This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json) Hash identifier: pnszDfNpRPzIqK79EMHSmoJTy4BqZ8AgK7jMkLEs2d8= Subject key identifier: CC:20:F7:8A:B6:EA:14:7A:21:F3:8B:CB:15:62:D6:F0:B0:46:5E:C7 Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab Certificate serial: 019AF653A81B7A69C1BC8C644A9016AF9E05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft Manifest number: 1765 Signing time: Sun 07 Dec 2025 01:01:08 +0000 Manifest this update: Sun 07 Dec 2025 01:01:08 +0000 Manifest next update: Mon 08 Dec 2025 01:01:08 +0000 Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: T7QWo+ifkDsk8kAOOHcImWf3S8RW8jZfRyDhlOb6s9g=) 2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:a8:1b:7a:69:c1:bc:8c:64:4a:90:16:af:9e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab Validity Not Before: Dec 7 01:01:08 2025 GMT Not After : Dec 8 01:01:08 2025 GMT Subject: CN=cc20f78ab6ea147a21f38bcb1562d6f0b0465ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:12:58:3b:b1:4a:77:44:57:cb:5b:3f:a5: ae:b6:3a:f7:0f:40:5b:d3:2f:b2:13:4d:a7:ea:5e: 19:0a:d3:5d:d0:b0:a9:e4:2c:ac:2c:9a:b2:b6:10: 15:2d:3b:3c:51:cd:7b:fc:0a:8a:6f:32:5a:95:4b: 2b:97:e7:8e:73:58:b9:1d:17:96:32:44:08:fa:af: 4e:73:32:a4:15:79:b8:51:d0:42:c8:c7:6a:1d:61: a7:9c:54:74:c0:ad:0d:7b:eb:05:15:b0:20:3a:91: 7d:b3:6d:51:35:74:b6:c6:98:06:d7:60:ef:cf:54: 3f:04:86:22:ec:b7:73:49:ec:f5:61:d4:cd:54:6f: fb:0a:c0:d9:99:34:80:88:54:e2:55:61:a7:3c:99: 04:03:93:9e:db:f2:59:1d:f1:27:51:49:f3:38:16: e5:ba:5f:ed:66:d2:2f:94:71:52:dc:fc:a4:86:67: 1c:b5:e6:70:d0:59:0c:ae:88:b9:5c:e8:71:6c:e9: d0:d4:18:03:14:e8:93:be:32:f9:94:45:6e:43:f4: 1d:b6:de:c3:a5:87:79:ce:a7:22:73:9f:9f:01:e3: ea:f0:7f:9e:be:a9:0e:60:88:33:83:23:f7:8c:9f: d0:47:d3:24:95:32:21:a7:3f:4e:e9:9a:8c:96:1e: 83:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:20:F7:8A:B6:EA:14:7A:21:F3:8B:CB:15:62:D6:F0:B0:46:5E:C7 X509v3 Authority Key Identifier: keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:0f:27:1d:bb:f8:c6:77:45:fc:f8:11:d8:b4:f5:d9:ab:d4: e6:60:c5:de:af:e6:48:13:70:3f:08:c3:db:33:d5:b9:df:2b: 11:0a:51:99:2c:c2:01:9c:04:29:76:3f:09:74:10:a9:b3:1e: 6a:3a:cf:d5:72:cb:a6:46:d0:78:6b:c5:f9:d4:99:fc:a1:80: 27:e3:83:dc:77:d2:d7:68:0b:f1:a0:10:64:1a:e2:cd:4c:32: cd:50:f7:bf:ac:80:a8:f7:d3:b9:c5:61:cf:6f:eb:ac:d0:60: be:b2:47:2f:6b:69:31:01:90:68:96:8e:69:82:7c:d7:2f:66: d8:b4:19:25:37:37:ff:3f:1a:f8:e6:80:d8:d7:c9:5e:e4:85: 6d:62:e8:ba:d4:73:6f:df:00:5e:47:14:a1:ea:eb:58:0f:fc: 32:2c:d6:04:0f:f8:fa:8b:a1:4a:fe:e2:9a:93:0d:de:dc:8e: 7f:6a:af:8d:f9:19:81:f9:d6:0d:a6:1c:16:47:79:44:21:f6: 24:89:eb:fa:d8:05:89:6f:dd:9a:70:28:07:50:30:58:b0:31: d9:7c:36:7a:fc:b7:74:68:18:d2:fe:c2:99:2f:8b:50:07:15: 80:9e:80:6d:5e:e4:0e:e3:66:a6:48:47:4f:e7:97:1d:62:b4: fd:9d:44:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U6gbemnBvIxkSpAWr54FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMjRjNWRmMTk3ODlkNTI1OTEwNGUwYWUwZGNkNDY3MmE4 ZTJiYWIwHhcNMjUxMjA3MDEwMTA4WhcNMjUxMjA4MDEwMTA4WjAzMTEwLwYDVQQD EyhjYzIwZjc4YWI2ZWExNDdhMjFmMzhiY2IxNTYyZDZmMGIwNDY1ZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6ASWDuxSndEV8tbP6Wutjr3D0Bb 0y+yE02n6l4ZCtNd0LCp5CysLJqythAVLTs8Uc17/AqKbzJalUsrl+eOc1i5HReW MkQI+q9OczKkFXm4UdBCyMdqHWGnnFR0wK0Ne+sFFbAgOpF9s21RNXS2xpgG12Dv z1Q/BIYi7LdzSez1YdTNVG/7CsDZmTSAiFTiVWGnPJkEA5Oe2/JZHfEnUUnzOBbl ul/tZtIvlHFS3PykhmccteZw0FkMroi5XOhxbOnQ1BgDFOiTvjL5lEVuQ/Qdtt7D pYd5zqcic5+fAePq8H+evqkOYIgzgyP3jJ/QR9MklTIhpz9O6ZqMlh6DnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwg94q26hR6IfOLyxVi1vCwRl7HMB8GA1UdIwQY MBaAFIMkxd8ZeJ1SWRBOCuDc1GcqjiurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80YjJlNDktZjY2Ny00OTRhLWFmZTkt NmRmM2U0YTRlZWIxLzEvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy80YjJlNDktZjY2Ny00OTRhLWFmZTktNmRmM2U0YTRlZWIx LzEvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQA8nHbv4 xndF/PgR2LT12avU5mDF3q/mSBNwPwjD2zPVud8rEQpRmSzCAZwEKXY/CXQQqbMe ajrP1XLLpkbQeGvF+dSZ/KGAJ+OD3HfS12gL8aAQZBrizUwyzVD3v6yAqPfTucVh z2/rrNBgvrJHL2tpMQGQaJaOaYJ81y9m2LQZJTc3/z8a+OaA2NfJXuSFbWLoutRz b98AXkcUoerrWA/8MizWBA/4+ouhSv7impMN3tyOf2qvjfkZgfnWDaYcFkd5RCH2 JInr+tgFiW/dmnAoB1AwWLAx2Xw2evy3dGgY0v7CmS+LUAcVgJ6AbV7kDuNmpkhH T+eXHWK0/Z1EHA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:30:25 2025 by rpki-client