This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft File: gySHKx3b4yZPpmambx9OS7Uv2FQ.mft (raw, json) Hash identifier: SyZ79RvaYniQwzRzycO8J8PVXi+NSTIMuXdtYxb4jDU= Subject key identifier: 14:6D:09:23:7C:3E:EB:A9:A5:CA:FC:95:A9:EA:AB:7A:0C:4D:22:56 Authority key identifier: 83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54 Certificate issuer: /CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854 Certificate serial: 019AF6F8CFE23CB5FF838110F443D13DFAF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft Manifest number: 0EFE Signing time: Sun 07 Dec 2025 04:01:32 +0000 Manifest this update: Sun 07 Dec 2025 04:01:32 +0000 Manifest next update: Mon 08 Dec 2025 04:01:32 +0000 Files and hashes: 1: aKrIqq5FN4PK-r4L7QHTr_CX9Zo.roa (hash: Kv/OtykFBrcUjfDaS+Pe/Ir6WVEK4q26aEi7qXi5Xx0=) 2: gySHKx3b4yZPpmambx9OS7Uv2FQ.crl (hash: kEARGpEnzAZWa+PAZJdJqWUbcLS8ofovwPgtQChSRm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:cf:e2:3c:b5:ff:83:81:10:f4:43:d1:3d:fa:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854 Validity Not Before: Dec 7 04:01:32 2025 GMT Not After : Dec 8 04:01:32 2025 GMT Subject: CN=146d09237c3eeba9a5cafc95a9eaab7a0c4d2256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:46:8b:b2:ad:2e:92:fa:cc:90:cf:aa:96:c5: 16:bc:73:82:90:64:ad:a4:09:68:ad:c8:74:d6:ab: c6:5d:7a:2d:b6:e6:38:15:28:23:9e:36:25:c9:f7: d3:45:92:fb:cd:e9:9e:ae:1c:a9:c8:85:69:76:2e: fc:30:84:c8:b2:44:98:2d:0c:ff:12:3f:07:ec:6d: 96:63:9e:c5:11:6d:26:b8:a6:67:84:a2:1d:2c:9a: 03:25:80:c1:43:50:94:11:e0:62:bc:86:9e:2c:97: 51:cd:9d:90:c2:60:4e:2e:ef:a5:bd:42:ef:ef:b3: 76:21:92:39:a6:cd:57:9d:c2:ff:a8:be:80:a1:d6: 64:c7:ea:9d:3b:04:dd:14:a9:be:8f:3e:98:63:9d: 32:14:6a:d8:54:1d:06:74:9b:33:f8:51:59:5c:b1: d2:96:6d:9d:f2:6e:44:ef:f4:11:60:cb:f4:dd:83: 53:f8:18:75:65:e0:d7:d2:85:f9:40:df:62:a7:58: 8d:c8:25:d8:f7:2f:a2:38:d5:af:d6:f4:27:a3:5b: 88:c1:94:79:9e:ed:e0:7f:ea:3c:6e:83:02:e7:0c: cd:9b:fd:c9:d7:41:d3:45:3b:04:b0:75:33:94:48: 87:44:cf:76:2a:7d:22:22:11:28:47:2d:16:1e:e3: a0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6D:09:23:7C:3E:EB:A9:A5:CA:FC:95:A9:EA:AB:7A:0C:4D:22:56 X509v3 Authority Key Identifier: keyid:83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a5:a3:4e:ac:78:e1:a0:f0:ca:28:70:61:72:cc:71:5f:42: 61:e3:55:3f:09:c7:bc:f5:90:55:82:cd:46:70:1a:3e:51:ef: 