This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json) Hash identifier: tHjiqtudw3R0B4yjw3a3KePVTgPS8ob/nvtEhy2Vcv4= Subject key identifier: 83:1E:AE:06:0D:0F:24:0D:47:0E:04:A7:CC:0E:F4:66:E7:0A:DA:CD Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02 Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302 Certificate serial: 019AF4656E3CD875795C8AD387EEE970926E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft Manifest number: 0B1F Signing time: Sat 06 Dec 2025 16:01:19 +0000 Manifest this update: Sat 06 Dec 2025 16:01:19 +0000 Manifest next update: Sun 07 Dec 2025 16:01:19 +0000 Files and hashes: 1: 0x8juoo7AM8ugf31uQycejLtims.roa (hash: sJQg/bbbZFsef+zbbHa9OzqRT4fumHdl0Xl81Is/6E0=) 2: Nzh8YLpNUF4cU0rzBjfGCERDcYE.roa (hash: i2B2OXXjCTbw2kGS650IvMFo0E46R+ycXmvCyPDbizQ=) 3: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (hash: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=) 4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: hzHxaW5HWEYXc4+r1wa3XPJ2yDfCCljrxEriNATeATo=) 5: i4pBlijYu7sjz616Su8j6sEp0KM.roa (hash: uHKnyOrHeN8Niu67x/4Qi3vMRGo0ABBXAuttwGbGRuk=) 6: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (hash: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=) 7: sizZNRJeMyfvZoIYAB6UC-zVc7U.roa (hash: Hn9xitBE6shoqbTIVL8aOgZmfrDePFpERxPmyPyqVEs=) 8: vywQrYyohPA7HiVpUnZvxi_OkIw.roa (hash: 9ddLtzX64XyzhFvBqGsy3QFMWw7/oarf8SrkFQVzpQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:6e:3c:d8:75:79:5c:8a:d3:87:ee:e9:70:92:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302 Validity Not Before: Dec 6 16:01:19 2025 GMT Not After : Dec 7 16:01:19 2025 GMT Subject: CN=831eae060d0f240d470e04a7cc0ef466e70adacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a6:e3:75:10:30:e9:5b:ea:e3:a8:36:a5:f9: 09:18:15:38:9c:87:cd:04:37:65:17:ce:f2:48:35: 3e:a9:77:7d:a7:b2:e2:2a:34:cb:13:3e:6b:2f:76: ea:69:ab:9c:73:51:78:70:b7:24:8d:b2:55:5f:16: f5:ce:88:7c:3b:1e:56:0a:5c:88:39:12:0f:3f:79: d2:36:27:50:85:72:ea:c2:cf:55:8e:24:d1:c2:cb: dd:2b:b4:40:50:9e:a4:c2:6b:00:39:0f:af:19:9a: 6b:26:dd:f8:2c:12:a4:f2:b7:4c:92:e4:1c:b7:de: 8f:39:3f:6d:7f:1d:d7:ed:20:11:6d:6d:04:56:20: a6:5e:ce:f8:3f:2d:dc:fb:8b:df:5b:d7:84:bd:94: 4c:32:7e:5b:3f:39:14:d5:4e:0e:06:cd:d2:44:33: ec:4c:9d:96:b9:19:29:44:d9:43:58:28:b3:c0:01: 23:36:70:cd:cd:fc:f6:39:78:90:60:b4:38:7f:44: 19:74:40:8f:0e:6d:55:63:af:38:8a:88:eb:6e:82: 6f:96:4c:be:16:27:16:bf:01:2f:f3:70:f7:82:c6: a2:ed:bc:8b:e7:64:77:36:de:33:e1:aa:7f:b9:e6: 