This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft File: gKOAANS1q9FTKiU4HLJhXuwe3KA.mft (raw, json) Hash identifier: Vp/ufFMTN9Xm1HkpgBMaN7VNULuXMh6i4ioY0l3H444= Subject key identifier: 23:EF:D6:1C:FF:3E:DE:26:58:60:59:6C:3B:DF:F0:33:1C:6C:33:CD Authority key identifier: 80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0 Certificate issuer: /CN=80a38000d4b5abd1532a25381cb2615eec1edca0 Certificate serial: 019AF2ADED75016F06B3136671F999BD8927 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft Manifest number: 077D Signing time: Sat 06 Dec 2025 08:01:15 +0000 Manifest this update: Sat 06 Dec 2025 08:01:15 +0000 Manifest next update: Sun 07 Dec 2025 08:01:15 +0000 Files and hashes: 1: gKOAANS1q9FTKiU4HLJhXuwe3KA.crl (hash: bYGrmKSAJUQr9uFORSeY6HWkAOSe+Dqsu2iqW9DWjHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ed:75:01:6f:06:b3:13:66:71:f9:99:bd:89:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80a38000d4b5abd1532a25381cb2615eec1edca0 Validity Not Before: Dec 6 08:01:15 2025 GMT Not After : Dec 7 08:01:15 2025 GMT Subject: CN=23efd61cff3ede265860596c3bdff0331c6c33cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:3c:a5:42:15:6b:53:9a:88:31:1b:37:3c: e2:de:79:ac:a9:76:30:e4:28:ba:7b:06:51:a5:40: c4:80:58:bf:2c:4e:e7:42:fb:70:19:53:82:b5:10: 23:ca:c6:5e:c6:5f:1a:11:78:23:79:8a:90:1f:bb: b1:03:1e:8a:b3:00:3c:47:58:5d:6a:4d:68:99:5a: 47:8e:4d:a8:f1:06:93:5a:02:87:eb:69:4b:fb:cd: bd:70:90:83:9e:72:86:54:70:a7:8e:a6:53:bf:7f: ce:e4:dc:3e:76:1e:2f:4a:df:2d:3f:53:2d:b1:2d: ab:2a:d4:28:51:4f:76:e4:8b:31:93:24:21:53:ac: b9:c0:f7:96:21:42:74:0b:77:95:59:2e:c8:07:b5: ad:2e:6b:d6:17:c1:70:58:8b:46:ab:6f:a3:f0:dc: 30:da:35:88:0a:13:3a:f1:4e:74:16:56:88:60:28: c0:a1:77:f5:93:a4:71:0f:7f:84:33:52:6b:a6:f7: 9d:bc:3c:b8:36:ee:ff:ca:87:62:d8:e7:a9:b4:fb: 7d:50:5f:2f:86:6c:0c:f3:5f:09:93:dd:05:70:93: b8:7d:19:44:e4:33:66:9b:89:14:b5:18:18:a9:bc: 9a:b1:5d:78:d3:68:da:49:bf:2a:06:b2:2b:1f:50: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EF:D6:1C:FF:3E:DE:26:58:60:59:6C:3B:DF:F0:33:1C:6C:33:CD X509v3 Authority Key Identifier: keyid:80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:9e:0e:11:61:25:99:f2:e6:d3:26:f2:4f:f6:af:a6:c0:1e: 31:d3:05:bc:9c:fd:1d:3a:62:86:21:79:7d:93:77:69:42:09: 3d:ce:e8:a0:24:d4:c1:97:96:9e:0b:47:2a:44:4f:dc:e0:4c: 