This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft File: gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json) Hash identifier: VDWRB3awFc0udKVBzWZkiGkilLsHax6hGTdy9mW4EDM= Subject key identifier: F5:BB:66:AC:F2:6F:0C:89:BA:F6:CE:0C:6F:CC:38:D4:60:11:3E:E6 Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0 Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0 Certificate serial: 019AF23F778F671A3C9CF3EEBCD9C9F7B11F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft Manifest number: 1159 Signing time: Sat 06 Dec 2025 06:00:36 +0000 Manifest this update: Sat 06 Dec 2025 06:00:36 +0000 Manifest next update: Sun 07 Dec 2025 06:00:36 +0000 Files and hashes: 1: Ue0VoaxzQbp5pWcmIQqTNf88acI.roa (hash: nMwMYaWE3GJUsoaF+nLk3RKN8uQwCY4CtiS6vpcsyvU=) 2: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: gbKUIknOAU9yuWiOPRkIinZMWFxq6dT7Oasjih+D8Qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:77:8f:67:1a:3c:9c:f3:ee:bc:d9:c9:f7:b1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0 Validity Not Before: Dec 6 06:00:36 2025 GMT Not After : Dec 7 06:00:36 2025 GMT Subject: CN=f5bb66acf26f0c89baf6ce0c6fcc38d460113ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ae:22:cc:1f:27:c5:9b:9e:5c:08:77:f7:ab: 3c:4d:5b:08:78:a7:d1:9c:58:cd:94:b5:d6:87:c5: c4:ce:4c:b2:f2:d6:b5:0c:4c:c3:50:28:6a:54:5b: 38:4d:d8:3e:58:d7:62:63:1e:3c:e6:04:20:5c:a5: 33:e1:f1:a6:be:8b:93:b2:81:92:8c:42:c7:3c:9e: 1b:8f:13:92:54:4f:53:1a:ce:39:72:f2:4d:b8:2c: d3:21:e8:5a:72:5f:55:c7:5a:72:a5:0d:4b:f5:ae: 0b:54:34:77:9c:a6:f6:a6:fa:f1:b5:4d:63:1b:69: a0:56:35:e1:7f:e0:5d:f5:da:be:a8:8c:93:23:7f: fe:0b:e1:f3:5b:a7:1d:c8:29:9d:27:1d:f5:3e:fb: 81:79:4a:b6:0f:9c:5f:46:80:65:84:02:28:c8:ed: f9:59:a7:49:8c:c0:11:62:15:28:2a:1b:75:c5:90: de:c5:8a:15:f8:6c:7f:bd:1e:38:75:55:f2:b1:74: c8:2a:4d:c8:23:ae:b5:2b:5a:76:cd:d4:3e:89:c5: 6e:a6:8a:84:c2:10:a9:6a:ff:49:5a:89:51:8a:ad: 07:a9:17:c5:f9:5f:23:93:c1:02:fc:72:eb:08:86: 97:2b:c6:9e:cd:0d:15:a1:4d:77:2e:2b:93:6f:0f: dc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BB:66:AC:F2:6F:0C:89:BA:F6:CE:0C:6F:CC:38:D4:60:11:3E:E6 X509v3 Authority Key Identifier: keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:fa:93:67:51:45:76:f8:9c:32:ce:af:d1:05:5e:0f:fe:e1: 03:a6:92:06:e1:53:36:4d:68:ce:dd:f5:5b:74:9b:3a:a5:4d: c9:68:63:2c:d9:39:2c:b6:d4:4e:92:82:fc:53:44:c2:9c:8c: e1:bf:c5:cb:3c:14:1e:19:3f:0c:66:23:84:ed:16:9d:70:f6: 22:4b:29:83:4f:e9:67:55:8c:48:20:8c:5b:d3:c7:c5:18:90: 57:a8:ac:0d:97:f9:b1:a3:f6:31:1f:1e:5d:a6:77:83:70:ae: 22:98:1f:9a:37:67:52:ca:a2:40:f0:27:57:66:a9:b4:91:ba: 33:44:bb:55:c7:75:fd:db:5c:6c:00:bd:23:47:f5:f7:a8:dd: 4d:4d:77:6c:82:b3:c1:70:91:3b:66:56:36:f3:e5:a2:37:4b: c6:a2:8f:77:c1:82:26:84:4a:40:0e:0f:03:fc:25:d9:7f:4c: 34:40:3f:2f:92:21:9a:13:22:be:89:97:dd:ee:45:47:2e:37: 41:8b:4c:18:ba:c4:78:07:50:7e:2b:70:ad:d6:d8:65:ce:0a: d2:55:c5:89:48:4d:b9:c5:e0:5c:ec:e5:61:53:fc:e8:93:03: 44:f2:38:2a:e1:b8:3b:2b:70:4f:a2:5a:ea:7b:4a:50:1a:83: fe:ed:10:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3ePZxo8nPPuvNnJ97EfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMDdhOTU4ZTZiM2RmZDc4ZGEzNTBiMTAzZDNiOTAyN2Uw ZmUzZjAwHhcNMjUxMjA2MDYwMDM2WhcNMjUxMjA3MDYwMDM2WjAzMTEwLwYDVQQD EyhmNWJiNjZhY2YyNmYwYzg5YmFmNmNlMGM2ZmNjMzhkNDYwMTEzZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK4izB8nxZueXAh396s8TVsIeKfR nFjNlLXWh8XEzkyy8ta1DEzDUChqVFs4Tdg+WNdiYx485gQgXKUz4fGmvouTsoGS jELHPJ4bjxOSVE9TGs45cvJNuCzTIehacl9Vx1pypQ1L9a4LVDR3nKb2pvrxtU1j G2mgVjXhf+Bd9dq+qIyTI3/+C+HzW6cdyCmdJx31PvuBeUq2D5xfRoBlhAIoyO35 WadJjMARYhUoKht1xZDexYoV+Gx/vR44dVXysXTIKk3II661K1p2zdQ+icVupoqE whCpav9JWolRiq0HqRfF+V8jk8EC/HLrCIaXK8aezQ0VoU13LiuTbw/cnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPW7ZqzybwyJuvbODG/MONRgET7mMB8GA1UdIwQY MBaAFIAHqVjms9/XjaNQsQPTuQJ+D+PwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0FlcFdPYXozOWVObzFDeEE5TzVBbjRQNF9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZTFiNWQtNzdiNS00M2I2LTlmMGEt M2UxNzFiZDVlZmMzLzEvZ0FlcFdPYXozOWVObzFDeEE5TzVBbjRQNF9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZTFiNWQtNzdiNS00M2I2LTlmMGEtM2UxNzFiZDVlZmMz LzEvZ0FlcFdPYXozOWVObzFDeEE5TzVBbjRQNF9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/qTZ1FF dvicMs6v0QVeD/7hA6aSBuFTNk1ozt31W3SbOqVNyWhjLNk5LLbUTpKC/FNEwpyM 4b/FyzwUHhk/DGYjhO0WnXD2Ikspg0/pZ1WMSCCMW9PHxRiQV6isDZf5saP2MR8e XaZ3g3CuIpgfmjdnUsqiQPAnV2aptJG6M0S7Vcd1/dtcbAC9I0f196jdTU13bIKz wXCRO2ZWNvPlojdLxqKPd8GCJoRKQA4PA/wl2X9MNEA/L5IhmhMivomX3e5FRy43 QYtMGLrEeAdQfitwrdbYZc4K0lXFiUhNucXgXOzlYVP86JMDRPI4KuG4OytwT6Ja 6ntKUBqD/u0QBg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:25:09 2025 by rpki-client