This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json) Hash identifier: wYF+8Phw0MEU8xlAzGw61oBIUvr8X4DWn+pYvLBI++A= Subject key identifier: D2:90:58:7C:88:47:33:C7:AF:12:79:DE:CD:0A:62:15:67:8D:80:1C Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94 Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94 Certificate serial: 019AF1D1C2C25BFA995F8DA3DFDCC9A74F41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 04:00:47 +0000 Manifest this update: Sat 06 Dec 2025 04:00:47 +0000 Manifest next update: Sun 07 Dec 2025 04:00:47 +0000 Files and hashes: 1: dUjydhDtv2Ysc8dEDoiT2yx34lg.roa (hash: ebc83oZNm2ylmobsykoAv58WP6zLL9GO+02NODZysqQ=) 2: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: wam9vugpBhpoFAeN6yDxJ0EAZNd9HohI6zKqZSNxjRc=) 3: wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa (hash: A1fNf8pB5tQL1RUFisCU1kyqkrX8SMY0lp/3rcsduXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c2:c2:5b:fa:99:5f:8d:a3:df:dc:c9:a7:4f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94 Validity Not Before: Dec 6 04:00:47 2025 GMT Not After : Dec 7 04:00:47 2025 GMT Subject: CN=d290587c884733c7af1279decd0a6215678d801c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:41:d9:62:06:29:6f:ee:cc:44:49:67:15:76: 9a:2a:79:ae:89:fa:29:7b:7b:85:62:37:c1:78:97: 41:27:20:32:79:68:92:cf:e8:1c:29:1e:c3:d6:8d: ea:e7:1e:72:aa:c7:3e:6d:8b:d2:23:f5:95:35:fb: fa:7f:6d:03:a6:02:92:22:54:bb:a3:56:a0:96:21: 14:d0:86:c5:31:84:a9:30:2e:4c:0a:39:df:8a:9b: e1:f7:ca:dc:97:94:a4:6e:13:48:81:ff:81:3f:a2: 05:fc:dd:c8:d2:2c:50:29:1b:20:f5:3c:70:c8:a3: 0a:da:38:1c:14:9e:49:7b:ec:55:d9:11:d8:a1:09: d8:94:35:f4:1f:ff:be:7e:ad:53:6f:2d:55:eb:23: 59:19:87:c5:9c:d7:a8:34:7f:b4:64:9b:c3:c1:a3: 03:5f:80:f3:d2:90:5f:bd:51:4a:25:79:e6:64:9e: 5f:dc:91:34:81:64:ef:9c:a5:a0:cf:91:0e:8e:d3: 5e:1e:48:62:4c:35:ad:f1:20:84:dd:e1:58:f8:b0: ac:93:31:1e:74:97:77:e6:e8:ec:2c:66:79:55:28: b4:1c:88:e8:d0:c0:2a:3e:55:7c:9e:ce:0e:40:99: 71:ae:5b:b8:e7:59:04:42:d9:9d:10:3e:88:1b:56: 63:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:90:58:7C:88:47:33:C7:AF:12:79:DE:CD:0A:62:15:67:8D:80:1C X509v3 Authority Key Identifier: keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:60:09:bf:42:61:8a:30:a3:13:d2:21:87:16:d2:2d:5b:ba: a9:e6:d6:0b:09:1e:cd:39:e1:d8:62:cf:30:31:aa:e7:55:90: aa:53:85:42:6a:76:de:e6:74:44:4e:67:d9:70:7f:8b:2c:e9: ab:61:66:76:68:28:80:99:52:a7:c8:4f:14:b4:6e:29:ef:55: 04:62:b9:2a:f8:7e:62:70:58:6b:ea:aa:da:1d:b5:09:82:ba: c9:04:23:25:d5:82:10:55:2f:c7:fa:39:3b:b7:02:3b:66:8c: 4f:b6:dc:1c:21:93:5a:a3:17:ef:75:35:1f:12:00:26:bf:7c: e1:ae:f7:46:a4:9e:37:cd:57:7e:9b:cd:06:09:d5:62:5e:84: 36:64:b4:5e:78:c3:a1:1c:8d:12:41:51:98:63:95:20:01:56: 3a:ea:57:40:5e:a2:15:d6:ea:20:35:bc:a8:18:28:81:1d:2f: d9:2c:14:78:26:be:c2:8f:15:00:3c:c8:63:d4:86:dc:4c:fb: 39:b3:cc:48:19:2f:51:cb:b2:b8:ae:41:cf:d1:94:af:4a:e7: c5:57:3f:2a:5c:5b:87:19:58:70:b8:70:c1:eb:57:e2:e2:0e: f9:82:3d:00:e9:52:be:fe:71:33:a6:98:4d:22:04:18:07:03: 11:34:1b:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cLCW/qZX42j39zJp09BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNjE1MzE1ZGM3NTBjMDNlNjBmYzM2YTc1MGM1ZTNmZjY2 ZWFjOTQwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD EyhkMjkwNTg3Yzg4NDczM2M3YWYxMjc5ZGVjZDBhNjIxNTY3OGQ4MDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UHZYgYpb+7MRElnFXaaKnmuifop e3uFYjfBeJdBJyAyeWiSz+gcKR7D1o3q5x5yqsc+bYvSI/WVNfv6f20DpgKSIlS7 o1agliEU0IbFMYSpMC5MCjnfipvh98rcl5SkbhNIgf+BP6IF/N3I0ixQKRsg9Txw yKMK2jgcFJ5Je+xV2RHYoQnYlDX0H/++fq1Tby1V6yNZGYfFnNeoNH+0ZJvDwaMD X4Dz0pBfvVFKJXnmZJ5f3JE0gWTvnKWgz5EOjtNeHkhiTDWt8SCE3eFY+LCskzEe dJd35ujsLGZ5VSi0HIjo0MAqPlV8ns4OQJlxrlu451kEQtmdED6IG1Zj3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKQWHyIRzPHrxJ53s0KYhVnjYAcMB8GA1UdIwQY MBaAFIBhUxXcdQwD5g/DanUMXj/2bqyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgt ZjhlNWIyZDg2ODBjLzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgtZjhlNWIyZDg2ODBj LzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimAJv0Jh ijCjE9IhhxbSLVu6qebWCwkezTnh2GLPMDGq51WQqlOFQmp23uZ0RE5n2XB/iyzp q2FmdmgogJlSp8hPFLRuKe9VBGK5Kvh+YnBYa+qq2h21CYK6yQQjJdWCEFUvx/o5 O7cCO2aMT7bcHCGTWqMX73U1HxIAJr984a73RqSeN81XfpvNBgnVYl6ENmS0XnjD oRyNEkFRmGOVIAFWOupXQF6iFdbqIDW8qBgogR0v2SwUeCa+wo8VADzIY9SG3Ez7 ObPMSBkvUcuyuK5Bz9GUr0rnxVc/KlxbhxlYcLhwwetX4uIO+YI9AOlSvv5xM6aY TSIEGAcDETQbsA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:21 2025 by rpki-client