This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft File: gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft (raw, json) Hash identifier: K5QYMziowcpFMA6YouxvxCE+e5ElY8mJfip3Z6TUApI= Subject key identifier: D5:74:0B:59:D2:EE:42:7C:CD:0F:24:0A:41:74:D5:BC:EC:33:8A:2E Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3 Certificate issuer: /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3 Certificate serial: 019AF12E6F476E149443E9D351F40EBF870A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft Manifest number: 0C09 Signing time: Sat 06 Dec 2025 01:02:23 +0000 Manifest this update: Sat 06 Dec 2025 01:02:23 +0000 Manifest next update: Sun 07 Dec 2025 01:02:23 +0000 Files and hashes: 1: 2TNhAlAEfdOvgjGX47xcBe0ec8Q.roa (hash: F4E+yi6wuov8nVtjH23YAurT+H1Svha6Z7BC42V28wo=) 2: FmQ80l0dYXHJ_YszXOyTcMs1MTU.roa (hash: fSjkPRX7Cv4pegplKIsFbpWztpRWIWp5drmzYAiL38E=) 3: M2T_h-HT-LjV3MxmhC3AaCL7DR0.roa (hash: JUe0w/L/a5YNGKCvQ5Od3tGqP8OCxA0GZG5F9koR5ws=) 4: gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl (hash: cFJI1ljMFxZ9fFJHZB1VWAARrusS7NfDVBDA9vuxoEE=) 5: hfZ9JmRYsdrX_WsZKnGJG03yjoY.roa (hash: KsXjtR8VJ0gF1kTfS5RfLRCRZJ2gEjdzhxwY2pQ41Hg=) 6: rkIPvHIufbwOu-FRJgP9G66-3w0.roa (hash: hME8qBgEoqk0HX2Ob9xc7hNEC72YuwxTDwDbWd+KQQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:6f:47:6e:14:94:43:e9:d3:51:f4:0e:bf:87:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3 Validity Not Before: Dec 6 01:02:23 2025 GMT Not After : Dec 7 01:02:23 2025 GMT Subject: CN=d5740b59d2ee427ccd0f240a4174d5bcec338a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2b:96:9e:42:3c:f3:d4:15:9d:87:89:a9:86: 5f:ab:17:d3:40:fa:91:7d:4d:6f:ef:4b:de:63:c9: b4:61:80:d8:ae:5d:f7:27:6b:93:01:0b:33:26:fa: 41:6b:5f:b0:c9:a8:92:b2:aa:8b:b9:79:f6:92:a8: 6a:1f:8b:26:a9:c8:78:bc:d2:a3:ab:38:51:34:23: 37:e3:17:ab:cc:c9:32:65:52:22:da:40:fb:fe:1d: 9d:d8:55:35:8b:96:0a:98:79:0d:36:b7:73:0c:f7: 0a:84:42:98:c0:fc:9e:cd:78:fa:d4:44:c7:32:b4: 9b:06:91:b8:d8:53:b6:9e:27:5f:09:ad:21:d6:15: 3d:68:fe:57:9b:da:54:4a:98:81:48:b6:bd:2e:1f: 7a:46:17:f1:22:b2:42:ed:13:4a:bf:69:7a:7a:ef: 84:cc:b2:94:a4:49:22:d0:af:11:f9:71:f6:a8:ba: 6b:29:41:f5:14:fe:dc:57:2d:12:48:de:94:77:5d: 73:4b:1a:67:04:7c:ef:d6:56:d9:17:19:fb:38:1a: 7b:7a:b1:77:1e:58:91:16:3d:4b:35:cc:da:d6:91: 88:21:64:8a:ea:0a:da:e4:af:45:14:81:2d:1b:6d: 73:26:06:a0:03:5e:79:6b:6b:b2:bc:d6:f6:11:66: 25:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:74:0B:59:D2:EE:42:7C:CD:0F:24:0A:41:74:D5:BC:EC:33:8A:2E X509v3 Authority Key Identifier: keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:65:c4:5a:94:db:10:ca:42:46:95:ac:c8:9f:fb:8d:5e:35: 9d:ae:ff:19:72:24:24:f3:eb:3f:42:3a:80:32:a6:98:5d:ff: 0c:da:f9:3e:20:31:a0:cd:70:93:18:38:6b:c8:fe:ec:bf:ee: 96:41:5f:71:b4:b6:ca:41:16:50:d8:69:a0:f9:63:fc:f3:d4: 92:37:94:f0:fc:1b:96:34:f8:d0:51:28:46:5a:6b:c6:54:15: 6f:52:09:86:83:0a:b1:4b:a1:d0:5a:67:b9:19:4a:05:71:cf: 64:38:e4:f5:33:84:a9:3b:26:10:8d:eb:6f:42:3d:6f:c0:22: cc:3d:68:51:5c:b6:14:46:44:e6:8f:85:12:10:8f:54:99:e4: 4c:7d:48:2d:ff:da:57:fc:bd:e2:60:50:3b:50:8a:11:46:94: 98:ab:9a:4d:e2:05:b6:e1:c5:04:ff:d2:33:50:74:18:5a:cf: 53:38:09:a4:d9:db:37:d1:f7:6f:c7:cd:c0:e3:7f:ba:5e:0b: f4:87:b0:c5:25:33:d5:8b:48:f1:13:93:8b:67:70:da:da:91: 02:83:a9:75:05:eb:63:04:85:42:fa:3b:0b:aa:eb:8f:9a:28: 52:53:9d:45:55:26:f2:e6:be:83:f3:52:0b:32:c3:91:71:66: 15:2d:86:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLm9HbhSUQ+nTUfQOv4cKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNmQyMjBiMmI1YTQ2ZmJlYjI3ZWYyZDk2OWZhMjFkZDMz OGM1YjMwHhcNMjUxMjA2MDEwMjIzWhcNMjUxMjA3MDEwMjIzWjAzMTEwLwYDVQQD EyhkNTc0MGI1OWQyZWU0MjdjY2QwZjI0MGE0MTc0ZDViY2VjMzM4YTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiuWnkI889QVnYeJqYZfqxfTQPqR fU1v70veY8m0YYDYrl33J2uTAQszJvpBa1+wyaiSsqqLuXn2kqhqH4smqch4vNKj qzhRNCM34xerzMkyZVIi2kD7/h2d2FU1i5YKmHkNNrdzDPcKhEKYwPyezXj61ETH MrSbBpG42FO2nidfCa0h1hU9aP5Xm9pUSpiBSLa9Lh96RhfxIrJC7RNKv2l6eu+E zLKUpEki0K8R+XH2qLprKUH1FP7cVy0SSN6Ud11zSxpnBHzv1lbZFxn7OBp7erF3 HliRFj1LNcza1pGIIWSK6gra5K9FFIEtG21zJgagA155a2uyvNb2EWYl0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNV0C1nS7kJ8zQ8kCkF01bzsM4ouMB8GA1UdIwQY MBaAFIFtIgsrWkb76yfvLZafoh3TOMWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTct ZTk3ODIwNDFjYzI0LzEvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTctZTk3ODIwNDFjYzI0 LzEvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmXEWpTb EMpCRpWsyJ/7jV41na7/GXIkJPPrP0I6gDKmmF3/DNr5PiAxoM1wkxg4a8j+7L/u lkFfcbS2ykEWUNhpoPlj/PPUkjeU8PwbljT40FEoRlprxlQVb1IJhoMKsUuh0Fpn uRlKBXHPZDjk9TOEqTsmEI3rb0I9b8AizD1oUVy2FEZE5o+FEhCPVJnkTH1ILf/a V/y94mBQO1CKEUaUmKuaTeIFtuHFBP/SM1B0GFrPUzgJpNnbN9H3b8fNwON/ul4L 9IewxSUz1YtI8ROTi2dw2tqRAoOpdQXrYwSFQvo7C6rrj5ooUlOdRVUm8ua+g/NS CzLDkXFmFS2GWA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:44 2025 by rpki-client