This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft File: gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft (raw, json) Hash identifier: 28bb9kU2Id559l4hV65MA5PTYMjuxZ4G1qEB1Hv0OFM= Subject key identifier: 51:21:0F:6B:1A:EC:AE:25:C4:00:E8:E8:BE:A7:05:6B:25:24:21:0B Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3 Certificate issuer: /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3 Certificate serial: 019B2D0C892DB21A8EFDF0676205413E68AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft Manifest number: 0C28 Signing time: Wed 17 Dec 2025 16:02:34 +0000 Manifest this update: Wed 17 Dec 2025 16:02:34 +0000 Manifest next update: Thu 18 Dec 2025 16:02:34 +0000 Files and hashes: 1: 2TNhAlAEfdOvgjGX47xcBe0ec8Q.roa (hash: F4E+yi6wuov8nVtjH23YAurT+H1Svha6Z7BC42V28wo=) 2: FmQ80l0dYXHJ_YszXOyTcMs1MTU.roa (hash: fSjkPRX7Cv4pegplKIsFbpWztpRWIWp5drmzYAiL38E=) 3: M2T_h-HT-LjV3MxmhC3AaCL7DR0.roa (hash: JUe0w/L/a5YNGKCvQ5Od3tGqP8OCxA0GZG5F9koR5ws=) 4: gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl (hash: uCNCr2kWB0M42FnqSzIKJ+PYXF6Kel8QO+6F6ZmhkMI=) 5: hfZ9JmRYsdrX_WsZKnGJG03yjoY.roa (hash: KsXjtR8VJ0gF1kTfS5RfLRCRZJ2gEjdzhxwY2pQ41Hg=) 6: rkIPvHIufbwOu-FRJgP9G66-3w0.roa (hash: hME8qBgEoqk0HX2Ob9xc7hNEC72YuwxTDwDbWd+KQQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:89:2d:b2:1a:8e:fd:f0:67:62:05:41:3e:68:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3 Validity Not Before: Dec 17 16:02:34 2025 GMT Not After : Dec 18 16:02:34 2025 GMT Subject: CN=51210f6b1aecae25c400e8e8bea7056b2524210b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ad:93:77:5b:69:df:7f:df:3a:98:82:4d:6b: d5:be:fa:88:8e:b1:e1:8f:85:00:46:87:dc:af:06: 53:7e:38:76:7e:f9:81:c4:bd:00:9f:21:31:28:94: 30:61:2f:a1:95:69:af:77:e1:19:33:9f:a5:b9:92: ac:67:0d:68:30:88:b6:21:ef:ce:3a:54:9e:f6:ca: ea:77:dc:16:84:d3:b5:f5:d2:46:e9:8f:85:dc:57: cc:b5:e8:88:e2:11:0f:f9:52:b3:db:d0:ac:00:af: cf:a8:75:96:52:16:19:a1:c4:f7:b8:dd:3b:91:cd: dc:e5:43:f2:9b:3d:ba:52:41:d1:ac:c1:a0:29:03: ae:57:c9:7a:6f:4d:07:e6:4c:e8:84:6a:b4:a5:de: 4c:93:d9:27:94:55:7b:d0:3a:58:db:68:0d:90:0f: ac:ab:9d:13:62:50:69:db:75:74:ab:e4:4d:e9:88: bd:c7:48:ce:9b:df:8c:02:1e:97:b4:4f:d5:e8:6f: 66:77:fa:d8:9f:56:6a:de:23:4a:a5:a7:23:b6:13: 26:63:82:3a:cd:d9:58:dd:86:f0:19:32:46:ae:da: f7:47:77:47:42:a9:31:d2:45:9d:05:2c:57:4f:b9: 29:62:20:be:df:54:e4:99:0a:98:84:ce:78:ab:f4: de:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:21:0F:6B:1A:EC:AE:25:C4:00:E8:E8:BE:A7:05:6B:25:24:21:0B X509v3 Authority Key Identifier: keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:32:c1:c9:0f:1c:c5:84:22:82:9f:a7:74:5c:77:6c:f1:32: 87:95:33:34:b6:11:ef:ab:9f:22:01:96:da:2b:58:0e:0b:f6: 16:01:6d:cc:1b:6f:13:c3:a9:dd:de:b2:73:d5:7e:d8:8e:70: 88:b3:5e:2f:03:9c:5e:8f:57:89:5d:25:8e:1b:46:2d:4b:da: 19:25:62:05:4f:1a:40:5b:bb:d8:e8:fc:65:98:02:f1:67:70: 81:52:95:a1:e8:42:67:44:5c:b6:75:1e:f6:0a:c7:a2:b6:d8: e6:05:e8:bc:2b:f8:68:64:ff:cb:24:e0:08:1c:07:22:36:0f: 45:2a:fa:30:c1:ee:cd:b9:45:96:b0:a7:ac:9e:54:e9:e4:5c: cb:e0:ca:9d:f6:2d:44:54:09:95:de:55:c7:ef:c6:ff:61:e4: 77:52:ca:0c:6a:bf:06:fb:72:66:e5:8e:8d:98:18:7f:82:49: d1:dd:0d:a4:c9:0e:d8:12:07:cd:79:c1:c8:18:c1:59:8e:73: 64:b0:2c:78:c5:2b:9c:0d:09:b8:1b:17:cf:a1:01:51:f5:ae: cc:3d:de:90:bc:d2:5b:e1:f2:a8:59:19:98:a4:3a:4d:6d:db: c0:59:4d:12:05:29:97:9c:6a:17:f3:f1:ba:98:7f:d7:86:b2: ba:0f:b8:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDIktshqO/fBnYgVBPmiuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNmQyMjBiMmI1YTQ2ZmJlYjI3ZWYyZDk2OWZhMjFkZDMz OGM1YjMwHhcNMjUxMjE3MTYwMjM0WhcNMjUxMjE4MTYwMjM0WjAzMTEwLwYDVQQD Eyg1MTIxMGY2YjFhZWNhZTI1YzQwMGU4ZThiZWE3MDU2YjI1MjQyMTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK2Td1tp33/fOpiCTWvVvvqIjrHh j4UARofcrwZTfjh2fvmBxL0AnyExKJQwYS+hlWmvd+EZM5+luZKsZw1oMIi2Ie/O OlSe9srqd9wWhNO19dJG6Y+F3FfMteiI4hEP+VKz29CsAK/PqHWWUhYZocT3uN07 kc3c5UPymz26UkHRrMGgKQOuV8l6b00H5kzohGq0pd5Mk9knlFV70DpY22gNkA+s q50TYlBp23V0q+RN6Yi9x0jOm9+MAh6XtE/V6G9md/rYn1Zq3iNKpacjthMmY4I6 zdlY3YbwGTJGrtr3R3dHQqkx0kWdBSxXT7kpYiC+31TkmQqYhM54q/TefQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEhD2sa7K4lxADo6L6nBWslJCELMB8GA1UdIwQY MBaAFIFtIgsrWkb76yfvLZafoh3TOMWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTct ZTk3ODIwNDFjYzI0LzEvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTctZTk3ODIwNDFjYzI0 LzEvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTLByQ8c xYQigp+ndFx3bPEyh5UzNLYR76ufIgGW2itYDgv2FgFtzBtvE8Op3d6yc9V+2I5w iLNeLwOcXo9XiV0ljhtGLUvaGSViBU8aQFu72Oj8ZZgC8WdwgVKVoehCZ0RctnUe 9grHorbY5gXovCv4aGT/yyTgCBwHIjYPRSr6MMHuzblFlrCnrJ5U6eRcy+DKnfYt RFQJld5Vx+/G/2Hkd1LKDGq/BvtyZuWOjZgYf4JJ0d0NpMkO2BIHzXnByBjBWY5z ZLAseMUrnA0JuBsXz6EBUfWuzD3ekLzSW+HyqFkZmKQ6TW3bwFlNEgUpl5xqF/Px uph/14ayug+4TA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:57:01 2025 by rpki-client