This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft File: gGM2o7hr9zon3dkGZn6tp1tHxJk.mft (raw, json) Hash identifier: MAfmQt1IH8hOYQ1upH3cYJCwoP36knGc8UalQW49Fjw= Subject key identifier: 1D:21:D1:D4:BC:A0:B5:37:8A:0F:01:D4:C1:D4:C6:50:28:84:0B:29 Authority key identifier: 80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99 Certificate issuer: /CN=806336a3b86bf73a27ddd906667eada75b47c499 Certificate serial: 019AF20958E7478EE12CAA5ED487AE8BB0C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft Manifest number: 0CFE Signing time: Sat 06 Dec 2025 05:01:30 +0000 Manifest this update: Sat 06 Dec 2025 05:01:30 +0000 Manifest next update: Sun 07 Dec 2025 05:01:30 +0000 Files and hashes: 1: gGM2o7hr9zon3dkGZn6tp1tHxJk.crl (hash: CUOKjvjhoAY003qEvt7/hH9NDN6MwmdjUYd74CvFDmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:58:e7:47:8e:e1:2c:aa:5e:d4:87:ae:8b:b0:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=806336a3b86bf73a27ddd906667eada75b47c499 Validity Not Before: Dec 6 05:01:30 2025 GMT Not After : Dec 7 05:01:30 2025 GMT Subject: CN=1d21d1d4bca0b5378a0f01d4c1d4c65028840b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3a:92:52:e0:f0:02:f6:95:41:f0:39:d4:dd: 0b:c1:c6:e4:72:46:60:78:0f:c6:85:c5:93:24:24: d7:c9:0b:72:84:5d:51:12:01:03:8a:10:35:42:07: 14:e1:1b:c0:a2:ef:0f:6e:58:d4:ef:2b:99:76:e7: e0:ff:df:2f:98:26:7a:5d:14:f6:49:7d:f2:fb:92: ca:80:08:f8:bb:26:b1:99:55:aa:ea:9b:ae:34:9d: 0c:1d:45:03:ff:7a:56:90:08:ce:92:72:91:e7:1b: 11:19:f8:bd:3f:fb:55:0b:7a:76:18:68:a4:c6:35: ee:80:2d:fe:73:0b:cc:11:73:96:ad:31:8d:b5:e8: b2:96:54:ed:89:07:02:c2:14:cd:d3:9c:f9:b8:85: 73:7b:a8:34:e0:75:44:27:54:66:c0:88:f7:9b:cb: 3e:d1:11:59:e5:4a:82:dc:28:9d:34:e4:3c:73:72: 6b:7f:e4:20:c3:09:47:13:b2:8a:e0:85:2e:17:76: 27:18:aa:4c:ea:b0:c7:0a:a6:38:bb:8e:3b:b5:6f: 59:c0:26:5b:72:4e:55:a6:30:1c:30:43:6a:be:fd: f3:f1:ed:7e:0b:56:0a:37:cf:56:84:c4:51:49:0a: 75:ca:1e:6c:8e:63:a7:33:a3:b9:cc:af:09:3f:e3: 01:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:21:D1:D4:BC:A0:B5:37:8A:0F:01:D4:C1:D4:C6:50:28:84:0B:29 X509v3 Authority Key Identifier: keyid:80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:aa:f7:26:af:d3:ab:08:f7:0c:0a:3a:a9:db:ea:44:20:7e: dd:e5:25:f3:a2:ca:48:c9:52:72:39:e6:cf:56:7c:21:bd:fc: 41:d6:97:dc:70:80:68:36:78:b7:0c:0c:07:79:89:e7:d4:76: 