This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft File: gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json) Hash identifier: mcQ0ZgHmFfHmf482VqsYyVI3YMjXaJ5fsmcLqGK3VRc= Subject key identifier: AE:95:8A:25:BE:63:C5:9D:9D:D3:02:FF:21:A8:F1:79:3B:96:98:1F Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E Certificate issuer: /CN=81665d6cf26d937484dbb4633743e0657eccdc5e Certificate serial: 019B19BC9C86CE805A111CCD2704F40DB401 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft Manifest number: 1743 Signing time: Sat 13 Dec 2025 22:02:29 +0000 Manifest this update: Sat 13 Dec 2025 22:02:29 +0000 Manifest next update: Sun 14 Dec 2025 22:02:29 +0000 Files and hashes: 1: 8FLRYVQdX3uKC3EUcIINM4PPH70.roa (hash: AvJSbDISdiRpzDgo8gSH1kCL/FtFtirNCOoP+EDCSag=) 2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: oMAHJ6EIigGJ3mCNR4opJTulIoUbYACTsETaj8S0UBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:9c:86:ce:80:5a:11:1c:cd:27:04:f4:0d:b4:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e Validity Not Before: Dec 13 22:02:29 2025 GMT Not After : Dec 14 22:02:29 2025 GMT Subject: CN=ae958a25be63c59d9dd302ff21a8f1793b96981f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:33:73:34:38:5c:83:b4:88:8b:67:41:46:29: f8:15:57:2b:03:41:38:29:6c:bd:d4:d8:cf:33:16: 20:3e:60:26:01:8e:96:d9:6a:cf:fc:0e:bf:fa:04: 32:3f:2e:2c:a4:5e:41:53:54:63:d9:1d:4d:2c:17: 20:7c:9c:d7:c3:01:a9:94:26:a4:4d:dc:b2:47:6e: f3:b9:36:25:77:ac:40:fc:e4:e1:3c:00:9b:df:65: 66:f0:2a:95:4a:11:95:06:99:60:6e:d4:0a:c5:9c: 17:03:4c:51:51:72:f2:1b:1b:40:26:cc:92:d3:8e: 5d:af:bf:bb:08:3f:94:ea:f7:6c:ff:2f:e0:32:45: 86:50:8b:24:36:f7:76:a6:08:76:80:e8:18:17:e4: c3:2e:d2:03:03:cc:a9:5d:76:74:fa:d0:0d:ea:36: 82:0f:95:d0:e0:11:c6:a5:8c:3c:d0:2d:fe:df:36: 65:e4:75:f5:d8:14:a2:ae:5c:80:a0:1c:0e:5d:e5: 34:e7:99:f1:41:2a:97:4a:33:d7:fa:a8:93:b3:af: b1:7e:f3:ea:97:cb:e6:44:0a:61:53:04:f3:c6:2f: db:e3:00:cb:b5:5b:57:dc:0c:c1:4f:10:68:89:4b: 26:69:4a:04:dc:ab:2b:5c:8f:86:02:6f:ef:84:29: 4b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:95:8A:25:BE:63:C5:9D:9D:D3:02:FF:21:A8:F1:79:3B:96:98:1F X509v3 Authority Key Identifier: keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:57:27:b4:f9:23:1a:d3:95:0e:24:ce:af:55:c4:90:30:b0: e7:50:4a:2a:49:5e:07:14:43:e2:be:be:50:37:ec:42:e2:e8: 