This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft File: gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json) Hash identifier: YkhnIXdebb/Oa252G7PkknEkie0wHEy00/W0eAd8PgY= Subject key identifier: D7:A3:1C:65:0C:45:E7:90:3A:D9:32:5D:0A:5E:66:3F:06:58:16:57 Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB Certificate issuer: /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb Certificate serial: 019AF16411139995B4DD674FE4468B15BD8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft Manifest number: 1421 Signing time: Sat 06 Dec 2025 02:00:58 +0000 Manifest this update: Sat 06 Dec 2025 02:00:58 +0000 Manifest next update: Sun 07 Dec 2025 02:00:58 +0000 Files and hashes: 1: 3Ecxk2P7e71r675s-iUcdql5m18.roa (hash: T89HhXcDe17TB/b7r8oC0290hjOpZyi3qRar9s99IcM=) 2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: wtJT7rq8KOYbSm8DjdY5QaXNPagD0DvoeTbfubLX05A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:11:13:99:95:b4:dd:67:4f:e4:46:8b:15:bd:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb Validity Not Before: Dec 6 02:00:58 2025 GMT Not After : Dec 7 02:00:58 2025 GMT Subject: CN=d7a31c650c45e7903ad9325d0a5e663f06581657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:86:f0:10:fa:08:13:3c:71:dd:7b:ff:15:ee: c9:3d:88:5b:dc:e8:f5:5f:51:ba:1c:4a:88:35:e5: 02:48:9c:75:08:fd:07:8e:5a:f9:43:08:05:33:2a: f7:7d:61:6d:07:fa:81:43:6b:ac:b5:45:8d:a4:ff: 7d:c6:55:eb:2e:ae:b4:99:10:06:29:b8:b4:9f:92: cd:73:1f:ae:c0:3c:15:ee:43:0c:73:b3:31:f4:b7: 73:14:2f:4c:57:77:5f:b9:c6:7c:97:20:81:41:ab: af:cf:59:3e:11:7a:1a:9f:2e:3d:28:c8:c9:e1:7e: 7d:c6:ac:43:28:e4:70:4f:c2:0d:7b:d1:3b:56:12: 29:ad:f3:50:18:1b:54:55:9a:74:51:46:6d:ac:ac: cc:1f:f9:62:61:67:26:15:e8:59:45:bf:84:39:75: 31:ff:c5:a6:ff:97:86:80:94:e5:b3:25:39:72:00: c7:84:aa:a9:e9:76:ee:67:48:2e:c9:71:0e:a4:7d: 7b:c3:79:08:af:ac:a6:0a:7b:fe:fa:4f:b4:f8:13: 7c:e9:74:c9:fc:08:bb:13:8f:4d:a8:e3:d7:60:6e: bf:68:f8:50:0c:5f:a8:09:91:88:d0:02:a8:15:68: b3:91:01:be:5f:4d:fd:b9:80:38:43:f9:0e:7f:e0: 22:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A3:1C:65:0C:45:E7:90:3A:D9:32:5D:0A:5E:66:3F:06:58:16:57 X509v3 Authority Key Identifier: keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e8:50:fc:2b:6a:8c:0d:bf:88:ba:55:4e:fc:ec:ea:b2:e3: a8:a3:d9:f3:39:50:81:c2:42:22:ba:6d:67:a1:6d:3e:8e:ab: d1:93:9e:c0:74:50:67:ec:46:84:19:12:cf:81:2a:5c:6d:e5: 54:91:e2:db:c0:f4:23:77:c2:db:c9:3c:47:ff:bb:dd:60:70: 53:90:59:38:f5:cf:31:10:e6:7f:e5:bf:d5:67:de:92:dc:5d: cd:d0:ea:b7:86:b6:90:e0:36:66:d5:ac:e3:7f:63:4a:8f:0f: a6:c8:cd:11:cd:0b:9a:76:de:1f:5d:24:b9:12:f9:16:8f:bc: a5:4b:ee:bb:6b:b0:c6:15:bc:08:c4:84:7e:ff:24:10:a5:22: 77:09:c2:a3:1b:0d:5e:f1:a0:91:85:2f:71:b1:67:3f:b8:37: 58:a5:f1:98:5f:45:47:d2:79:c8:30:2a:6d:34:8e:ba:26:f8: 57:58:7a:34:4b:41:32:a0:06:10:11:2d:e2:1d:0f:7b:8f:41: 6e:bf:f9:ac:bf:2c:8c:f8:f1:ca:54:27:bc:84:ea:1c:4a:18: 39:01:d3:95:89:1f:1c:ef:f6:fb:f2:ee:a9:4e:b9:ce:53:c4: 4b:88:d7:23:54:9a:3c:70:2b:ba:76:b9:a9:fa:56:03:5f:0c: 5c:58:69:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBETmZW03WdP5EaLFb2MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMzJjMDdmYWEyMmZlYjU5NjlmZjFmM2I0OTA1ZDFlYTFl NGRlZWIwHhcNMjUxMjA2MDIwMDU4WhcNMjUxMjA3MDIwMDU4WjAzMTEwLwYDVQQD EyhkN2EzMWM2NTBjNDVlNzkwM2FkOTMyNWQwYTVlNjYzZjA2NTgxNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvobwEPoIEzxx3Xv/Fe7JPYhb3Oj1 X1G6HEqINeUCSJx1CP0Hjlr5QwgFMyr3fWFtB/qBQ2ustUWNpP99xlXrLq60mRAG Kbi0n5LNcx+uwDwV7kMMc7Mx9LdzFC9MV3dfucZ8lyCBQauvz1k+EXoany49KMjJ 4X59xqxDKORwT8INe9E7VhIprfNQGBtUVZp0UUZtrKzMH/liYWcmFehZRb+EOXUx /8Wm/5eGgJTlsyU5cgDHhKqp6XbuZ0guyXEOpH17w3kIr6ymCnv++k+0+BN86XTJ /Ai7E49NqOPXYG6/aPhQDF+oCZGI0AKoFWizkQG+X039uYA4Q/kOf+Ai0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNejHGUMReeQOtkyXQpeZj8GWBZXMB8GA1UdIwQY MBaAFIAywH+qIv61lp/x87SQXR6h5N7rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0RMQWY2b2lfcldXbl9IenRKQmRIcUhrM3VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOTZhYzMtMzk5MC00NWFhLWI0OGUt ODcwY2M1ZjQzY2Q1LzEvZ0RMQWY2b2lfcldXbl9IenRKQmRIcUhrM3VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hOTZhYzMtMzk5MC00NWFhLWI0OGUtODcwY2M1ZjQzY2Q1 LzEvZ0RMQWY2b2lfcldXbl9IenRKQmRIcUhrM3VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOhQ/Ctq jA2/iLpVTvzs6rLjqKPZ8zlQgcJCIrptZ6FtPo6r0ZOewHRQZ+xGhBkSz4EqXG3l VJHi28D0I3fC28k8R/+73WBwU5BZOPXPMRDmf+W/1WfektxdzdDqt4a2kOA2ZtWs 439jSo8PpsjNEc0LmnbeH10kuRL5Fo+8pUvuu2uwxhW8CMSEfv8kEKUidwnCoxsN XvGgkYUvcbFnP7g3WKXxmF9FR9J5yDAqbTSOuib4V1h6NEtBMqAGEBEt4h0Pe49B br/5rL8sjPjxylQnvITqHEoYOQHTlYkfHO/2+/LuqU65zlPES4jXI1SaPHAruna5 qfpWA18MXFhpHA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:13 2025 by rpki-client