This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json) Hash identifier: 2YbbN1ZvD8maPDVvMM+t/kIs7Qt7t3yLUDlgmdsBt4E= Subject key identifier: 43:98:F0:19:7C:E8:A7:AB:15:BC:47:08:04:8E:D2:D3:1C:36:29:B4 Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1 Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1 Certificate serial: 019AF49BABA3E82CA4AB0C83404FAE9DE7CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft Manifest number: 0CCD Signing time: Sat 06 Dec 2025 17:00:34 +0000 Manifest this update: Sat 06 Dec 2025 17:00:34 +0000 Manifest next update: Sun 07 Dec 2025 17:00:34 +0000 Files and hashes: 1: 6BQqkGrM3gw54Pj0HSmQY8wMCck.roa (hash: Ar7D9TbLcSVMAE2S4iadlofqY6yoHjuB0ZjyXAJSQDg=) 2: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: RxSO/gY894nOkKI86Ar0xB881gbqcvXw+Q9ZUO2F4Og=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:ab:a3:e8:2c:a4:ab:0c:83:40:4f:ae:9d:e7:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1 Validity Not Before: Dec 6 17:00:34 2025 GMT Not After : Dec 7 17:00:34 2025 GMT Subject: CN=4398f0197ce8a7ab15bc4708048ed2d31c3629b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4d:5a:fe:63:89:48:14:52:a8:b5:d9:ad:d0: b5:7c:0f:97:6e:d9:f0:06:4a:00:fb:2a:71:f7:bc: 40:45:e1:ab:47:cf:3b:09:a0:1c:f9:e8:a9:f7:86: 6f:97:50:da:7d:4a:6d:e4:9a:c1:f7:15:9d:cb:7f: de:71:32:22:b8:57:ac:55:82:a8:73:1b:e3:01:fc: 72:55:47:e6:5c:b0:7b:db:c7:c7:4c:b8:10:b9:14: 2e:cb:b8:a5:fa:69:85:cf:f1:c0:c8:cf:4c:fa:90: 31:37:e0:2c:d1:b2:29:e3:99:51:be:21:03:c1:77: 21:49:ab:39:67:24:80:a4:72:c6:07:1c:c3:cd:49: a2:84:06:20:01:ee:07:30:bd:15:e2:27:b9:ae:89: 06:b6:c0:6f:10:1b:75:2e:05:fd:58:18:cc:0d:a3: 34:5d:7c:85:04:9e:42:a1:02:cb:6f:d1:ae:b3:0b: 75:e9:4d:c4:d7:10:9a:47:44:72:25:80:76:05:15: 20:3a:b4:e5:21:42:ca:da:2b:5c:69:a1:f8:14:49: c0:a4:07:3f:93:a7:10:b8:7e:de:6f:e1:a3:71:ed: cf:6d:fe:91:07:5c:47:26:bd:cf:64:a9:d4:aa:20: d1:31:6e:4a:95:68:d0:87:69:6c:49:81:e5:bb:f8: d2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:98:F0:19:7C:E8:A7:AB:15:BC:47:08:04:8E:D2:D3:1C:36:29:B4 X509v3 Authority Key Identifier: keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:20:bf:17:b8:10:04:c9:84:55:bf:68:b6:0b:4a:4e:8a:be: 89:17:a9:c1:55:0d:48:c0:09:4b:29:f7:55:1f:bb:56:85:9d: 74:95:fe:12:ef:82:c3:e2:d5:9c:96:51:ed:5e:3f:95:5f:b9: 44:9a:d9:de:b4:a1:74:06:e5:ad:95:e7:3e:99:23:bc:87:c9: 04:08:72:e1:0b:25:98:77:3e:33:a6:17:5f:f7:a1:30:7b:7b: eb:20:ac:62:99:dc:08:ef:e5:21:f7:10:2b:c2:22:b8:89:c8: 0a:db:f7:77:f7:10:0e:03:ca:2c:4d:ed:69:1f:41:eb:7d:7f: 92:ba:3d:f1:c1:f3:c7:73:89:e7:3f:d3:15:22:88:5f:ae:f1: ff:5e:50:fd:50:6a:89:55:13:56:69:c1:04:da:ff:53:54:c4: 26:6c:92:b2:7e:4b:71:1e:64:4b:b7:ff:0a:67:11:54:b2:2f: d2:06:67:8f:6e:3f:d3:1f:bd:d8:cd:6b:6a:34:f3:c2:0e:9f: bc:28:43:4d:72:ad:93:2d:eb:d3:da:7e:28:5f:e7:cb:ba:9e: bb:81:6e:0f:63:39:2f:3c:90:e2:2a:d2:76:39:b2:5f:d6:a9: 42:36:10:cb:6a:c9:4d:1d:69:34:e8:48:60:68:7e:d9:2c:48: b6:d5:8c:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m6uj6CykqwyDQE+unefNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMzEyNDBiZGFhN2MxMmU4MTBhMTczOGJjZGY3NWE3NDY1 MzBiYzEwHhcNMjUxMjA2MTcwMDM0WhcNMjUxMjA3MTcwMDM0WjAzMTEwLwYDVQQD Eyg0Mzk4ZjAxOTdjZThhN2FiMTViYzQ3MDgwNDhlZDJkMzFjMzYyOWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE1a/mOJSBRSqLXZrdC1fA+Xbtnw BkoA+ypx97xAReGrR887CaAc+eip94Zvl1DafUpt5JrB9xWdy3/ecTIiuFesVYKo cxvjAfxyVUfmXLB728fHTLgQuRQuy7il+mmFz/HAyM9M+pAxN+As0bIp45lRviED wXchSas5ZySApHLGBxzDzUmihAYgAe4HML0V4ie5rokGtsBvEBt1LgX9WBjMDaM0 XXyFBJ5CoQLLb9Guswt16U3E1xCaR0RyJYB2BRUgOrTlIULK2itcaaH4FEnApAc/ k6cQuH7eb+Gjce3Pbf6RB1xHJr3PZKnUqiDRMW5KlWjQh2lsSYHlu/jS1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOY8Bl86KerFbxHCASO0tMcNim0MB8GA1UdIwQY MBaAFIExJAvap8EugQoXOLzfdadGUwvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUt ZTllMDIzNjA5YzdmLzEvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUtZTllMDIzNjA5Yzdm LzEvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSC/F7gQ BMmEVb9otgtKToq+iRepwVUNSMAJSyn3VR+7VoWddJX+Eu+Cw+LVnJZR7V4/lV+5 RJrZ3rShdAblrZXnPpkjvIfJBAhy4QslmHc+M6YXX/ehMHt76yCsYpncCO/lIfcQ K8IiuInICtv3d/cQDgPKLE3taR9B631/kro98cHzx3OJ5z/TFSKIX67x/15Q/VBq iVUTVmnBBNr/U1TEJmySsn5LcR5kS7f/CmcRVLIv0gZnj24/0x+92M1rajTzwg6f vChDTXKtky3r09p+KF/ny7qeu4FuD2M5LzyQ4irSdjmyX9apQjYQy2rJTR1pNOhI YGh+2SxIttWM3w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:33:42 2025 by rpki-client