This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json) Hash identifier: S2GIHp7xEU6redCCUmLP0y8FMTUDFAd8AuuGTCPdXMk= Subject key identifier: 9E:12:04:81:F7:63:77:09:E3:4E:FE:CD:56:6C:58:20:FF:85:35:53 Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63 Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663 Certificate serial: 019AF163D1E03B94A09F046F8E18CEC51C82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft Manifest number: 0629 Signing time: Sat 06 Dec 2025 02:00:42 +0000 Manifest this update: Sat 06 Dec 2025 02:00:42 +0000 Manifest next update: Sun 07 Dec 2025 02:00:42 +0000 Files and hashes: 1: MWh5oxD0mlPfv3wl5DDlIllo7IY.roa (hash: hCUe3UqGLfLJn0/ykpo1moRqC/s0I/1a6u8vKsOmeBg=) 2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: QaMrnQEO+clVi75urbP0HRfZFoV6alq+i3BYePIX0Go=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d1:e0:3b:94:a0:9f:04:6f:8e:18:ce:c5:1c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663 Validity Not Before: Dec 6 02:00:42 2025 GMT Not After : Dec 7 02:00:42 2025 GMT Subject: CN=9e120481f7637709e34efecd566c5820ff853553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f4:ad:01:c9:c0:85:28:a2:10:d9:e7:35:eb: 23:4e:03:28:5d:af:5c:e5:4a:2b:3c:c0:a5:9d:4c: 58:76:eb:8c:66:4c:41:45:c3:da:b9:bb:47:4c:4d: 5c:76:2d:3b:e2:dd:fd:27:e9:ef:ad:94:5c:0e:9d: 25:7b:a2:a1:51:65:da:3f:52:35:14:d3:bb:51:6d: e2:ad:9c:f1:b4:f9:a5:aa:0d:58:70:88:5b:b6:e9: 9d:5c:4f:af:8a:33:d1:32:cd:8e:8d:2e:05:d8:37: 99:ad:68:2f:d3:fb:93:31:fb:04:a3:00:6f:f8:92: 21:97:0b:4a:e6:60:83:c6:7f:dc:48:06:d5:c3:46: 18:88:62:6d:3a:dc:60:37:8b:de:eb:4f:34:5f:a3: d4:23:e4:57:77:ad:ed:14:4d:8e:bd:1b:fc:5b:dc: f2:75:0c:bb:68:22:9f:a1:43:3c:5a:c0:74:f3:e0: 28:2f:1d:64:75:37:7e:f4:c0:ab:e0:fe:a3:93:91: de:a6:58:3d:f0:1e:b6:38:3c:41:f3:93:c7:00:ad: 43:37:2d:ab:17:ec:99:66:63:0e:f2:0e:9a:d2:85: 0b:48:d0:be:51:61:7a:b4:a8:f3:a5:8b:49:d3:8e: ff:ff:81:56:0a:a5:da:b5:1f:87:77:cb:41:8b:40: 7f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:12:04:81:F7:63:77:09:E3:4E:FE:CD:56:6C:58:20:FF:85:35:53 X509v3 Authority Key Identifier: keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c9:53:b3:68:e5:39:36:f2:16:a8:5f:ba:79:4c:46:be:c7: 71:b1:01:e0:c6:fc:fd:e8:fe:22:49:8b:93:f7:46:02:24:b7: 35:32:32:08:18:77:2e:c6:97:3b:ad:bf:c4:e3:29:fd:97:41: b3:cb:c4:2e:53:60:52:16:ad:9e:1b:5b:ec:41:cd:5e:ea:d4: d9:a6:1a:56:37:5f:ff:b1:51:92:4d:7a:78:cc:7a:b7:28:99: ba:bb:93:1f:a6:06:27:61:b3:fe:26:4e:e2:75:7a:a7:08:d1: 9c:eb:13:f4:b2:3e:de:99:5b:27:9a:04:0a:2d:49:87:27:d2: b1:55:75:84:65:1a:42:bf:62:6e:b4:06:12:06:28:34:b5:cb: 23:7f:38:f1:54:a5:de:61:07:30:e5:65:0a:e3:be:36:ad:d0: 70:eb:a1:aa:ba:1f:a1:78:1e:23:c3:4f:ea:98:63:e9:a0:35: f3:80:2c:8e:df:c2:25:34:4e:9c:e6:6c:32:99:c8:01:17:2f: 09:1c:94:c0:09:90:41:92:c1:55:bb:84:9b:2e:cb:41:5c:5f: 97:3f:0c:cd:c2:3e:6d:94:37:03:41:9c:be:73:c3:6c:13:ba: d1:e4:33:71:4b:bd:af:72:ee:c1:e9:0a:62:dd:93:a4:05:14: d0:77:43:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9HgO5SgnwRvjhjOxRyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZmU1Njk4YTEyNzk2NGNjMGU0Y2U4ZTNmZGM5ODVlMmEy NWE2NjMwHhcNMjUxMjA2MDIwMDQyWhcNMjUxMjA3MDIwMDQyWjAzMTEwLwYDVQQD Eyg5ZTEyMDQ4MWY3NjM3NzA5ZTM0ZWZlY2Q1NjZjNTgyMGZmODUzNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fStAcnAhSiiENnnNesjTgMoXa9c 5UorPMClnUxYduuMZkxBRcPaubtHTE1cdi074t39J+nvrZRcDp0le6KhUWXaP1I1 FNO7UW3irZzxtPmlqg1YcIhbtumdXE+vijPRMs2OjS4F2DeZrWgv0/uTMfsEowBv +JIhlwtK5mCDxn/cSAbVw0YYiGJtOtxgN4ve6080X6PUI+RXd63tFE2OvRv8W9zy dQy7aCKfoUM8WsB08+AoLx1kdTd+9MCr4P6jk5Heplg98B62ODxB85PHAK1DNy2r F+yZZmMO8g6a0oULSNC+UWF6tKjzpYtJ047//4FWCqXatR+Hd8tBi0B/WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4SBIH3Y3cJ407+zVZsWCD/hTVTMB8GA1UdIwQY MBaAFID+VpihJ5ZMwOTOjj/cmF4qJaZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1A1V21LRW5sa3pBNU02T1A5eVlYaW9scG1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zZjlhZDEtNmJlNS00ZmE0LTllNTYt ZDcwMWRjNjk4NjNmLzEvZ1A1V21LRW5sa3pBNU02T1A5eVlYaW9scG1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8zZjlhZDEtNmJlNS00ZmE0LTllNTYtZDcwMWRjNjk4NjNm LzEvZ1A1V21LRW5sa3pBNU02T1A5eVlYaW9scG1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAislTs2jl OTbyFqhfunlMRr7HcbEB4Mb8/ej+IkmLk/dGAiS3NTIyCBh3LsaXO62/xOMp/ZdB s8vELlNgUhatnhtb7EHNXurU2aYaVjdf/7FRkk16eMx6tyiZuruTH6YGJ2Gz/iZO 4nV6pwjRnOsT9LI+3plbJ5oECi1JhyfSsVV1hGUaQr9ibrQGEgYoNLXLI3848VSl 3mEHMOVlCuO+Nq3QcOuhqrofoXgeI8NP6phj6aA184Asjt/CJTROnOZsMpnIARcv CRyUwAmQQZLBVbuEmy7LQVxflz8MzcI+bZQ3A0GcvnPDbBO60eQzcUu9r3LuwekK Yt2TpAUU0HdD+A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:04 2025 by rpki-client