This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft File: gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft (raw, json) Hash identifier: FLTSKgN9a1821WI1y68uJ+mK314+iIlyTYjs3+omD9I= Subject key identifier: C0:5E:91:C5:F0:13:14:BB:95:8F:8B:57:08:2D:95:33:00:48:73:1C Authority key identifier: 82:73:13:24:7C:48:6F:E4:34:83:3C:09:08:7A:00:A9:00:30:18:40 Certificate issuer: /CN=827313247c486fe434833c09087a00a900301840 Certificate serial: 019AF50A263DC01FC2762F794E04281A61DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 19:01:14 +0000 Manifest this update: Sat 06 Dec 2025 19:01:14 +0000 Manifest next update: Sun 07 Dec 2025 19:01:14 +0000 Files and hashes: 1: 7G9OAa8ebUxYvLbiABAZAGXs6yI.roa (hash: Q8FJVCv7ZP8KepVRkOgfjY1xOHET+UVMaI0qQvaXpcQ=) 2: gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl (hash: FNnpSkoPZhbXdejZGQSNtYIAKK6hsbjDNt51ZTNFNs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:26:3d:c0:1f:c2:76:2f:79:4e:04:28:1a:61:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827313247c486fe434833c09087a00a900301840 Validity Not Before: Dec 6 19:01:14 2025 GMT Not After : Dec 7 19:01:14 2025 GMT Subject: CN=c05e91c5f01314bb958f8b57082d95330048731c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:20:11:d7:41:1b:13:84:98:16:01:5f:e6: 8e:93:c1:27:ae:99:81:63:04:34:1c:40:c4:30:96: 6e:12:c1:50:e2:3c:8d:87:c3:4a:d5:ea:10:00:74: 6b:14:4f:7e:bf:9f:fb:cb:d1:27:a5:d0:51:9c:e4: 30:6a:4c:9a:7e:13:4b:8c:a6:17:11:86:e6:57:26: 52:25:f8:46:c6:21:7d:4e:48:0c:f9:86:f8:5d:4c: d9:c0:24:80:f1:59:35:6d:1f:0c:f9:43:8a:86:e1: ca:fd:0d:17:ef:06:6e:1a:96:04:c0:c6:16:69:e6: e8:e3:49:e5:cc:54:b7:38:69:7f:f1:98:fa:c9:27: 37:fe:25:51:8b:71:09:95:ae:c4:19:e3:31:4e:c1: 90:55:a6:fe:7c:d3:da:e2:a5:4f:bd:9c:5b:67:7b: fe:1f:8b:75:3a:c9:8e:a5:82:b2:26:ad:a5:cc:2c: 06:ff:93:fd:31:a2:4e:85:ec:a6:ec:44:5e:a3:50: af:56:8c:a4:2d:b5:28:3d:9f:a4:52:f7:05:6e:ae: 10:98:f1:a4:a1:45:61:70:7c:72:27:c8:21:83:82: 0e:fb:a9:f7:70:9d:08:1e:5f:bd:ee:4d:67:8b:0e: be:4a:02:7a:04:b1:d7:83:81:d8:b6:91:72:9e:41: df:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5E:91:C5:F0:13:14:BB:95:8F:8B:57:08:2D:95:33:00:48:73:1C X509v3 Authority Key Identifier: keyid:82:73:13:24:7C:48:6F:E4:34:83:3C:09:08:7A:00:A9:00:30:18:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:56:87:82:72:3d:cd:51:af:6a:d1:cb:8e:d5:a2:d9:a6:7f: