This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft File: gynJE4dY3-i6EjXuDsfZtlifSyc.mft (raw, json) Hash identifier: k7t6+L8zXd+nqk6Tlx2dxJc0qLruP1S0NqwkVW+xBXo= Subject key identifier: AC:51:F9:58:51:01:D6:9F:BE:ED:B4:F3:FF:02:A2:7C:97:43:0E:CA Authority key identifier: 83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27 Certificate issuer: /CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27 Certificate serial: 019B26D20EE48E99E2121D7BB724E6C84A30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft Manifest number: 0767 Signing time: Tue 16 Dec 2025 11:00:59 +0000 Manifest this update: Tue 16 Dec 2025 11:00:59 +0000 Manifest next update: Wed 17 Dec 2025 11:00:59 +0000 Files and hashes: 1: NEtfj8eymwkFpDG7BP2gOv3cbAs.roa (hash: J8/tby/ZFT8OsdOz/hNiW3bEdXZu2ngXmdS3bjVWlAA=) 2: gynJE4dY3-i6EjXuDsfZtlifSyc.crl (hash: jPAMuedi106kPCE5tq74hXU/vxtRqLr/Ua+KefcwrsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:0e:e4:8e:99:e2:12:1d:7b:b7:24:e6:c8:4a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27 Validity Not Before: Dec 16 11:00:59 2025 GMT Not After : Dec 17 11:00:59 2025 GMT Subject: CN=ac51f9585101d69fbeedb4f3ff02a27c97430eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b7:ed:2c:6b:d9:e8:bc:3c:ab:c1:84:c4:0e: 39:f7:e5:91:f8:82:43:9b:83:1f:1c:4b:42:11:22: f2:6e:de:9a:42:0b:b7:66:7b:cb:96:69:bd:3e:1c: 17:a1:11:f9:0b:ab:ad:f6:65:b2:2f:f7:ab:95:b8: 1f:b4:84:50:65:fb:f3:cb:67:3a:4e:9d:eb:dc:ad: 8e:10:81:e5:9a:7b:30:4f:b2:e3:ff:37:bd:76:c3: 10:de:c1:b6:cb:f2:11:83:02:2d:57:86:75:54:d1: ba:b0:f0:9b:41:3d:15:b0:ad:4f:f2:0f:8e:8e:df: 97:a0:d9:51:46:9a:b4:06:92:50:aa:0a:d3:a1:e5: 46:6f:b2:40:da:f9:0e:ff:9d:3e:47:36:24:50:3f: f0:e4:f9:d9:12:be:30:29:38:f4:b1:88:cc:10:a7: 14:95:5d:0d:09:f8:d3:95:8a:b4:f0:28:74:5d:ab: a5:87:ce:55:e0:6f:5c:0d:01:c7:06:7a:59:77:c2: e4:06:b9:6f:64:f0:3a:2d:a6:28:fb:ec:d1:67:57: 2e:a4:c1:a1:9c:58:f8:39:4b:c3:0b:69:7b:26:af: b0:65:9e:0c:e3:cf:7b:97:b0:68:b0:f4:a3:cd:eb: 86:1d:ba:98:b5:62:54:72:a1:6c:95:7c:60:f1:43: bc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:51:F9:58:51:01:D6:9F:BE:ED:B4:F3:FF:02:A2:7C:97:43:0E:CA X509v3 Authority Key Identifier: keyid:83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:13:26:57:21:32:0c:59:f7:f6:78:58:a1:2c:c0:55:ef:20: b0:f0:5f:cb:f3:6d:68:a9:ba:3c:4a:df:61:cc:ea:fd:e3:78: 