This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft File: gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json) Hash identifier: ZgwWZs1/o3i63Xhgd9ch6nflgEUaMS2A3VT0/ebapW4= Subject key identifier: EB:48:BD:EC:C9:8D:AB:61:D5:28:1C:B8:8D:37:99:D3:7B:A0:57:CF Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20 Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220 Certificate serial: 019AF19B4AD842F73813113A325818E80F93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft Manifest number: 0E54 Signing time: Sat 06 Dec 2025 03:01:17 +0000 Manifest this update: Sat 06 Dec 2025 03:01:17 +0000 Manifest next update: Sun 07 Dec 2025 03:01:17 +0000 Files and hashes: 1: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: AtdbN4aHwrPYcpHAALE036aonxAnEhNCp0g+t7sXqcc=) 2: ql09cCtxf2iX9P0d2dUBPQ5PKyY.roa (hash: DXSDjUv3k4luzqmW9TKxBUky0r+na22MITMB3j5FLDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4a:d8:42:f7:38:13:11:3a:32:58:18:e8:0f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220 Validity Not Before: Dec 6 03:01:17 2025 GMT Not After : Dec 7 03:01:17 2025 GMT Subject: CN=eb48bdecc98dab61d5281cb88d3799d37ba057cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:75:86:40:8a:c0:f7:f4:31:49:9c:e3:6d:4e: 78:1a:5f:06:40:83:7f:68:31:08:28:63:b5:35:36: 4a:4b:e7:bd:b9:4e:0e:69:61:bd:cf:25:c9:39:7a: 4f:be:7f:86:c5:f0:06:17:81:58:1a:97:4c:8b:61: 03:30:46:26:77:05:fb:93:15:36:16:a8:58:1c:76: 79:18:d8:91:d9:99:76:e1:11:08:fb:b8:78:db:d3: b9:e2:75:51:4a:0d:a7:d5:7e:f2:60:7b:c4:58:80: 7a:65:ea:42:bc:57:e8:2a:0b:ad:ee:a3:47:85:10: 97:42:05:2f:70:7c:c4:85:e8:e6:dc:68:df:b6:84: 7c:09:9e:e4:ee:75:d3:ae:3c:3d:8e:29:9f:c4:6e: 9a:e0:49:b0:19:25:22:c9:d2:07:b4:56:41:08:38: a4:49:8e:cf:d1:dd:9d:96:46:ba:70:a9:11:10:4d: f3:ea:b2:9f:76:f9:ab:83:15:d6:c5:62:80:0d:63: 9d:cd:eb:74:2b:67:eb:af:51:e3:4f:1b:3a:05:31: f6:64:b5:ac:5d:25:83:1c:93:95:14:79:db:f5:c0: 96:23:98:19:e5:fc:c4:50:a5:7e:8f:37:16:76:c1: 91:0b:59:df:5b:f2:ed:69:95:90:ab:2c:70:bf:a3: c5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:48:BD:EC:C9:8D:AB:61:D5:28:1C:B8:8D:37:99:D3:7B:A0:57:CF X509v3 Authority Key Identifier: keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:c6:39:ac:37:ec:87:d6:4b:d2:95:79:75:0a:38:32:d4:e4: 09:33:0b:18:ef:21:88:2c:10:00:bc:89:c0:b5:12:24:57:d8: 15:47:3a:cd:71:fa:f9:66:c1:fb:5d:bd:2b:b3:69:70:c9:66: 36:3f:d2:9a:c5:0b:8f:e1:cd:0d:e9:88:90:9a:15:50:dc:f9: 82:12:5f:83:cb:8a:52:2d:0e:bd:79:a7:c4:c8:2a:7e:4b:db: af:c9:ab:52:2e:ba:8b:c8:fb:25:ee:09:16:11:ea:17:39:9a: 23:4f:26:2f:a6:e7:c8:60:95:23:a4:f7:bc:dc:c3:66:50:fc: 1e:51:eb:d6:bd:49:66:27:27:91:b2:58:f0:61:7a:67:f5:ef: 92:47:6d:fc:e4:a7:5c:84:1f:b8:a0:fc:f5:7e:a0:72:87:9b: 66:a4:b5:33:ce:78:8f:1d:b2:a0:9b:37:39:10:a5:0b:5c:1b: 46:d3:6f:20:e9:8a:8c:e6:f7:8b:fb:fb:f8:92:cc:c1:f7:8b: 70:c9:d6:91:b3:f1:87:bf:7d:9c:a3:b8:f1:99:62:18:6f:6b: 85:1b:ca:f3:6b:3b:a8:0e:31:7a:0c:2f:d7:a0:d7:a5:b8:3c: 29:74:6e:37:48:b3:cc:52:23:30:32:14:fd:a2:c6:aa:43:a9: 40:cf:16:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0rYQvc4ExE6MlgY6A+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwN2JkNjJmZDhkMzUzMDhkYmM4YjFmZDVmMTcyN2FmNTdh YmQyMjAwHhcNMjUxMjA2MDMwMTE3WhcNMjUxMjA3MDMwMTE3WjAzMTEwLwYDVQQD EyhlYjQ4YmRlY2M5OGRhYjYxZDUyODFjYjg4ZDM3OTlkMzdiYTA1N2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3WGQIrA9/QxSZzjbU54Gl8GQIN/ aDEIKGO1NTZKS+e9uU4OaWG9zyXJOXpPvn+GxfAGF4FYGpdMi2EDMEYmdwX7kxU2 FqhYHHZ5GNiR2Zl24REI+7h429O54nVRSg2n1X7yYHvEWIB6ZepCvFfoKgut7qNH hRCXQgUvcHzEhejm3GjftoR8CZ7k7nXTrjw9jimfxG6a4EmwGSUiydIHtFZBCDik SY7P0d2dlka6cKkREE3z6rKfdvmrgxXWxWKADWOdzet0K2frr1HjTxs6BTH2ZLWs XSWDHJOVFHnb9cCWI5gZ5fzEUKV+jzcWdsGRC1nfW/LtaZWQqyxwv6PFHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtIvezJjath1SgcuI03mdN7oFfPMB8GA1UdIwQY MBaAFIB71i/Y01MI28ix/V8XJ69Xq9IgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0h2V0w5alRVd2pieUxIOVh4Y25yMWVyMGlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9hMGFiNTEtOWRhZS00MTBkLThmZDkt MDhmYWRlYjJkYmU3LzEvZ0h2V0w5alRVd2pieUxIOVh4Y25yMWVyMGlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9hMGFiNTEtOWRhZS00MTBkLThmZDktMDhmYWRlYjJkYmU3 LzEvZ0h2V0w5alRVd2pieUxIOVh4Y25yMWVyMGlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUsY5rDfs h9ZL0pV5dQo4MtTkCTMLGO8hiCwQALyJwLUSJFfYFUc6zXH6+WbB+129K7NpcMlm Nj/SmsULj+HNDemIkJoVUNz5ghJfg8uKUi0OvXmnxMgqfkvbr8mrUi66i8j7Je4J FhHqFzmaI08mL6bnyGCVI6T3vNzDZlD8HlHr1r1JZicnkbJY8GF6Z/Xvkkdt/OSn XIQfuKD89X6gcoebZqS1M854jx2yoJs3ORClC1wbRtNvIOmKjOb3i/v7+JLMwfeL cMnWkbPxh799nKO48ZliGG9rhRvK82s7qA4xegwv16DXpbg8KXRuN0izzFIjMDIU /aLGqkOpQM8WIA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:13 2025 by rpki-client