94:70:8b:94:e4:0c:a1:62:c5:01:98:0c:09:f3:65:d8:58:1c: d8:90:6b:88:3c:c5:12:a3:85:0a:3f:9a:5b:e8:56:74:91:43: c7:45:10:c6:f8:38:35:58:87:a5:67:b5:5c:5d:0c:10:56:9c: 24:a6:41:64:43:5c:1e:af:f0:27:0c:32:c0:a8:99:6a:71:23: cd:e9:2c:73:27:fc:05:de:58:1b:b8:ba:77:ff:1b:7d:8a:80: 5b:8c:19:3a:a9:d5:8f:dc:2f:46:be:d9:cd:34:6b:0d:46:65: 57:75:35:9c:89:07:da:d5:f6:34:e9:1f:40:5f:87:81:b7:04: c4:65:dd:b1:da:fb:e8:c5:42:6f:53:45:4c:ac:f7:0a:92:7f: 2a:b7:4e:65:02:59:1a:d3:f1:bd:33:72:3b:29:c3:4b:6c:18: 54:83:bd:76:ca:a1:4a:62:85:ad:78:34:08:e6:8c:9c:60:e4: 1e:d5:bb:b7:db:a0:cc:c7:bf:f6:4c:ba:23:f9:58:5a:d1:5d: 22:a4:9f:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryre11AW8GsxNmcfmZvYknMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYTM4MDAwZDRiNWFiZDE1MzJhMjUzODFjYjI2MTVlZWMx ZWRjYTAwHhcNMjUxMjA2MDgwMTE1WhcNMjUxMjA3MDgwMTE1WjAzMTEwLwYDVQQD EygyM2VmZDYxY2ZmM2VkZTI2NTg2MDU5NmMzYmRmZjAzMzFjNmMzM2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiU8pUIVa1OaiDEbNzzi3nmsqXYw 5Ci6ewZRpUDEgFi/LE7nQvtwGVOCtRAjysZexl8aEXgjeYqQH7uxAx6KswA8R1hd ak1omVpHjk2o8QaTWgKH62lL+829cJCDnnKGVHCnjqZTv3/O5Nw+dh4vSt8tP1Mt sS2rKtQoUU925IsxkyQhU6y5wPeWIUJ0C3eVWS7IB7WtLmvWF8FwWItGq2+j8Nww 2jWIChM68U50FlaIYCjAoXf1k6RxD3+EM1JrpvedvDy4Nu7/yodi2OeptPt9UF8v hmwM818Jk90FcJO4fRlE5DNmm4kUtRgYqbyasV1402jaSb8qBrIrH1DKaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPv1hz/Pt4mWGBZbDvf8DMcbDPNMB8GA1UdIwQY MBaAFICjgADUtavRUyolOByyYV7sHtygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0tPQUFOUzFxOUZUS2lVNEhMSmhYdXdlM0tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni84ZWYxNjItZTg0MC00YTE1LWFiYTYt OWUwODk4ZjQ0NTBjLzEvZ0tPQUFOUzFxOUZUS2lVNEhMSmhYdXdlM0tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni84ZWYxNjItZTg0MC00YTE1LWFiYTYtOWUwODk4ZjQ0NTBj LzEvZ0tPQUFOUzFxOUZUS2lVNEhMSmhYdXdlM0tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR54OEWEl mfLm0ybyT/avpsAeMdMFvJz9HTpihiF5fZN3aUIJPc7ooCTUwZeWngtHKkRP3OBM lHCLlOQMoWLFAZgMCfNl2Fgc2JBriDzFEqOFCj+aW+hWdJFDx0UQxvg4NViHpWe1 XF0MEFacJKZBZENcHq/wJwwywKiZanEjzekscyf8Bd5YG7i6d/8bfYqAW4wZOqnV j9wvRr7ZzTRrDUZlV3U1nIkH2tX2NOkfQF+HgbcExGXdsdr76MVCb1NFTKz3CpJ/ KrdOZQJZGtPxvTNyOynDS2wYVIO9dsqhSmKFrXg0COaMnGDkHtW7t9ugzMe/9ky6 I/lYWtFdIqSfuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:50 2025 by rpki-client