5b:b8:0e:bc:89:9f:28:c2:0b:7e:b5:2f:e8:a6:75:05:35:69: bc:62:0c:09:a8:18:4e:00:bb:25:45:ec:3c:19:91:42:5e:ee: 10:49:7d:2e:8f:0e:92:3f:23:39:75:85:6d:79:7c:39:ee:5e: 0b:94:f7:db:ec:a1:a8:94:e5:26:8b:5d:ec:99:a3:a6:c8:12: 00:71:01:7f:d6:5a:8a:22:4f:14:48:f8:a8:e7:6b:49:27:a2: 7f:2c:fe:90:11:53:3a:6b:24:2b:79:63:b4:12:ae:f4:81:04: 6a:7a:a2:bf:f0:c1:c4:de:77:b6:44:c9:fd:fe:19:8e:a3:d6: d3:b1:48:29:7b:37:3e:18:7b:28:dc:49:d8:4e:a2:be:40:9c: 21:25:d8:cc:7e:84:b0:1b:19:34:94:29:4f:e3:d6:75:65:6a: e8:ef:86:55:8a:c2:24:db:da:8c:90:20:7b:ba:a5:a2:ab:1a: 70:60:f1:65:1a:6e:ae:82:a3:b2:06:c9:9d:55:e1:1a:4f:75: 68:6b:1f:fb:a6:b0:d8:5f:65:66:76:b1:31:28:20:de:c4:0e: 60:c1:60:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0g7kjpniEh17tyTmyEowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMjljOTEzODc1OGRmZThiYTEyMzVlZTBlYzdkOWI2NTg5 ZjRiMjcwHhcNMjUxMjE2MTEwMDU5WhcNMjUxMjE3MTEwMDU5WjAzMTEwLwYDVQQD EyhhYzUxZjk1ODUxMDFkNjlmYmVlZGI0ZjNmZjAyYTI3Yzk3NDMwZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77ftLGvZ6Lw8q8GExA459+WR+IJD m4MfHEtCESLybt6aQgu3ZnvLlmm9PhwXoRH5C6ut9mWyL/erlbgftIRQZfvzy2c6 Tp3r3K2OEIHlmnswT7Lj/ze9dsMQ3sG2y/IRgwItV4Z1VNG6sPCbQT0VsK1P8g+O jt+XoNlRRpq0BpJQqgrToeVGb7JA2vkO/50+RzYkUD/w5PnZEr4wKTj0sYjMEKcU lV0NCfjTlYq08Ch0Xaulh85V4G9cDQHHBnpZd8LkBrlvZPA6LaYo++zRZ1cupMGh nFj4OUvDC2l7Jq+wZZ4M4897l7BosPSjzeuGHbqYtWJUcqFslXxg8UO83QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxR+VhRAdafvu208/8ConyXQw7KMB8GA1UdIwQY MBaAFIMpyROHWN/ouhI17g7H2bZYn0snMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3luSkU0ZFkzLWk2RWpYdURzZlp0bGlmU3ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83OGY4MmQtMGJiOS00M2RlLTk4MTAt MWNhN2EwYjZhYzlhLzEvZ3luSkU0ZFkzLWk2RWpYdURzZlp0bGlmU3ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni83OGY4MmQtMGJiOS00M2RlLTk4MTAtMWNhN2EwYjZhYzlh LzEvZ3luSkU0ZFkzLWk2RWpYdURzZlp0bGlmU3ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhMmVyEy DFn39nhYoSzAVe8gsPBfy/NtaKm6PErfYczq/eN4W7gOvImfKMILfrUv6KZ1BTVp vGIMCagYTgC7JUXsPBmRQl7uEEl9Lo8Okj8jOXWFbXl8Oe5eC5T32+yhqJTlJotd 7JmjpsgSAHEBf9ZaiiJPFEj4qOdrSSeifyz+kBFTOmskK3ljtBKu9IEEanqiv/DB xN53tkTJ/f4ZjqPW07FIKXs3Phh7KNxJ2E6ivkCcISXYzH6EsBsZNJQpT+PWdWVq 6O+GVYrCJNvajJAge7qloqsacGDxZRpuroKjsgbJnVXhGk91aGsf+6aw2F9lZnax MSgg3sQOYMFgnw== -----END CERTIFICATE-----Generated at Tue Dec 16 17:55:18 2025 by rpki-client