This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft File: gnYDqTvKMbAY9RH21LC3VG6WM2I.mft (raw, json) Hash identifier: NqJ7m0ZLqmcGfEYRVgW2R1RBdnIwQj3AvJj1cX7DAks= Subject key identifier: 61:DA:FE:B3:C2:BD:91:EE:69:4C:9F:F1:20:F2:E9:3C:56:FF:D5:7F Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019AF12D7F78CF989382B70C4CEDCCA9F973 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft Manifest number: 17EC Signing time: Sat 06 Dec 2025 01:01:21 +0000 Manifest this update: Sat 06 Dec 2025 01:01:21 +0000 Manifest next update: Sun 07 Dec 2025 01:01:21 +0000 Files and hashes: 1: 4NmV2EA-4_XNyg8aS-3TPtxZvi4.roa (hash: +iPBXGnxxMXsqFCmUYvKQlhKW2jvl7XanfjVBcERplw=) 2: 66Xx5jDxNG0NmEQTOBPZWLsuDKU.roa (hash: YRP6vRA01LYM57+OEVE980SXFAryoZ4goaiztW4UpGM=) 3: 94D-aFdJ0lxGvd8Ck0_HXNvsj1U.roa (hash: W3CoH4BXO1CIOV0ARapVvpD7ATmyPu3rPtRmoNOdHFw=) 4: 9kFFUxQ3ysP-zpJLfgwYPJeN0Rk.roa (hash: S42eDxiXdAnmmf/W2DKgqzpMNhr5lHTUSdRaXIEDtqM=) 5: GUuXsw6txnCm9W8sDUIP_a6aFwM.roa (hash: mLyS2fJ3tXy0aEM0+FIcWymoTZU1igPMELiifRZehM0=) 6: HjUbHI7aX25iVhab0lso8dRqV_4.roa (hash: 0REU2g0MEJQKeIiJcHq2HYM6d2KNhD9vS+mjUsahpK4=) 7: I1gXlx046mNGwZ1Ahc41ozPoiSc.roa (hash: Tz5OeewMV1usaK3mD/N1zYSxy42INKdmwhHFFgrv9M0=) 8: NDiuqs_F6U9vhyoOyITvy1edxEE.roa (hash: JmO6c3RyiGwLx214FmPPWsfWGCX/kkf39Cg5s9Tt4H4=) 9: PKaqbyS2JUmUFWkanNtnUVOeb0k.roa (hash: XnxdB7QCFZRrLjw5gBqAaLpQdzzFZf/2WrRe2aVUvEM=) 10: Q-5d7aoYXXlkpCFbtDiM3q9oCzc.roa (hash: F1M+lKPpBJlvEl2w62XI+/N5oXb1zCShMJ40ZdPDO1Q=) 11: RCAhdW8y8lZQe_hgXqFAZ8XkQf4.roa (hash: qct0DIB13CXPsTg5UzhCEYb/DG0VdQEeWFArQ7YyKVI=) 12: fahVjq3eu8sEDPnB9DGaewCoR3U.roa (hash: 6HoCDkJGCusec6kjy3BuDvxzGPnCLRl/jJWagjqWKAM=) 13: gnYDqTvKMbAY9RH21LC3VG6WM2I.crl (hash: JdFZ3QTNNORF6m1vuE4p5C1NHRNjIsXXjFG02aghXpg=) 14: hqbCZvBXzB77KHtqHXMD1fWA6kY.roa (hash: GUn5Uq/ONwTDRfgsRO2JjkxvZemRk4JP3fq+QqdcYLA=) 15: lM5cW39DEPygwwr7GZhBsWNP-P4.roa (hash: uwfzCL7e7uGyxjb3jZHkU336kB7uQCgHhwNW6MUb9Xo=) 16: sRKyFjWls0TVknEviLVPHznqfQY.roa (hash: oCsrgUm/p9XB6dCGrQ8r9R2FuW+9BvdmhFaxDzmb+J0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:7f:78:cf:98:93:82:b7:0c:4c:ed:cc:a9:f9:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Dec 6 01:01:21 2025 GMT Not After : Dec 7 01:01:21 2025 GMT Subject: CN=61dafeb3c2bd91ee694c9ff120f2e93c56ffd57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:30:c3:14:4d:a7:bc:37:76:ed:73:5a:32:6a: b4:43:b0:4f:30:a9:45:29:30:68:8a:88:26:cf:85: ac:3c:3b:6d:96:9c:60:1d:b7:67:30:96:06:51:e1: 85:fd:1f:0f:10:2c:65:e2:57:00:75:51:b5:24:e1: a5:2c:72:48:43:00:ce:34:c4:d2:03:1e:76:af:5a: 8e:fd:10:b1:9f:4f:64:69:0b:71:4d:7e:9d:8f:57: ad:64:cf:28:db:c0:70:2c:a1:47:b0:b5:f2:fb:f7: