This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft File: gBfqodqvIl9FOAKjO6-WOMzNd6U.mft (raw, json) Hash identifier: iUgzUJAzkqaCTwqdv0DPYiz1WtNZ/QtTKoWICHdEyEM= Subject key identifier: 0D:F7:E4:73:00:80:03:E3:C1:87:D7:2D:3D:4C:2C:04:5C:72:A3:D4 Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5 Certificate issuer: /CN=8017eaa1daaf225f453802a33baf9638cccd77a5 Certificate serial: 019AF31CF92C7D52E9811768AB4847E7202E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft Manifest number: 0D03 Signing time: Sat 06 Dec 2025 10:02:33 +0000 Manifest this update: Sat 06 Dec 2025 10:02:33 +0000 Manifest next update: Sun 07 Dec 2025 10:02:33 +0000 Files and hashes: 1: KQTK1M5p1w2tgkimZwP7TTABtyY.roa (hash: LTRVwyOZnYQaG256SSamw/dl7HTrEkfEZ7OCXHYqevA=) 2: gBfqodqvIl9FOAKjO6-WOMzNd6U.crl (hash: Ssh7sidk8/BNtIcE7QLmuXlpdAwLUUBcmTBPcQdx8QE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:f9:2c:7d:52:e9:81:17:68:ab:48:47:e7:20:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5 Validity Not Before: Dec 6 10:02:33 2025 GMT Not After : Dec 7 10:02:33 2025 GMT Subject: CN=0df7e473008003e3c187d72d3d4c2c045c72a3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:60:71:64:25:f5:d0:5c:31:12:6e:0a:37: 32:39:ee:8d:d6:ba:7f:19:ae:fc:4d:99:39:98:de: dd:c0:b7:bb:41:d9:3b:37:f0:0c:f5:da:03:29:89: 78:bc:9d:7b:71:71:54:75:81:66:1e:0e:8f:e8:39: 13:a7:ee:73:be:b4:fd:f9:de:1d:a1:1d:a1:94:4a: 2b:73:84:94:38:77:91:83:d5:75:07:34:e2:a5:6d: 73:71:b2:f9:ee:79:29:af:33:79:7d:fc:9b:0a:6b: c3:85:0d:42:c1:8a:27:78:76:ac:e2:cd:8c:59:dd: e9:cf:f6:ae:51:66:ff:de:0e:2c:de:a8:1e:48:08: 34:4b:90:8c:4e:31:6c:a7:c4:7b:c4:87:d3:c8:8c: 9f:b8:4f:c4:fb:e7:31:91:f9:3a:e5:75:63:1a:f1: 13:4e:3f:4a:4e:cb:0e:73:08:12:6d:8a:8f:12:3e: 4a:8b:99:b3:f9:81:d3:f6:b5:ce:f1:a4:fd:af:98: 69:f2:cd:29:40:3c:33:6d:a2:b4:c4:73:8b:07:c7: 11:3a:ea:b8:7a:5f:54:64:51:d0:ad:de:a0:68:b4: 59:30:3d:8d:5d:4d:82:94:3f:7f:89:ad:af:39:66: 3b:a8:84:ab:58:c8:c5:bd:20:37:31:a4:90:9f:ef: ea:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F7:E4:73:00:80:03:E3:C1:87:D7:2D:3D:4C:2C:04:5C:72:A3:D4 X509v3 Authority Key Identifier: keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:17:62:11:fc:a0:fc:1a:07:e4:8e:c0:ad:5f:db:47:5d:a4: 76:1a:ec:b3:76:c8:92:42:54:c8:96:00:f7:a1:94:b2:83:d5: 81:f6:2c:72:b9:ff:63:38:15:84:f5:8f:39:d6:3c:54:2e:c7: 