This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft File: gvWThvzeWW90WQde3qTXTBmwHKI.mft (raw, json) Hash identifier: glkD36pxDjCVtt7KHQNRU+CdVQl6HllCxXp1nKrXcEU= Subject key identifier: 2F:4D:62:DD:84:64:D9:FA:50:B8:73:8D:10:20:4A:87:FF:E6:B9:F8 Authority key identifier: 82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2 Certificate issuer: /CN=82f59386fcde596f7459075edea4d74c19b01ca2 Certificate serial: 019AF1D20ED1A0D6A9F2432AF18F4C5FB04C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft Manifest number: 09FF Signing time: Sat 06 Dec 2025 04:01:06 +0000 Manifest this update: Sat 06 Dec 2025 04:01:06 +0000 Manifest next update: Sun 07 Dec 2025 04:01:06 +0000 Files and hashes: 1: MVRm2B27-mtawpjQijtz-fTQOKU.roa (hash: TjDlm71DJPQeofi//IsXEPB4VT8uuUFQlFrO0LSDhhk=) 2: gvWThvzeWW90WQde3qTXTBmwHKI.crl (hash: sPqujmeW+Tno8hUoBTzP5JGwgc8jdpvBzjtWL7Q5EQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0e:d1:a0:d6:a9:f2:43:2a:f1:8f:4c:5f:b0:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82f59386fcde596f7459075edea4d74c19b01ca2 Validity Not Before: Dec 6 04:01:06 2025 GMT Not After : Dec 7 04:01:06 2025 GMT Subject: CN=2f4d62dd8464d9fa50b8738d10204a87ffe6b9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f4:80:2b:00:15:49:10:62:16:8c:94:ff:9d: 25:d4:f7:d7:1f:c2:65:46:f0:84:9f:14:d1:c0:c2: 16:cb:a0:ed:b8:48:4c:0d:ba:67:29:c1:14:70:f9: ca:22:03:d6:c1:a0:6b:6f:ef:bd:22:82:b5:b6:54: 2b:5a:7f:5b:67:45:d4:8f:fa:2b:d2:34:27:7f:a2: 02:f0:03:8f:83:7e:b5:24:bb:94:60:3a:89:02:cb: dd:6c:03:28:f9:f2:33:80:10:99:e7:7f:0b:81:30: af:ff:5f:b3:a2:06:07:e9:96:50:50:ad:6e:32:f7: 78:c9:c0:76:fe:36:b5:e6:f7:9f:10:fc:46:8a:a2: 62:f4:81:c5:1a:a9:66:f8:ab:19:c9:c7:f8:15:52: 74:e0:6e:74:f0:5e:96:34:86:77:b8:f9:b1:a3:cc: ab:8c:30:cc:31:58:45:ee:de:08:9f:2c:63:ac:51: 39:e2:9b:7d:03:62:94:22:3b:63:9a:ea:27:2f:ae: 7f:74:66:17:19:82:65:9b:8f:0e:d0:fd:f1:72:91: 93:e6:f3:8f:ca:5b:03:c2:99:bf:37:55:cb:43:1d: 91:0d:ab:12:a3:5e:22:4f:20:2f:1f:e7:4a:d4:ce: 57:89:8e:cd:aa:ec:ae:2b:c5:d5:51:06:a7:4e:39: 04:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4D:62:DD:84:64:D9:FA:50:B8:73:8D:10:20:4A:87:FF:E6:B9:F8 X509v3 Authority Key Identifier: keyid:82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:de:3c:55:7d:8c:06:54:44:09:b1:55:25:9a:c3:e6:30:02: 40:c0:3e:a6:d8:d2:af:b4:c5:b5:b8:2f:e5:10:af:e6:ac:b0: 