This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json) Hash identifier: wRnFnbwtBjqbdNQ8+JYoLlvPIDNgPVvjhph8Yt9Sl8Q= Subject key identifier: AA:F4:04:A1:3A:A8:46:4E:54:F7:22:84:30:20:1F:E1:9F:CD:66:42 Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02 Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302 Certificate serial: 019B2A77C93DC52921B295B082A329AA88A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft Manifest number: 0B3B Signing time: Wed 17 Dec 2025 04:00:51 +0000 Manifest this update: Wed 17 Dec 2025 04:00:51 +0000 Manifest next update: Thu 18 Dec 2025 04:00:51 +0000 Files and hashes: 1: 0x8juoo7AM8ugf31uQycejLtims.roa (hash: sJQg/bbbZFsef+zbbHa9OzqRT4fumHdl0Xl81Is/6E0=) 2: Nzh8YLpNUF4cU0rzBjfGCERDcYE.roa (hash: i2B2OXXjCTbw2kGS650IvMFo0E46R+ycXmvCyPDbizQ=) 3: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (hash: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=) 4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: MIQd3umaqFn76aATIhAYxn8pauBF4FJqgLMRnXXO8o8=) 5: i4pBlijYu7sjz616Su8j6sEp0KM.roa (hash: uHKnyOrHeN8Niu67x/4Qi3vMRGo0ABBXAuttwGbGRuk=) 6: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (hash: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=) 7: sizZNRJeMyfvZoIYAB6UC-zVc7U.roa (hash: Hn9xitBE6shoqbTIVL8aOgZmfrDePFpERxPmyPyqVEs=) 8: vywQrYyohPA7HiVpUnZvxi_OkIw.roa (hash: 9ddLtzX64XyzhFvBqGsy3QFMWw7/oarf8SrkFQVzpQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:77:c9:3d:c5:29:21:b2:95:b0:82:a3:29:aa:88:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302 Validity Not Before: Dec 17 04:00:51 2025 GMT Not After : Dec 18 04:00:51 2025 GMT Subject: CN=aaf404a13aa8464e54f7228430201fe19fcd6642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:01:31:51:08:ac:e8:5d:d3:b3:87:78:29: 91:c5:ab:61:5b:b7:e5:f8:e1:30:1b:af:da:8a:19: c2:a5:cd:75:a6:3c:64:7f:45:a1:a1:0d:6e:a4:d9: bb:a9:e4:ab:99:d1:10:d8:06:bb:c1:6f:ff:31:37: f9:04:74:af:60:8a:05:cf:df:13:8d:ae:f7:e1:06: 13:9a:28:f9:7c:71:69:7f:2a:de:75:ba:46:97:27: 5c:b7:80:8e:a8:a4:61:31:63:20:f1:2e:29:9f:dd: 79:38:cd:7e:2e:80:ce:be:f0:f5:21:f6:a2:2c:6c: fa:9e:23:fe:2c:6b:02:8e:0d:57:d2:4a:6f:6b:de: 6c:5d:ec:b7:52:f0:ed:bc:b9:ad:e2:03:89:45:88: 4a:92:11:33:2a:f4:e5:cd:f7:b1:79:c5:46:44:3e: 7e:81:a6:53:35:dd:f9:9f:fe:b3:77:55:02:62:bb: c7:9e:b2:2d:35:f2:78:ee:3d:60:1c:be:bc:0c:27: ef:9f:e9:a1:ab:e5:e4:cf:79:ab:b2:5a:19:b0:5e: 18:c4:58:67:d2:74:e9:a7:e2:23:63:42:79:10:7d: d8:89:f0:ac:e8:0e:bc:5e:0c:fb:d8:a1:b8:f3:9e: 