81:e9:51:6c:36:28:0c:fc:67:08:2d:e0:fb:46:11:db:66:16: 9b:45:8f:a4:e9:57:87:69:64:6e:96:e2:50:21:78:18:65:47: 9b:2a:7e:25:c8:8b:f6:a9:e5:8e:67:e1:14:fb:68:27:d1:1a: 4f:a7:53:c4:cb:a1:4c:c4:c1:4f:ca:11:93:8c:d5:90:01:ec: 97:44:70:db:f1:97:66:a9:13:52:ba:f1:aa:35:db:fe:83:76: 5e:31:fa:c7:5a:8f:98:42:42:20:25:70:5f:13:a9:28:58:89: 90:02:88:19:63:a0:ad:a8:22:a9:6e:ee:2f:87:94:d2:ac:c7: e3:05:6a:ac:2b:0f:ee:e7:3e:a2:4f:9b:49:97:db:f5:37:76: f0:4f:e2:b8:1a:bb:0d:17:48:8e:65:fd:d8:1a:fe:12:a0:e4: b4:03:1b:47:04:85:bf:8d:7d:17:9d:30:e7:41:3e:79:eb:7a: f5:8a:08:a4:8e:df:68:57:dd:e3:68:0d:95:96:af:cd:a0:53: c7:27:36:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHPksfVLpgRdoq0hH5yAuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMTdlYWExZGFhZjIyNWY0NTM4MDJhMzNiYWY5NjM4Y2Nj ZDc3YTUwHhcNMjUxMjA2MTAwMjMzWhcNMjUxMjA3MTAwMjMzWjAzMTEwLwYDVQQD EygwZGY3ZTQ3MzAwODAwM2UzYzE4N2Q3MmQzZDRjMmMwNDVjNzJhM2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+FgcWQl9dBcMRJuCjcyOe6N1rp/ Ga78TZk5mN7dwLe7Qdk7N/AM9doDKYl4vJ17cXFUdYFmHg6P6DkTp+5zvrT9+d4d oR2hlEorc4SUOHeRg9V1BzTipW1zcbL57nkprzN5ffybCmvDhQ1CwYoneHas4s2M Wd3pz/auUWb/3g4s3qgeSAg0S5CMTjFsp8R7xIfTyIyfuE/E++cxkfk65XVjGvET Tj9KTssOcwgSbYqPEj5Ki5mz+YHT9rXO8aT9r5hp8s0pQDwzbaK0xHOLB8cROuq4 el9UZFHQrd6gaLRZMD2NXU2ClD9/ia2vOWY7qISrWMjFvSA3MaSQn+/q1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA335HMAgAPjwYfXLT1MLARccqPUMB8GA1UdIwQY MBaAFIAX6qHaryJfRTgCozuvljjMzXelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0JmcW9kcXZJbDlGT0FLak82LVdPTXpOZDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80Y2NkNDAtZTMyYi00MzZkLWFkN2Mt NjJjN2ZkZTQ4MzhhLzEvZ0JmcW9kcXZJbDlGT0FLak82LVdPTXpOZDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi80Y2NkNDAtZTMyYi00MzZkLWFkN2MtNjJjN2ZkZTQ4Mzhh LzEvZ0JmcW9kcXZJbDlGT0FLak82LVdPTXpOZDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRdiEfyg /BoH5I7ArV/bR12kdhrss3bIkkJUyJYA96GUsoPVgfYscrn/YzgVhPWPOdY8VC7H gelRbDYoDPxnCC3g+0YR22YWm0WPpOlXh2lkbpbiUCF4GGVHmyp+JciL9qnljmfh FPtoJ9EaT6dTxMuhTMTBT8oRk4zVkAHsl0Rw2/GXZqkTUrrxqjXb/oN2XjH6x1qP mEJCICVwXxOpKFiJkAKIGWOgragiqW7uL4eU0qzH4wVqrCsP7uc+ok+bSZfb9Td2 8E/iuBq7DRdIjmX92Br+EqDktAMbRwSFv419F50w50E+eet69YoIpI7faFfd42gN lZavzaBTxyc2Ag== -----END CERTIFICATE-----Generated at Sat Dec 6 15:48:01 2025 by rpki-client