This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft File: gMez3pa5HtxunIXZ1aZoQZIDtfU.mft (raw, json) Hash identifier: S9e1R9z8KZRrXj8jlQIG+0T0aU2d8cwLSLiWimHM8ak= Subject key identifier: 03:5F:33:45:48:B6:7C:19:58:CE:01:93:85:D0:9C:D6:CB:DB:2E:7B Authority key identifier: 80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5 Certificate issuer: /CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5 Certificate serial: 019AF31CB19180E24B3395A574694194B2E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft Manifest number: 053D Signing time: Sat 06 Dec 2025 10:02:15 +0000 Manifest this update: Sat 06 Dec 2025 10:02:15 +0000 Manifest next update: Sun 07 Dec 2025 10:02:15 +0000 Files and hashes: 1: gMez3pa5HtxunIXZ1aZoQZIDtfU.crl (hash: DA5EFYr5TcXHsFlLlwnKde0CglL+IQl+Xtjh5CeteHY=) 2: xVzCoBRTedY1vT9C7xN3NLO-WeY.roa (hash: ystLlP8JPbF13VOw8QCBVAQ5cldgA4v4fXVvBu8BWIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:b1:91:80:e2:4b:33:95:a5:74:69:41:94:b2:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5 Validity Not Before: Dec 6 10:02:15 2025 GMT Not After : Dec 7 10:02:15 2025 GMT Subject: CN=035f334548b67c1958ce019385d09cd6cbdb2e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f1:33:f0:55:b3:9c:8a:ab:5f:c6:1d:3e:fc: a6:4f:25:f1:13:3f:4f:ab:da:05:34:f7:6c:4b:d0: 43:9a:52:2c:05:75:34:af:39:f3:60:55:e0:cf:ac: f9:0b:c2:86:2f:3c:c7:2d:f0:6c:27:8f:c6:23:c3: 47:74:de:b2:04:aa:fd:2d:60:25:80:ae:9e:80:4b: 4d:ba:85:4b:a6:3c:d5:46:86:85:18:c4:96:ea:b2: 9a:48:4e:c3:b3:93:c7:5f:6f:eb:31:76:29:eb:41: 75:3a:6e:17:af:b2:c2:93:b1:d5:dc:a3:69:16:5c: 34:29:53:ed:07:2c:c3:69:82:29:ca:63:84:73:3d: b1:1a:56:c8:9d:df:58:c4:4b:9b:27:d0:b0:b2:ed: 7a:6f:7c:33:16:67:54:0b:c2:6d:1f:d2:df:8f:ba: 65:f8:1d:2a:a0:1b:5f:83:92:94:50:1e:9c:a6:af: 67:f1:90:8c:47:3f:64:40:cb:2d:e3:6b:1e:bb:a9: 78:e7:6a:b4:70:1b:57:18:ba:a3:34:d2:26:0e:82: c9:bd:83:a6:c0:f3:d6:3f:ed:c6:8f:73:0b:3f:7f: 4b:b1:65:dc:0e:9d:cb:32:4b:4d:4a:8d:b7:d3:2c: f5:b9:31:54:d8:63:dc:de:80:a2:a3:12:b4:16:e8: cd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5F:33:45:48:B6:7C:19:58:CE:01:93:85:D0:9C:D6:CB:DB:2E:7B X509v3 Authority Key Identifier: keyid:80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:82:5c:f4:2f:4f:99:a5:81:f2:91:d8:80:f9:13:5c:d9:30: e8:14:b1:84:b1:62:16:95:39:46:7e:58:35:f6:2e:ff:a2:7e: 39:e3:fe:da:b0:26:37:95:27:95:b4:84:ed:cf:de:fa:bf:e2: 1c:15:a2:7a:44:e8:8d:6c:b8:86:b5:5f:5b:6a:fe:63:13:b4: 30:78:2a:53:82:ac:a4:f5:36:3e:20:4e:21:47:a3:11:35:61: 1f:e6:18:e7:75:2c:c5:b9:97:3e:63:ec:40:30:81:0a:d0:a4: f3:66:97:db:71:ed:3a:ce:e2:3c:61:64:da:3b:14:30:d3:5c: 8c:67:f1:31:b5:bf:8f:a1:c7:1f:7d:16:36:f0:0c:47:df:92: f8:fb:69:a0:63:96:ae:84:65:f2:ee:61:6c:10:7b:26:ac:f5: 43:12:8c:b5:09:b9:f8:23:4d:3e:9a:d2:16:aa:e9:f8:e7:5b: 7c:c9:ec:5f:5b:89:46:f0:6e:c6:b3:33:01:ae:e9:04:26:74: 1b:b2:f7:79:fd:98:0e:55:fa:41:09:a6:10:d3:89:1d:9e:76: 18:b5:92:ae:ac:dd:ca:08:c8:d4:7c:9f:ea:39:2c:6e:a9:9f: a4:f7:9b:1e:5d:f4:c3:06:da:ba:38:02:9d:5a:9f:1c:63:b3: d0:cc:a0:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLGRgOJLM5WldGlBlLLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYzdiM2RlOTZiOTFlZGM2ZTljODVkOWQ1YTY2ODQxOTIw M2I1ZjUwHhcNMjUxMjA2MTAwMjE1WhcNMjUxMjA3MTAwMjE1WjAzMTEwLwYDVQQD EygwMzVmMzM0NTQ4YjY3YzE5NThjZTAxOTM4NWQwOWNkNmNiZGIyZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPEz8FWznIqrX8YdPvymTyXxEz9P q9oFNPdsS9BDmlIsBXU0rznzYFXgz6z5C8KGLzzHLfBsJ4/GI8NHdN6yBKr9LWAl gK6egEtNuoVLpjzVRoaFGMSW6rKaSE7Ds5PHX2/rMXYp60F1Om4Xr7LCk7HV3KNp Flw0KVPtByzDaYIpymOEcz2xGlbInd9YxEubJ9Cwsu16b3wzFmdUC8JtH9Lfj7pl +B0qoBtfg5KUUB6cpq9n8ZCMRz9kQMst42seu6l452q0cBtXGLqjNNImDoLJvYOm wPPWP+3Gj3MLP39LsWXcDp3LMktNSo230yz1uTFU2GPc3oCioxK0FujNRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANfM0VItnwZWM4Bk4XQnNbL2y57MB8GA1UdIwQY MBaAFIDHs96WuR7cbpyF2dWmaEGSA7X1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jMzAxZmItMzE3NC00NWMzLWE0NDct YTdmY2ZiNTI5ZGM3LzEvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9jMzAxZmItMzE3NC00NWMzLWE0NDctYTdmY2ZiNTI5ZGM3 LzEvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYJc9C9P maWB8pHYgPkTXNkw6BSxhLFiFpU5Rn5YNfYu/6J+OeP+2rAmN5UnlbSE7c/e+r/i HBWiekTojWy4hrVfW2r+YxO0MHgqU4KspPU2PiBOIUejETVhH+YY53UsxbmXPmPs QDCBCtCk82aX23HtOs7iPGFk2jsUMNNcjGfxMbW/j6HHH30WNvAMR9+S+PtpoGOW roRl8u5hbBB7Jqz1QxKMtQm5+CNNPprSFqrp+OdbfMnsX1uJRvBuxrMzAa7pBCZ0 G7L3ef2YDlX6QQmmENOJHZ52GLWSrqzdygjI1Hyf6jksbqmfpPebHl30wwbaujgC nVqfHGOz0Myg/g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:43:52 2025 by rpki-client