This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft File: gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft (raw, json) Hash identifier: uUn1C90gKruvS4G0Ang+ZKYd8TRx3YHU1KMCpffAneU= Subject key identifier: 87:91:0D:B7:9E:7A:D1:4E:95:61:A8:21:5F:F8:AD:8C:73:D0:43:25 Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7 Certificate issuer: /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7 Certificate serial: 019B0F00C6DEDE4736279F8F2471E925349C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 20:01:07 +0000 Manifest this update: Thu 11 Dec 2025 20:01:07 +0000 Manifest next update: Fri 12 Dec 2025 20:01:07 +0000 Files and hashes: 1: 1GcdqVYrNeFzAfzIvWc1uwT98aA.roa (hash: 4uQf4DSwbX7BKGTdoGDfjY+9K4u0Qbg5gbpIHJoyB/8=) 2: gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl (hash: DxlypNDfwff3ExkcJ4mBG34Xr0fUOWT+/00i7pfYvEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:c6:de:de:47:36:27:9f:8f:24:71:e9:25:34:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7 Validity Not Before: Dec 11 20:01:07 2025 GMT Not After : Dec 12 20:01:07 2025 GMT Subject: CN=87910db79e7ad14e9561a8215ff8ad8c73d04325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:aa:e8:6f:b5:61:81:4f:ad:08:91:e2:67: ac:cf:1e:3d:21:c3:7d:c4:16:70:88:bf:2e:7c:7d: 2e:ab:24:bd:d3:6d:99:0e:ee:1d:37:16:da:0c:e6: 64:f4:60:ee:bc:8c:b6:15:02:a1:ab:21:9a:bb:bc: fe:9a:26:98:9a:ed:11:cf:bb:3c:63:ed:1c:a1:5e: 5b:c6:91:42:fe:6e:9d:5b:ae:10:f9:d4:df:53:cd: 72:c9:3e:f5:3a:3d:b1:02:bf:f4:ad:bd:9a:1b:90: 29:fc:98:55:9d:79:0a:85:cb:e9:45:ff:08:b3:a2: e9:5a:02:e2:f3:cb:d0:d4:ee:1b:00:5a:d2:d6:23: a2:32:28:b7:cf:23:99:bc:a4:f7:25:8d:f6:44:97: 75:1e:dc:19:e9:8a:ac:43:84:86:91:ed:68:e7:13: 8c:c1:f0:3b:ed:bf:4c:54:9e:76:a8:f7:98:f9:f4: af:65:ba:58:d6:75:c8:43:db:9c:8e:fe:3e:1a:ea: 17:cc:ff:a9:99:ea:10:ab:81:29:7e:ef:1e:e7:b6: 75:2f:f0:09:39:05:37:70:85:be:cb:ff:d9:3e:84: 82:c0:8f:2f:e7:15:0b:5d:b3:ab:c7:a4:3a:41:bf: da:e9:05:66:4c:43:87:dd:32:ef:a4:36:fd:2d:76: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:91:0D:B7:9E:7A:D1:4E:95:61:A8:21:5F:F8:AD:8C:73:D0:43:25 X509v3 Authority Key Identifier: keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c3:17:3a:05:cc:2a:f0:3b:da:18:d1:b8:ce:95:2d:18:2e: 5d:bf:32:23:12:b2:cb:20:3a:f5:66:e9:ff:2b:a0:4b:14:7e: f3:aa:0c:5d:a0:c0:c6:69:34:c1:b4:33:c8:86:5a:66:00:56: 2b:1a:81:5b:79:71:ea:af:b6:a2:93:c4:21:f2:83:8e:e1:25: e3:2e:d2:ff:4f:16:90:d4:b4:b1:14:f1:6c:4f:82:ff:98:74: bd:0c:d8:e5:16:82:f4:da:46:e5:ee:17:be:ca:25:94:01:18: 78:c9:89:2f:2d:ed:4b:a1:e5:87:5d:1e:9c:51:19:ef:f7:0a: 40:0e:d1:3e:cc:24:68:9b:ad:2a:43:89:e4:3b:18:ef:80:18: 88:4f:fb:37:68:20:80:89:a8:9a:ed:2d:4c:5c:be:7c:6f:66: 71:31:4a:40:b1:93:af:aa:db:74:d7:76:a6:a0:ca:72:de:99: 74:f1:98:8e:27:ba:d9:de:8e:86:07:d8:7b:8d:9f:81:58:2d: 2d:67:92:bd:cc:b8:9b:a4:9a:f2:19:0a:cc:8d:93:3f:0b:53: 3a:68:00:1f:b7:30:c5:ef:26:42:70:7b:3e:0d:e2:44:94:80: 1b:57:00:da:e6:3a:db:fe:8f:ce:7b:2f:61:fc:b2:80:94:20: c6:c6:49:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAMbe3kc2J5+PJHHpJTScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzllYWQ4MzVhOGZjZmFlMGQ5ZWUyODM5Y2QxNjg4MWJh MTFkZDcwHhcNMjUxMjExMjAwMTA3WhcNMjUxMjEyMjAwMTA3WjAzMTEwLwYDVQQD Eyg4NzkxMGRiNzllN2FkMTRlOTU2MWE4MjE1ZmY4YWQ4YzczZDA0MzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB+q6G+1YYFPrQiR4meszx49IcN9 xBZwiL8ufH0uqyS9022ZDu4dNxbaDOZk9GDuvIy2FQKhqyGau7z+miaYmu0Rz7s8 Y+0coV5bxpFC/m6dW64Q+dTfU81yyT71Oj2xAr/0rb2aG5Ap/JhVnXkKhcvpRf8I s6LpWgLi88vQ1O4bAFrS1iOiMii3zyOZvKT3JY32RJd1HtwZ6YqsQ4SGke1o5xOM wfA77b9MVJ52qPeY+fSvZbpY1nXIQ9ucjv4+GuoXzP+pmeoQq4Epfu8e57Z1L/AJ OQU3cIW+y//ZPoSCwI8v5xULXbOrx6Q6Qb/a6QVmTEOH3TLvpDb9LXbgbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeRDbeeetFOlWGoIV/4rYxz0EMlMB8GA1UdIwQY MBaAFIJ56tg1qPz64NnuKDnNFogboR3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUt ZWUyOWM5MTM2ZThiLzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUtZWUyOWM5MTM2ZThi LzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocMXOgXM KvA72hjRuM6VLRguXb8yIxKyyyA69Wbp/yugSxR+86oMXaDAxmk0wbQzyIZaZgBW KxqBW3lx6q+2opPEIfKDjuEl4y7S/08WkNS0sRTxbE+C/5h0vQzY5RaC9NpG5e4X vsollAEYeMmJLy3tS6Hlh10enFEZ7/cKQA7RPswkaJutKkOJ5DsY74AYiE/7N2gg gImomu0tTFy+fG9mcTFKQLGTr6rbdNd2pqDKct6ZdPGYjie62d6OhgfYe42fgVgt LWeSvcy4m6Sa8hkKzI2TPwtTOmgAH7cwxe8mQnB7Pg3iRJSAG1cA2uY62/6Pznsv YfyygJQgxsZJVA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:00:53 2025 by rpki-client