This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json) Hash identifier: 0z/kB1RSVbSRA8AxtRj0d8ojFBwCElqYXVGvcpP4dGM= Subject key identifier: 61:65:4E:FC:38:AD:4F:CB:75:5E:E8:AA:50:2E:CA:67:64:A9:F5:CD Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0 Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0 Certificate serial: 019AF276CEE21CAB4ECB24C00DD85DA27D4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft Manifest number: 0C86 Signing time: Sat 06 Dec 2025 07:01:03 +0000 Manifest this update: Sat 06 Dec 2025 07:01:03 +0000 Manifest next update: Sun 07 Dec 2025 07:01:03 +0000 Files and hashes: 1: H0NG9092js7rDQpTqrZPdac72WM.roa (hash: R/Zdm9NfezmZRIz7VuQ59WGkqNjcJj7PHzqhqVFYEow=) 2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: JJsNiWnb3k6vRXWD3KWS8HLmYOkQDM4uYKEqLirOD2U=) 3: rNGt9LDewJiHuR2lJc36D8TSyXw.roa (hash: g8y+iBLG3cbxk27H5tP4VQre3m+vNBagD8EWSrYcgoM=) 4: yrhYdyJUuDyLHAzDMziEeCqDJFI.roa (hash: G6JVEYgvH80sw+7zP6zIaheoCR0r4+RD30tbsjOvgAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ce:e2:1c:ab:4e:cb:24:c0:0d:d8:5d:a2:7d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0 Validity Not Before: Dec 6 07:01:03 2025 GMT Not After : Dec 7 07:01:03 2025 GMT Subject: CN=61654efc38ad4fcb755ee8aa502eca6764a9f5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8d:2e:48:9e:6b:74:c2:46:32:0f:e7:9e:1b: f6:51:11:92:f3:5b:50:5a:97:a1:ec:0f:e4:da:79: 3b:da:1e:f3:42:40:df:70:da:4e:b6:3c:0e:b8:1d: 51:e4:4f:14:6b:0f:49:29:3d:85:b0:9b:17:dc:7f: 06:a9:df:7f:d1:07:ba:39:f4:28:c4:7b:38:3d:3e: 77:81:a6:25:42:1f:69:6c:3b:28:05:53:5f:10:21: e2:69:3d:14:e3:b1:09:8b:24:04:c5:ed:98:06:39: e8:f8:fa:8b:dd:c3:17:0e:91:1c:1b:13:e6:54:d6: 7a:be:eb:2b:b1:f6:b1:29:87:b0:b6:c2:f2:ad:49: 2d:df:4b:2c:5f:ec:84:8e:0b:ae:9f:d3:87:0b:b1: 29:2d:fe:2c:42:2f:da:8b:d8:64:76:89:5b:c0:c3: db:1e:01:8b:d1:46:2f:6f:e1:b8:94:ad:6d:d4:eb: 4e:22:98:d3:fc:c9:8b:56:ed:dc:fa:cd:bc:fa:fd: 1c:ce:df:ec:d5:79:19:18:3a:58:9e:e0:06:ac:4b: cf:5e:e2:65:d7:39:ae:6b:8e:79:36:00:67:34:f3: 91:e1:a6:11:81:fd:25:b2:8b:4f:c3:15:1b:1f:e6: 40:c6:b4:a2:6f:ff:d3:dd:8c:e4:d2:07:85:7e:00: bb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:65:4E:FC:38:AD:4F:CB:75:5E:E8:AA:50:2E:CA:67:64:A9:F5:CD X509v3 Authority Key Identifier: keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a5:e9:40:41:d3:02:91:91:63:d9:21:f4:9b:9c:5e:5f:5a: 75:c5:27:d3:4f:d7:71:19:6f:c5:b5:e8:7d:7e:cf:1a:65:59: ed:08:ff:3e:2c:bc:69:6c:e6:b1:cc:11:56:a3:a2:f7:17:75: 81:38:af:8f:b6:3f:9c:76:e0:1d:cd:8d:bc:de:b8:ae:ee:7d: 5b:fd:1f:cc:98:a9:e9:55:f3:cf:d4:b6:65:f8:8b:26:06:b6: c3:10:4e:46:71:6f:90:85:81:60:24:a4:bb:c4:72:6a:6f:b4: 09:db:5e:03:cb:c7:d9:c1:48:33:b8:6f:d8:d2:4f:79:3f:46: 9f:e4:21:99:60:02:ca:d2:5a:5a:5b:cc:95:4c:92:da:e7:f9: 9d:bd:dc:c2:c8:a9:85:0f:18:58:1a:f6:12:2f:8c:1f:87:b4: ea:79:62:21:0f:1f:3b:95:4f:45:9e:7f:ba:64:83:21:a9:1d: 88:5e:8a:70:4f:07:f7:28:83:f3:f1:40:1e:47:cb:22:22:d0: 7c:72:3c:5d:73:f5:f4:f8:05:65:70:ea:5c:f3:09:56:9b:64: a5:ef:f1:65:96:de:3a:4c:e0:af:72:a9:91:78:2a:94:c2:e5: 03:9a:48:79:67:33:f9:fc:94:94:4d:dc:b1:78:b1:8e:43:72: 5b:e9:23:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryds7iHKtOyyTADdhdon1KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyOGJiYWQ2ZjQ5MTY4NDJiYmUzMjAyODRmYWZlMTBjYWY1 OWVkZjAwHhcNMjUxMjA2MDcwMTAzWhcNMjUxMjA3MDcwMTAzWjAzMTEwLwYDVQQD Eyg2MTY1NGVmYzM4YWQ0ZmNiNzU1ZWU4YWE1MDJlY2E2NzY0YTlmNWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY0uSJ5rdMJGMg/nnhv2URGS81tQ Wpeh7A/k2nk72h7zQkDfcNpOtjwOuB1R5E8Uaw9JKT2FsJsX3H8Gqd9/0Qe6OfQo xHs4PT53gaYlQh9pbDsoBVNfECHiaT0U47EJiyQExe2YBjno+PqL3cMXDpEcGxPm VNZ6vusrsfaxKYewtsLyrUkt30ssX+yEjguun9OHC7EpLf4sQi/ai9hkdolbwMPb HgGL0UYvb+G4lK1t1OtOIpjT/MmLVu3c+s28+v0czt/s1XkZGDpYnuAGrEvPXuJl 1zmua455NgBnNPOR4aYRgf0lsotPwxUbH+ZAxrSib//T3Yzk0geFfgC7swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFlTvw4rU/LdV7oqlAuymdkqfXNMB8GA1UdIwQY MBaAFIKLutb0kWhCu+MgKE+v4QyvWe3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84M2Y5NzctODJiOC00Njk1LTljMDgt MTg5NjU1NWEyZjBlLzEvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84M2Y5NzctODJiOC00Njk1LTljMDgtMTg5NjU1NWEyZjBl LzEvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaXpQEHT ApGRY9kh9JucXl9adcUn00/XcRlvxbXofX7PGmVZ7Qj/Piy8aWzmscwRVqOi9xd1 gTivj7Y/nHbgHc2NvN64ru59W/0fzJip6VXzz9S2ZfiLJga2wxBORnFvkIWBYCSk u8Ryam+0CdteA8vH2cFIM7hv2NJPeT9Gn+QhmWACytJaWlvMlUyS2uf5nb3cwsip hQ8YWBr2Ei+MH4e06nliIQ8fO5VPRZ5/umSDIakdiF6KcE8H9yiD8/FAHkfLIiLQ fHI8XXP19PgFZXDqXPMJVptkpe/xZZbeOkzgr3KpkXgqlMLlA5pIeWcz+fyUlE3c sXixjkNyW+kjiw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:29 2025 by rpki-client