This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft File: GYOwLhDKghv-G-bnUdks9z1tTAs.mft (raw, json) Hash identifier: HHc7G5B+ybxcdsG0gIOA3O99XEVlFWkB21rCM+Y4as8= Subject key identifier: 5C:77:FC:7C:C6:F1:B1:CC:29:71:F0:78:5B:22:D1:62:99:F0:EC:A5 Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B Certificate issuer: /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b Certificate serial: 019AF389B80E7D0A23075BA1DBD0E2AC7E52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft Manifest number: 0A75 Signing time: Sat 06 Dec 2025 12:01:20 +0000 Manifest this update: Sat 06 Dec 2025 12:01:20 +0000 Manifest next update: Sun 07 Dec 2025 12:01:20 +0000 Files and hashes: 1: GYOwLhDKghv-G-bnUdks9z1tTAs.crl (hash: sFMR7VhCI6fo+Wsr3Cop4ZZWtDLwm91iE0FMGLFoj/k=) 2: Ni5vtm0M3bjCTeGdNSnDAVszYLE.roa (hash: OME01+LPKlOdHdZ6RncStdMa9nK9uQNDcVGUK02vlcM=) 3: W5JHXs8zLwGJy4IeuX9pjg56ARk.roa (hash: oTtfujgJJ/+mSfltfqB/Zo/A05YAt91LC0YvRqH4YGg=) 4: YRiImFoNZVxU37wmm_1wL-_QqNY.roa (hash: xKbt/nH87U6XbMkmr2VvoP8n6E36rmfBqZRV+O9xVJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:b8:0e:7d:0a:23:07:5b:a1:db:d0:e2:ac:7e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b Validity Not Before: Dec 6 12:01:20 2025 GMT Not After : Dec 7 12:01:20 2025 GMT Subject: CN=5c77fc7cc6f1b1cc2971f0785b22d16299f0eca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fc:12:b1:fd:d2:93:65:b7:0c:a3:f1:24:6b: 9c:44:f6:11:e1:92:2b:e8:b1:ca:9b:72:49:29:fd: d9:5d:00:26:d3:e7:e9:13:5e:b2:23:f1:4d:c9:34: 5e:69:0d:60:b5:ff:91:5f:55:cb:c3:16:e5:02:73: ff:c0:6a:2c:2d:eb:be:fa:06:a8:63:59:42:16:ec: b4:7a:0b:3b:fb:b2:24:81:49:11:64:9f:9e:0d:a5: 44:c7:af:91:eb:c8:1b:1b:6a:e7:47:dc:e6:75:53: c9:26:9f:9f:81:bf:aa:09:1e:ca:10:3f:d9:e1:b1: ee:99:b5:4d:fb:47:0f:67:9a:94:6e:27:ac:6c:03: 19:5f:05:09:14:1b:5d:de:ba:19:db:9b:48:10:b3: 04:fd:cf:58:de:a1:5e:0b:cf:bf:1a:f0:4d:06:9e: 2a:82:5f:17:5c:7f:08:b2:d9:35:1d:3f:38:c3:56: ed:6a:3d:50:39:c0:33:10:53:f6:4f:62:6e:57:b9: 9b:c5:87:87:b6:6c:a2:f5:59:1c:9b:e9:57:a6:fa: de:5e:1c:ac:ed:0b:4b:1a:7e:42:0f:b4:06:91:b7: 65:d0:5d:be:13:af:35:ae:77:5c:54:d4:fa:31:4e: a8:44:2e:e6:46:bd:6f:c9:da:41:44:04:63:fb:0b: b8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:77:FC:7C:C6:F1:B1:CC:29:71:F0:78:5B:22:D1:62:99:F0:EC:A5 X509v3 Authority Key Identifier: keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6e:38:e0:51:3b:15:aa:06:a7:01:e6:26:ff:49:41:7e:5b: 4f:da:0c:be:13:54:d5:7c:41:4c:6f:0a:a0:da:7e:3d:92:59: 25:28:85:20:b7:57:9c:c6:ca:cd:94:10:49:64:2c:c0:e1:22: 33:f7:26:dd:1e:11:87:55:43:28:f9:66:a3:5a:47:38:c5:bd: 96:45:56:e3:04:4c:5b:68:bc:c8:d7:6d:fb:b0:15:19:f9:95: 35:aa:c7:e9:a8:d3:89:49:fc:e5:fe:fe:e0:37:66:68:a4:ed: c4:2e:37:53:a2:61:c3:9b:1e:c1:6a:db:de:4a:ca:97:b2:91: 45:cf:4b:7d:59:dd:f5:45:86:3e:e7:f4:62:35:1d:2d:61:56: 18:af:65:98:2a:64:69:81:26:88:f7:b0:39:72:23:fd:f4:bb: 4f:68:12:ef:c5:7c:c1:16:15:f1:fc:ff:47:b1:d4:6b:2e:f8: 84:af:99:d9:04:11:89:80:49:52:20:0b:14:58:f7:76:21:c6: 6d:4d:31:ad:eb:6d:98:e5:6c:73:f7:5a:02:5f:ae:7c:a3:37: 53:ea:14:14:59:95:3e:c6:8b:6e:37:03:64:1e:33:fa:c9:1e: 29:27:d8:fa:7d:01:90:34:69:e3:8d:d9:ad:d8:f3:6c:c5:7c: cc:df:8a:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibgOfQojB1uh29DirH5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ODNiMDJlMTBjYTgyMWJmZTFiZTZlNzUxZDkyY2Y3M2Q2 ZDRjMGIwHhcNMjUxMjA2MTIwMTIwWhcNMjUxMjA3MTIwMTIwWjAzMTEwLwYDVQQD Eyg1Yzc3ZmM3Y2M2ZjFiMWNjMjk3MWYwNzg1YjIyZDE2Mjk5ZjBlY2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PwSsf3Sk2W3DKPxJGucRPYR4ZIr 6LHKm3JJKf3ZXQAm0+fpE16yI/FNyTReaQ1gtf+RX1XLwxblAnP/wGosLeu++gao Y1lCFuy0egs7+7IkgUkRZJ+eDaVEx6+R68gbG2rnR9zmdVPJJp+fgb+qCR7KED/Z 4bHumbVN+0cPZ5qUbiesbAMZXwUJFBtd3roZ25tIELME/c9Y3qFeC8+/GvBNBp4q gl8XXH8Istk1HT84w1btaj1QOcAzEFP2T2JuV7mbxYeHtmyi9Vkcm+lXpvreXhys 7QtLGn5CD7QGkbdl0F2+E681rndcVNT6MU6oRC7mRr1vydpBRARj+wu4XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFx3/HzG8bHMKXHweFsi0WKZ8OylMB8GA1UdIwQY MBaAFBmDsC4QyoIb/hvm51HZLPc9bUwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wOTZjMTctZGQ4My00MDU4LTgyZTEt Y2RhMzYyNTYyOTZjLzEvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wOTZjMTctZGQ4My00MDU4LTgyZTEtY2RhMzYyNTYyOTZj LzEvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2444FE7 FaoGpwHmJv9JQX5bT9oMvhNU1XxBTG8KoNp+PZJZJSiFILdXnMbKzZQQSWQswOEi M/cm3R4Rh1VDKPlmo1pHOMW9lkVW4wRMW2i8yNdt+7AVGfmVNarH6ajTiUn85f7+ 4DdmaKTtxC43U6Jhw5sewWrb3krKl7KRRc9LfVnd9UWGPuf0YjUdLWFWGK9lmCpk aYEmiPewOXIj/fS7T2gS78V8wRYV8fz/R7HUay74hK+Z2QQRiYBJUiALFFj3diHG bU0xrettmOVsc/daAl+ufKM3U+oUFFmVPsaLbjcDZB4z+skeKSfY+n0BkDRp443Z rdjzbMV8zN+KeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:04:13 2025 by rpki-client