This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft File: gaaIASwSJngYX8634QN_Dh7ReGE.mft (raw, json) Hash identifier: kIDwhuH39p4P5wFNLMZb07FAHohuRexD96pK7s6TIi8= Subject key identifier: 71:6F:77:0D:D3:75:F1:AE:BC:49:92:98:31:62:84:73:6A:FC:E1:F3 Authority key identifier: 81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61 Certificate issuer: /CN=81a688012c122678185fceb7e1037f0e1ed17861 Certificate serial: 019AF50A34FEEE81753BD7384F9D09838F19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft Manifest number: 0E49 Signing time: Sat 06 Dec 2025 19:01:18 +0000 Manifest this update: Sat 06 Dec 2025 19:01:18 +0000 Manifest next update: Sun 07 Dec 2025 19:01:18 +0000 Files and hashes: 1: S3eWbiRfXZtQFoOUJF8EdYDX9Yc.roa (hash: JnGWj1XmSn65dRfGoU3j1BYgj3cm1658PcWeEjvrK4Q=) 2: gaaIASwSJngYX8634QN_Dh7ReGE.crl (hash: VmjRMstELD/+69bSuQNDoAdPVabT8B0zZgxlWBNJXzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:34:fe:ee:81:75:3b:d7:38:4f:9d:09:83:8f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81a688012c122678185fceb7e1037f0e1ed17861 Validity Not Before: Dec 6 19:01:18 2025 GMT Not After : Dec 7 19:01:18 2025 GMT Subject: CN=716f770dd375f1aebc499298316284736afce1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:29:9a:71:c2:fc:c6:35:dd:58:df:cb:fb:fc: f1:7d:13:fe:5c:8f:c4:5c:f7:a7:01:d3:f6:42:90: e0:61:35:67:ee:71:f5:97:cb:1f:11:52:30:ba:b8: 69:82:c6:55:b5:ca:00:81:59:96:a1:c5:cc:e2:d8: 86:4d:b2:df:f7:b7:2c:8c:f3:cb:3f:5a:eb:3f:af: 4b:05:aa:15:9a:bc:f3:6c:5e:b9:22:4d:45:eb:81: d8:47:80:fd:86:63:56:de:00:26:15:5c:9d:90:94: 9c:7d:93:f8:3a:ed:6c:49:cd:2e:38:ff:b5:e9:cd: 81:2a:84:a6:2b:90:90:4f:d6:43:2f:26:9f:c7:94: fb:6e:0f:d0:7c:c5:9d:d3:28:81:71:7a:d9:bc:61: ec:70:04:fb:20:1f:cd:ac:0d:47:3b:b1:ad:ad:da: 24:6b:65:a3:be:a6:49:cb:fd:12:2e:25:1d:a1:a5: 0e:f8:43:3b:af:e8:b9:88:36:5a:77:b7:ba:6e:5d: 06:69:da:70:6f:0a:03:f8:f3:8e:48:5f:47:29:b3: 4c:94:43:b6:25:54:81:7d:d0:aa:94:88:1d:96:4a: 91:a9:73:76:ee:49:76:23:ba:5d:3c:ff:3e:95:4a: 8d:f8:ad:a2:21:4d:42:6d:03:d2:1d:d2:7e:49:0b: 70:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6F:77:0D:D3:75:F1:AE:BC:49:92:98:31:62:84:73:6A:FC:E1:F3 X509v3 Authority Key Identifier: keyid:81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:be:96:b4:fc:62:bc:56:07:37:d1:b1:7d:cd:5e:c6:82:8a: 77:d9:4a:a8:9a:3c:54:06:71:b8:3a:72:c7:fe:48:dc:41:16: ca:27:9d:1c:b7:b5:56:b2:aa:82:ef:ed:a5:76:34:95:ec:c8: 52:31:49:66:23:68:f0:8b:cf:fc:de:e6:37:49:dd:4f:91:bf: ca:92:57:e5:5a:9e:82:53:8a:5f:af:42:81:61:5e:e7:ae:a9: 8d:01:b8:6b:c4:6c:c6:ca:62:a4:73:ae:de:3d:0a:16:89:10: 32:ce:95:21:36:4e:83:9f:34:39:58:16:96:27:6c:bf:d2:7b: 9d:46:ff:04:bb:d2:00:bb:9b:16:af:c6:72:13:98:3a:b8:38: d4:98:d8:21:50:f0:2e:6d:6c:e2:de:fc:fd:f0:61:c0:8a:a4: 4e:ea:7c:51:a5:7c:f5:73:5d:13:25:5d:35:b5:62:5d:f8:b9: 57:2a:f8:0f:6e:3e:07:90:ff:09:34:c6:0f:5c:51:ee:1c:dd: cc:7f:f6:40:fe:ea:a6:9d:54:27:94:10:dd:ce:3d:37:45:64: 5b:f8:e3:a0:dc:ba:3c:38:e3:76:98:ae:1e:a5:11:ba:27:38: 9b:31:9c:f6:51:b1:10:74:7c:1c:99:f5:0b:14:35:75:e8:d6: 1d:18:a8:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CjT+7oF1O9c4T50Jg48ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYTY4ODAxMmMxMjI2NzgxODVmY2ViN2UxMDM3ZjBlMWVk MTc4NjEwHhcNMjUxMjA2MTkwMTE4WhcNMjUxMjA3MTkwMTE4WjAzMTEwLwYDVQQD Eyg3MTZmNzcwZGQzNzVmMWFlYmM0OTkyOTgzMTYyODQ3MzZhZmNlMWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7imaccL8xjXdWN/L+/zxfRP+XI/E XPenAdP2QpDgYTVn7nH1l8sfEVIwurhpgsZVtcoAgVmWocXM4tiGTbLf97csjPPL P1rrP69LBaoVmrzzbF65Ik1F64HYR4D9hmNW3gAmFVydkJScfZP4Ou1sSc0uOP+1 6c2BKoSmK5CQT9ZDLyafx5T7bg/QfMWd0yiBcXrZvGHscAT7IB/NrA1HO7Gtrdok a2WjvqZJy/0SLiUdoaUO+EM7r+i5iDZad7e6bl0GadpwbwoD+POOSF9HKbNMlEO2 JVSBfdCqlIgdlkqRqXN27kl2I7pdPP8+lUqN+K2iIU1CbQPSHdJ+SQtwyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFvdw3TdfGuvEmSmDFihHNq/OHzMB8GA1UdIwQY MBaAFIGmiAEsEiZ4GF/Ot+EDfw4e0XhhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2FhSUFTd1NKbmdZWDg2MzRRTl9EaDdSZUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jN2MyMDctYTNiYS00OWM4LWE4OTQt MDg0ZDQ3NDhjMzg1LzEvZ2FhSUFTd1NKbmdZWDg2MzRRTl9EaDdSZUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jN2MyMDctYTNiYS00OWM4LWE4OTQtMDg0ZDQ3NDhjMzg1 LzEvZ2FhSUFTd1NKbmdZWDg2MzRRTl9EaDdSZUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx76WtPxi vFYHN9Gxfc1exoKKd9lKqJo8VAZxuDpyx/5I3EEWyiedHLe1VrKqgu/tpXY0lezI UjFJZiNo8IvP/N7mN0ndT5G/ypJX5VqeglOKX69CgWFe566pjQG4a8RsxspipHOu 3j0KFokQMs6VITZOg580OVgWlidsv9J7nUb/BLvSALubFq/GchOYOrg41JjYIVDw Lm1s4t78/fBhwIqkTup8UaV89XNdEyVdNbViXfi5Vyr4D24+B5D/CTTGD1xR7hzd zH/2QP7qpp1UJ5QQ3c49N0VkW/jjoNy6PDjjdpiuHqURuic4mzGc9lGxEHR8HJn1 CxQ1dejWHRioaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:17 2025 by rpki-client