1e:8f:d5:0b:f3:43:ec:6c:b5:62:a3:38:71:5b:fa:90:31:11: 2c:83:9e:80:fe:ee:2f:90:a0:83:df:f0:15:8c:34:bf:d5:30: 55:e6:57:bc:06:e0:25:02:38:38:2c:eb:c6:27:25:94:be:d7: 3a:41:d4:23:43:c7:b3:88:be:20:ad:b0:ef:70:15:fa:a3:ba: 32:28:3e:8b:f6:b8:69:dd:99:6a:c5:42:04:38:b6:72:07:37: 01:ba:6b:c9:ed:9f:47:29:de:fc:b8:92:60:78:31:42:45:ed: 75:d4:c2:b1:bb:66:94:66:a0:62:8c:9c:0d:92:ea:73:4b:ff: 43:13:5e:c8:33:9c:25:09:0c:d9:7f:ff:a6:2e:96:0a:51:c7: 9b:d0:83:72:ac:ee:93:6a:56:9f:2e:37:de:8b:6f:24:19:90: c7:ed:be:1a:e0:10:ea:e2:ab:9f:a3:a6:c6:32:0c:23:22:f7: be:75:0b:cc:a1:04:75:d1:f6:6f:d5:b9:8b:c9:df:79:65:dd: 9e:ab:a3:52:1c:91:13:f2:ea:e1:1b:41:a3:52:35:8b:c4:8c: 86:58:6f:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+M/iPLX/g4EQ9EPRPfr2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMjQ4NzJiMWRkYmUzMjY0ZmE2NjZhNjZmMWY0ZTRiYjUy ZmQ4NTQwHhcNMjUxMjA3MDQwMTMyWhcNMjUxMjA4MDQwMTMyWjAzMTEwLwYDVQQD EygxNDZkMDkyMzdjM2VlYmE5YTVjYWZjOTVhOWVhYWI3YTBjNGQyMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEaLsq0ukvrMkM+qlsUWvHOCkGSt pAlorch01qvGXXottuY4FSgjnjYlyffTRZL7zemerhypyIVpdi78MITIskSYLQz/ Ej8H7G2WY57FEW0muKZnhKIdLJoDJYDBQ1CUEeBivIaeLJdRzZ2QwmBOLu+lvULv 77N2IZI5ps1XncL/qL6AodZkx+qdOwTdFKm+jz6YY50yFGrYVB0GdJsz+FFZXLHS lm2d8m5E7/QRYMv03YNT+Bh1ZeDX0oX5QN9ip1iNyCXY9y+iONWv1vQno1uIwZR5 nu3gf+o8boMC5wzNm/3J10HTRTsEsHUzlEiHRM92Kn0iIhEoRy0WHuOg1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRtCSN8Puuppcr8lanqq3oMTSJWMB8GA1UdIwQY MBaAFIMkhysd2+MmT6Zmpm8fTku1L9hUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3lTSEt4M2I0eVpQcG1hbWJ4OU9TN1V2MkZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83NzhjNjYtOWE1MS00M2M2LTkyYTct Zjg3YjYyZmI2MWZmLzEvZ3lTSEt4M2I0eVpQcG1hbWJ4OU9TN1V2MkZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS83NzhjNjYtOWE1MS00M2M2LTkyYTctZjg3YjYyZmI2MWZm LzEvZ3lTSEt4M2I0eVpQcG1hbWJ4OU9TN1V2MkZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaWjTqx4 4aDwyihwYXLMcV9CYeNVPwnHvPWQVYLNRnAaPlHvHo/VC/ND7Gy1YqM4cVv6kDER LIOegP7uL5Cgg9/wFYw0v9UwVeZXvAbgJQI4OCzrxicllL7XOkHUI0PHs4i+IK2w 73AV+qO6Mig+i/a4ad2ZasVCBDi2cgc3Abprye2fRyne/LiSYHgxQkXtddTCsbtm lGagYoycDZLqc0v/QxNeyDOcJQkM2X//pi6WClHHm9CDcqzuk2pWny433otvJBmQ x+2+GuAQ6uKrn6OmxjIMIyL3vnULzKEEddH2b9W5i8nfeWXdnqujUhyRE/Lq4RtB o1I1i8SMhlhvDg== -----END CERTIFICATE-----Generated at Sun Dec 7 08:36:10 2025 by rpki-client