06:8d:1f:73:0c:1e:72:ff:be:64:6d:f4:69:98:1c:08:f3:9d: eb:e6:2b:88:50:3d:eb:44:1d:3d:d4:78:d1:77:ad:d1:eb:9e: c3:fd:b3:a2:e4:ab:e6:ff:6b:6b:eb:03:3a:50:d9:31:f7:46: f0:ad:ab:f7:5e:d4:6a:a9:4c:37:b0:e8:5d:c8:67:2a:e7:9a: 68:b0:9e:10:dd:3a:19:00:75:85:fa:c7:39:e8:46:85:41:38: 8b:f3:79:5b:29:bc:c6:75:93:27:d6:77:c2:8d:ee:15:b7:50: 22:34:3f:3e:a3:70:b9:62:c1:8c:44:54:8b:ad:2b:5a:bd:b8: 71:e8:e4:08:a8:fb:1b:79:05:5e:4e:c4:31:d4:9c:5c:d8:e3: bb:0a:1c:c7:76:cc:2a:b5:ea:b5:f4:51:d0:fb:3a:43:e2:73: 07:37:15:4c:19:2a:48:2f:92:d3:23:07:27:71:58:84:80:cc: c7:a8:ee:72:86:09:5c:2b:f3:8c:74:fa:0b:8a:e4:24:2c:c6: 7a:4a:23:58:45:46:c6:c7:49:b1:1f:49:96:dc:2b:8a:07:6f: 17:35:5f:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvJyGzoBaERzNJwT0DbQBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNjY1ZDZjZjI2ZDkzNzQ4NGRiYjQ2MzM3NDNlMDY1N2Vj Y2RjNWUwHhcNMjUxMjEzMjIwMjI5WhcNMjUxMjE0MjIwMjI5WjAzMTEwLwYDVQQD EyhhZTk1OGEyNWJlNjNjNTlkOWRkMzAyZmYyMWE4ZjE3OTNiOTY5ODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjNzNDhcg7SIi2dBRin4FVcrA0E4 KWy91NjPMxYgPmAmAY6W2WrP/A6/+gQyPy4spF5BU1Rj2R1NLBcgfJzXwwGplCak TdyyR27zuTYld6xA/OThPACb32Vm8CqVShGVBplgbtQKxZwXA0xRUXLyGxtAJsyS 045dr7+7CD+U6vds/y/gMkWGUIskNvd2pgh2gOgYF+TDLtIDA8ypXXZ0+tAN6jaC D5XQ4BHGpYw80C3+3zZl5HX12BSirlyAoBwOXeU055nxQSqXSjPX+qiTs6+xfvPq l8vmRAphUwTzxi/b4wDLtVtX3AzBTxBoiUsmaUoE3KsrXI+GAm/vhClLuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6ViiW+Y8WdndMC/yGo8Xk7lpgfMB8GA1UdIwQY MBaAFIFmXWzybZN0hNu0YzdD4GV+zNxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1daZGJQSnRrM1NFMjdSak4wUGdaWDdNM0Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wMGY2NmItZmU4My00Y2NkLTgyZWUt YzU2ZjA1ZGEzZDI1LzEvZ1daZGJQSnRrM1NFMjdSak4wUGdaWDdNM0Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wMGY2NmItZmU4My00Y2NkLTgyZWUtYzU2ZjA1ZGEzZDI1 LzEvZ1daZGJQSnRrM1NFMjdSak4wUGdaWDdNM0Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilcntPkj GtOVDiTOr1XEkDCw51BKKkleBxRD4r6+UDfsQuLoBo0fcwwecv++ZG30aZgcCPOd 6+YriFA960QdPdR40Xet0euew/2zouSr5v9ra+sDOlDZMfdG8K2r917UaqlMN7Do XchnKueaaLCeEN06GQB1hfrHOehGhUE4i/N5Wym8xnWTJ9Z3wo3uFbdQIjQ/PqNw uWLBjERUi60rWr24cejkCKj7G3kFXk7EMdScXNjjuwocx3bMKrXqtfRR0Ps6Q+Jz BzcVTBkqSC+S0yMHJ3FYhIDMx6jucoYJXCvzjHT6C4rkJCzGekojWEVGxsdJsR9J ltwrigdvFzVf7g== -----END CERTIFICATE-----Generated at Sun Dec 14 01:48:50 2025 by rpki-client