This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json) Hash identifier: krGTRf9SDy51XiBuZw0WpI4uVHBf/4UR+mxCf6NSCz8= Subject key identifier: 3F:04:5B:29:C8:32:6A:AB:1C:AA:39:68:F2:BF:CF:79:AF:F6:1D:82 Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4 Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4 Certificate serial: 019B11939E3CED42D901AE5FFA37910243E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft Manifest number: 1589 Signing time: Fri 12 Dec 2025 08:00:45 +0000 Manifest this update: Fri 12 Dec 2025 08:00:45 +0000 Manifest next update: Sat 13 Dec 2025 08:00:45 +0000 Files and hashes: 1: 1-n1FQJdtrmSwdnekLdBoJCXaZLE.roa (hash: vl5yvgIUqNuSQTIxMaS41AEZa6z2Ung/hJMgS4H/xOQ=) 2: KUPJ1lDWM9H_O_nug1XhCm8CDY0.roa (hash: N5MTKqEvC4tpTv0nenMYPQJAtm9LjBH+zL/o+EsRhto=) 3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: hIX6u3g5leuzfXKl3Z/Tn862WUKajTMqyxFyvPTa+i0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:93:9e:3c:ed:42:d9:01:ae:5f:fa:37:91:02:43:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4 Validity Not Before: Dec 12 08:00:45 2025 GMT Not After : Dec 13 08:00:45 2025 GMT Subject: CN=3f045b29c8326aab1caa3968f2bfcf79aff61d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:7f:58:da:b6:a5:3b:ca:a7:7f:3b:eb:70: 64:ab:b3:9d:f9:34:62:68:0b:53:c9:95:8d:ea:e1: e1:97:e4:3c:49:a1:45:c3:87:51:f2:12:39:31:a2: 85:eb:68:8a:4c:e5:fb:dd:b2:46:06:29:5d:38:6e: fc:dc:55:6e:c5:9d:9b:58:f8:2f:4c:68:4a:3f:bf: 5f:f1:f9:8e:a1:88:8e:df:d4:63:c2:b9:2f:2a:52: 75:32:7e:1d:9a:0c:e9:fa:3e:df:67:68:f5:39:80: 98:27:98:9d:e2:03:11:9a:b1:8e:e9:3a:17:cc:f3: b6:56:d5:c0:ca:fb:90:1a:6c:e9:88:69:93:9a:3b: ba:a3:19:13:37:47:e6:8f:18:35:7f:57:29:35:be: cb:36:bc:4d:47:b2:88:3f:22:eb:d7:5d:8c:ae:e6: 24:2e:d2:16:bd:cb:69:2e:bf:dc:b4:28:13:a6:b9: 04:8f:64:0f:43:ae:a9:b0:6a:df:cd:b7:d2:23:df: 9d:54:ba:8b:e6:3b:dc:8c:f0:ba:83:93:17:8e:1c: b2:9e:9e:ba:0c:5a:05:10:9c:00:08:67:40:ed:f6: 12:f9:6c:d3:68:1e:f2:21:70:50:8d:e0:97:58:f8: fa:12:b3:bb:42:c6:c6:4b:3a:7f:36:49:a0:5f:6d: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:04:5B:29:C8:32:6A:AB:1C:AA:39:68:F2:BF:CF:79:AF:F6:1D:82 X509v3 Authority Key Identifier: keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:62:9f:41:82:a2:dc:62:d1:ce:1c:c8:5e:ba:54:0b:c1:13: f1:45:39:ba:0c:a1:ca:86:8c:2d:5c:0d:b2:a9:e6:84:73:d0: 49:ef:8a:4c:26:ac:00:35:d8:bc:cf:73:74:4a:e7:7c:e9:1b: 1c:a7:16:ca:89:ca:51:2e:6e:f2:3e:ec:d8:ae:02:4a:9a:06: a6:51:f0:b4:d6:e0:1d:19:79:98:8c:6c:5d:f3:6a:c3:52:b0: fe:24:cd:ff:18:2c:4c:96:45:19:52:9c:74:c8:d8:67:a7:7b: c4:ea:a5:8b:1e:c7:a9:c0:68:c0:f4:e9:88:03:bf:24:a4:f3: 65:de:1b:41:cb:a3:2f:3d:b0:23:70:a5:e7:9d:fb:cb:38:d4: 7c:7f:75:ab:33:a9:71:12:d3:23:75:4a:3c:c1:77:90:28:4c: 88:b7:77:48:a5:b7:17:d8:f1:ec:ed:20:0b:3e:4b:6b:4c:f6: 3a:2c:a2:9e:13:2a:ca:d7:aa:d1:78:40:f3:70:91:ad:8f:d4: de:91:1d:6e:2f:e2:56:b3:f7:cc:b8:59:d2:c1:6d:5b:fd:a1: 50:a8:76:91:f3:25:9a:62:cd:cf:97:92:36:21:5a:a8:07:26: f8:df:31:82:03:1e:d8:15:ff:6d:07:e6:56:0c:5e:2a:b3:3b: 28:9b:7e:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRk5487ULZAa5f+jeRAkPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMjNiOTczMWIxOTZiMWFjYmM4MjlmNWIyOGIzMjVmZDlk M2UzZDQwHhcNMjUxMjEyMDgwMDQ1WhcNMjUxMjEzMDgwMDQ1WjAzMTEwLwYDVQQD EygzZjA0NWIyOWM4MzI2YWFiMWNhYTM5NjhmMmJmY2Y3OWFmZjYxZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8R/WNq2pTvKp38763Bkq7Od+TRi aAtTyZWN6uHhl+Q8SaFFw4dR8hI5MaKF62iKTOX73bJGBildOG783FVuxZ2bWPgv TGhKP79f8fmOoYiO39RjwrkvKlJ1Mn4dmgzp+j7fZ2j1OYCYJ5id4gMRmrGO6ToX zPO2VtXAyvuQGmzpiGmTmju6oxkTN0fmjxg1f1cpNb7LNrxNR7KIPyLr112MruYk LtIWvctpLr/ctCgTprkEj2QPQ66psGrfzbfSI9+dVLqL5jvcjPC6g5MXjhyynp66 DFoFEJwACGdA7fYS+WzTaB7yIXBQjeCXWPj6ErO7QsbGSzp/NkmgX20FjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8EWynIMmqrHKo5aPK/z3mv9h2CMB8GA1UdIwQY MBaAFIMjuXMbGWsay8gp9bKLMl/Z0+PUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2Yt Y2ExZTVmMDgxOTUwLzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2YtY2ExZTVmMDgxOTUw LzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzGKfQYKi 3GLRzhzIXrpUC8ET8UU5ugyhyoaMLVwNsqnmhHPQSe+KTCasADXYvM9zdErnfOkb HKcWyonKUS5u8j7s2K4CSpoGplHwtNbgHRl5mIxsXfNqw1Kw/iTN/xgsTJZFGVKc dMjYZ6d7xOqlix7HqcBowPTpiAO/JKTzZd4bQcujLz2wI3Cl5537yzjUfH91qzOp cRLTI3VKPMF3kChMiLd3SKW3F9jx7O0gCz5La0z2OiyinhMqyteq0XhA83CRrY/U 3pEdbi/iVrP3zLhZ0sFtW/2hUKh2kfMlmmLNz5eSNiFaqAcm+N8xggMe2BX/bQfm VgxeKrM7KJt+Bw== -----END CERTIFICATE-----Generated at Fri Dec 12 14:22:52 2025 by rpki-client