3e:a9:48:d6:a6:12:83:16:5a:08:fe:38:86:1d:0b: 4f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F4:04:A1:3A:A8:46:4E:54:F7:22:84:30:20:1F:E1:9F:CD:66:42 X509v3 Authority Key Identifier: keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:2c:fe:47:bf:4f:29:a9:c1:f9:a9:62:aa:55:d6:38:c1:03: cf:cd:bb:54:ad:4f:89:20:53:6f:6a:de:e7:80:48:7b:2b:f7: 94:24:1a:03:8d:86:04:ce:f1:cc:c2:95:c1:45:8e:30:06:7d: ae:25:7d:bb:f9:ef:3a:fd:92:37:83:55:65:d2:62:8d:6c:ef: 49:1a:f8:5b:a5:1a:8f:34:47:12:89:f1:83:12:50:56:1a:83: 71:a8:ad:af:e2:71:93:9f:4a:b1:d7:e5:9a:fa:98:99:f6:0b: 52:f9:79:3c:d5:80:bb:4f:98:87:34:bc:8f:b7:b8:aa:25:bb: 17:5a:7c:f8:70:23:b6:ba:3a:07:d9:be:dd:25:ae:cf:95:60: ed:a4:a9:8d:32:1b:9b:7c:d0:38:18:f1:d2:a0:11:a2:f1:ce: ae:a7:a0:18:fa:6f:3a:4c:cd:13:0e:c7:a8:ef:f1:4b:a5:7b: 94:a7:7c:dd:39:f2:3e:7d:f9:88:87:59:0f:c4:4a:43:ee:22: cb:17:8f:3d:99:f0:c1:29:dd:db:c7:ae:35:e3:c4:52:96:7d: a2:66:a5:57:40:6f:c3:71:df:47:a5:02:c8:0d:cc:64:3a:7c: 16:62:99:dd:75:40:df:8b:42:d1:9c:9c:f8:db:7e:d4:26:ed: 78:18:20:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqd8k9xSkhspWwgqMpqoiiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYTdjZThiYWNiZWNlZWIxNmY2MDBiNjA3ZDFiZmQwODAz M2IzMDIwHhcNMjUxMjE3MDQwMDUxWhcNMjUxMjE4MDQwMDUxWjAzMTEwLwYDVQQD EyhhYWY0MDRhMTNhYTg0NjRlNTRmNzIyODQzMDIwMWZlMTlmY2Q2NjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl4BMVEIrOhd07OHeCmRxathW7fl +OEwG6/aihnCpc11pjxkf0WhoQ1upNm7qeSrmdEQ2Aa7wW//MTf5BHSvYIoFz98T ja734QYTmij5fHFpfyredbpGlydct4COqKRhMWMg8S4pn915OM1+LoDOvvD1Ifai LGz6niP+LGsCjg1X0kpva95sXey3UvDtvLmt4gOJRYhKkhEzKvTlzfexecVGRD5+ gaZTNd35n/6zd1UCYrvHnrItNfJ47j1gHL68DCfvn+mhq+Xkz3mrsloZsF4YxFhn 0nTpp+IjY0J5EH3YifCs6A68Xgz72KG4854+qUjWphKDFloI/jiGHQtPiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKr0BKE6qEZOVPcihDAgH+GfzWZCMB8GA1UdIwQY MBaAFIGnzousvs7rFvYAtgfRv9CAM7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzct YjI3ZDg3MzBhMjcwLzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzctYjI3ZDg3MzBhMjcw LzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5iz+R79P KanB+aliqlXWOMEDz827VK1PiSBTb2re54BIeyv3lCQaA42GBM7xzMKVwUWOMAZ9 riV9u/nvOv2SN4NVZdJijWzvSRr4W6UajzRHEonxgxJQVhqDcaitr+Jxk59Ksdfl mvqYmfYLUvl5PNWAu0+YhzS8j7e4qiW7F1p8+HAjtro6B9m+3SWuz5Vg7aSpjTIb m3zQOBjx0qARovHOrqegGPpvOkzNEw7HqO/xS6V7lKd83TnyPn35iIdZD8RKQ+4i yxePPZnwwSnd28euNePEUpZ9omalV0Bvw3HfR6UCyA3MZDp8FmKZ3XVA34tC0Zyc +Nt+1CbteBggMw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:44:06 2025 by rpki-client