This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json) Hash identifier: aoP4TcvmoFxKACVPUM4aCh2Zaha6jRBoIznelfa8+9U= Subject key identifier: 1D:ED:1E:A7:67:39:9A:E9:DA:9F:AF:DA:F2:86:01:B4:60:C3:C4:CC Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a Certificate serial: 019B3D5973EC10744B3795BA8BF9FDA8C701 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 20:00:31 +0000 Manifest this update: Sat 20 Dec 2025 20:00:31 +0000 Manifest next update: Sun 21 Dec 2025 20:00:31 +0000 Files and hashes: 1: Ihlsr9rpvmkWxK02pmiA4lbKi7A.roa (hash: 1gw28Etq9hJVkaq3S2dfCHriH+wtNxKLqiZRcbkKaJU=) 2: SaJps5NdZ3bVeOz3Y_T6YWQuimI.roa (hash: oi4EjPg7CTNf9EIHp927YsWRKdaqfzD1cBc8zdJg5ac=) 3: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: sDBr/wo9PjDPeqvqXq++wfFCu1gxIBrkzTQeEPVihtU=) 4: ncstDbEEJNmrMxxK2UE_gBED9t8.roa (hash: bytivv4P7l0F7luhHCBlkP+IGUZ4L9tUQ43UhSBpNYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:73:ec:10:74:4b:37:95:ba:8b:f9:fd:a8:c7:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a Validity Not Before: Dec 20 20:00:31 2025 GMT Not After : Dec 21 20:00:31 2025 GMT Subject: CN=1ded1ea767399ae9da9fafdaf28601b460c3c4cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:35:dc:a2:21:27:8c:84:f3:9c:f4:af:96:c5: ea:8a:40:d3:58:48:4d:34:e2:a1:fc:e8:3a:5e:11: a9:97:aa:d6:c9:8e:03:d8:49:98:d2:fa:ec:2e:91: f2:33:44:48:cb:03:ab:a4:9c:b3:fa:bb:bc:50:c7: 76:f3:ce:a2:16:76:fb:16:f2:3b:27:a8:2f:c3:f5: a7:e4:f8:38:05:eb:20:ff:ac:6e:65:20:fb:5b:05: 33:71:3a:89:a9:62:c5:70:03:2d:58:4f:96:6f:78: 4b:fb:17:8a:84:9f:f3:5a:30:3f:8b:4f:72:cb:d3: 01:6e:7d:70:3f:9c:5e:8a:55:62:66:47:a3:4d:d8: 05:df:71:54:ac:cc:0a:7f:b7:11:d1:66:a9:0c:dc: 47:5d:14:11:ce:1d:bb:07:64:91:04:79:c6:50:8d: 54:53:62:80:cc:ae:7f:5f:31:84:ae:01:ed:52:36: 64:9c:5a:9d:48:7d:14:63:24:73:a8:d3:cc:7d:1c: 09:73:61:43:2b:c0:d2:a6:fb:c1:0a:1e:3a:76:7d: 63:76:bc:9f:32:8b:86:f5:63:29:af:d2:74:0e:57: 87:b6:25:4f:33:aa:72:fd:c9:49:9d:70:5d:3b:94: ed:92:91:c4:0f:b4:38:24:1c:6b:f9:b7:e9:f0:c4: 87:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:ED:1E:A7:67:39:9A:E9:DA:9F:AF:DA:F2:86:01:B4:60:C3:C4:CC X509v3 Authority Key Identifier: keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:81:75:7a:74:35:a5:98:5e:95:41:5d:b8:2e:79:9d:70:29: 16:cc:af:ad:4c:c0:44:3c:d7:22:d8:da:61:78:da:81:b2:65: a5:0d:8f:e0:fe:09:8a:b6:12:01:ba:eb:d6:84:89:d1:78:12: 00:a3:b4:06:ee:e1:f1:55:7b:b5:85:ae:c8:87:c2:ca:58:47: 08:c3:ab:0c:0c:d3:71:b6:89:a7:33:eb:a0:19:e4:2c:7d:6d: 70:e3:40:b0:37:5b:57:b8:6f:97:c7:05:13:87:0a:da:25:d9: 8c:89:05:83:c0:f1:16:66:ae:6c:d9:95:c1:32:b2:e5:e0:0a: d2:27:86:ce:6b:21:35:c0:b3:bf:b5:d7:27:27:d7:49:ed:94: ff:c8:33:ff:eb:78:44:7c:f3:62:c7:72:cd:f3:3c:de:ef:3b: 0c:fb:1b:d7:6e:db:cf:3f:dc:a1:4c:73:98:75:2b:e9:58:29: f4:04:d8:98:b7:91:86:bf:83:35:d7:3b:67:ef:f4:ec:b9:d1: 7d:0e:7a:ba:44:e8:16:ec:e0:dc:96:55:15:ac:a4:71:3e:05: 36:b1:f3:c1:36:bd:71:d6:8f:2c:c9:83:23:81:eb:a1:b1:b7: b9:33:4a:b1:e3:e8:d9:3e:81:29:a9:45:0e:0d:de:a9:1b:cd: 8d:b8:b6:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WXPsEHRLN5W6i/n9qMcBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UwZTQ4MDQxMWI5Yzg4ZTkxNmRlZjkwZmMzYTkwMTAy NjM5NGEwHhcNMjUxMjIwMjAwMDMxWhcNMjUxMjIxMjAwMDMxWjAzMTEwLwYDVQQD EygxZGVkMWVhNzY3Mzk5YWU5ZGE5ZmFmZGFmMjg2MDFiNDYwYzNjNGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzXcoiEnjITznPSvlsXqikDTWEhN NOKh/Og6XhGpl6rWyY4D2EmY0vrsLpHyM0RIywOrpJyz+ru8UMd2886iFnb7FvI7 J6gvw/Wn5Pg4Besg/6xuZSD7WwUzcTqJqWLFcAMtWE+Wb3hL+xeKhJ/zWjA/i09y y9MBbn1wP5xeilViZkejTdgF33FUrMwKf7cR0WapDNxHXRQRzh27B2SRBHnGUI1U U2KAzK5/XzGErgHtUjZknFqdSH0UYyRzqNPMfRwJc2FDK8DSpvvBCh46dn1jdryf MouG9WMpr9J0DleHtiVPM6py/clJnXBdO5TtkpHED7Q4JBxr+bfp8MSHGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3tHqdnOZrp2p+v2vKGAbRgw8TMMB8GA1UdIwQY MBaAFIM+DkgEEbnIjpFt75D8OpAQJjlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMt NmMyMGViYWYzMGE5LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMtNmMyMGViYWYzMGE5 LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYF1enQ1 pZhelUFduC55nXApFsyvrUzARDzXItjaYXjagbJlpQ2P4P4JirYSAbrr1oSJ0XgS AKO0Bu7h8VV7tYWuyIfCylhHCMOrDAzTcbaJpzProBnkLH1tcONAsDdbV7hvl8cF E4cK2iXZjIkFg8DxFmaubNmVwTKy5eAK0ieGzmshNcCzv7XXJyfXSe2U/8gz/+t4 RHzzYsdyzfM83u87DPsb127bzz/coUxzmHUr6Vgp9ATYmLeRhr+DNdc7Z+/07LnR fQ56ukToFuzg3JZVFaykcT4FNrHzwTa9cdaPLMmDI4HrobG3uTNKsePo2T6BKalF Dg3eqRvNjbi2+g== -----END CERTIFICATE-----Generated at Sun Dec 21 02:01:12 2025 by rpki-client