This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft File: gTPYnAaoocydvDYiAffsVZ1_3Ug.mft (raw, json) Hash identifier: UFG229ljYgkFe22E/gOS9luZS3Olghmzt3569JG6hlE= Subject key identifier: 34:5E:C6:D0:62:0C:EB:C1:1F:F1:29:BC:C3:14:8F:11:0B:18:52:C9 Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48 Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48 Certificate serial: 019AF1D1F8AD0D62150B44D46A80B8EB02D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft Manifest number: 176C Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: HahR5soNktUlYKPgZEbE7H3aKhs.roa (hash: lStniR/EONynfdLx+qNvUDgudFR2+K1QsCmoIxTWUXU=) 2: VpDc8u2rAhCHY8dw5A-uURm2uTo.roa (hash: TnPUye+699meF5Ik4Elk4nVoV3KO8X7ti0DlB40uigY=) 3: ZkqOfmuhubAXa5wjbsE6j4_ahXs.roa (hash: Hey5kTZ4283sFnXZkMTOrQ0P+6y/gPOLg1iSKQS0uK8=) 4: gTPYnAaoocydvDYiAffsVZ1_3Ug.crl (hash: 3NC4NEPeBVFOmdvBwqp+bfnW4mh1iRaPgIVmPrtiPQI=) 5: j1-fP3sdEayV1bR9GGOFSeW4cN0.roa (hash: z2Cs0c66T/XL7AZnx0VV9qMsM3hsvemjVWPE/YF4p8M=) 6: kgWUcLVwnlHQ9N0edYU-mPTihYQ.roa (hash: Rkf4hqgx8RyOM/raBR82mKj09VXl9DozZJeQyPvjCIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f8:ad:0d:62:15:0b:44:d4:6a:80:b8:eb:02:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48 Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=345ec6d0620cebc11ff129bcc3148f110b1852c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:04:9c:2f:da:2d:5b:0c:d6:ee:a5:18:bc:d4: 2b:3a:32:b0:14:85:e6:ab:2f:d3:52:40:a6:0c:d1: 49:88:33:02:44:64:06:bc:90:c1:03:64:b2:e6:81: b4:d1:5b:f6:13:ee:80:ac:00:38:cb:b0:92:d8:cd: cd:a2:e8:b4:a3:e8:2c:3d:00:5b:ab:63:8f:92:ab: dd:e0:0d:7a:e1:1f:ac:c4:2b:3c:bc:cb:a6:52:1b: 75:28:12:1a:e4:6a:3f:a0:56:71:6c:77:b9:3a:f0: 86:03:81:e2:d1:ba:22:ba:e8:14:73:65:0a:23:27: e6:14:f9:00:bf:41:26:4b:2f:79:c8:e8:cd:a1:f8: 1d:4a:ae:ec:97:a8:4a:4b:7c:60:9f:75:c7:98:5d: 68:10:0b:ef:f6:ac:10:f8:ad:7d:61:42:2b:f6:b2: 04:5d:84:ee:75:cf:b8:1a:dc:75:f2:5a:59:27:3e: 60:4d:78:92:f9:e0:5c:1e:a7:1e:8b:13:28:e9:19: 7c:6e:68:db:1b:b9:49:b6:5e:44:2d:97:42:f6:f6: b1:5f:8f:84:23:be:dd:5d:19:c9:d5:fe:ce:c6:ec: 0f:11:c7:6c:68:18:99:92:00:ee:1b:f8:c5:6d:a2: f4:68:9f:45:e8:b7:67:a3:79:1d:44:a7:8a:c5:87: a3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5E:C6:D0:62:0C:EB:C1:1F:F1:29:BC:C3:14:8F:11:0B:18:52:C9 X509v3 Authority Key Identifier: keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:2c:36:4b:6e:00:3c:9a:20:8f:0e:16:8f:01:e0:dc:2e:b4: 