This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft File: gPNFqCznFt0-djMXL4cDBH9rfZQ.mft (raw, json) Hash identifier: T97oVbL3K6f7RctW/X3IRWvR2X1E5Bz/9CgZOUFCN0o= Subject key identifier: CC:12:0A:23:EC:D8:4F:E4:A6:FA:76:D1:81:FC:21:65:3E:5E:31:2F Authority key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94 Certificate issuer: /CN=80f345a82ce716dd3e7633172f8703047f6b7d94 Certificate serial: 019B5975FB0A8636D8DC46FAA8E0EED01218 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft Manifest number: 1727 Signing time: Fri 26 Dec 2025 07:01:02 +0000 Manifest this update: Fri 26 Dec 2025 07:01:02 +0000 Manifest next update: Sat 27 Dec 2025 07:01:02 +0000 Files and hashes: 1: gPNFqCznFt0-djMXL4cDBH9rfZQ.crl (hash: onSuMPxQLVvlFQD4TytTxBPP1l5fdtkvMjI7eswrZN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:fb:0a:86:36:d8:dc:46:fa:a8:e0:ee:d0:12:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80f345a82ce716dd3e7633172f8703047f6b7d94 Validity Not Before: Dec 26 07:01:02 2025 GMT Not After : Dec 27 07:01:02 2025 GMT Subject: CN=cc120a23ecd84fe4a6fa76d181fc21653e5e312f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7f:94:4b:a4:bd:b2:ee:d6:a5:be:06:46:31: 8f:26:89:c3:f6:eb:95:3f:a5:46:44:be:c7:2d:17: 9f:ee:52:3d:8e:65:1f:25:e0:76:bc:fc:97:36:16: 1e:ff:d5:15:fe:1d:19:1b:0a:64:a1:45:38:dc:fe: 2e:14:58:de:3f:60:48:aa:64:30:2a:02:07:0e:a5: 1e:77:59:fc:55:5a:db:ea:dd:6e:37:c9:dc:a4:23: 6f:d5:01:75:b1:89:8a:e2:4a:8a:dc:89:cd:7d:23: b1:87:fe:2a:00:99:01:be:6a:29:e5:af:2b:10:18: 72:5c:cf:94:34:cd:82:2a:8a:e7:ec:3e:3f:86:e1: f6:83:5b:87:67:e0:90:2b:53:1a:fb:e5:96:a7:65: 4c:88:4f:94:d4:8c:2a:00:3a:c8:9c:b2:b0:aa:24: f8:8e:3d:57:56:0a:fe:2b:77:14:d1:03:a7:2d:e9: 45:53:10:f6:e3:5a:b9:46:68:f6:b6:41:b2:8e:b1: bc:8d:b3:55:64:e5:cf:de:5a:e6:09:11:f2:68:23: a8:df:6c:f0:83:d5:9e:82:cd:1a:61:87:5c:af:81: 8f:2e:ce:0d:2e:c4:53:e3:a9:80:13:b8:d5:44:8f: b7:95:e5:8d:b3:31:98:41:15:b2:89:05:b4:13:70: 0c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:12:0A:23:EC:D8:4F:E4:A6:FA:76:D1:81:FC:21:65:3E:5E:31:2F X509v3 Authority Key Identifier: keyid:80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:36:7d:08:0d:f3:d9:01:e7:cb:9c:a6:01:74:c6:92:eb:1f: a0:43:b6:66:d9:84:95:e7:89:a7:58:71:3a:77:2c:74:ab:40: 5a:79:8e:0e:7b:ca:e5:5b:62:d5:b1:31:e1:26:81:17:28:d0: b7:8f:b0:0b:e9:c8:a6:62:3f:a9:24:a2:36:df:a2:3b:75:aa: c2:f4:db:72:a1:7a:24:2e:48:c6:99:6b:6a:d4:2b:52:4c:69: 51:2f:14:58:5c:53:3f:e2:0a:1b:46:a6:99:8e:cf:13:3a:44: 3e:e1:6e:e6:84:a1:fe:78:d2:03:25:6a:7a:e1:39:1f:09:45: 7c:6f:30:56:91:be:36:e1:e1:5b:af:ef:74:b7:da:51:a5:0b: 53:45:31:44:a3:90:e3:64:8b:3a:03:e2:43:54:4c:f6:0a:d9: ce:a0:54:1a:40:f9:43:36:df:f9:bc:54:99:d7:1c:51:1c:15: 76:db:46:ea:fc:e9:ee:18:33:fa:3c:cb:e1:d3:b7:e3:27:1b: 27:94:76:f3:d0:5e:e3:e7:8e:d5:1f:19:a3:51:9f:58:da:f5: 63:ca:a9:d0:b1:d3:37:1f:e4:9e:94:62:76:30:f4:eb:de:54: 60:3f:a6:ce:11:4b:7c:ad:73:cc:7a:88:25:c0:8b:39:25:1f: e2:f3:7d:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdfsKhjbY3Eb6qODu0BIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZjM0NWE4MmNlNzE2ZGQzZTc2MzMxNzJmODcwMzA0N2Y2 YjdkOTQwHhcNMjUxMjI2MDcwMTAyWhcNMjUxMjI3MDcwMTAyWjAzMTEwLwYDVQQD EyhjYzEyMGEyM2VjZDg0ZmU0YTZmYTc2ZDE4MWZjMjE2NTNlNWUzMTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H+US6S9su7Wpb4GRjGPJonD9uuV P6VGRL7HLRef7lI9jmUfJeB2vPyXNhYe/9UV/h0ZGwpkoUU43P4uFFjeP2BIqmQw KgIHDqUed1n8VVrb6t1uN8ncpCNv1QF1sYmK4kqK3InNfSOxh/4qAJkBvmop5a8r EBhyXM+UNM2CKorn7D4/huH2g1uHZ+CQK1Ma++WWp2VMiE+U1IwqADrInLKwqiT4 jj1XVgr+K3cU0QOnLelFUxD241q5Rmj2tkGyjrG8jbNVZOXP3lrmCRHyaCOo32zw g9Wegs0aYYdcr4GPLs4NLsRT46mAE7jVRI+3leWNszGYQRWyiQW0E3AMLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwSCiPs2E/kpvp20YH8IWU+XjEvMB8GA1UdIwQY MBaAFIDzRags5xbdPnYzFy+HAwR/a32UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wOTEzMzAtNWY4My00YWQxLTllMTAt NzRjNWRiN2MwOTNhLzEvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8wOTEzMzAtNWY4My00YWQxLTllMTAtNzRjNWRiN2MwOTNh LzEvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDZ9CA3z 2QHny5ymAXTGkusfoEO2ZtmEleeJp1hxOncsdKtAWnmODnvK5Vti1bEx4SaBFyjQ t4+wC+nIpmI/qSSiNt+iO3WqwvTbcqF6JC5IxplratQrUkxpUS8UWFxTP+IKG0am mY7PEzpEPuFu5oSh/njSAyVqeuE5HwlFfG8wVpG+NuHhW6/vdLfaUaULU0UxRKOQ 42SLOgPiQ1RM9grZzqBUGkD5Qzbf+bxUmdccURwVdttG6vzp7hgz+jzL4dO34ycb J5R289Be4+eO1R8Zo1GfWNr1Y8qp0LHTNx/knpRidjD0695UYD+mzhFLfK1zzHqI JcCLOSUf4vN9xA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:22 2025 by rpki-client