This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json) Hash identifier: I/EbSMOOk/hNRZYdln2hQg+EJ+vzXUJgVsWJ56fxq+k= Subject key identifier: 08:A5:F6:C9:EC:02:2C:E1:65:22:A4:3E:60:9E:51:05:CB:B5:2C:2E Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf Certificate serial: 019AF16422B138132C223687BDF768607C45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:02 +0000 Manifest this update: Sat 06 Dec 2025 02:01:02 +0000 Manifest next update: Sun 07 Dec 2025 02:01:02 +0000 Files and hashes: 1: DTYyZuafFj4qXWfudssAoo7YyUc.roa (hash: XFaAmLI0e2ldAKL+t4MvCZW7ieWrsLzA21ljUa5d0Uc=) 2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: +yh6JBhDLErgcbzDFz0tSg0jOp0fvytjtibdGB1wPSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:22:b1:38:13:2c:22:36:87:bd:f7:68:60:7c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf Validity Not Before: Dec 6 02:01:02 2025 GMT Not After : Dec 7 02:01:02 2025 GMT Subject: CN=08a5f6c9ec022ce16522a43e609e5105cbb52c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:25:48:79:62:d9:d2:16:07:46:04:22:8d:40: 92:f9:f6:49:41:f2:12:3a:79:46:90:b2:9b:74:99: da:b0:51:5c:fe:c7:28:bc:78:f0:f7:97:3b:a4:0b: 2d:e8:8c:ed:d3:15:56:06:55:47:59:d6:1c:6b:71: 4f:5e:af:af:0b:c3:43:5f:95:1b:fe:3e:4e:d0:38: 30:43:f5:d7:91:75:d8:09:1d:7d:88:2d:ef:ae:c8: f1:3c:5a:2e:e1:84:76:a1:74:56:ef:ce:fd:c4:ec: 64:06:44:ce:fd:3b:b1:9a:cc:5e:56:1c:05:ef:5b: 05:a0:57:f2:5d:70:b6:24:8c:e3:4e:ab:1a:f7:da: 8d:12:93:44:6d:28:0e:8a:06:03:de:24:fe:c7:09: 6c:61:72:5e:0a:74:d8:83:12:0f:bd:cb:97:d6:f6: 38:08:64:2a:66:cc:52:c5:67:51:f7:57:29:14:cf: d8:fb:6e:76:bc:b4:92:08:88:f3:80:56:88:50:53: 46:1e:ba:12:d1:91:48:06:c7:f5:53:72:22:76:b2: bb:e8:69:1d:bb:66:7b:4f:e7:c5:ee:b9:ed:e8:35: 48:96:fb:56:fc:d4:5a:a8:cc:fc:a2:74:4e:e4:cb: 46:77:3e:80:71:b6:fa:b0:22:c2:22:cb:30:b5:12: 41:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A5:F6:C9:EC:02:2C:E1:65:22:A4:3E:60:9E:51:05:CB:B5:2C:2E X509v3 Authority Key Identifier: keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:7d:61:37:d4:57:1e:ee:59:3e:d9:f0:4a:b9:68:ce:36:02: 6f:65:33:be:e9:04:27:a9:d4:ec:cc:68:1a:ae:ad:82:f2:60: 91:6a:99:9d:54:f7:af:56:39:d8:2e:9e:d2:96:ac:8a:9a:a7: ef:5b:67:00:fb:37:9e:cc:ba:d9:af:88:a8:4f:c1:14:33:43: f5:00:f6:62:3e:05:da:51:d0:fd:9a:3e:ed:dc:c3:cc:e4:03: f1:c7:61:d1:ba:4d:65:0c:a7:d7:89:12:af:5c:cf:0a:06:b9: 1a:de:7b:47:28:df:32:06:5e:13:82:06:ac:5a:22:c5:34:eb: b9:5f:e1:15:17:c7:3c:80:52:a2:a3:0d:10:8e:8b:21:fa:bf: 94:8a:67:da:35:46:dd:59:f4:fe:0d:d1:ac:ab:33:6a:07:d2: 79:82:9a:16:71:21:10:2a:29:d8:0a:97:f9:47:04:32:2b:ac: 5e:97:8b:1b:43:9f:3c:6d:38:4a:54:54:13:bd:42:0f:fd:c6: a5:74:c0:f8:fd:24:ab:3a:6e:4b:c5:0d:22:ac:73:58:b6:57: 84:b8:fd:2a:46:e6:48:ee:ff:67:9b:af:54:47:0c:6f:2a:9c: 2f:d6:c2:53:43:12:09:27:80:bb:1f:d9:7a:11:e1:fb:46:c0: 2e:4a:4b:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCKxOBMsIjaHvfdoYHxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNmNjODYwMzM1M2Q3MzJlNGIxY2NiYTdlYWNhMGI2Y2Vl NGM0Y2YwHhcNMjUxMjA2MDIwMTAyWhcNMjUxMjA3MDIwMTAyWjAzMTEwLwYDVQQD EygwOGE1ZjZjOWVjMDIyY2UxNjUyMmE0M2U2MDllNTEwNWNiYjUyYzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCVIeWLZ0hYHRgQijUCS+fZJQfIS OnlGkLKbdJnasFFc/scovHjw95c7pAst6Izt0xVWBlVHWdYca3FPXq+vC8NDX5Ub /j5O0DgwQ/XXkXXYCR19iC3vrsjxPFou4YR2oXRW7879xOxkBkTO/TuxmsxeVhwF 71sFoFfyXXC2JIzjTqsa99qNEpNEbSgOigYD3iT+xwlsYXJeCnTYgxIPvcuX1vY4 CGQqZsxSxWdR91cpFM/Y+252vLSSCIjzgFaIUFNGHroS0ZFIBsf1U3IidrK76Gkd u2Z7T+fF7rnt6DVIlvtW/NRaqMz8onRO5MtGdz6Acbb6sCLCIsswtRJBmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAil9snsAizhZSKkPmCeUQXLtSwuMB8GA1UdIwQY MBaAFKxsyGAzU9cy5LHMun6soLbO5MTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iMzQ2NDItYzdlYy00ZDQ3LTlkNmYt MjcxYTE1NWVlYjkyLzEvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iMzQ2NDItYzdlYy00ZDQ3LTlkNmYtMjcxYTE1NWVlYjky LzEvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJH1hN9RX Hu5ZPtnwSrlozjYCb2UzvukEJ6nU7MxoGq6tgvJgkWqZnVT3r1Y52C6e0pasipqn 71tnAPs3nsy62a+IqE/BFDND9QD2Yj4F2lHQ/Zo+7dzDzOQD8cdh0bpNZQyn14kS r1zPCga5Gt57RyjfMgZeE4IGrFoixTTruV/hFRfHPIBSoqMNEI6LIfq/lIpn2jVG 3Vn0/g3RrKszagfSeYKaFnEhECop2AqX+UcEMiusXpeLG0OfPG04SlRUE71CD/3G pXTA+P0kqzpuS8UNIqxzWLZXhLj9KkbmSO7/Z5uvVEcMbyqcL9bCU0MSCSeAux/Z ehHh+0bALkpLJA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:18:51 2025 by rpki-client