95:14:8c:77:b6:72:8c:1b:11:a3:7b:a0:e9:bc:cc:2d:c4:34: 73:29:80:3d:f5:c8:36:68:d5:ee:3d:00:39:ca:0b:aa:70:ae: 72:92:8a:3c:41:4f:9b:47:0c:62:f2:fb:50:d7:a4:53:f7:e9: 73:44:87:74:f3:36:95:2f:ca:f6:2e:de:b4:be:b1:68:e7:c3: c9:03:98:d1:4d:55:74:eb:42:a7:55:b2:53:d6:ac:64:0a:f5: 50:ef:33:c3:9c:9f:95:11:e1:8e:bb:d2:22:3d:90:67:76:3c: 88:f9:61:78:5e:cb:db:09:96:99:24:e9:82:0c:eb:b1:83:c8: c7:1d:d6:bb:0d:6c:46:4b:a1:4c:85:59:ee:50:15:67:f5:c7: 03:98:f3:d7:8e:48:5e:49:29:8c:56:18:58:e3:6c:ac:9e:53: 1d:c8:93:8f:52:3a:76:1a:b6:56:7a:a8:ac:c9:0e:5c:b5:12: 8e:a2:e7:96:83:8e:c2:0c:27:4e:3e:8f:84:af:52:80:84:d7: 29:f7:77:7d:1c:63:40:bd:39:66:56:9d:65:28:6e:98:2b:fb: 4d:2a:b7:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0g7RoNap8kMq8Y9MX7BMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZjU5Mzg2ZmNkZTU5NmY3NDU5MDc1ZWRlYTRkNzRjMTli MDFjYTIwHhcNMjUxMjA2MDQwMTA2WhcNMjUxMjA3MDQwMTA2WjAzMTEwLwYDVQQD EygyZjRkNjJkZDg0NjRkOWZhNTBiODczOGQxMDIwNGE4N2ZmZTZiOWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fSAKwAVSRBiFoyU/50l1PfXH8Jl RvCEnxTRwMIWy6DtuEhMDbpnKcEUcPnKIgPWwaBrb++9IoK1tlQrWn9bZ0XUj/or 0jQnf6IC8AOPg361JLuUYDqJAsvdbAMo+fIzgBCZ538LgTCv/1+zogYH6ZZQUK1u Mvd4ycB2/ja15vefEPxGiqJi9IHFGqlm+KsZycf4FVJ04G508F6WNIZ3uPmxo8yr jDDMMVhF7t4InyxjrFE54pt9A2KUIjtjmuonL65/dGYXGYJlm48O0P3xcpGT5vOP ylsDwpm/N1XLQx2RDasSo14iTyAvH+dK1M5XiY7NquyuK8XVUQanTjkE/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9NYt2EZNn6ULhzjRAgSof/5rn4MB8GA1UdIwQY MBaAFIL1k4b83llvdFkHXt6k10wZsByiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3ZXVGh2emVXVzkwV1FkZTNxVFhUQm13SEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC81YmMxMzQtNTYyNS00ZWIxLTlmNzAt ZjlmZWRiZjYzMjcyLzEvZ3ZXVGh2emVXVzkwV1FkZTNxVFhUQm13SEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC81YmMxMzQtNTYyNS00ZWIxLTlmNzAtZjlmZWRiZjYzMjcy LzEvZ3ZXVGh2emVXVzkwV1FkZTNxVFhUQm13SEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXN48VX2M BlRECbFVJZrD5jACQMA+ptjSr7TFtbgv5RCv5qywlRSMd7ZyjBsRo3ug6bzMLcQ0 cymAPfXINmjV7j0AOcoLqnCucpKKPEFPm0cMYvL7UNekU/fpc0SHdPM2lS/K9i7e tL6xaOfDyQOY0U1VdOtCp1WyU9asZAr1UO8zw5yflRHhjrvSIj2QZ3Y8iPlheF7L 2wmWmSTpggzrsYPIxx3Wuw1sRkuhTIVZ7lAVZ/XHA5jz145IXkkpjFYYWONsrJ5T HciTj1I6dhq2VnqorMkOXLUSjqLnloOOwgwnTj6PhK9SgITXKfd3fRxjQL05Zlad ZShumCv7TSq3aQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:25 2025 by rpki-client