This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json) Hash identifier: VnKDL/ixO2vjufEJ+JPsGg8s8RAZQLPsHuH0IXfnZXA= Subject key identifier: B9:BE:9C:7E:D4:F8:44:38:F9:F7:7C:41:CC:19:07:37:9D:51:23:29 Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70 Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370 Certificate serial: 019AF3BFFAA5D8E9CA0DA7DBAAF613B460CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 13:00:36 +0000 Manifest this update: Sat 06 Dec 2025 13:00:36 +0000 Manifest next update: Sun 07 Dec 2025 13:00:36 +0000 Files and hashes: 1: AlDLgq4a_thE-qXe6l8E_xWLXFc.roa (hash: 0ufopEuWXow9IQPbSAY5y6lUJPxjAppqenIRissIhOM=) 2: HbD_TR3_mqlACMnF4iTXIAuOjsg.roa (hash: T3tCAy3O2wLO9qO83uugLqRmkiFNSfdwlXWERB4+Mok=) 3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: efzIrefcCJ6FiR8PElD+SVF80AXbLoxJEXVOdPXyH6o=) 4: h5Pey3t7ILGJvHcV0wlWm8IDgRE.roa (hash: /bmLdcY/7qOd0oeU6NCbdR7DKpvTkMz1r7GZ1d675P4=) 5: nId42Q0uPKxNBDzBg-GOcY-a01Q.roa (hash: 43G2ltR87FjAzlwjOiHc7NglbtaxLWslqx/bREI6WQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:fa:a5:d8:e9:ca:0d:a7:db:aa:f6:13:b4:60:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370 Validity Not Before: Dec 6 13:00:36 2025 GMT Not After : Dec 7 13:00:36 2025 GMT Subject: CN=b9be9c7ed4f84438f9f77c41cc1907379d512329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fc:f3:67:8b:88:e3:94:0b:44:c0:44:40:60: 35:b0:d0:ea:e9:4b:9e:04:91:3c:07:b4:db:06:c5: bb:b5:eb:c8:ca:a1:b9:b5:f9:3d:50:07:ec:e0:9c: 47:03:83:60:52:f2:55:ac:a0:24:8c:e7:fc:ad:aa: fd:ce:97:12:c2:c9:a5:d4:71:74:77:3f:77:94:26: 70:01:78:0e:6d:43:d9:5a:09:4d:60:2e:1f:08:d2: 5b:b6:e2:65:2d:92:b5:97:d3:0b:5f:7a:b8:8f:e0: cb:4f:1c:ed:6e:0e:54:c4:2b:9e:60:36:38:6e:3a: bb:1a:dd:ef:17:cd:cc:6d:dd:a7:24:94:ec:2b:25: fb:3c:19:a1:a1:f8:35:f5:78:17:26:eb:11:35:4b: b4:ea:b9:93:e5:e2:a5:30:95:fd:8c:e0:ad:2f:3f: c3:7c:14:d0:5f:cd:e1:1d:0c:31:2a:e3:de:ba:d2: a7:bb:25:50:97:8f:fa:7f:70:10:c6:f8:86:b0:6a: 65:a4:9c:c5:a7:66:3e:35:dd:28:fd:52:f0:d8:e3: 27:04:19:4b:ab:ac:7b:4e:c1:ce:91:55:71:a2:ae: ed:de:ff:04:92:f2:b8:76:9b:b0:44:9a:d4:d1:9a: c9:66:c9:a0:25:98:a9:cb:a9:23:20:85:54:0b:75: 69:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BE:9C:7E:D4:F8:44:38:F9:F7:7C:41:CC:19:07:37:9D:51:23:29 X509v3 Authority Key Identifier: keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:66:56:89:52:39:ad:63:39:ce:a9:c1:47:23:6e:7a:a4:fe: 3c:bb:ff:08:2c:65:02:32:32:ef:6e:91:e0:7b:7d:fe:fd:e5: 2a:12:fe:ec:10:d9:60:fc:78:50:f4:1a:1d:d8:88:fc:af:82: de:f5:bd:23:33:0d:ae:f3:08:99:55:e7:5d:af:2c:3b:ef:c2: ce:8a:dc:3b:34:19:c3:46:b9:7b:2e:49:70:ba:5b:9d:b2:88: 6f:bf:3c:88:85:70:e4:e2:aa:e5:c6:3e:0b:89:45:86:fd:2e: 39:47:cf:39:a4:86:6c:1e:e8:e0:9b:d2:d8:a8:92:9c:12:23: ff:3a:2c:45:f6:1e:89:f3:f4:40:0a:64:a3:89:56:ad:17:3a: a5:cd:30:16:bd:0b:e3:8e:4e:d8:74:f8:3c:a5:94:0a:d6:c3: 06:7f:a9:43:99:57:c1:31:fb:f3:0f:e6:ca:27:23:56:5b:85: ec:02:86:74:80:68:57:bb:f0:f0:d6:c0:20:75:f1:fd:70:a9: 2b:81:00:6a:db:5a:a1:25:9e:ca:0f:ef:1f:1d:cf:78:7d:c8: ec:94:57:6a:32:c3:85:6f:82:42:de:9c:8c:f1:6d:be:05:09: a7:c4:95:c4:ab:fa:39:86:35:47:ec:b4:96:ed:bf:a8:d0:04: 78:b1:ad:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv/ql2OnKDafbqvYTtGDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYWQ4YzUyMGJiOTY3NzQ2MWRkYzRlYzA5Yjc2ZDczM2I3 ZDgzNzAwHhcNMjUxMjA2MTMwMDM2WhcNMjUxMjA3MTMwMDM2WjAzMTEwLwYDVQQD EyhiOWJlOWM3ZWQ0Zjg0NDM4ZjlmNzdjNDFjYzE5MDczNzlkNTEyMzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/zzZ4uI45QLRMBEQGA1sNDq6Uue BJE8B7TbBsW7tevIyqG5tfk9UAfs4JxHA4NgUvJVrKAkjOf8rar9zpcSwsml1HF0 dz93lCZwAXgObUPZWglNYC4fCNJbtuJlLZK1l9MLX3q4j+DLTxztbg5UxCueYDY4 bjq7Gt3vF83Mbd2nJJTsKyX7PBmhofg19XgXJusRNUu06rmT5eKlMJX9jOCtLz/D fBTQX83hHQwxKuPeutKnuyVQl4/6f3AQxviGsGplpJzFp2Y+Nd0o/VLw2OMnBBlL q6x7TsHOkVVxoq7t3v8EkvK4dpuwRJrU0ZrJZsmgJZipy6kjIIVUC3Vp5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLm+nH7U+EQ4+fd8QcwZBzedUSMpMB8GA1UdIwQY MBaAFICtjFILuWd0Yd3E7Am3bXM7fYNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEt YzYxNzUxYzZiMTk1LzEvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEtYzYxNzUxYzZiMTk1 LzEvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamZWiVI5 rWM5zqnBRyNueqT+PLv/CCxlAjIy726R4Ht9/v3lKhL+7BDZYPx4UPQaHdiI/K+C 3vW9IzMNrvMImVXnXa8sO+/CzorcOzQZw0a5ey5JcLpbnbKIb788iIVw5OKq5cY+ C4lFhv0uOUfPOaSGbB7o4JvS2KiSnBIj/zosRfYeifP0QApko4lWrRc6pc0wFr0L 445O2HT4PKWUCtbDBn+pQ5lXwTH78w/myicjVluF7AKGdIBoV7vw8NbAIHXx/XCp K4EAattaoSWeyg/vHx3PeH3I7JRXajLDhW+CQt6cjPFtvgUJp8SVxKv6OYY1R+y0 lu2/qNAEeLGtNg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:26:55 2025 by rpki-client