This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft File: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft (raw, json) Hash identifier: vI5xcGI7FDQgOrvJuWtlSFe5kr3zPoiqSsWMiIxuolc= Subject key identifier: 69:FA:19:B1:81:13:AA:DA:EC:83:E6:DB:BC:E2:85:D6:A7:25:70:24 Authority key identifier: 82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98 Certificate issuer: /CN=8260c94351066ec06debfab2bca9dfaed407e698 Certificate serial: 019AF19AB874E15A531CD18DC6E1274524DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft Manifest number: 080F Signing time: Sat 06 Dec 2025 03:00:39 +0000 Manifest this update: Sat 06 Dec 2025 03:00:39 +0000 Manifest next update: Sun 07 Dec 2025 03:00:39 +0000 Files and hashes: 1: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl (hash: IaZ4fa8XagzJymbDD4I3FpSRZQnXABTLrzq3ieknmVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b8:74:e1:5a:53:1c:d1:8d:c6:e1:27:45:24:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8260c94351066ec06debfab2bca9dfaed407e698 Validity Not Before: Dec 6 03:00:39 2025 GMT Not After : Dec 7 03:00:39 2025 GMT Subject: CN=69fa19b18113aadaec83e6dbbce285d6a7257024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:25:d3:79:4c:1c:c6:9f:94:4b:f8:79:ea: c5:48:8e:8b:db:69:cb:97:2a:84:5b:03:55:94:14: 72:11:10:9a:76:4f:46:3e:72:3a:80:ac:90:c4:ba: d3:bd:9b:00:48:cf:c0:53:89:40:50:0f:88:76:09: c9:44:32:1c:20:5f:96:3a:51:3a:f9:4a:67:9d:ca: 61:97:ec:b1:c2:f4:e6:53:a1:2c:73:a3:f8:36:c2: 49:77:56:59:5c:02:13:3c:d9:44:2f:a3:7c:94:fa: 24:d7:d3:59:d4:3f:eb:3b:f5:34:a7:e5:b3:2c:73: 49:2d:12:d3:e1:39:4c:0c:1d:63:a9:a7:ee:bb:ce: 46:1c:80:07:e6:54:11:d8:da:93:3a:38:b5:9b:60: b6:55:78:8d:23:c6:ef:d1:b1:d3:d5:44:9d:53:b8: e3:a1:11:1a:1c:b0:33:9a:d6:f7:d5:cc:9a:26:15: 6c:f0:bd:b6:8c:13:f1:27:0c:95:5b:ce:fc:43:38: 81:74:20:45:b9:ae:93:b0:8d:ab:bb:f7:60:fd:3f: b7:77:59:7e:48:00:0b:27:74:60:18:35:6a:af:7d: 74:10:1b:01:e8:9d:c1:69:4e:51:ba:26:bf:a9:38: 3e:a0:32:9d:ae:ca:df:31:08:56:a1:49:7c:f9:d5: 1d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FA:19:B1:81:13:AA:DA:EC:83:E6:DB:BC:E2:85:D6:A7:25:70:24 X509v3 Authority Key Identifier: keyid:82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:97:88:bc:3a:b7:6f:22:f6:7d:7a:7f:ee:26:2b:0f:2c:5e: 56:1b:11:3d:f9:5b:22:2f:ef:9e:79:62:e6:a8:ca:df:2e:fd: ac:e1:e4:61:9b:33:f5:28:04:e8:a3:a5:e3:09:6f:23:96:c6: 0e:c0:b3:9d:85:d3:c4:67:22:54:fb:f0:d9:86:9a:b4:59:ba: 2d:04:c7:46:e8:15:f0:50:b1:e5:8a:d0:ba:44:d3:dd:da:0b: 7f:8d:cd:96:9e:64:e5:10:fb:b1:8b:9f:73:81:66:1f:7d:b7: ff:ad:f4:c2:7f:f2:a3:54:7f:f9:09:9c:a1:09:49:de:15:27: 05:2d:ec:e7:0d:e8:96:57:4a:b5:75:b7:02:f5:ed:f9:1d:8e: b9:e7:f7:4c:f9:b6:f4:79:ea:fc:80:f1:5a:77:f7:80:7b:bd: e6:47:33:53:cd:7b:b8:a1:87:9f:09:2a:6f:6f:ce:6a:86:cb: 10:63:e5:97:82:1f:ab:53:1c:55:69:b3:2c:35:3d:31:89:ca: 41:48:13:33:e9:e9:3c:43:d4:c8:8b:2f:a5:5e:0c:e8:7b:f9: 2f:a6:36:99:0b:fe:cc:65:80:50:95:0b:74:28:62:0b:32:05: 86:d2:ed:08:ae:6c:f9:fa:b4:b3:5a:3f:8d:84:d9:3e:fd:c4: 1d:88:91:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrh04VpTHNGNxuEnRSTbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjBjOTQzNTEwNjZlYzA2ZGViZmFiMmJjYTlkZmFlZDQw N2U2OTgwHhcNMjUxMjA2MDMwMDM5WhcNMjUxMjA3MDMwMDM5WjAzMTEwLwYDVQQD Eyg2OWZhMTliMTgxMTNhYWRhZWM4M2U2ZGJiY2UyODVkNmE3MjU3MDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq90l03lMHMaflEv4eerFSI6L22nL lyqEWwNVlBRyERCadk9GPnI6gKyQxLrTvZsASM/AU4lAUA+IdgnJRDIcIF+WOlE6 +Upnncphl+yxwvTmU6Esc6P4NsJJd1ZZXAITPNlEL6N8lPok19NZ1D/rO/U0p+Wz LHNJLRLT4TlMDB1jqafuu85GHIAH5lQR2NqTOji1m2C2VXiNI8bv0bHT1USdU7jj oREaHLAzmtb31cyaJhVs8L22jBPxJwyVW878QziBdCBFua6TsI2ru/dg/T+3d1l+ SAALJ3RgGDVqr310EBsB6J3BaU5Ruia/qTg+oDKdrsrfMQhWoUl8+dUdGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGn6GbGBE6ra7IPm27zihdanJXAkMB8GA1UdIwQY MBaAFIJgyUNRBm7Abev6sryp367UB+aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ESlExRUdic0J0Nl9xeXZLbmZydFFINXBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84NmNkOWEtZTczMi00ZmY1LWFlNDQt ODQ2NGE4MTE0MTgwLzEvZ21ESlExRUdic0J0Nl9xeXZLbmZydFFINXBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS84NmNkOWEtZTczMi00ZmY1LWFlNDQtODQ2NGE4MTE0MTgw LzEvZ21ESlExRUdic0J0Nl9xeXZLbmZydFFINXBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5eIvDq3 byL2fXp/7iYrDyxeVhsRPflbIi/vnnli5qjK3y79rOHkYZsz9SgE6KOl4wlvI5bG DsCznYXTxGciVPvw2YaatFm6LQTHRugV8FCx5YrQukTT3doLf43Nlp5k5RD7sYuf c4FmH323/630wn/yo1R/+QmcoQlJ3hUnBS3s5w3olldKtXW3AvXt+R2Ouef3TPm2 9Hnq/IDxWnf3gHu95kczU817uKGHnwkqb2/OaobLEGPll4Ifq1McVWmzLDU9MYnK QUgTM+npPEPUyIsvpV4M6Hv5L6Y2mQv+zGWAUJULdChiCzIFhtLtCK5s+fq0s1o/ jYTZPv3EHYiRDg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:55 2025 by rpki-client