This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json) Hash identifier: 2G5lf/zm11AqApdiVTI9HgaBseRsJJMqw1iKRNF3p3E= Subject key identifier: AD:93:56:EB:05:1D:46:CB:22:24:5C:37:27:E1:1F:FB:8E:82:BB:76 Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95 Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95 Certificate serial: 019AF1D22913FB0B59FD4B32C7DE771C8629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft Manifest number: 0305 Signing time: Sat 06 Dec 2025 04:01:13 +0000 Manifest this update: Sat 06 Dec 2025 04:01:13 +0000 Manifest next update: Sun 07 Dec 2025 04:01:13 +0000 Files and hashes: 1: 8kCEwQTy5YvIQTKFaII2JxD4ODg.roa (hash: JdAqhL45qRJWMpMP19Zx1i6m/QFY4ebMtaH6THdeVMo=) 2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: oA59YDHCRJW+pbLxtJhfv7wIaEx34IJ1Qe1KWh9BB7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:29:13:fb:0b:59:fd:4b:32:c7:de:77:1c:86:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95 Validity Not Before: Dec 6 04:01:13 2025 GMT Not After : Dec 7 04:01:13 2025 GMT Subject: CN=ad9356eb051d46cb22245c3727e11ffb8e82bb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a8:f3:ad:d7:c3:7e:d8:df:e7:0e:fa:a3:84: a5:4a:08:18:43:3b:ba:cd:e5:8f:00:ec:a0:aa:84: 67:b9:e9:b2:db:f6:52:f7:9c:7a:f9:a9:b5:87:89: 20:19:20:0a:05:27:ac:d4:5b:00:57:ef:4e:64:35: f0:c3:6d:f5:fd:ec:4b:6d:61:58:23:11:56:ee:b4: e4:8a:ce:86:82:f1:c0:14:9e:46:39:d2:1e:fb:f0: 09:74:66:59:ae:d7:be:a9:b7:33:66:2b:52:8d:17: 04:d7:9b:96:0a:3e:62:a1:7a:97:02:37:66:80:e3: a4:fc:85:25:37:01:36:b8:77:0e:81:b9:c2:65:a8: 87:55:ef:fb:5b:e6:8c:1b:69:83:85:ec:23:e5:a8: 4f:fc:9d:2a:96:de:14:c4:80:06:50:1b:ab:25:20: 47:61:82:51:13:56:1f:ed:96:3e:0b:78:48:db:f4: 08:11:56:de:b7:e0:86:4d:a3:18:f6:16:a0:c5:16: d8:e5:84:43:ba:56:ad:5a:6e:b7:ea:20:88:ae:91: ee:a3:d1:d3:5e:e4:45:00:11:95:08:4d:38:54:c3: de:a1:78:0b:64:3c:b5:0e:00:d2:1c:02:65:0c:c9: af:20:18:c2:87:73:e4:3e:bc:80:73:f2:29:c7:1d: ac:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:93:56:EB:05:1D:46:CB:22:24:5C:37:27:E1:1F:FB:8E:82:BB:76 X509v3 Authority Key Identifier: keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ff:80:a2:a1:b6:48:ad:21:06:1b:47:04:b7:f1:35:b3:1d: cf:ec:85:ea:12:33:94:9d:00:0d:62:6f:c5:8f:f3:7a:ee:d9: 49:64:2c:35:da:d2:60:52:34:8e:9e:03:41:6b:c5:91:41:65: 30:97:aa:e6:9b:52:c8:cc:d9:a5:0b:e7:d7:5e:61:56:e3:9e: ef:43:18:d3:b1:df:33:af:47:04:3e:c6:32:1c:9c:91:29:53: 63:9d:34:07:45:e4:c0:f2:49:ab:97:45:b2:46:c0:54:3a:6c: 69:e9:09:20:04:d5:10:84:3b:d5:ce:a0:e3:ff:13:d3:c5:95: 50:46:ae:69:d5:5c:7a:b4:8e:8f:b2:01:de:ad:00:f5:75:7a: be:5c:fe:91:f1:0f:c3:61:93:b4:5c:c8:50:b2:e4:fc:64:69: dd:b3:90:be:5d:25:2c:9b:35:1d:83:cc:e4:e2:c3:70:ed:f2: f1:39:c3:4d:cb:52:81:3a:38:04:eb:36:10:77:b1:27:87:f4: 9a:78:4d:f0:87:d2:66:bc:ef:74:5a:6f:d5:a9:75:13:90:53: c0:1d:74:57:c1:be:28:e6:e2:eb:cb:f3:c8:71:d0:3c:90:61: c1:3a:40:29:5a:b2:14:c2:23:6b:a6:29:78:ac:68:52:a8:16: f5:2a:02:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ikT+wtZ/Usyx953HIYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxODE0NDBhMzY3YTM0ZDMwNmJjMGY2ODVhZTljZDg2OTUy ZjdmOTUwHhcNMjUxMjA2MDQwMTEzWhcNMjUxMjA3MDQwMTEzWjAzMTEwLwYDVQQD EyhhZDkzNTZlYjA1MWQ0NmNiMjIyNDVjMzcyN2UxMWZmYjhlODJiYjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ajzrdfDftjf5w76o4SlSggYQzu6 zeWPAOygqoRnuemy2/ZS95x6+am1h4kgGSAKBSes1FsAV+9OZDXww231/exLbWFY IxFW7rTkis6GgvHAFJ5GOdIe+/AJdGZZrte+qbczZitSjRcE15uWCj5ioXqXAjdm gOOk/IUlNwE2uHcOgbnCZaiHVe/7W+aMG2mDhewj5ahP/J0qlt4UxIAGUBurJSBH YYJRE1Yf7ZY+C3hI2/QIEVbet+CGTaMY9hagxRbY5YRDulatWm636iCIrpHuo9HT XuRFABGVCE04VMPeoXgLZDy1DgDSHAJlDMmvIBjCh3PkPryAc/Ipxx2sfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2TVusFHUbLIiRcNyfhH/uOgrt2MB8GA1UdIwQY MBaAFIGBRAo2ejTTBrwPaFrpzYaVL3+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQt NTU2OTFhNTY5NzIwLzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQtNTU2OTFhNTY5NzIw LzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcv+AoqG2 SK0hBhtHBLfxNbMdz+yF6hIzlJ0ADWJvxY/zeu7ZSWQsNdrSYFI0jp4DQWvFkUFl MJeq5ptSyMzZpQvn115hVuOe70MY07HfM69HBD7GMhyckSlTY500B0XkwPJJq5dF skbAVDpsaekJIATVEIQ71c6g4/8T08WVUEauadVcerSOj7IB3q0A9XV6vlz+kfEP w2GTtFzIULLk/GRp3bOQvl0lLJs1HYPM5OLDcO3y8TnDTctSgTo4BOs2EHexJ4f0 mnhN8IfSZrzvdFpv1al1E5BTwB10V8G+KObi68vzyHHQPJBhwTpAKVqyFMIja6Yp eKxoUqgW9SoC5w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:59:32 2025 by rpki-client