This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft File: gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json) Hash identifier: yT6xOxawvEB2iXEXnq+rAj7lVs8jBzqmRWkxdJqXc3o= Subject key identifier: 2F:86:6F:7C:FE:54:E9:95:BE:56:78:60:76:91:78:82:CB:48:BE:16 Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6 Certificate issuer: /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6 Certificate serial: 019AF31BDAA727596E9F70B03673422BF83E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft Manifest number: 157B Signing time: Sat 06 Dec 2025 10:01:20 +0000 Manifest this update: Sat 06 Dec 2025 10:01:20 +0000 Manifest next update: Sun 07 Dec 2025 10:01:20 +0000 Files and hashes: 1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: G1FJAo3a9y9W+LHagh6MT4HwnhySlO5IIK6tPmJ5IfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:da:a7:27:59:6e:9f:70:b0:36:73:42:2b:f8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6 Validity Not Before: Dec 6 10:01:20 2025 GMT Not After : Dec 7 10:01:20 2025 GMT Subject: CN=2f866f7cfe54e995be56786076917882cb48be16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:84:ef:6a:b2:24:c8:24:c7:98:89:8d:ef:dc: 9e:50:3b:5c:32:11:6f:8b:34:4f:93:ed:3e:dc:7a: b1:18:57:88:8a:65:54:2d:19:cd:63:3d:5f:9f:81: ed:a4:bf:31:c2:01:ce:f5:74:30:ab:2a:a9:55:e9: 45:2b:77:71:30:29:9a:4f:4c:a4:80:bc:ac:fa:ea: 2c:e4:24:60:47:e7:ab:8b:22:9b:5f:49:f2:52:97: 33:da:b1:83:4f:78:ed:1e:5a:f0:39:73:01:da:f4: 05:33:db:4b:d9:2e:a7:e8:6d:0e:72:11:ae:c0:f4: d7:fd:85:9a:d2:ff:18:5c:d9:13:f7:8e:13:e4:ad: 10:68:78:e3:71:9b:c8:47:5d:66:2f:ce:3d:66:f1: b7:e4:fc:73:5f:e2:f6:f7:f0:e5:63:d5:61:22:ae: 17:f1:f5:de:bf:e4:79:fd:bd:b2:d4:db:1d:43:d6: cd:d7:e0:fc:83:1a:5e:a0:5b:7d:b5:ef:6e:b2:cf: 2c:23:8f:01:c3:9e:22:fd:ab:a0:7d:c1:de:f3:f9: 6c:29:ca:96:cb:60:6e:2a:95:4c:64:e7:f9:60:c3: 39:1d:eb:17:ed:17:a3:92:b7:e9:ad:88:69:82:00: 2f:8c:33:f4:08:a8:da:9f:b0:f5:6d:01:a3:30:40: 4a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:86:6F:7C:FE:54:E9:95:BE:56:78:60:76:91:78:82:CB:48:BE:16 X509v3 Authority Key Identifier: keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:e6:2e:48:57:79:40:02:0f:45:40:f9:c1:41:db:b0:13:dd: c0:b4:65:4e:a5:0e:50:a9:7a:f2:16:18:fe:58:e8:bd:2d:1a: ad:be:8c:2f:46:c7:dd:6f:53:63:2c:53:19:8c:f3:95:b3:77: 21:c1:97:2b:60:de:9e:3d:0b:38:92:48:4d:d7:b7:19:49:ed: 25:b1:9b:46:62:fd:e9:25:20:b3:b0:f6:94:a5:e0:36:f7:c7: 24:28:44:09:50:4f:e9:7f:bd:1b:9c:3d:6f:3c:ef:0e:b2:91: 61:68:0e:f9:95:a3:0f:e1:37:5e:94:a5:87:fa:41:1e:57:67: e1:79:fc:e0:ca:0c:0f:5d:61:44:41:fc:79:44:6c:eb:c1:e8: 08:74:b5:cb:82:98:5f:3d:d9:4c:c0:2b:b1:2b:c1:2c:d9:9c: 1b:bd:ea:c4:bd:f1:a1:c6:66:2f:79:a6:fd:f8:26:1a:a0:be: 12:19:31:22:bb:3a:54:e1:70:6d:ef:29:7f:a2:7f:da:98:45: b3:6c:cd:b9:72:53:54:74:70:38:66:7c:fb:17:47:17:fb:60: 6f:b1:a0:d4:50:6c:d9:f3:c9:64:42:f8:15:9c:95:2d:ff:7f: 12:1b:90:1c:66:26:52:f2:af:2c:c2:fa:4c:08:99:3d:2f:3d: e1:6a:cb:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9qnJ1lun3CwNnNCK/g+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZDU1N2E4ODY4ZTZkMjYxNmFkMzY3NTRkYzZkYzkxMmI3 Y2Q3ZDYwHhcNMjUxMjA2MTAwMTIwWhcNMjUxMjA3MTAwMTIwWjAzMTEwLwYDVQQD EygyZjg2NmY3Y2ZlNTRlOTk1YmU1Njc4NjA3NjkxNzg4MmNiNDhiZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoTvarIkyCTHmImN79yeUDtcMhFv izRPk+0+3HqxGFeIimVULRnNYz1fn4HtpL8xwgHO9XQwqyqpVelFK3dxMCmaT0yk gLys+uos5CRgR+eriyKbX0nyUpcz2rGDT3jtHlrwOXMB2vQFM9tL2S6n6G0OchGu wPTX/YWa0v8YXNkT944T5K0QaHjjcZvIR11mL849ZvG35PxzX+L29/DlY9VhIq4X 8fXev+R5/b2y1NsdQ9bN1+D8gxpeoFt9te9uss8sI48Bw54i/augfcHe8/lsKcqW y2BuKpVMZOf5YMM5HesX7RejkrfprYhpggAvjDP0CKjan7D1bQGjMEBKbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+Gb3z+VOmVvlZ4YHaReILLSL4WMB8GA1UdIwQY MBaAFIHVV6iGjm0mFq02dU3G3JErfNfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2RWWHFJYU9iU1lXclRaMVRjYmNrU3Q4MTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jOTIzM2MtMTI1Yi00YzU1LTkyNjgt ZGZiYTE1ZTRiN2E1LzEvZ2RWWHFJYU9iU1lXclRaMVRjYmNrU3Q4MTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jOTIzM2MtMTI1Yi00YzU1LTkyNjgtZGZiYTE1ZTRiN2E1 LzEvZ2RWWHFJYU9iU1lXclRaMVRjYmNrU3Q4MTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOYuSFd5 QAIPRUD5wUHbsBPdwLRlTqUOUKl68hYY/ljovS0arb6ML0bH3W9TYyxTGYzzlbN3 IcGXK2Denj0LOJJITde3GUntJbGbRmL96SUgs7D2lKXgNvfHJChECVBP6X+9G5w9 bzzvDrKRYWgO+ZWjD+E3XpSlh/pBHldn4Xn84MoMD11hREH8eURs68HoCHS1y4KY Xz3ZTMArsSvBLNmcG73qxL3xocZmL3mm/fgmGqC+EhkxIrs6VOFwbe8pf6J/2phF s2zNuXJTVHRwOGZ8+xdHF/tgb7Gg1FBs2fPJZEL4FZyVLf9/EhuQHGYmUvKvLML6 TAiZPS894WrL/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:37:05 2025 by rpki-client