This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft File: gRncpg1HvWA7jpzF3r2WxcS6FFs.mft (raw, json) Hash identifier: oeWKMj4Hl/5sg08SxjPqCGEwvRy6L/r7JqKH+R4PirM= Subject key identifier: 8C:BE:5E:A4:DC:3C:4D:84:81:69:C8:21:0B:CF:C1:9A:0E:05:87:0F Authority key identifier: 81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B Certificate issuer: /CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b Certificate serial: 019AF31B807A78C2E945D9D72C3462484290 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft Manifest number: 06D0 Signing time: Sat 06 Dec 2025 10:00:57 +0000 Manifest this update: Sat 06 Dec 2025 10:00:57 +0000 Manifest next update: Sun 07 Dec 2025 10:00:57 +0000 Files and hashes: 1: cv2xTszOP7j1k8VH8Xq8b77acso.roa (hash: gJcKaSX3/S1aDVSD+NWUNHhQVwYYx7ZgiUJVulKjqVg=) 2: gRncpg1HvWA7jpzF3r2WxcS6FFs.crl (hash: uwAvc0+t9P48QAIcrwJptuuiM7lvw6eawVtBV865IuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:80:7a:78:c2:e9:45:d9:d7:2c:34:62:48:42:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b Validity Not Before: Dec 6 10:00:57 2025 GMT Not After : Dec 7 10:00:57 2025 GMT Subject: CN=8cbe5ea4dc3c4d848169c8210bcfc19a0e05870f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a4:51:19:c3:3f:07:9a:1c:d4:ec:ae:93:67: 5a:8b:f1:1a:c7:ec:07:50:92:fa:a7:e6:52:20:c0: 0b:40:c6:34:96:63:72:b1:fc:65:f7:0c:28:46:62: d4:13:8f:f8:3d:b1:d5:7d:13:b5:69:9d:d5:a1:60: 63:5d:fc:05:72:d9:28:56:cd:d7:e4:ea:00:c4:ff: ea:05:97:92:72:44:ce:c0:f3:d3:8d:94:c9:a9:82: 5c:0b:cd:df:3b:3a:de:68:73:1a:09:ab:12:bb:c7: f0:93:18:a9:04:8f:1e:c1:1b:30:50:7e:39:f8:31: 06:68:5d:b9:35:34:2d:d8:ce:5b:89:69:72:f7:4e: be:e7:5d:c4:34:b1:31:ea:e7:5c:44:ea:c7:25:d1: 01:ed:0b:0c:6d:31:05:a6:f2:09:d5:65:4a:05:78: 21:3f:43:20:7e:90:70:6d:a7:8d:c6:c2:7d:da:39: fa:df:94:dc:8c:ca:83:37:b5:71:a2:1e:18:e6:20: 41:4b:6a:6f:96:b3:ff:1d:4e:05:c2:b6:ae:60:0f: d6:3f:7f:85:de:6c:9b:66:b8:33:fa:de:27:0d:3b: 14:07:b2:3c:fc:e0:d4:54:4a:b3:16:7c:c9:ab:eb: bc:36:af:95:fd:25:c2:30:bf:60:74:ac:3d:1b:e7: 08:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BE:5E:A4:DC:3C:4D:84:81:69:C8:21:0B:CF:C1:9A:0E:05:87:0F X509v3 Authority Key Identifier: keyid:81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:1f:f6:15:56:8a:d8:f9:6b:58:ba:8d:9a:03:80:f9:16:a9: a1:d7:f9:2e:a3:54:d9:8b:6d:b7:77:bf:74:f5:9f:91:79:86: 