This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json) Hash identifier: aMH9q4JMOZtkxeIksluhJOzKpGMePqreG/V4liWDy2Y= Subject key identifier: 06:0C:47:7F:4F:B6:6B:BA:89:31:11:C5:AB:BA:24:77:26:52:D5:7C Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b Certificate serial: 019AF38A0952BE0A24BA32AF9731F139F2CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft Manifest number: 1400 Signing time: Sat 06 Dec 2025 12:01:41 +0000 Manifest this update: Sat 06 Dec 2025 12:01:41 +0000 Manifest next update: Sun 07 Dec 2025 12:01:41 +0000 Files and hashes: 1: PShglmQTXkIQHkPe8FzwFmHj5JU.roa (hash: /e+wgkBq61bmma1KHWS9Osz5g9pecTkL2xoyoNPkRJQ=) 2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: cfTrqqk3bKy3KxHaKvB9PVNol1pmXKMSfKfA+KvEdsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:09:52:be:0a:24:ba:32:af:97:31:f1:39:f2:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b Validity Not Before: Dec 6 12:01:41 2025 GMT Not After : Dec 7 12:01:41 2025 GMT Subject: CN=060c477f4fb66bba893111c5abba24772652d57c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:df:90:a7:7a:f8:9d:e8:1e:03:bd:79:71: 24:24:a8:eb:7b:82:f8:65:8c:30:97:d0:4e:c0:9b: d8:6d:cf:2a:5d:f5:28:00:1b:3c:b3:7a:69:59:eb: a1:cd:c8:07:76:05:cc:11:08:2b:92:aa:79:e6:3f: f7:af:c5:2a:f5:f1:96:cf:8b:f1:9a:54:7b:98:5a: c6:e7:50:b4:1c:93:ea:36:fb:bb:37:99:b7:22:c2: 41:6d:80:99:86:44:5a:b6:af:df:5e:ff:b7:5e:12: aa:71:54:50:78:33:50:5e:8a:4b:a4:70:0a:2e:29: b5:6f:9e:5c:f3:69:41:6e:a9:6b:5d:dc:a7:fb:82: 21:df:74:cf:09:54:55:bb:64:ea:1c:e0:d9:ca:60: 7e:b9:33:1c:3d:e8:08:21:46:e2:4d:b5:fe:4e:4e: cf:f0:c0:14:e9:09:78:2d:dd:5a:21:58:6a:cb:1c: 1b:4f:02:d2:de:a9:9a:e1:3e:b5:7b:81:31:6f:79: 76:92:21:87:12:62:4b:fb:58:7e:22:d9:b0:65:47: cb:cd:91:17:0b:74:c9:8d:52:6a:9f:24:e1:60:cd: 1f:09:06:81:87:07:53:0e:79:df:bb:89:b7:02:08: ef:98:82:39:87:a5:6b:da:11:1f:c1:e1:3c:bd:bf: 5a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0C:47:7F:4F:B6:6B:BA:89:31:11:C5:AB:BA:24:77:26:52:D5:7C X509v3 Authority Key Identifier: keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:4b:7f:1a:49:a6:74:94:be:60:39:45:a1:5a:cc:59:93:22: 5f:67:78:51:23:dc:1c:03:37:fb:72:14:4e:0b:98:65:ba:57: f4:0f:b1:ce:1e:79:9b:b6:21:b0:af:c3:60:de:ab:06:61:bb: 95:cc:41:5d:4f:df:92:a3:94:a2:ec:11:ce:a3:eb:a6:42:a4: e3:7b:f3:12:d2:a8:26:2d:30:1d:8b:e9:43:79:65:22:66:d7: fa:1f:5f:69:56:0b:21:b9:25:e1:2a:0a:c9:22:6e:25:66:d2: bc:e9:85:ce:55:df:2e:8d:9b:22:b2:3c:86:c1:60:8e:39:97: 6f:74:89:a0:38:db:05:d5:d1:b6:97:14:bf:d7:12:cc:aa:43: 96:a2:37:d8:2d:1f:c8:58:a0:ce:c6:40:5c:20:d1:f3:b2:2b: 6b:30:4d:0c:8d:04:24:0b:7c:82:a1:85:dd:92:dc:ea:f0:75: 0f:bb:c1:14:d1:b8:fc:12:89:5a:04:0a:5a:38:96:86:9e:39: a1:44:cd:57:e8:bd:25:15:5a:be:e4:ad:b5:dc:14:72:e1:9c: 8e:89:8a:12:2f:08:11:35:5c:cc:df:c1:88:95:1d:da:0d:32: 8d:ed:2c:65:23:d3:5c:a3:5e:fa:a4:a1:c6:ef:f5:0c:bb:17: dd:fa:b4:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziglSvgokujKvlzHxOfLKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNWRiNTY3ODEzOWUyZWVhY2U4OWI1ZWU5OTgyYzM1NDQ5 YzBiM2IwHhcNMjUxMjA2MTIwMTQxWhcNMjUxMjA3MTIwMTQxWjAzMTEwLwYDVQQD EygwNjBjNDc3ZjRmYjY2YmJhODkzMTExYzVhYmJhMjQ3NzI2NTJkNTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFffkKd6+J3oHgO9eXEkJKjre4L4 ZYwwl9BOwJvYbc8qXfUoABs8s3ppWeuhzcgHdgXMEQgrkqp55j/3r8Uq9fGWz4vx mlR7mFrG51C0HJPqNvu7N5m3IsJBbYCZhkRatq/fXv+3XhKqcVRQeDNQXopLpHAK Lim1b55c82lBbqlrXdyn+4Ih33TPCVRVu2TqHODZymB+uTMcPegIIUbiTbX+Tk7P 8MAU6Ql4Ld1aIVhqyxwbTwLS3qma4T61e4Exb3l2kiGHEmJL+1h+ItmwZUfLzZEX C3TJjVJqnyThYM0fCQaBhwdTDnnfu4m3AgjvmII5h6Vr2hEfweE8vb9avQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYMR39Ptmu6iTERxau6JHcmUtV8MB8GA1UdIwQY MBaAFIBdtWeBOeLurOibXumYLDVEnAs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zZGQwODItYzUwMy00NWI4LTliMDct OTIyOTIzZTg5OGU2LzEvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8zZGQwODItYzUwMy00NWI4LTliMDctOTIyOTIzZTg5OGU2 LzEvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq0t/Gkmm dJS+YDlFoVrMWZMiX2d4USPcHAM3+3IUTguYZbpX9A+xzh55m7YhsK/DYN6rBmG7 lcxBXU/fkqOUouwRzqPrpkKk43vzEtKoJi0wHYvpQ3llImbX+h9faVYLIbkl4SoK ySJuJWbSvOmFzlXfLo2bIrI8hsFgjjmXb3SJoDjbBdXRtpcUv9cSzKpDlqI32C0f yFigzsZAXCDR87IrazBNDI0EJAt8gqGF3ZLc6vB1D7vBFNG4/BKJWgQKWjiWhp45 oUTNV+i9JRVavuSttdwUcuGcjomKEi8IETVczN/BiJUd2g0yje0sZSPTXKNe+qSh xu/1DLsX3fq0UA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:30:33 2025 by rpki-client