16:a0:eb:25:da:28:e8:25:ae:75:0b:a7:d1:b6:a9:cb:a2:ac: 8a:3d:1d:54:f3:cc:ee:5b:02:62:46:12:45:e4:7a:bc:8e:f2: 1f:fa:d0:cd:ea:cd:ee:d2:89:60:7d:55:08:56:77:a9:55:85: 68:98:a0:b3:5f:0a:b3:60:22:02:e4:85:90:76:30:06:e5:16: d1:0a:b1:1c:02:de:7f:e5:41:b5:57:f6:26:a5:d7:64:3d:a6: 87:31:67:c5:f5:0c:0b:86:d9:cf:0e:a6:2b:8e:ae:f8:59:62: 31:c7:d9:a3:07:27:d5:a8:5a:a7:d3:e9:70:de:ec:28:21:3f: 32:5d:4d:44:03:1d:17:e3:ae:93:0a:b5:c4:bd:58:05:81:45: 43:37:60:5f:6a:5d:78:d8:ca:c9:93:2f:f2:f6:29:ae:a5:cd: 6b:4f:65:a4:9c:fe:5f:45:a9:bb:c9:41:fe:22:f0:ae:1e:8a: 12:3e:60:28:53:4f:76:a2:10:d6:5c:3f:03:da:6d:c7:4c:2e: 29:3a:b1:cd:f2:24:a1:51:c2:35:17:83:b7:ff:5e:56:7b:c0: 52:96:d2:df:79:b6:57:7c:a3:95:fc:b6:a3:db:03:5b:b0:13: 4e:3e:6a:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fitDWIVC0TUaoC46wLWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMzNkODljMDZhOGExY2M5ZGJjMzYyMjAxZjdlYzU1OWQ3 ZmRkNDgwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD EygzNDVlYzZkMDYyMGNlYmMxMWZmMTI5YmNjMzE0OGYxMTBiMTg1MmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwScL9otWwzW7qUYvNQrOjKwFIXm qy/TUkCmDNFJiDMCRGQGvJDBA2Sy5oG00Vv2E+6ArAA4y7CS2M3Noui0o+gsPQBb q2OPkqvd4A164R+sxCs8vMumUht1KBIa5Go/oFZxbHe5OvCGA4Hi0boiuugUc2UK IyfmFPkAv0EmSy95yOjNofgdSq7sl6hKS3xgn3XHmF1oEAvv9qwQ+K19YUIr9rIE XYTudc+4Gtx18lpZJz5gTXiS+eBcHqceixMo6Rl8bmjbG7lJtl5ELZdC9vaxX4+E I77dXRnJ1f7OxuwPEcdsaBiZkgDuG/jFbaL0aJ9F6Ldno3kdRKeKxYej4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRextBiDOvBH/EpvMMUjxELGFLJMB8GA1UdIwQY MBaAFIEz2JwGqKHMnbw2IgH37FWdf91IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RQWW5BYW9vY3lkdkRZaUFmZnNWWjFfM1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lOTBmZjItNmM5MS00ZWI4LWE0YjEt YzVmZWJlNDg3YzQwLzEvZ1RQWW5BYW9vY3lkdkRZaUFmZnNWWjFfM1VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9lOTBmZjItNmM5MS00ZWI4LWE0YjEtYzVmZWJlNDg3YzQw LzEvZ1RQWW5BYW9vY3lkdkRZaUFmZnNWWjFfM1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSw2S24A PJogjw4WjwHg3C60FqDrJdoo6CWudQun0bapy6Ksij0dVPPM7lsCYkYSReR6vI7y H/rQzerN7tKJYH1VCFZ3qVWFaJigs18Ks2AiAuSFkHYwBuUW0QqxHALef+VBtVf2 JqXXZD2mhzFnxfUMC4bZzw6mK46u+FliMcfZowcn1ahap9PpcN7sKCE/Ml1NRAMd F+Oukwq1xL1YBYFFQzdgX2pdeNjKyZMv8vYprqXNa09lpJz+X0Wpu8lB/iLwrh6K Ej5gKFNPdqIQ1lw/A9ptx0wuKTqxzfIkoVHCNReDt/9eVnvAUpbS33m2V3yjlfy2 o9sDW7ATTj5q2A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:23 2025 by rpki-client