This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft File: gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json) Hash identifier: 9QQMetMl1rGZ+BCgfrduq+O38HCQi1C46hTV6+G/HIw= Subject key identifier: 78:16:EC:ED:04:08:D7:B5:F6:28:50:6E:48:8C:63:31:08:78:C9:3D Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30 Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630 Certificate serial: 019AF1D1BB1C1B6D4978B90B68649F6F1EC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 04:00:45 +0000 Manifest this update: Sat 06 Dec 2025 04:00:45 +0000 Manifest next update: Sun 07 Dec 2025 04:00:45 +0000 Files and hashes: 1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: 7k0U6OFKU0giUG2CENJMFF7N1RHyFMV+v9+9DQFc6eM=) 2: salIHPhc1-U7JhA1wMdzrHIbzfs.roa (hash: nprIOebSdd8+BuExt2/8vOEgtfIuud16f9G3kU2RIx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:bb:1c:1b:6d:49:78:b9:0b:68:64:9f:6f:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630 Validity Not Before: Dec 6 04:00:45 2025 GMT Not After : Dec 7 04:00:45 2025 GMT Subject: CN=7816eced0408d7b5f628506e488c63310878c93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:06:b5:47:f4:36:4a:38:2a:ec:10:83:93:81: 76:91:63:68:87:74:26:37:29:7e:29:be:55:fe:0b: 98:22:24:8c:dd:c2:28:b8:91:8a:17:1f:c1:da:14: c0:92:32:f4:80:7e:82:e4:83:10:b9:87:7c:7c:21: cf:02:93:f6:25:e3:f3:b8:6f:be:c4:d3:b9:0e:5e: 55:1d:40:81:7a:b4:3c:29:fa:de:5d:a9:f2:b7:13: 0f:d2:8e:6e:67:d0:cc:7d:57:5e:93:9d:85:88:1d: 9a:2f:4e:9d:29:d6:7c:85:68:31:4d:48:4c:9e:79: b1:41:1f:66:ec:78:4a:c9:c3:70:b0:56:80:52:ff: 76:16:4a:0b:3f:ac:67:55:2a:48:c5:a1:0c:46:26: 95:22:35:61:00:82:d2:ab:32:11:04:ea:d9:04:63: b4:3a:c1:c7:97:7d:bf:51:1c:1f:75:f7:53:46:fe: e5:fd:9a:74:e9:13:c9:49:fd:8d:f5:71:e6:6e:36: 67:31:5c:56:16:93:02:c2:44:a5:7f:61:b5:7e:5d: 2e:f0:ae:ed:a1:8c:e5:c9:3d:f4:c6:1d:86:19:17: 7f:dd:60:86:d6:03:00:8d:0b:13:d0:92:bb:49:2f: c4:48:c5:67:f1:32:ae:08:ca:14:70:55:6d:e0:b7: 98:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:16:EC:ED:04:08:D7:B5:F6:28:50:6E:48:8C:63:31:08:78:C9:3D X509v3 Authority Key Identifier: keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:7d:dc:3a:e3:4d:bd:29:f8:72:d1:79:55:b2:9e:0b:50:50: 5a:7a:82:37:04:32:52:a2:0f:0b:31:3c:b3:85:8b:45:27:c0: 24:60:11:95:0a:28:34:5c:c5:5a:bf:39:50:5a:04:43:c5:7a: a6:c9:5f:f3:ec:2e:1f:87:d1:9c:38:69:ca:49:83:6c:37:0f: ad:27:d2:c3:d8:a0:a5:ca:16:fa:9b:d3:fd:24:f9:30:6c:5c: 74:e7:0e:78:99:41:36:01:77:d5:79:0a:e4:dd:7a:74:1f:c7: 8c:f2:92:61:32:2d:49:a2:cc:e9:77:29:ba:95:ef:a4:ad:a4: 9c:32:2c:12:25:bd:33:0b:6b:5a:9b:c6:06:d4:b3:c3:19:6d: b8:df:ce:ae:a6:96:1e:66:5e:e9:57:bf:6e:88:4a:a6:88:a0: b8:02:36:da:31:2d:81:5e:7e:05:e0:4e:8e:e4:fd:db:1b:56: 4e:30:ae:e7:0d:87:e7:ce:f2:0b:b1:62:42:34:90:13:6c:26: e8:48:d6:81:a5:d5:97:54:55:72:e5:e7:38:e2:e1:46:b0:cd: 27:50:8b:29:1d:68:d4:ed:21:5b:2c:d5:7d:bf:aa:e7:1e:2a: 71:2e:8f:99:c8:73:b8:fb:82:0c:73:28:4d:cc:d6:00:20:62: 98:b7:e6:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bscG21JeLkLaGSfbx7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYWI0YzA5NDViNzM4ZWRkYTA1ODNhMjc0YjYzYzFiODY3 M2E2MzAwHhcNMjUxMjA2MDQwMDQ1WhcNMjUxMjA3MDQwMDQ1WjAzMTEwLwYDVQQD Eyg3ODE2ZWNlZDA0MDhkN2I1ZjYyODUwNmU0ODhjNjMzMTA4NzhjOTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQa1R/Q2Sjgq7BCDk4F2kWNoh3Qm Nyl+Kb5V/guYIiSM3cIouJGKFx/B2hTAkjL0gH6C5IMQuYd8fCHPApP2JePzuG++ xNO5Dl5VHUCBerQ8KfreXanytxMP0o5uZ9DMfVdek52FiB2aL06dKdZ8hWgxTUhM nnmxQR9m7HhKycNwsFaAUv92FkoLP6xnVSpIxaEMRiaVIjVhAILSqzIRBOrZBGO0 OsHHl32/URwfdfdTRv7l/Zp06RPJSf2N9XHmbjZnMVxWFpMCwkSlf2G1fl0u8K7t oYzlyT30xh2GGRd/3WCG1gMAjQsT0JK7SS/ESMVn8TKuCMoUcFVt4LeYiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgW7O0ECNe19ihQbkiMYzEIeMk9MB8GA1UdIwQY MBaAFICrTAlFtzjt2gWDonS2PBuGc6YwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0t0TUNVVzNPTzNhQllPaWRMWThHNFp6cGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mNmZlZTYtYzBhMi00YTAzLWE5ODEt ZjVmZGEwZWEzMDBkLzEvZ0t0TUNVVzNPTzNhQllPaWRMWThHNFp6cGpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9mNmZlZTYtYzBhMi00YTAzLWE5ODEtZjVmZGEwZWEzMDBk LzEvZ0t0TUNVVzNPTzNhQllPaWRMWThHNFp6cGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALn3cOuNN vSn4ctF5VbKeC1BQWnqCNwQyUqIPCzE8s4WLRSfAJGARlQooNFzFWr85UFoEQ8V6 pslf8+wuH4fRnDhpykmDbDcPrSfSw9igpcoW+pvT/ST5MGxcdOcOeJlBNgF31XkK 5N16dB/HjPKSYTItSaLM6XcpupXvpK2knDIsEiW9MwtrWpvGBtSzwxltuN/OrqaW HmZe6Ve/bohKpoiguAI22jEtgV5+BeBOjuT92xtWTjCu5w2H587yC7FiQjSQE2wm 6EjWgaXVl1RVcuXnOOLhRrDNJ1CLKR1o1O0hWyzVfb+q5x4qcS6PmchzuPuCDHMo TczWACBimLfmgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:05 2025 by rpki-client