This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft File: gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft (raw, json) Hash identifier: k5QGCix9m/BLG25JKSQ1UdghXoPjG5WmJFQ+QLQZotE= Subject key identifier: 0B:43:D5:95:FC:56:3C:62:80:42:25:95:CD:5A:CC:7E:30:AB:A8:73 Authority key identifier: 82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59 Certificate issuer: /CN=8270fc0883f1c72f81c6468a18832dadcfe94959 Certificate serial: 019B1A2979D4EE15199841EC6EABAE34701F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft Manifest number: 06E3 Signing time: Sun 14 Dec 2025 00:01:24 +0000 Manifest this update: Sun 14 Dec 2025 00:01:24 +0000 Manifest next update: Mon 15 Dec 2025 00:01:24 +0000 Files and hashes: 1: gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl (hash: /gVxPBaa1VhXjQZKsrkJne+8xbBOvnXwA85FWMvbCFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:79:d4:ee:15:19:98:41:ec:6e:ab:ae:34:70:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8270fc0883f1c72f81c6468a18832dadcfe94959 Validity Not Before: Dec 14 00:01:24 2025 GMT Not After : Dec 15 00:01:24 2025 GMT Subject: CN=0b43d595fc563c6280422595cd5acc7e30aba873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:ee:e3:ac:26:02:1c:eb:c1:46:41:f0:97: 32:79:34:05:24:5d:54:e2:ff:b9:96:77:f0:0e:30: 43:90:78:41:46:fd:40:8b:8d:d3:6a:b4:77:63:3c: 24:f9:12:d7:4f:9f:58:ca:bb:fc:4c:7a:23:68:6d: 56:cf:90:1d:e1:e6:56:1b:fe:f5:d9:e2:bc:8a:bf: c0:b3:9c:5b:78:15:08:69:2c:0b:52:92:ee:4b:1d: 3f:0b:5a:0b:0a:34:6a:a4:92:32:01:20:3e:9d:f0: 19:b5:f3:5e:88:bb:ae:7a:8a:69:40:01:4d:d9:c7: 7f:e0:4a:d2:f0:e4:02:65:15:13:fd:f7:77:92:60: 7b:d8:2b:05:06:94:ff:a2:7b:d1:cf:22:85:66:36: fa:34:62:87:a5:58:7d:ce:42:ea:5e:34:bf:52:c5: 2e:8c:e3:8a:31:d3:72:2e:72:5f:b6:e8:05:3c:b2: 21:d6:0e:60:69:ae:d7:64:d8:41:b1:e8:dc:a8:d6: dd:59:39:e6:c9:fa:d5:b6:a6:9a:01:99:bf:0d:57: 35:d2:75:ee:a8:46:b9:a9:65:61:41:05:43:0e:d4: f5:e6:9e:4a:52:16:c3:e5:f4:30:8a:54:3e:71:b8: 74:5f:f7:5d:fe:15:ce:3f:d7:22:3c:4f:14:df:98: 0f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:43:D5:95:FC:56:3C:62:80:42:25:95:CD:5A:CC:7E:30:AB:A8:73 X509v3 Authority Key Identifier: keyid:82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:13:1f:a5:d0:12:4c:f3:e3:bf:91:69:5a:15:bd:2e:6d:12: 3b:a8:f4:5b:6b:d5:89:4c:63:14:ec:c0:18:c2:d6:fd:f7:2c: 04:17:60:3f:75:bd:78:68:eb:12:ed:36:81:66:4f:b5:37:6c: 2d:e3:d3:25:d2:6d:0c:5a:20:55:de:ed:e5:79:93:5e:84:fb: 66:5a:97:f4:00:83:b6:2d:94:34:96:9d:79:32:88:a5:c2:17: f2:ea:b7:28:d1:65:db:a0:5d:0d:f3:8a:56:71:90:6f:69:97: 83:ce:9c:fa:ef:78:64:03:9f:87:57:fc:95:a0:95:53:e8:7f: 53:0e:3f:3e:de:c5:2f:53:b0:6b:c5:69:ec:a4:1d:f9:44:c6: 41:3c:43:2d:24:f3:1f:1a:a8:c3:e0:ed:83:06:e8:e4:6a:12: dd:a8:f2:fc:bc:42:a2:ef:f4:81:cd:77:0f:63:b1:67:42:a2: c6:34:e6:35:23:12:e1:da:b9:cb:21:cc:bf:f4:27:aa:17:c5: d5:75:05:c1:2d:cb:db:60:8d:30:73:a5:97:c0:35:72:45:4d: 03:eb:11:3b:16:3d:a7:81:61:8a:71:7d:d3:81:a6:34:bb:f6: 5b:8b:1a:79:a5:f6:49:ad:94:e2:07:fd:80:ec:1c:16:cc:cd: 28:09:e8:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKXnU7hUZmEHsbquuNHAfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzBmYzA4ODNmMWM3MmY4MWM2NDY4YTE4ODMyZGFkY2Zl OTQ5NTkwHhcNMjUxMjE0MDAwMTI0WhcNMjUxMjE1MDAwMTI0WjAzMTEwLwYDVQQD EygwYjQzZDU5NWZjNTYzYzYyODA0MjI1OTVjZDVhY2M3ZTMwYWJhODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtvu46wmAhzrwUZB8JcyeTQFJF1U 4v+5lnfwDjBDkHhBRv1Ai43TarR3Yzwk+RLXT59Yyrv8THojaG1Wz5Ad4eZWG/71 2eK8ir/As5xbeBUIaSwLUpLuSx0/C1oLCjRqpJIyASA+nfAZtfNeiLuueoppQAFN 2cd/4ErS8OQCZRUT/fd3kmB72CsFBpT/onvRzyKFZjb6NGKHpVh9zkLqXjS/UsUu jOOKMdNyLnJftugFPLIh1g5gaa7XZNhBsejcqNbdWTnmyfrVtqaaAZm/DVc10nXu qEa5qWVhQQVDDtT15p5KUhbD5fQwilQ+cbh0X/dd/hXOP9ciPE8U35gP0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtD1ZX8VjxigEIllc1azH4wq6hzMB8GA1UdIwQY MBaAFIJw/AiD8ccvgcZGihiDLa3P6UlZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25EOENJUHh4eS1CeGthS0dJTXRyY19wU1ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lMGMwMWMtZTRhOC00OGQwLWFhZGIt ZDY1M2NiOGFkMGIzLzEvZ25EOENJUHh4eS1CeGthS0dJTXRyY19wU1ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9lMGMwMWMtZTRhOC00OGQwLWFhZGItZDY1M2NiOGFkMGIz LzEvZ25EOENJUHh4eS1CeGthS0dJTXRyY19wU1ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxMfpdAS TPPjv5FpWhW9Lm0SO6j0W2vViUxjFOzAGMLW/fcsBBdgP3W9eGjrEu02gWZPtTds LePTJdJtDFogVd7t5XmTXoT7ZlqX9ACDti2UNJadeTKIpcIX8uq3KNFl26BdDfOK VnGQb2mXg86c+u94ZAOfh1f8laCVU+h/Uw4/Pt7FL1Owa8Vp7KQd+UTGQTxDLSTz Hxqow+Dtgwbo5GoS3ajy/LxCou/0gc13D2OxZ0KixjTmNSMS4dq5yyHMv/QnqhfF 1XUFwS3L22CNMHOll8A1ckVNA+sROxY9p4FhinF904GmNLv2W4saeaX2Sa2U4gf9 gOwcFszNKAnoFA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:42:23 2025 by rpki-client