This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft File: gWiVcrIAukh5OByFdCdCZVkqFKs.mft (raw, json) Hash identifier: hejgHl2ZdDWJE6Ov5XKcqdmAySe+39rDMcNTK8M/bsI= Subject key identifier: 0C:78:E5:FE:DA:EE:AC:18:C3:55:4E:2F:49:10:8D:A8:AF:75:75:3A Authority key identifier: 81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB Certificate issuer: /CN=81689572b200ba4879381c8574274265592a14ab Certificate serial: 019AF31B8F94FF65DC84177F01287AAB060D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:01:00 +0000 Manifest this update: Sat 06 Dec 2025 10:01:00 +0000 Manifest next update: Sun 07 Dec 2025 10:01:00 +0000 Files and hashes: 1: gWiVcrIAukh5OByFdCdCZVkqFKs.crl (hash: tXgvdgxG3PuJeglqK8eBEHOV1WndOQ2edkXr0dEG3xo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8f:94:ff:65:dc:84:17:7f:01:28:7a:ab:06:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81689572b200ba4879381c8574274265592a14ab Validity Not Before: Dec 6 10:01:00 2025 GMT Not After : Dec 7 10:01:00 2025 GMT Subject: CN=0c78e5fedaeeac18c3554e2f49108da8af75753a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6c:6e:65:ef:66:96:8d:da:e5:65:23:ee:36: fa:cc:89:42:12:40:49:03:9e:74:4b:b0:25:8c:0e: eb:7e:b9:b7:2f:5e:a2:c0:c6:95:a4:6e:d2:0e:21: e9:4d:bc:99:c9:70:37:be:79:78:71:11:ef:73:c0: b6:8f:0f:45:be:7a:82:53:1a:ab:ea:45:5e:e7:e4: 20:d5:28:8e:39:f0:d3:56:6b:f1:d8:be:a6:d8:12: 24:bb:07:0b:65:c5:65:83:a8:60:33:be:f8:ec:d0: 66:ca:97:a8:12:75:76:af:0e:85:78:4f:75:fc:23: ed:74:79:e2:37:6c:d2:a7:0a:e3:e9:4f:2d:64:68: 9e:12:61:25:13:e1:fa:44:61:64:2e:90:2e:0c:99: 2c:6d:31:f9:a7:f9:0a:8b:fc:2d:d0:df:45:a0:f5: 48:94:a0:30:02:4d:ea:57:d9:aa:9c:a9:fe:97:60: 5d:e7:75:cb:5f:d7:1e:8f:27:6f:0f:b2:53:fd:ae: 08:89:3f:9e:49:b0:2a:2c:59:97:e6:ad:cc:b7:ca: f6:90:c0:17:e3:1e:8c:22:4b:3a:b6:98:fa:c6:69: 48:91:da:73:59:7a:eb:6d:27:70:4e:75:d6:fb:4b: f7:25:0f:e5:ee:a6:ac:c9:76:55:57:88:cb:96:27: e8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:78:E5:FE:DA:EE:AC:18:C3:55:4E:2F:49:10:8D:A8:AF:75:75:3A X509v3 Authority Key Identifier: keyid:81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:1a:ca:cf:0a:47:bb:ec:25:6e:5e:ac:1d:f5:d9:03:03:83: 4d:b9:4d:ca:9e:e5:a8:d4:86:b1:af:8a:6b:e6:01:74:03:3b: 37:79:8b:97:10:0c:cc:ad:cf:9f:85:d3:e3:38:04:0f:b8:dd: 0c:9b:ef:8f:5d:5f:bf:7f:d7:dd:32:95:df:77:33:45:71:e0: 98:23:56:3a:ee:13:2d:ee:c9:c5:7c:2e:d0:ee:83:74:77:01: 41:e7:75:c1:04:8e:3c:b8:29:1a:33:f0:4b:ae:d9:2a:6a:75: e1:f2:4b:e5:38:ae:19:eb:a4:55:b5:ee:92:53:d2:24:03:ad: 3e:ab:fe:a9:38:59:f7:c7:a6:28:52:1d:a3:b2:60:09:4d:a4: 10:7a:ec:50:37:86:fb:05:0b:f8:c9:b8:9f:ac:bc:9a:25:f1: 9d:c5:2a:5d:19:53:f3:79:1e:c1:a1:71:2b:45:b3:70:b2:fa: 42:ae:a0:fb:de:6f:70:3a:f9:a2:68:49:f7:65:f5:22:06:07: 30:ec:dd:c2:b6:e6:34:cb:0b:3a:11:d7:1d:af:cf:7d:3d:2e: 10:42:dd:39:1d:80:94:78:5d:24:f2:19:b2:b7:af:a8:d2:64: 9b:92:84:30:22:c0:79:64:e4:9f:ac:ab:c4:d0:6a:8a:2f:ba: 7b:08:66:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4+U/2XchBd/ASh6qwYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNjg5NTcyYjIwMGJhNDg3OTM4MWM4NTc0Mjc0MjY1NTky YTE0YWIwHhcNMjUxMjA2MTAwMTAwWhcNMjUxMjA3MTAwMTAwWjAzMTEwLwYDVQQD EygwYzc4ZTVmZWRhZWVhYzE4YzM1NTRlMmY0OTEwOGRhOGFmNzU3NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGxuZe9mlo3a5WUj7jb6zIlCEkBJ A550S7AljA7rfrm3L16iwMaVpG7SDiHpTbyZyXA3vnl4cRHvc8C2jw9FvnqCUxqr 6kVe5+Qg1SiOOfDTVmvx2L6m2BIkuwcLZcVlg6hgM7747NBmypeoEnV2rw6FeE91 /CPtdHniN2zSpwrj6U8tZGieEmElE+H6RGFkLpAuDJksbTH5p/kKi/wt0N9FoPVI lKAwAk3qV9mqnKn+l2Bd53XLX9cejydvD7JT/a4IiT+eSbAqLFmX5q3Mt8r2kMAX 4x6MIks6tpj6xmlIkdpzWXrrbSdwTnXW+0v3JQ/l7qasyXZVV4jLlifofQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAx45f7a7qwYw1VOL0kQjaivdXU6MB8GA1UdIwQY MBaAFIFolXKyALpIeTgchXQnQmVZKhSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OGQ2ODQtNTYyNy00ZmYyLWFhNGIt NjI0MTU5MmE5NDRiLzEvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84OGQ2ODQtNTYyNy00ZmYyLWFhNGItNjI0MTU5MmE5NDRi LzEvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBrKzwpH u+wlbl6sHfXZAwODTblNyp7lqNSGsa+Ka+YBdAM7N3mLlxAMzK3Pn4XT4zgED7jd DJvvj11fv3/X3TKV33czRXHgmCNWOu4TLe7JxXwu0O6DdHcBQed1wQSOPLgpGjPw S67ZKmp14fJL5TiuGeukVbXuklPSJAOtPqv+qThZ98emKFIdo7JgCU2kEHrsUDeG +wUL+Mm4n6y8miXxncUqXRlT83kewaFxK0WzcLL6Qq6g+95vcDr5omhJ92X1IgYH MOzdwrbmNMsLOhHXHa/PfT0uEELdOR2AlHhdJPIZsrevqNJkm5KEMCLAeWTkn6yr xNBqii+6ewhmNA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:17:28 2025 by rpki-client