This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft File: gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json) Hash identifier: 3i8brMWHmCjej44PyG3sUMNSJI+JRuAKFvk3FIwmnHM= Subject key identifier: 5F:F1:04:F6:3C:1F:A0:0B:20:5B:E8:AC:78:8F:59:68:32:27:BD:15 Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52 Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52 Certificate serial: 019AF163F22959607BAB5300E8C599ADEE3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 02:00:50 +0000 Manifest this update: Sat 06 Dec 2025 02:00:50 +0000 Manifest next update: Sun 07 Dec 2025 02:00:50 +0000 Files and hashes: 1: ReUkv2XBhq4jZK8mdlDBfah6_NY.roa (hash: 0JTSyIquJGzLqSds9ko3zMw9Lmr56Y3WjwQhPWRtRNo=) 2: XtfrcY0xGbaYSlWTXL9nm2Diii0.roa (hash: aEZWDKAQcPeSAXKY4jWlj23Ulwbg4fWY9kpGKgMl9kU=) 3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: qg/Nbo49EdBSN+jzvB8iiEvJAjf63yunbxN7VvZh8os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f2:29:59:60:7b:ab:53:00:e8:c5:99:ad:ee:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52 Validity Not Before: Dec 6 02:00:50 2025 GMT Not After : Dec 7 02:00:50 2025 GMT Subject: CN=5ff104f63c1fa00b205be8ac788f59683227bd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3f:04:26:6c:3c:dd:dd:dc:94:28:08:02:20: f7:17:d3:12:41:32:dd:84:59:ab:fe:47:eb:48:7e: ef:27:d4:17:b9:f4:ec:2d:49:73:f4:f6:cf:9d:75: 15:5a:02:6b:b4:fb:41:5e:e2:01:c6:0e:4d:11:97: 7c:e9:eb:55:df:ce:8a:b8:fd:a0:a3:6b:0e:a0:96: f6:8d:fb:fc:a5:2d:68:ea:8f:6b:ab:46:ed:23:73: f5:30:50:c1:84:9f:c1:17:c1:95:ac:cc:02:28:cd: df:0b:83:b8:98:e9:d5:9b:48:24:f5:f3:b3:cb:c8: 79:ed:e6:59:53:41:22:41:02:13:d0:3f:c3:93:c1: 94:dd:19:ee:99:4f:d6:b2:9b:2c:2e:74:a5:7e:ee: e3:97:3c:60:48:85:6e:11:12:74:4c:1e:8b:5d:5e: e9:97:cc:57:3e:c9:42:15:85:d9:e5:29:0d:6f:f1: 7e:28:01:f3:28:89:d1:94:c3:34:29:6e:21:d0:39: 3a:c8:54:23:13:67:a6:c9:2f:ad:b2:24:da:aa:15: 72:b0:2f:6b:b2:03:0c:ad:c9:62:c5:2a:10:7b:3e: 31:db:93:90:58:00:bb:45:83:0c:0c:eb:9b:7e:5b: a2:7e:85:59:49:e6:d1:1d:85:41:1f:f4:74:9f:16: 79:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F1:04:F6:3C:1F:A0:0B:20:5B:E8:AC:78:8F:59:68:32:27:BD:15 X509v3 Authority Key Identifier: keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:47:87:70:63:8b:04:26:fc:8d:ba:84:59:74:74:15:89:8b: b0:8d:2d:eb:f4:8e:c7:f1:7e:35:b6:0d:5a:5e:4d:9d:62:b5: 50:13:03:62:b0:2f:30:4c:85:7b:fa:56:e9:6d:36:e2:a8:4c: 13:20:ca:55:c2:a6:b4:f7:fb:e8:6f:2d:ae:f5:33:ca:75:8e: 42:d7:b4:3f:91:9e:ad:7f:f7:d1:81:6c:25:5e:4a:fc:9a:af: cb:7b:14:eb:29:9a:73:9d:f7:b1:be:2f:4a:07:18:5e:18:0d: 58:31:eb:75:b3:0f:90:17:1b:ca:8c:08:8b:95:c8:63:d3:93: f0:a5:eb:e7:6d:40:14:24:b7:fc:89:87:ad:a3:ac:ed:25:c1: ed:5b:fd:61:6b:2e:c3:c4:18:d0:66:2b:ed:61:43:4e:d0:e2: bb:a5:cc:1a:e5:f5:c0:be:5e:43:6e:cc:b4:17:c3:3d:b1:9c: 97:da:e3:8e:3d:b7:68:15:4c:ea:ef:22:44:91:12:29:16:fe: 7d:94:f9:3e:46:91:6c:b3:15:b2:84:ba:03:9a:e9:18:6a:f6: 8d:39:e5:5b:6a:34:63:29:24:d8:05:42:ca:9b:1b:cc:01:5b: f3:77:b9:9b:c2:da:d0:c6:29:e2:b2:38:9b:60:66:5a:07:1a: a9:16:b6:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/IpWWB7q1MA6MWZre48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNjlkOWZmZTA0OGE3MDAwM2YxNmYwNmUyNGQ5YmYyZGI4 NWViNTIwHhcNMjUxMjA2MDIwMDUwWhcNMjUxMjA3MDIwMDUwWjAzMTEwLwYDVQQD Eyg1ZmYxMDRmNjNjMWZhMDBiMjA1YmU4YWM3ODhmNTk2ODMyMjdiZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT8EJmw83d3clCgIAiD3F9MSQTLd hFmr/kfrSH7vJ9QXufTsLUlz9PbPnXUVWgJrtPtBXuIBxg5NEZd86etV386KuP2g o2sOoJb2jfv8pS1o6o9rq0btI3P1MFDBhJ/BF8GVrMwCKM3fC4O4mOnVm0gk9fOz y8h57eZZU0EiQQIT0D/Dk8GU3RnumU/WspssLnSlfu7jlzxgSIVuERJ0TB6LXV7p l8xXPslCFYXZ5SkNb/F+KAHzKInRlMM0KW4h0Dk6yFQjE2emyS+tsiTaqhVysC9r sgMMrclixSoQez4x25OQWAC7RYMMDOubfluifoVZSebRHYVBH/R0nxZ5jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/xBPY8H6ALIFvorHiPWWgyJ70VMB8GA1UdIwQY MBaAFIBp2f/gSKcAA/FvBuJNm/LbhetSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWIt ZTAyMmUzMDA5YTcxLzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWItZTAyMmUzMDA5YTcx LzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkeHcGOL BCb8jbqEWXR0FYmLsI0t6/SOx/F+NbYNWl5NnWK1UBMDYrAvMEyFe/pW6W024qhM EyDKVcKmtPf76G8trvUzynWOQte0P5GerX/30YFsJV5K/Jqvy3sU6ymac533sb4v SgcYXhgNWDHrdbMPkBcbyowIi5XIY9OT8KXr521AFCS3/ImHraOs7SXB7Vv9YWsu w8QY0GYr7WFDTtDiu6XMGuX1wL5eQ27MtBfDPbGcl9rjjj23aBVM6u8iRJESKRb+ fZT5PkaRbLMVsoS6A5rpGGr2jTnlW2o0Yykk2AVCypsbzAFb83e5m8La0MYp4rI4 m2BmWgcaqRa2nA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:11:03 2025 by rpki-client