ef:75:04:eb:22:04:af:79:04:ce:d8:24:9d:96:c0:a5:5f:ae: d6:86:e6:0e:28:04:f0:e3:53:b3:4e:af:04:b8:47:21:35:bd: 77:28:11:5b:a9:3c:6a:89:0f:96:b9:6e:22:37:5c:eb:ac:73: cf:c3:99:a7:58:61:63:bf:b5:74:db:89:fc:fd:d6:af:91:73: 6d:6a:e6:62:81:3e:f2:4b:ea:c5:06:3d:43:a7:06:6f:f5:1e: b2:68:99:99:a6:f4:f4:bc:60:42:a5:92:a9:f5:47:3e:d4:13: ae:fa:d2:52:46:50:19:8c:4e:ac:c7:c7:3e:6c:7b:85:02:8b: b1:a4:36:49:04:db:5d:5b:41:12:0a:21:57:9f:60:1e:95:22: d7:c1:c6:bf:25:8b:46:3f:48:62:37:78:86:f8:84:3e:4b:6c: 30:89:7a:01:66:74:50:56:70:b2:b3:31:bb:91:f1:fc:87:fd: bd:e1:6f:64:6e:2a:71:3d:05:ed:63:46:a6:67:80:c0:0c:c1: 9c:d7:94:ce:b0:5c:bf:35:e9:91:3b:06:a6:d5:a5:29:5a:de: 22:08:5b:33:07:11:10:5b:a1:1f:ed:6e:fe:96:67:5c:5c:6b: 86:9d:f6:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CiY9wB/Cdi95TgQoGmHaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzMxMzI0N2M0ODZmZTQzNDgzM2MwOTA4N2EwMGE5MDAz MDE4NDAwHhcNMjUxMjA2MTkwMTE0WhcNMjUxMjA3MTkwMTE0WjAzMTEwLwYDVQQD EyhjMDVlOTFjNWYwMTMxNGJiOTU4ZjhiNTcwODJkOTUzMzAwNDg3MzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi4gEddBGxOEmBYBX+aOk8EnrpmB YwQ0HEDEMJZuEsFQ4jyNh8NK1eoQAHRrFE9+v5/7y9EnpdBRnOQwakyafhNLjKYX EYbmVyZSJfhGxiF9TkgM+Yb4XUzZwCSA8Vk1bR8M+UOKhuHK/Q0X7wZuGpYEwMYW aebo40nlzFS3OGl/8Zj6ySc3/iVRi3EJla7EGeMxTsGQVab+fNPa4qVPvZxbZ3v+ H4t1OsmOpYKyJq2lzCwG/5P9MaJOheym7EReo1CvVoykLbUoPZ+kUvcFbq4QmPGk oUVhcHxyJ8ghg4IO+6n3cJ0IHl+97k1niw6+SgJ6BLHXg4HYtpFynkHfQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBekcXwExS7lY+LVwgtlTMASHMcMB8GA1UdIwQY MBaAFIJzEyR8SG/kNIM8CQh6AKkAMBhAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25NVEpIeEliLVEwZ3p3SkNIb0FxUUF3R0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84NWIwNDMtMzZkOC00MTM2LTk4MzUt OGQ0NzcyNTk4MzliLzEvZ25NVEpIeEliLVEwZ3p3SkNIb0FxUUF3R0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC84NWIwNDMtMzZkOC00MTM2LTk4MzUtOGQ0NzcyNTk4Mzli LzEvZ25NVEpIeEliLVEwZ3p3SkNIb0FxUUF3R0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVaHgnI9 zVGvatHLjtWi2aZ/73UE6yIEr3kEztgknZbApV+u1obmDigE8ONTs06vBLhHITW9 dygRW6k8aokPlrluIjdc66xzz8OZp1hhY7+1dNuJ/P3Wr5FzbWrmYoE+8kvqxQY9 Q6cGb/UesmiZmab09LxgQqWSqfVHPtQTrvrSUkZQGYxOrMfHPmx7hQKLsaQ2SQTb XVtBEgohV59gHpUi18HGvyWLRj9IYjd4hviEPktsMIl6AWZ0UFZwsrMxu5Hx/If9 veFvZG4qcT0F7WNGpmeAwAzBnNeUzrBcvzXpkTsGptWlKVreIghbMwcREFuhH+1u /pZnXFxrhp32+A== -----END CERTIFICATE-----Generated at Sun Dec 7 02:59:17 2025 by rpki-client