bf:9d:33:ad:5d:d2:59:78:23:00:50:80:c6:8a:9c: a5:35:db:a9:d0:22:0f:94:6e:6e:6b:b4:69:83:16: 19:01:77:63:51:b0:ea:28:e9:47:c1:d2:9a:29:48: a6:22:a5:aa:cc:05:c6:a5:12:e1:08:9d:85:2b:44: 81:f9:06:d7:15:b6:08:28:41:06:9b:a7:ce:52:34: 69:55:83:07:d0:2d:40:84:31:5b:30:9e:53:77:ec: 7f:1f:27:37:f6:a5:6b:b8:a0:ea:f9:c6:b5:13:b3: e0:9c:9a:e6:0c:8a:a0:84:2b:ba:2c:a7:a3:fa:37: 48:90:29:6e:ea:82:78:84:e6:b1:0b:1b:5c:7b:bc: a7:1d:e9:18:52:91:03:13:6e:33:56:6d:6d:c3:12: 87:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DA:FE:B3:C2:BD:91:EE:69:4C:9F:F1:20:F2:E9:3C:56:FF:D5:7F X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:21:2d:82:cf:60:4a:70:42:3c:f4:29:aa:27:4c:d9:4d:61: 2b:92:fa:40:52:3b:a8:16:17:4d:e9:f5:a2:ac:35:44:4f:35: 11:e5:ae:8c:e7:1d:2d:1f:4a:31:8b:55:8e:f7:ad:52:67:4c: ca:a5:77:12:7b:34:4c:c2:87:69:93:8d:3d:cb:e6:f1:e7:b3: 7b:0a:68:fc:89:f1:8a:b5:6e:8e:c9:8e:d5:e9:9a:8c:64:7d: a0:f8:a2:0b:ea:28:06:9b:08:81:68:4a:7b:94:01:02:fc:d9: ce:f4:10:84:94:ed:da:1a:a6:80:d5:1e:97:93:f0:9b:fd:b1: 35:34:4d:9a:e3:c9:b5:3b:00:85:c0:e2:9a:bf:21:d9:b4:2b: 5a:38:a2:fe:2f:b3:23:21:3a:a3:69:37:8d:4e:65:b9:92:2f: b5:27:f4:b2:ed:3e:90:2e:04:26:9e:dd:c3:10:ef:99:5e:f7: cf:94:18:b9:f4:b8:9a:66:d0:6a:5a:d1:e1:35:fd:87:b7:2b: 4d:c8:61:2c:f2:5d:ee:00:60:cf:2c:73:b3:e0:ea:1f:fa:e9: 02:17:8e:7e:10:7c:53:49:ee:b4:96:11:38:c3:f1:d3:51:f0: de:bc:42:7f:f9:42:fa:70:a6:35:da:b7:05:84:9c:59:e9:70: e9:ad:a0:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLX94z5iTgrcMTO3MqflzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjUxMjA2MDEwMTIxWhcNMjUxMjA3MDEwMTIxWjAzMTEwLwYDVQQD Eyg2MWRhZmViM2MyYmQ5MWVlNjk0YzlmZjEyMGYyZTkzYzU2ZmZkNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zDDFE2nvDd27XNaMmq0Q7BPMKlF KTBoiogmz4WsPDttlpxgHbdnMJYGUeGF/R8PECxl4lcAdVG1JOGlLHJIQwDONMTS Ax52r1qO/RCxn09kaQtxTX6dj1etZM8o28BwLKFHsLXy+/e/nTOtXdJZeCMAUIDG ipylNdup0CIPlG5ua7RpgxYZAXdjUbDqKOlHwdKaKUimIqWqzAXGpRLhCJ2FK0SB +QbXFbYIKEEGm6fOUjRpVYMH0C1AhDFbMJ5Td+x/Hyc39qVruKDq+ca1E7PgnJrm DIqghCu6LKej+jdIkClu6oJ4hOaxCxtce7ynHekYUpEDE24zVm1twxKHUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHa/rPCvZHuaUyf8SDy6TxW/9V/MB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSEtgs9g SnBCPPQpqidM2U1hK5L6QFI7qBYXTen1oqw1RE81EeWujOcdLR9KMYtVjvetUmdM yqV3Ens0TMKHaZONPcvm8eezewpo/InxirVujsmO1emajGR9oPiiC+ooBpsIgWhK e5QBAvzZzvQQhJTt2hqmgNUel5Pwm/2xNTRNmuPJtTsAhcDimr8h2bQrWjii/i+z IyE6o2k3jU5luZIvtSf0su0+kC4EJp7dwxDvmV73z5QYufS4mmbQalrR4TX9h7cr TchhLPJd7gBgzyxzs+DqH/rpAheOfhB8U0nutJYROMPx01Hw3rxCf/lC+nCmNdq3 BYScWelw6a2gIw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:53 2025 by rpki-client