9b:4a:ea:b8:c1:b6:aa:00:7b:97:ed:4b:ce:a2:8f:34:d6:a9: 70:69:38:5a:60:3a:7e:5c:45:8e:5f:41:9a:cf:01:3e:8a:44: 0a:d6:52:e1:e9:43:00:48:6d:f8:c3:4f:6a:7e:9e:50:04:66: 76:cd:ad:77:71:b9:3b:98:ce:f8:1a:08:0d:04:20:56:1d:67: 8f:14:52:6b:e3:dd:26:17:87:4b:86:af:5b:b3:dc:ba:84:9d: d7:c6:ed:2a:31:d1:b4:5d:4d:e0:2d:d3:74:2e:49:7a:e8:75: 8c:ac:34:9b:d5:ae:92:c1:63:23:8f:f3:a3:1c:95:13:0d:d4: c7:71:1f:4e:16:7f:a4:c7:dd:af:bb:3c:b3:67:b8:32:fd:1b: 46:95:21:04:5c:99:85:22:ff:c6:d7:39:cd:42:1e:c7:c4:fd: 83:64:c1:a8:34:53:85:47:8c:bc:96:35:c6:8b:21:51:ef:8d: ae:5c:40:c5:32:d4:42:d8:19:2a:03:6a:ec:f7:5b:3f:57:7d: 83:15:e9:6a:8f:dc:fe:7c:df:c6:75:f0:67:6a:d7:e8:95:ea: 76:4f:9b:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4B6eMLpRdnXLDRiSEKQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMTlkY2E2MGQ0N2JkNjAzYjhlOWNjNWRlYmQ5NmM1YzRi YTE0NWIwHhcNMjUxMjA2MTAwMDU3WhcNMjUxMjA3MTAwMDU3WjAzMTEwLwYDVQQD Eyg4Y2JlNWVhNGRjM2M0ZDg0ODE2OWM4MjEwYmNmYzE5YTBlMDU4NzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaRRGcM/B5oc1Oyuk2dai/Eax+wH UJL6p+ZSIMALQMY0lmNysfxl9wwoRmLUE4/4PbHVfRO1aZ3VoWBjXfwFctkoVs3X 5OoAxP/qBZeSckTOwPPTjZTJqYJcC83fOzreaHMaCasSu8fwkxipBI8ewRswUH45 +DEGaF25NTQt2M5biWly906+513ENLEx6udcROrHJdEB7QsMbTEFpvIJ1WVKBXgh P0MgfpBwbaeNxsJ92jn635TcjMqDN7Vxoh4Y5iBBS2pvlrP/HU4FwrauYA/WP3+F 3mybZrgz+t4nDTsUB7I8/ODUVEqzFnzJq+u8Nq+V/SXCML9gdKw9G+cIXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIy+XqTcPE2EgWnIIQvPwZoOBYcPMB8GA1UdIwQY MBaAFIEZ3KYNR71gO46cxd69lsXEuhRbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1JuY3BnMUh2V0E3anB6RjNyMld4Y1M2RkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yNTVlYzgtZjFlMy00YThmLWFmMzAt N2UzOWQ5NjNhNTM3LzEvZ1JuY3BnMUh2V0E3anB6RjNyMld4Y1M2RkZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8yNTVlYzgtZjFlMy00YThmLWFmMzAtN2UzOWQ5NjNhNTM3 LzEvZ1JuY3BnMUh2V0E3anB6RjNyMld4Y1M2RkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZx/2FVaK 2PlrWLqNmgOA+Rapodf5LqNU2Yttt3e/dPWfkXmGm0rquMG2qgB7l+1LzqKPNNap cGk4WmA6flxFjl9Bms8BPopECtZS4elDAEht+MNPan6eUARmds2td3G5O5jO+BoI DQQgVh1njxRSa+PdJheHS4avW7PcuoSd18btKjHRtF1N4C3TdC5Jeuh1jKw0m9Wu ksFjI4/zoxyVEw3Ux3EfThZ/pMfdr7s8s2e4Mv0bRpUhBFyZhSL/xtc5zUIex8T9 g2TBqDRThUeMvJY1xoshUe+NrlxAxTLUQtgZKgNq7PdbP1d9gxXpao/c/nzfxnXw Z2rX6JXqdk+bOA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:15 2025 by rpki-client