This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft File: gDCVaDspR93Unu6sDb2eqVSuoUQ.mft (raw, json) Hash identifier: qqnwOxoCOXomrSsvPCKL1aD9vmNRqXO2jBXI/LwShYg= Subject key identifier: D7:BB:00:8F:6C:73:47:79:1C:2F:F2:E0:AB:C3:79:47:79:3D:9D:F6 Authority key identifier: 80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44 Certificate issuer: /CN=803095683b2947ddd49eeeac0dbd9ea954aea144 Certificate serial: 019B397DC252052D84E72447B74ECB5C7779 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft Manifest number: 069C Signing time: Sat 20 Dec 2025 02:01:41 +0000 Manifest this update: Sat 20 Dec 2025 02:01:41 +0000 Manifest next update: Sun 21 Dec 2025 02:01:41 +0000 Files and hashes: 1: W5iuUvjQHKES7b_m2-IC5Q7IB04.roa (hash: usyzAXKt0ilcyhdvyj8HiQdu4iL1ydlMcUp3wQXJixw=) 2: gDCVaDspR93Unu6sDb2eqVSuoUQ.crl (hash: SOAGelrdhMZB7hIQ0fSQTIuNeXEwoO1IEmNy8ACBuvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:c2:52:05:2d:84:e7:24:47:b7:4e:cb:5c:77:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803095683b2947ddd49eeeac0dbd9ea954aea144 Validity Not Before: Dec 20 02:01:41 2025 GMT Not After : Dec 21 02:01:41 2025 GMT Subject: CN=d7bb008f6c7347791c2ff2e0abc37947793d9df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:47:79:8f:e0:d1:d0:08:a0:64:d8:7e:99:20: 9c:b4:0a:03:dd:08:3d:0e:43:74:e1:f2:1b:39:39: 38:98:c6:d8:76:52:2e:d2:25:74:26:1e:2d:43:06: 91:0d:e7:35:fb:ee:15:88:c7:b0:58:d8:4d:e9:ec: 0d:f0:22:6b:fe:bc:75:0f:f6:3b:4f:e4:15:1d:38: 37:33:f1:ad:ff:75:c8:fd:9c:ba:56:9c:03:46:22: f1:89:4d:14:d2:0b:7b:35:0e:cf:aa:52:96:7f:0d: 27:b7:c4:75:c2:e2:58:7b:fe:83:06:54:91:df:18: c2:52:bb:e8:53:4c:13:3b:63:b8:cb:0d:e7:df:3a: 1c:4c:18:4e:98:0c:2a:78:05:1d:ad:3f:b0:f4:47: 1b:57:10:3d:25:71:48:47:cb:30:33:c4:46:9e:a0: 06:66:6a:10:ad:f7:8c:07:c0:14:8b:c8:71:c7:62: 5c:a0:c2:d8:da:c2:49:5b:6b:90:3e:ce:d7:ff:3b: e1:9a:29:6f:43:c9:3d:00:09:31:1f:42:1f:66:22: 06:08:1f:af:eb:40:e8:b9:ca:cd:a3:1d:35:18:a6: 9c:35:63:70:c9:9c:d8:97:b5:14:aa:72:35:d8:e7: 74:ef:7d:71:86:93:31:dc:eb:33:ab:c5:bb:a3:09: 1e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BB:00:8F:6C:73:47:79:1C:2F:F2:E0:AB:C3:79:47:79:3D:9D:F6 X509v3 Authority Key Identifier: keyid:80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a3:40:5a:4e:5b:35:6e:b5:ab:f3:9e:ff:79:39:3e:01:b8: ea:d4:b4:da:16:05:df:6d:3b:94:bf:fe:1d:6a:9e:b2:6b:17: cd:a9:e6:bd:c4:76:bf:8f:41:c4:66:c2:a6:55:be:0f:2f:d1: a7:18:82:61:55:19:3a:5a:4a:bd:43:e4:b9:14:a8:0f:2e:f4: c7:a1:10:60:5c:f5:73:4d:c8:0d:75:88:23:f2:4e:08:06:8e: 28:58:50:53:35:44:89:2b:fd:57:6e:44:c0:63:3a:a6:53:6b: 85:ef:b8:15:37:68:2b:53:be:46:4d:20:a4:54:5f:ae:e5:8c: 8c:d9:d7:8f:f9:32:db:e5:8f:05:56:6d:5c:cd:c8:10:d4:fc: 82:84:61:25:64:1c:dc:4b:57:cd:10:2e:9a:91:83:be:aa:1e: a3:cc:7c:ab:62:08:f4:2f:08:d7:8b:31:63:f3:d6:d1:0f:3e: 45:b5:8e:b8:30:17:a4:da:16:98:71:33:ac:c1:59:e3:71:17: fe:3b:60:27:4f:4b:e4:0e:e4:ed:59:bd:d1:86:ad:ac:e3:9a: 00:6d:ba:29:eb:68:0f:e8:ed:28:9f:19:9a:f7:9b:73:10:f2: 47:76:23:98:77:38:3c:72:55:1b:f1:a6:76:74:e9:a7:37:7e: 40:86:98:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fcJSBS2E5yRHt07LXHd5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMzA5NTY4M2IyOTQ3ZGRkNDllZWVhYzBkYmQ5ZWE5NTRh ZWExNDQwHhcNMjUxMjIwMDIwMTQxWhcNMjUxMjIxMDIwMTQxWjAzMTEwLwYDVQQD EyhkN2JiMDA4ZjZjNzM0Nzc5MWMyZmYyZTBhYmMzNzk0Nzc5M2Q5ZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkd5j+DR0AigZNh+mSCctAoD3Qg9 DkN04fIbOTk4mMbYdlIu0iV0Jh4tQwaRDec1++4ViMewWNhN6ewN8CJr/rx1D/Y7 T+QVHTg3M/Gt/3XI/Zy6VpwDRiLxiU0U0gt7NQ7PqlKWfw0nt8R1wuJYe/6DBlSR 3xjCUrvoU0wTO2O4yw3n3zocTBhOmAwqeAUdrT+w9EcbVxA9JXFIR8swM8RGnqAG ZmoQrfeMB8AUi8hxx2JcoMLY2sJJW2uQPs7X/zvhmilvQ8k9AAkxH0IfZiIGCB+v 60DoucrNox01GKacNWNwyZzYl7UUqnI12Od0731xhpMx3Oszq8W7owkeIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNe7AI9sc0d5HC/y4KvDeUd5PZ32MB8GA1UdIwQY MBaAFIAwlWg7KUfd1J7urA29nqlUrqFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0RDVmFEc3BSOTNVbnU2c0RiMmVxVlN1b1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zOTkyNjktNWUxNC00ZDVlLWExYmMt NmJkZDM0NzhkMTBjLzEvZ0RDVmFEc3BSOTNVbnU2c0RiMmVxVlN1b1VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zOTkyNjktNWUxNC00ZDVlLWExYmMtNmJkZDM0NzhkMTBj LzEvZ0RDVmFEc3BSOTNVbnU2c0RiMmVxVlN1b1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKNAWk5b NW61q/Oe/3k5PgG46tS02hYF3207lL/+HWqesmsXzanmvcR2v49BxGbCplW+Dy/R pxiCYVUZOlpKvUPkuRSoDy70x6EQYFz1c03IDXWII/JOCAaOKFhQUzVEiSv9V25E wGM6plNrhe+4FTdoK1O+Rk0gpFRfruWMjNnXj/ky2+WPBVZtXM3IENT8goRhJWQc 3EtXzRAumpGDvqoeo8x8q2II9C8I14sxY/PW0Q8+RbWOuDAXpNoWmHEzrMFZ43EX /jtgJ09L5A7k7Vm90YatrOOaAG26KetoD+jtKJ8ZmvebcxDyR3YjmHc4PHJVG/Gm dnTppzd+QIaYNQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:27:03 2025 by rpki-client