7c:51:18:08:d3:76:22:6e:fb:ff:b3:21:01:5e:81: ba:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1E:AE:06:0D:0F:24:0D:47:0E:04:A7:CC:0E:F4:66:E7:0A:DA:CD X509v3 Authority Key Identifier: keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:4d:bd:71:82:4c:58:37:0e:51:ad:9e:8b:be:af:60:ce:81: 9d:48:f2:48:4c:cd:96:d0:03:a0:d0:d8:c9:46:af:ef:4d:ac: 06:71:3e:7f:e9:a0:04:dd:3c:cc:c7:fc:9b:e9:d1:f0:85:96: a8:a8:c9:d4:b3:20:3b:15:77:1b:fd:6f:37:4a:87:56:e9:b5: 87:4b:f2:22:ba:fb:21:d3:82:df:57:cc:76:99:04:45:81:18: 16:ce:87:2c:20:87:55:a8:9d:20:e3:ad:bb:1c:5f:be:c0:e0: 6f:f4:bb:f8:c0:b6:27:73:72:48:43:59:06:da:1f:6b:3d:b8: db:48:10:07:ef:c0:d1:e9:ae:61:16:c8:59:57:b5:4f:ee:bc: 24:b0:a3:29:c1:35:d9:4a:68:7a:95:ef:9a:f6:a9:a6:6c:28: 9c:48:26:ae:54:4c:46:dd:46:4a:13:31:ef:4c:e1:3b:72:78: 60:0b:70:62:42:8b:c5:14:71:2f:62:75:8e:f5:3a:81:4f:99: 78:ed:1a:ef:d2:71:04:0b:34:65:60:c7:31:68:c5:55:6a:64: 8c:0c:25:1e:b5:5c:50:7c:21:7c:75:b3:d8:d2:b6:19:0f:d4: 62:6c:ff:ab:17:51:0e:04:dc:25:34:27:f6:2d:f7:8e:3e:7f: 68:af:f9:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZW482HV5XIrTh+7pcJJuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYTdjZThiYWNiZWNlZWIxNmY2MDBiNjA3ZDFiZmQwODAz M2IzMDIwHhcNMjUxMjA2MTYwMTE5WhcNMjUxMjA3MTYwMTE5WjAzMTEwLwYDVQQD Eyg4MzFlYWUwNjBkMGYyNDBkNDcwZTA0YTdjYzBlZjQ2NmU3MGFkYWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4abjdRAw6Vvq46g2pfkJGBU4nIfN BDdlF87ySDU+qXd9p7LiKjTLEz5rL3bqaaucc1F4cLckjbJVXxb1zoh8Ox5WClyI ORIPP3nSNidQhXLqws9VjiTRwsvdK7RAUJ6kwmsAOQ+vGZprJt34LBKk8rdMkuQc t96POT9tfx3X7SARbW0EViCmXs74Py3c+4vfW9eEvZRMMn5bPzkU1U4OBs3SRDPs TJ2WuRkpRNlDWCizwAEjNnDNzfz2OXiQYLQ4f0QZdECPDm1VY684iojrboJvlky+ FicWvwEv83D3gsai7byL52R3Nt4z4ap/ueZ8URgI03Yibvv/syEBXoG60wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMergYNDyQNRw4Ep8wO9GbnCtrNMB8GA1UdIwQY MBaAFIGnzousvs7rFvYAtgfRv9CAM7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzct YjI3ZDg3MzBhMjcwLzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzctYjI3ZDg3MzBhMjcw LzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvU29cYJM WDcOUa2ei76vYM6BnUjySEzNltADoNDYyUav702sBnE+f+mgBN08zMf8m+nR8IWW qKjJ1LMgOxV3G/1vN0qHVum1h0vyIrr7IdOC31fMdpkERYEYFs6HLCCHVaidIOOt uxxfvsDgb/S7+MC2J3NySENZBtofaz2420gQB+/A0emuYRbIWVe1T+68JLCjKcE1 2UpoepXvmvappmwonEgmrlRMRt1GShMx70zhO3J4YAtwYkKLxRRxL2J1jvU6gU+Z eO0a79JxBAs0ZWDHMWjFVWpkjAwlHrVcUHwhfHWz2NK2GQ/UYmz/qxdRDgTcJTQn 9i33jj5/aK/5oQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:02 2025 by rpki-client