be:82:23:de:4c:d0:dd:75:db: 37:e3:55:f6:2a:6f:6e:c5:5f:b7:b0:22:c6:f5:68: e4:75:1c:21:eb:86:04:c5:5a:8c:67:30:b6:59:9b: 3e:8b:3a:aa:83:ef:a9:4f:15:2c:08:8d:22:7c:7f: 12:58:5f:1d:ad:26:29:f4:7e:08:3d:d9:c1:6c:eb: 18:28:a8:4b:df:84:8b:70:ac:51:92:79:00:1c:cb: f1:bd:9c:26:21:2f:db:da:c6:72:c6:83:05:b2:24: df:ed:ae:d4:82:4e:a4:1c:e3:a4:b2:39:96:f8:ae: b9:40:8c:7f:42:8c:1b:39:8d:96:43:09:0a:44:7e: 3e:85:c1:71:fb:6a:a4:0a:c6:6c:0c:32:92:7c:4e: 9f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E0:E9:6A:6D:51:C8:99:41:B2:2E:07:13:C0:87:40:4D:DB:43:5D X509v3 Authority Key Identifier: keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:7b:ed:04:5a:fe:2a:fc:0a:85:24:b5:e4:6d:e9:57:01:fb: 52:63:2a:8e:10:6d:3d:95:eb:02:4c:dd:68:37:73:27:2c:d6: de:2a:4a:b1:1b:14:06:36:90:dd:f0:5f:34:41:93:74:9f:21: 5f:11:b9:c3:9c:44:1a:2e:c8:cc:bd:e3:ad:98:cf:bc:56:81: 07:2a:f6:81:ac:a5:cc:68:f3:3c:80:f3:44:74:d5:7d:e4:9d: 82:87:2c:a2:6d:0f:02:0a:ad:69:c5:c0:c0:53:98:30:e6:0b: 1f:89:0b:ad:b1:eb:1a:0a:65:49:fd:08:20:40:9b:46:75:5e: 63:f6:72:6e:85:fc:1d:54:cb:ab:00:21:fa:54:6f:8f:8d:e6: cc:65:9a:fb:9a:c4:d1:fa:62:3f:bb:48:df:92:15:b1:a9:a2: b4:e4:76:79:f5:02:e2:14:2f:2f:a7:88:6a:6c:2f:30:80:89: da:b7:3b:46:68:23:c4:d5:ee:e1:08:3c:8c:d7:6a:6e:58:61: fc:d4:52:03:16:88:38:40:4c:45:24:18:94:21:19:a4:7f:6b: 8a:e4:47:f9:3d:0d:2d:3a:cd:28:d1:9d:06:2d:11:1d:e1:e7: 40:1f:00:90:5a:e9:68:56:f2:b3:67:da:7a:b6:94:4f:68:7a: 40:f0:0f:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lb9cMnHzDLZIpOx/paN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MmZjNjBkMzZlMjhiYjhkZjE0NWM4NGFjYWIxOWNmYTUz YjAyNWEwHhcNMjUxMjA2MTUwMDMwWhcNMjUxMjA3MTUwMDMwWjAzMTEwLwYDVQQD EyhmZGUwZTk2YTZkNTFjODk5NDFiMjJlMDcxM2MwODc0MDRkZGI0MzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqAqAPxXXSle+NPXN6FGJD4vRtxh Bl7En1x/3f1ok9QIBeWBSvviBsiWMwQHiOvMXC4jyrgDVLOXzyGkB3kcLP6smu7S zjTuDAXl6G2GQ18UcHV8jtoaHF7duUTsIkdD/IRlU6NW9YIbxyzvV9C+giPeTNDd dds341X2Km9uxV+3sCLG9WjkdRwh64YExVqMZzC2WZs+izqqg++pTxUsCI0ifH8S WF8drSYp9H4IPdnBbOsYKKhL34SLcKxRknkAHMvxvZwmIS/b2sZyxoMFsiTf7a7U gk6kHOOksjmW+K65QIx/QowbOY2WQwkKRH4+hcFx+2qkCsZsDDKSfE6frQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3g6WptUciZQbIuBxPAh0BN20NdMB8GA1UdIwQY MBaAFKUvxg024ou43xRchKyrGc+lOwJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mMGI5NjAtODZkOC00MDYyLWE1OTct OWI0YTJkNWYzYTc2LzEvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9mMGI5NjAtODZkOC00MDYyLWE1OTctOWI0YTJkNWYzYTc2 LzEvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHvtBFr+ KvwKhSS15G3pVwH7UmMqjhBtPZXrAkzdaDdzJyzW3ipKsRsUBjaQ3fBfNEGTdJ8h XxG5w5xEGi7IzL3jrZjPvFaBByr2gaylzGjzPIDzRHTVfeSdgocsom0PAgqtacXA wFOYMOYLH4kLrbHrGgplSf0IIECbRnVeY/ZyboX8HVTLqwAh+lRvj43mzGWa+5rE 0fpiP7tI35IVsamitOR2efUC4hQvL6eIamwvMICJ2rc7RmgjxNXu4Qg8jNdqblhh /NRSAxaIOEBMRSQYlCEZpH9riuRH+T0NLTrNKNGdBi0RHeHnQB8AkFrpaFbys2fa eraUT2h6QPAP4w== -----END CERTIFICATE-----Generated at Sat Dec 6 18:06:00 2025 by rpki-client