80:4e:59:6c:fb:bc:a6:53:bf:85:ec:d4:0f:66:21:ae:92:54: 89:1e:c2:a8:66:6b:2d:73:ec:79:7e:ce:13:24:53:46:41:6e: 85:9a:f1:bc:4f:ed:f8:a9:79:49:49:c1:bf:9b:dd:49:ea:16: 67:9f:e0:0e:b8:1e:e4:cf:de:2e:43:7f:4c:51:c6:01:e5:7a: 94:44:cd:ed:5b:5d:ae:7f:9c:3a:1f:12:7e:5a:b4:63:59:a3: 05:f8:6b:71:23:d4:fd:b3:42:9f:f3:cb:3d:bd:7e:65:36:56: a0:49:f1:03:56:96:0a:0b:5e:eb:dd:04:58:1d:e0:49:bc:70: 15:e4:99:05:ea:fc:a0:21:a9:70:98:87:d1:9c:0a:43:b0:e2: 3d:a2:b5:54:5f:16:b7:5a:e1:13:dc:45:1d:97:f1:c1:fc:00: 6a:f3:81:76:da:f6:f0:26:ae:91:94:87:b0:68:d6:e1:08:f5: 61:02:99:3a:ce:54:ae:69:96:a0:33:b6:3f:bc:bc:88:ae:fc: 06:c0:ba:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVjnR47hLKpe1Ieui7DBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNjMzNmEzYjg2YmY3M2EyN2RkZDkwNjY2N2VhZGE3NWI0 N2M0OTkwHhcNMjUxMjA2MDUwMTMwWhcNMjUxMjA3MDUwMTMwWjAzMTEwLwYDVQQD EygxZDIxZDFkNGJjYTBiNTM3OGEwZjAxZDRjMWQ0YzY1MDI4ODQwYjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTqSUuDwAvaVQfA51N0LwcbkckZg eA/GhcWTJCTXyQtyhF1REgEDihA1QgcU4RvAou8PbljU7yuZdufg/98vmCZ6XRT2 SX3y+5LKgAj4uyaxmVWq6puuNJ0MHUUD/3pWkAjOknKR5xsRGfi9P/tVC3p2GGik xjXugC3+cwvMEXOWrTGNteiyllTtiQcCwhTN05z5uIVze6g04HVEJ1RmwIj3m8s+ 0RFZ5UqC3CidNOQ8c3Jrf+QgwwlHE7KK4IUuF3YnGKpM6rDHCqY4u447tW9ZwCZb ck5VpjAcMENqvv3z8e1+C1YKN89WhMRRSQp1yh5sjmOnM6O5zK8JP+MBvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0h0dS8oLU3ig8B1MHUxlAohAspMB8GA1UdIwQY MBaAFIBjNqO4a/c6J93ZBmZ+radbR8SZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0dNMm83aHI5em9uM2RrR1puNnRwMXRIeEprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hYTgwZmMtMGQ0YS00YTk3LWFiODEt MDliYjU5NmU4NDU0LzEvZ0dNMm83aHI5em9uM2RrR1puNnRwMXRIeEprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hYTgwZmMtMGQ0YS00YTk3LWFiODEtMDliYjU5NmU4NDU0 LzEvZ0dNMm83aHI5em9uM2RrR1puNnRwMXRIeEprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKr3Jq/T qwj3DAo6qdvqRCB+3eUl86LKSMlScjnmz1Z8Ib38QdaX3HCAaDZ4twwMB3mJ59R2 gE5ZbPu8plO/hezUD2YhrpJUiR7CqGZrLXPseX7OEyRTRkFuhZrxvE/t+Kl5SUnB v5vdSeoWZ5/gDrge5M/eLkN/TFHGAeV6lETN7Vtdrn+cOh8Sflq0Y1mjBfhrcSPU /bNCn/PLPb1+ZTZWoEnxA1aWCgte690EWB3gSbxwFeSZBer8oCGpcJiH0ZwKQ7Di PaK1VF8Wt1rhE9xFHZfxwfwAavOBdtr28CaukZSHsGjW4Qj1YQKZOs5UrmmWoDO2 P7y8iK78BsC6Cg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:52 2025 by rpki-client