This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft File: gAFl6Volo3uHPPup9TJKfiU7vdg.mft (raw, json) Hash identifier: eVfsxv1QKSXpkjW722NSuvBEIvFbxMC3KV7j+kH8X/4= Subject key identifier: 2E:25:37:CA:7A:A7:85:74:85:56:01:9F:26:C7:36:26:A3:57:98:35 Authority key identifier: 80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8 Certificate issuer: /CN=800165e95a25a37b873cfba9f5324a7e253bbdd8 Certificate serial: 019AF12E3BDAD9481FB59C6F18B1EE5BD29D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 01:02:10 +0000 Manifest this update: Sat 06 Dec 2025 01:02:10 +0000 Manifest next update: Sun 07 Dec 2025 01:02:10 +0000 Files and hashes: 1: gAFl6Volo3uHPPup9TJKfiU7vdg.crl (hash: h9hbJovVaV5ePEeK2kqilQuFb1ZY/ZzxsktaOoTz4hM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3b:da:d9:48:1f:b5:9c:6f:18:b1:ee:5b:d2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=800165e95a25a37b873cfba9f5324a7e253bbdd8 Validity Not Before: Dec 6 01:02:10 2025 GMT Not After : Dec 7 01:02:10 2025 GMT Subject: CN=2e2537ca7aa785748556019f26c73626a3579835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:55:a8:44:27:16:8b:32:86:49:26:62:d2:73: 67:d0:eb:77:c6:ce:16:38:33:74:dc:b3:70:bd:e8: ee:01:5d:46:0c:d4:a0:bd:1f:b9:09:5a:e1:91:74: fe:81:76:76:9a:20:8f:8a:51:60:88:21:ed:ec:5c: a1:1f:70:b7:56:dc:7e:78:38:90:70:98:06:11:ab: f2:a5:2f:f6:5e:e6:fa:ca:3c:9d:4a:de:d0:35:3b: e2:6b:11:0b:10:fd:b6:8f:2c:67:a6:63:a4:12:62: a2:e3:1c:5a:b7:53:5e:e9:bb:1a:1c:c6:9f:01:14: c2:90:2d:5b:f4:06:bd:ce:4b:9c:8a:b6:8a:01:79: 84:18:85:f4:87:c2:95:88:9c:d0:1b:f3:d6:f3:47: e9:7a:87:51:17:1d:af:f0:8d:a9:61:d4:7b:16:29: c1:ef:fd:6f:b4:d4:86:d6:aa:41:f3:c8:ea:39:fd: 95:ab:66:dd:d1:95:b2:83:41:b8:0e:ee:09:a5:82: 67:ea:5d:86:9e:1c:e9:35:4b:73:20:a0:a3:d5:e5: 8b:f1:5b:39:ac:32:c1:2a:41:8c:93:ae:e2:0a:fe: 65:cb:fc:0c:fa:8e:2f:37:6d:e0:13:3c:d7:39:07: 2b:bc:11:42:79:82:9c:3f:47:a4:4f:ba:ce:81:b4: 3c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:25:37:CA:7A:A7:85:74:85:56:01:9F:26:C7:36:26:A3:57:98:35 X509v3 Authority Key Identifier: keyid:80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:23:2e:42:49:82:1d:cc:8b:11:38:f7:0b:e3:1d:2b:8c:91: 6e:24:7a:62:af:91:a3:c1:52:ea:d9:cd:ef:35:d8:84:00:12: 8e:71:53:56:0d:ea:f6:99:44:aa:a7:7b:40:09:75:d5:08:66: 6a:78:0d:2b:a6:12:a7:a5:6a:0c:55:fb:a6:91:d5:9c:0c:f0: e0:a2:33:1d:7f:ee:e2:9f:87:53:ee:18:68:84:32:e8:5f:39: 83:86:4c:3b:61:d3:f2:4f:73:d1:30:b4:84:4a:27:4f:57:4b: 6e:0c:9a:50:42:21:df:25:1e:e9:d7:20:04:3d:2c:d0:c1:d3: cc:4d:30:e2:31:91:4a:c8:1b:08:31:3c:4a:5f:e2:5a:51:66: 5b:83:ce:92:e1:81:ec:cd:fc:a6:c7:40:57:45:3f:ec:c9:8e: 0c:8c:9c:8e:e9:e1:4a:62:ba:3b:d0:2e:80:00:e4:39:9b:bf: 19:27:12:11:38:39:3d:d8:4a:b7:a6:0d:1f:94:6c:6e:89:d0: 71:bb:2d:d5:cc:8e:58:d0:47:f5:95:2a:a3:ce:bd:97:2f:e9: 1a:e3:3a:d8:24:f7:1c:30:fa:cd:20:3c:b4:58:f0:35:b6:82: 42:11:31:e9:d6:fd:40:0b:23:18:4c:d1:22:c1:68:ca:4b:23: 11:96:72:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjva2UgftZxvGLHuW9KdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMDE2NWU5NWEyNWEzN2I4NzNjZmJhOWY1MzI0YTdlMjUz YmJkZDgwHhcNMjUxMjA2MDEwMjEwWhcNMjUxMjA3MDEwMjEwWjAzMTEwLwYDVQQD EygyZTI1MzdjYTdhYTc4NTc0ODU1NjAxOWYyNmM3MzYyNmEzNTc5ODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FWoRCcWizKGSSZi0nNn0Ot3xs4W ODN03LNwvejuAV1GDNSgvR+5CVrhkXT+gXZ2miCPilFgiCHt7FyhH3C3Vtx+eDiQ cJgGEavypS/2Xub6yjydSt7QNTviaxELEP22jyxnpmOkEmKi4xxat1Ne6bsaHMaf ARTCkC1b9Aa9zkuciraKAXmEGIX0h8KViJzQG/PW80fpeodRFx2v8I2pYdR7FinB 7/1vtNSG1qpB88jqOf2Vq2bd0ZWyg0G4Du4JpYJn6l2GnhzpNUtzIKCj1eWL8Vs5 rDLBKkGMk67iCv5ly/wM+o4vN23gEzzXOQcrvBFCeYKcP0ekT7rOgbQ8MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4lN8p6p4V0hVYBnybHNiajV5g1MB8GA1UdIwQY MBaAFIABZelaJaN7hzz7qfUySn4lO73YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0FGbDZWb2xvM3VIUFB1cDlUSktmaVU3dmRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80YmQ0NjktNDkyNS00ZWVlLWI2YTIt ZDlhZWI5MzA1MWFiLzEvZ0FGbDZWb2xvM3VIUFB1cDlUSktmaVU3dmRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi80YmQ0NjktNDkyNS00ZWVlLWI2YTItZDlhZWI5MzA1MWFi LzEvZ0FGbDZWb2xvM3VIUFB1cDlUSktmaVU3dmRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyMuQkmC HcyLETj3C+MdK4yRbiR6Yq+Ro8FS6tnN7zXYhAASjnFTVg3q9plEqqd7QAl11Qhm angNK6YSp6VqDFX7ppHVnAzw4KIzHX/u4p+HU+4YaIQy6F85g4ZMO2HT8k9z0TC0 hEonT1dLbgyaUEIh3yUe6dcgBD0s0MHTzE0w4jGRSsgbCDE8Sl/iWlFmW4POkuGB 7M38psdAV0U/7MmODIycjunhSmK6O9AugADkOZu/GScSETg5PdhKt6YNH5RsbonQ cbst1cyOWNBH9ZUqo869ly/pGuM62CT3HDD6zSA8tFjwNbaCQhEx6db9QAsjGEzR IsFoyksjEZZyzg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:43 2025 by rpki-client