This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft File: gU3w5sDcpazuCDqMcwTUXz0z1W0.mft (raw, json) Hash identifier: cpGvETjz97PBrXXeKcXY9RjnBCgvC64OtOz7BbI3Vzs= Subject key identifier: 90:D5:EF:00:B0:08:37:2B:D9:46:18:CB:AA:8A:DF:A0:D8:E3:05:48 Authority key identifier: 81:4D:F0:E6:C0:DC:A5:AC:EE:08:3A:8C:73:04:D4:5F:3D:33:D5:6D Certificate issuer: /CN=814df0e6c0dca5acee083a8c7304d45f3d33d56d Certificate serial: 019AF50A8E5CE0E0E898D27D3CC0D10E197A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft Manifest number: 0E43 Signing time: Sat 06 Dec 2025 19:01:40 +0000 Manifest this update: Sat 06 Dec 2025 19:01:40 +0000 Manifest next update: Sun 07 Dec 2025 19:01:40 +0000 Files and hashes: 1: gU3w5sDcpazuCDqMcwTUXz0z1W0.crl (hash: +3YEaK0JXq4NCAYqyG+NJnGP/ethgkOPFVQcwCYl+jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:8e:5c:e0:e0:e8:98:d2:7d:3c:c0:d1:0e:19:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=814df0e6c0dca5acee083a8c7304d45f3d33d56d Validity Not Before: Dec 6 19:01:40 2025 GMT Not After : Dec 7 19:01:40 2025 GMT Subject: CN=90d5ef00b008372bd94618cbaa8adfa0d8e30548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:e0:26:30:b0:bc:1b:73:ab:ac:dc:24:5c: e9:41:e7:44:ed:32:df:86:ff:76:27:55:54:60:17: 73:17:c3:3d:11:e0:b3:03:93:d9:8b:3b:60:90:5c: 5f:3e:d9:ac:bc:0a:e4:ce:50:7c:64:45:3e:52:6f: ae:3b:21:16:a6:ba:f3:77:84:48:6a:07:05:59:3e: 6f:be:9b:0c:3d:e5:c3:ef:70:b0:47:4d:8b:6a:f5: ec:0e:70:e0:75:71:70:5b:14:01:f3:46:c2:9a:42: 1e:06:f3:13:63:1f:90:c5:89:cf:3c:f8:a9:32:4c: a1:ea:af:61:9e:7b:e0:0f:36:13:b7:5a:2b:30:31: 07:46:ea:be:c8:36:dd:d3:67:21:15:ad:c8:e9:e9: 58:92:14:ee:f1:a4:92:1d:bf:ba:53:48:61:77:99: 7e:b7:17:c1:37:85:c1:02:99:e2:6e:6e:9a:a3:77: 17:93:94:79:22:4d:6b:93:ba:31:66:d1:02:83:97: 0f:c6:26:7e:ab:d1:c7:99:d8:70:9b:a5:bd:54:11: 94:a0:47:68:8a:ac:da:c6:dc:65:92:12:f2:8e:8c: a9:44:7a:37:b6:83:ad:c4:8f:16:6b:f3:22:9d:32: 5e:e8:33:e1:b0:14:6c:b4:35:7b:f1:3c:ff:80:81: 11:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D5:EF:00:B0:08:37:2B:D9:46:18:CB:AA:8A:DF:A0:D8:E3:05:48 X509v3 Authority Key Identifier: keyid:81:4D:F0:E6:C0:DC:A5:AC:EE:08:3A:8C:73:04:D4:5F:3D:33:D5:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f1:0d:21:4a:1f:d5:68:16:b7:2e:a5:e2:a2:8e:a4:02:cb: c7:d0:f3:e6:dd:6b:4a:06:ca:09:ed:06:a2:cb:a6:74:ee:c0: 