This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft File: gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft (raw, json) Hash identifier: lN2I+9IOX1AyOrI4VB9xJow0jlE8zxiqhvUwHMAxHdE= Subject key identifier: D4:B1:00:79:C3:55:85:5C:FF:F3:31:7C:4C:96:BB:E6:64:D8:CF:CA Authority key identifier: 80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15 Certificate issuer: /CN=80c028ad0e60d7ea8914b13c3a53d8f089160315 Certificate serial: 019AF12DD16518708482170404E7195E988B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft Manifest number: 0E72 Signing time: Sat 06 Dec 2025 01:01:42 +0000 Manifest this update: Sat 06 Dec 2025 01:01:42 +0000 Manifest next update: Sun 07 Dec 2025 01:01:42 +0000 Files and hashes: 1: gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl (hash: 4+gKRuZEG2FIULX3qyUqxIqj3c3AhBeApXKb+/+4p1U=) 2: kT72_rs6FeeCr3dDSGrEzG7Qc-Y.roa (hash: aU4YilQ/j5WNVY1Q5u9ZzL1FCZbvOH4ANv0D/Jw9+To=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d1:65:18:70:84:82:17:04:04:e7:19:5e:98:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80c028ad0e60d7ea8914b13c3a53d8f089160315 Validity Not Before: Dec 6 01:01:42 2025 GMT Not After : Dec 7 01:01:42 2025 GMT Subject: CN=d4b10079c355855cfff3317c4c96bbe664d8cfca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8d:77:4f:96:af:b7:fa:6d:38:5a:12:f3:91: a3:6d:04:ac:03:f9:8d:6b:60:64:8b:9a:a7:88:d7: 4a:47:a2:98:80:25:a1:ff:2c:ed:5a:8b:b9:8c:e3: 2c:ed:2d:ac:70:da:2f:dc:80:d6:b9:bf:a5:2c:c1: 6d:54:b8:a0:e0:aa:f4:2e:54:ce:08:04:fe:29:d2: c8:fa:7a:c8:fd:56:6f:3b:7f:cc:76:85:77:00:a9: 98:10:f7:0e:bf:bb:79:15:6e:b5:74:f0:61:a3:63: e7:4c:11:56:62:ea:f3:b0:2d:70:54:40:bc:0d:5e: 34:aa:03:fd:5b:ad:88:63:70:bd:f0:6a:fd:7f:9c: 86:7c:b0:a4:e4:c5:06:b6:5c:38:2f:84:6a:c9:cb: 21:8f:0c:50:d0:c2:fb:bf:ae:36:a8:70:22:15:45: 5a:04:fd:89:ee:55:28:79:6a:68:26:07:1c:23:e8: 46:4d:00:36:1b:68:08:ef:ec:6c:7a:ba:72:2f:42: 81:20:52:89:9f:fd:4a:01:72:e0:ee:e1:7d:ee:c7: 10:11:16:d2:ca:4b:27:0c:93:73:24:28:f9:1f:7d: 7a:e1:47:21:f2:63:a2:0d:62:d2:1a:63:52:06:5a: e1:36:ed:96:ba:83:b9:6d:b5:c0:f5:53:b8:b6:92: 99:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B1:00:79:C3:55:85:5C:FF:F3:31:7C:4C:96:BB:E6:64:D8:CF:CA X509v3 Authority Key Identifier: keyid:80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e8:77:e8:3e:e1:2c:ab:5e:72:8c:3d:ba:53:5c:6e:5d:66: a9:bd:86:8c:22:ba:eb:f9:2c:67:00:ff:23:c8:3b:db:a0:d6: d7:3d:9a:8c:c1:c9:66:63:f7:4a:88:e8:7e:2b:77:bd:31:92: ae:0c:9a:38:56:b0:d2:ad:9e:13:22:41:cb:70:35:de:da:59: c0:55:f6:9a:c7:a3:a0:f0:9c:d0:42:94:e7:08:ae:18:27:63: bb:c5:bb:63:b2:02:1c:b9:2f:66:45:33:4f:4a:23:f7:c7:a5: 52:20:9b:34:25:1b:0a:d2:d0:e5:ce:12:52:1e:8b:a0:cd:6e: ac:13:7a:da:97:91:38:51:5f:49:ff:b7:44:96:b8:c9:f9:55: 55:7b:57:a6:82:67:ec:21:ed:89:d6:45:e2:f3:b7:47:21:63: 86:cd:e2:f3:00:de:d9:75:2b:9a:9a:eb:46:12:bf:49:7f:83: 4e:e7:e9:70:83:0d:e7:52:c1:42:ce:83:6b:e9:62:53:5b:f9: 3a:68:c8:2a:9c:7f:2e:f2:00:d0:59:ba:05:2e:8d:54:59:5f: b6:fb:0e:98:b7:3f:6d:26:fb:be:8c:4a:e4:6e:7a:53:b4:70: 5b:ec:ab:4c:1b:aa:48:62:65:c8:ea:a4:f9:12:41:fc:d3:37: 3c:54:8e:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdFlGHCEghcEBOcZXpiLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYzAyOGFkMGU2MGQ3ZWE4OTE0YjEzYzNhNTNkOGYwODkx NjAzMTUwHhcNMjUxMjA2MDEwMTQyWhcNMjUxMjA3MDEwMTQyWjAzMTEwLwYDVQQD EyhkNGIxMDA3OWMzNTU4NTVjZmZmMzMxN2M0Yzk2YmJlNjY0ZDhjZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5413T5avt/ptOFoS85GjbQSsA/mN a2Bki5qniNdKR6KYgCWh/yztWou5jOMs7S2scNov3IDWub+lLMFtVLig4Kr0LlTO CAT+KdLI+nrI/VZvO3/MdoV3AKmYEPcOv7t5FW61dPBho2PnTBFWYurzsC1wVEC8 DV40qgP9W62IY3C98Gr9f5yGfLCk5MUGtlw4L4RqycshjwxQ0ML7v642qHAiFUVa BP2J7lUoeWpoJgccI+hGTQA2G2gI7+xserpyL0KBIFKJn/1KAXLg7uF97scQERbS yksnDJNzJCj5H3164Uch8mOiDWLSGmNSBlrhNu2WuoO5bbXA9VO4tpKZDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSxAHnDVYVc//MxfEyWu+Zk2M/KMB8GA1UdIwQY MBaAFIDAKK0OYNfqiRSxPDpT2PCJFgMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ01Bb3JRNWcxLXFKRkxFOE9sUFk4SWtXQXhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iNWZmNjYtODA3ZC00YmYxLWFiZTkt YTNiNGM5MDAyNDFmLzEvZ01Bb3JRNWcxLXFKRkxFOE9sUFk4SWtXQXhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iNWZmNjYtODA3ZC00YmYxLWFiZTktYTNiNGM5MDAyNDFm LzEvZ01Bb3JRNWcxLXFKRkxFOE9sUFk4SWtXQXhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALeh36D7h LKtecow9ulNcbl1mqb2GjCK66/ksZwD/I8g726DW1z2ajMHJZmP3Sojofit3vTGS rgyaOFaw0q2eEyJBy3A13tpZwFX2msejoPCc0EKU5wiuGCdju8W7Y7ICHLkvZkUz T0oj98elUiCbNCUbCtLQ5c4SUh6LoM1urBN62peROFFfSf+3RJa4yflVVXtXpoJn 7CHtidZF4vO3RyFjhs3i8wDe2XUrmprrRhK/SX+DTufpcIMN51LBQs6Da+liU1v5 OmjIKpx/LvIA0Fm6BS6NVFlftvsOmLc/bSb7voxK5G56U7RwW+yrTBuqSGJlyOqk +RJB/NM3PFSOTg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:02 2025 by rpki-client