This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft File: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json) Hash identifier: 6fw9NK14pAVkf9xvjOGInzTNzJaobXAWbAVboTQhINM= Subject key identifier: 71:13:EE:47:98:E1:69:A7:53:AD:1B:DE:6E:B9:04:20:A9:26:04:DD Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8 Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8 Certificate serial: 019AF3523C1AAF123CF6D6D73E231E28C95F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft Manifest number: 08BD Signing time: Sat 06 Dec 2025 11:00:44 +0000 Manifest this update: Sat 06 Dec 2025 11:00:44 +0000 Manifest next update: Sun 07 Dec 2025 11:00:44 +0000 Files and hashes: 1: U15Qt1jB_OrSJnk2-GsuZxl_HGg.roa (hash: ViBEGhLSRDySzjvRDBVQx2K1SB4Zl4Aix1chhJ6C9AM=) 2: gHPWHyifWHwygl6RXc-S_BViAv0.roa (hash: z+ENnJP8gUh9QOydmc0fMConfO5crb4XF9elye+KrnQ=) 3: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: 0WHQ1LVjkByyznR+KgxRvePk7D3ywBziY1GoXmzzUpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:3c:1a:af:12:3c:f6:d6:d7:3e:23:1e:28:c9:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8 Validity Not Before: Dec 6 11:00:44 2025 GMT Not After : Dec 7 11:00:44 2025 GMT Subject: CN=7113ee4798e169a753ad1bde6eb90420a92604dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:a7:07:96:b7:7c:b2:89:0b:46:4d:fa:4b: 71:3d:c2:e0:12:72:fd:1d:ca:e7:16:89:41:5f:ee: 9b:6f:b2:33:0e:54:b3:4e:7d:02:28:c3:2d:c1:f0: df:8e:71:d8:26:ff:c3:4f:6f:40:71:c0:f0:76:84: e0:e1:e3:b9:03:19:33:07:84:43:71:b8:e0:46:32: d8:8d:02:28:da:66:0c:28:2c:d1:70:7f:ed:06:e9: 78:fd:ef:9c:84:89:ad:e5:cd:8a:8c:8b:8c:d9:60: 2b:8f:26:fe:c9:05:89:da:34:1e:6e:f1:bf:71:3e: 82:07:45:04:28:ff:89:e4:4c:37:5d:64:50:d5:1b: 0e:71:eb:69:80:d6:89:c8:ab:94:17:4e:4e:ca:a1: 30:2a:ce:9b:a1:94:a6:8d:f1:c5:42:d6:03:81:3d: 66:c6:26:8e:38:54:a5:24:7d:98:b8:a1:77:5e:1d: 75:f5:00:aa:9b:87:04:3c:d0:41:af:96:13:49:0c: 41:9a:42:c2:5e:c9:3c:2c:e3:23:77:ae:7a:28:a6: 7c:de:44:c2:d1:cf:a5:12:43:26:24:32:a5:25:c0: 7b:cd:03:c0:a8:34:88:20:47:5b:73:51:47:a1:2a: 02:ef:0a:f7:e2:b8:e9:5c:75:0e:d2:f2:aa:75:1a: ea:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:13:EE:47:98:E1:69:A7:53:AD:1B:DE:6E:B9:04:20:A9:26:04:DD X509v3 Authority Key Identifier: keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:cf:2b:8d:b7:19:3b:ae:70:16:49:3d:5c:9c:4f:ae:86:f4: 39:9c:e3:30:93:af:52:6d:01:25:ce:30:e7:24:de:29:a7:d9: 19:74:58:d3:cc:62:ba:7b:2d:98:15:38:62:94:7a:00:15:e4: d2:7e:ff:ce:76:18:7d:c1:62:91:2c:a7:bb:12:41:87:58:69: dc:02:04:48:e8:71:8b:4b:f3:dc:81:c5:94:05:39:ec:c5:95: 02:6a:b5:0b:17:3e:d4:64:56:9f:b8:33:40:d3:fe:e8:fe:2a: 79:92:1d:7a:26:7b:a0:37:a1:fe:24:cb:12:01:f5:61:01:5c: 0e:53:ad:f8:0b:86:d8:89:cf:be:57:92:40:b7:5b:21:06:0e: 20:1c:8c:73:a0:01:1f:f6:07:42:a6:6f:e3:6d:f1:d9:55:1d: 34:e3:c6:40:07:43:03:36:62:3a:fa:7e:80:c1:15:13:60:46: d9:5b:db:be:71:f3:2d:1f:c0:18:81:e0:bb:c1:0d:9a:2c:a7: d8:ff:a8:b8:2b:c7:27:52:aa:75:89:db:db:aa:dd:20:ed:85: 92:62:10:35:b7:5d:f2:be:0b:6c:2c:f7:cf:ae:85:83:b1:0b: ca:ff:ef:56:23:ee:33:b4:56:1e:f5:20:3d:02:66:db:d2:03: 54:d3:54:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjwarxI89tbXPiMeKMlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZmZkOWRmNDU2YWRiZTNiMWU2NjFlZTE1NjI2ODY1ZmUx Njg4YzgwHhcNMjUxMjA2MTEwMDQ0WhcNMjUxMjA3MTEwMDQ0WjAzMTEwLwYDVQQD Eyg3MTEzZWU0Nzk4ZTE2OWE3NTNhZDFiZGU2ZWI5MDQyMGE5MjYwNGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuenB5a3fLKJC0ZN+ktxPcLgEnL9 HcrnFolBX+6bb7IzDlSzTn0CKMMtwfDfjnHYJv/DT29AccDwdoTg4eO5AxkzB4RD cbjgRjLYjQIo2mYMKCzRcH/tBul4/e+chImt5c2KjIuM2WArjyb+yQWJ2jQebvG/ cT6CB0UEKP+J5Ew3XWRQ1RsOcetpgNaJyKuUF05OyqEwKs6boZSmjfHFQtYDgT1m xiaOOFSlJH2YuKF3Xh119QCqm4cEPNBBr5YTSQxBmkLCXsk8LOMjd656KKZ83kTC 0c+lEkMmJDKlJcB7zQPAqDSIIEdbc1FHoSoC7wr34rjpXHUO0vKqdRrqPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHET7keY4WmnU60b3m65BCCpJgTdMB8GA1UdIwQY MBaAFID/2d9FatvjseZh7hViaGX+FojIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQt M2NiOGQ4MTdlMDI3LzEvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQtM2NiOGQ4MTdlMDI3 LzEvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADs8rjbcZ O65wFkk9XJxProb0OZzjMJOvUm0BJc4w5yTeKafZGXRY08xiunstmBU4YpR6ABXk 0n7/znYYfcFikSynuxJBh1hp3AIESOhxi0vz3IHFlAU57MWVAmq1Cxc+1GRWn7gz QNP+6P4qeZIdeiZ7oDeh/iTLEgH1YQFcDlOt+AuG2InPvleSQLdbIQYOIByMc6AB H/YHQqZv423x2VUdNOPGQAdDAzZiOvp+gMEVE2BG2VvbvnHzLR/AGIHgu8ENmiyn 2P+ouCvHJ1KqdYnb26rdIO2FkmIQNbdd8r4LbCz3z66Fg7ELyv/vViPuM7RWHvUg PQJm29IDVNNUsg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:03:57 2025 by rpki-client