7f:be:a8:39:5d:7c:76:ff:16:93:b2:25:98:52:a5:e0:17:ea: fe:9d:80:e2:5e:44:e8:23:d5:23:d6:b5:fb:37:4e:6b:fb:ec: f6:8d:d8:b3:ed:c4:b7:04:cd:d9:60:ee:25:d5:18:35:98:10: 53:1e:0e:2c:08:a5:c6:9e:be:8c:22:2f:12:5d:e9:6f:e1:49: 68:4e:6c:a6:14:02:73:37:07:f4:cd:7e:67:fd:9f:ff:4e:3a: 06:40:f1:2c:b1:41:f0:84:c3:59:76:40:21:ef:ef:e0:de:36: 84:ed:d1:62:71:71:87:8e:2b:24:a8:c8:2b:4d:9e:4c:2c:cf: 70:5b:41:09:8b:49:28:3b:1a:75:d2:66:06:e1:9d:aa:5e:3d: e4:4a:59:9b:f5:07:66:2f:89:cd:fb:3b:49:15:b4:63:f2:ce: 83:9f:08:0d:15:6a:9e:97:75:fe:89:04:b6:29:39:4d:ac:b6: 95:01:18:6e:21:90:36:17:b0:b9:15:89:f6:0c:cd:9c:cc:8c: b7:ff:7e:a8:2c:67:bc:a2:0f:cf:f6:a7:84:b4:c2:9f:29:90: f6:b6:36:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Co5c4ODomNJ9PMDRDhl6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNGRmMGU2YzBkY2E1YWNlZTA4M2E4YzczMDRkNDVmM2Qz M2Q1NmQwHhcNMjUxMjA2MTkwMTQwWhcNMjUxMjA3MTkwMTQwWjAzMTEwLwYDVQQD Eyg5MGQ1ZWYwMGIwMDgzNzJiZDk0NjE4Y2JhYThhZGZhMGQ4ZTMwNTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLzgJjCwvBtzq6zcJFzpQedE7TLf hv92J1VUYBdzF8M9EeCzA5PZiztgkFxfPtmsvArkzlB8ZEU+Um+uOyEWprrzd4RI agcFWT5vvpsMPeXD73CwR02LavXsDnDgdXFwWxQB80bCmkIeBvMTYx+QxYnPPPip Mkyh6q9hnnvgDzYTt1orMDEHRuq+yDbd02chFa3I6elYkhTu8aSSHb+6U0hhd5l+ txfBN4XBApnibm6ao3cXk5R5Ik1rk7oxZtECg5cPxiZ+q9HHmdhwm6W9VBGUoEdo iqzaxtxlkhLyjoypRHo3toOtxI8Wa/MinTJe6DPhsBRstDV78Tz/gIER5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDV7wCwCDcr2UYYy6qK36DY4wVIMB8GA1UdIwQY MBaAFIFN8ObA3KWs7gg6jHME1F89M9VtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1UzdzVzRGNwYXp1Q0RxTWN3VFVYejB6MVcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MTQwZWUtNmZlZi00NmFjLWJlMzIt ZDBkMmYyY2E4Y2JjLzEvZ1UzdzVzRGNwYXp1Q0RxTWN3VFVYejB6MVcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi81MTQwZWUtNmZlZi00NmFjLWJlMzItZDBkMmYyY2E4Y2Jj LzEvZ1UzdzVzRGNwYXp1Q0RxTWN3VFVYejB6MVcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPENIUof 1WgWty6l4qKOpALLx9Dz5t1rSgbKCe0GosumdO7Af76oOV18dv8Wk7IlmFKl4Bfq /p2A4l5E6CPVI9a1+zdOa/vs9o3Ys+3EtwTN2WDuJdUYNZgQUx4OLAilxp6+jCIv El3pb+FJaE5sphQCczcH9M1+Z/2f/046BkDxLLFB8ITDWXZAIe/v4N42hO3RYnFx h44rJKjIK02eTCzPcFtBCYtJKDsaddJmBuGdql495EpZm/UHZi+Jzfs7SRW0Y/LO g58IDRVqnpd1/okEtik5Tay2lQEYbiGQNhewuRWJ9gzNnMyMt/9+qCxnvKIPz/an hLTCnymQ9rY2WA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:51:48 2025 by rpki-client