This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json) Hash identifier: obkkKFcMue1HJvzesWgLSc4sVw4lugoZl50oQ4y0tHU= Subject key identifier: B5:AD:63:C6:E6:6D:B9:A7:75:57:60:C9:F7:EA:12:41:64:54:CE:4C Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c Certificate serial: 019AFC1F32F8DF7413879A047D43DA515342 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft Manifest number: 0E97 Signing time: Mon 08 Dec 2025 04:01:34 +0000 Manifest this update: Mon 08 Dec 2025 04:01:34 +0000 Manifest next update: Tue 09 Dec 2025 04:01:34 +0000 Files and hashes: 1: JQj924cUZ739dTo2CAmTW-Nn1zw.roa (hash: wLvSRyuv0hEPp/uJ8ZfBwX5TJv2CK5mAgRM5bxes1Tg=) 2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: yxSwdtIPwxfpbArxcxDn8foqeGj+ajoEtWSvTi0qIwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:1f:32:f8:df:74:13:87:9a:04:7d:43:da:51:53:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c Validity Not Before: Dec 8 04:01:34 2025 GMT Not After : Dec 9 04:01:34 2025 GMT Subject: CN=b5ad63c6e66db9a7755760c9f7ea12416454ce4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:7a:52:34:d3:6a:3f:d7:ab:95:cf:4c:4b: 39:fb:c3:5f:59:f4:b3:d3:c7:75:de:86:90:d5:fd: 6e:dc:11:71:c2:d1:94:9c:78:6e:96:d9:5c:9c:99: 8e:12:33:35:39:8a:b2:d5:1d:36:34:21:9f:f4:37: 59:49:93:00:54:ef:8b:2e:9e:9b:45:e9:f7:bb:ec: 0a:e6:2e:29:d5:38:35:5a:9f:ec:bb:31:ed:9c:9b: 07:99:cc:1b:c5:4c:22:99:87:ea:aa:c8:4b:d7:2d: 43:88:a7:fb:8d:08:84:ba:c7:c6:30:08:ca:d8:51: c7:42:24:95:cf:e2:15:d1:7d:0e:0f:48:9c:2d:f7: a8:06:51:08:a2:0c:54:86:10:9c:25:97:f1:2d:d8: 5a:ee:01:83:d1:03:65:53:ed:d8:2c:97:8a:4f:f5: 00:b3:b7:cd:ad:9e:25:0f:59:4b:c5:92:f1:e0:36: c5:19:41:43:7a:3b:2d:95:04:a7:1d:54:fe:38:55: 00:13:0d:3e:3b:00:5b:fa:67:48:dd:44:ae:9f:af: e8:c0:9a:44:21:c6:ee:9e:51:81:57:3f:f7:3f:85: dd:53:e2:7b:eb:a0:1a:37:02:d4:94:9e:e7:1e:c2: 1e:dc:d6:02:c6:55:a1:b7:0a:c4:92:63:fd:9c:69: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AD:63:C6:E6:6D:B9:A7:75:57:60:C9:F7:EA:12:41:64:54:CE:4C X509v3 Authority Key Identifier: keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d8:04:a8:ae:49:26:f2:9d:84:33:03:fc:e6:ce:08:52:e9: 04:92:e8:7d:30:4f:9e:e4:65:c3:12:61:fd:f2:aa:66:9b:c7: d8:67:13:06:a1:98:a1:1e:a3:39:0f:c8:26:63:df:ae:0b:42: 73:47:1c:99:a6:85:e8:6d:2d:90:72:2f:f3:5c:e1:36:8c:05: 5a:60:af:2c:f7:dd:f3:ed:e7:da:b0:ca:27:dc:ce:9b:8d:82: 46:0f:ad:51:13:0c:ca:c2:4c:cb:b6:9d:cd:0c:fb:da:30:11: 2f:0e:da:9b:34:0b:9b:57:8e:2f:bf:fa:b3:2d:24:27:84:c4: 9e:f8:61:d0:c8:fc:b2:36:c8:09:f3:ea:62:ab:46:19:41:85: a1:26:31:80:cf:eb:67:4f:86:7a:68:f4:a0:5d:ae:16:d0:86: f1:f3:fa:ff:11:da:34:18:bb:64:54:01:16:9f:f8:f0:cc:b3: 86:a9:25:e0:a7:f7:bc:2e:bf:f0:c3:ea:36:ea:fd:54:03:1b: 66:80:d5:3d:84:72:4b:3c:35:ac:4f:c2:94:2d:b6:93:15:95: 51:ce:03:fb:0a:42:d7:2e:6c:73:50:4a:4f:9d:fe:3a:e5:31: 12:eb:df:13:19:b6:dd:b5:b6:33:0f:bf:3f:38:d7:c6:42:f7: ed:2e:e3:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8HzL433QTh5oEfUPaUVNCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNTNkOWI1MWY0N2FhNTVmOWU1MjcwNDc1NDg2OWY1NTM2 YmFlNGMwHhcNMjUxMjA4MDQwMTM0WhcNMjUxMjA5MDQwMTM0WjAzMTEwLwYDVQQD EyhiNWFkNjNjNmU2NmRiOWE3NzU1NzYwYzlmN2VhMTI0MTY0NTRjZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtph6UjTTaj/Xq5XPTEs5+8NfWfSz 08d13oaQ1f1u3BFxwtGUnHhultlcnJmOEjM1OYqy1R02NCGf9DdZSZMAVO+LLp6b Ren3u+wK5i4p1Tg1Wp/suzHtnJsHmcwbxUwimYfqqshL1y1DiKf7jQiEusfGMAjK 2FHHQiSVz+IV0X0OD0icLfeoBlEIogxUhhCcJZfxLdha7gGD0QNlU+3YLJeKT/UA s7fNrZ4lD1lLxZLx4DbFGUFDejstlQSnHVT+OFUAEw0+OwBb+mdI3USun6/owJpE IcbunlGBVz/3P4XdU+J766AaNwLUlJ7nHsIe3NYCxlWhtwrEkmP9nGn3OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWtY8bmbbmndVdgyffqEkFkVM5MMB8GA1UdIwQY MBaAFIBT2bUfR6pV+eUnBHVIafVTa65MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWIt YTE1YWY1ZThmMTNjLzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWItYTE1YWY1ZThmMTNj LzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtgEqK5J JvKdhDMD/ObOCFLpBJLofTBPnuRlwxJh/fKqZpvH2GcTBqGYoR6jOQ/IJmPfrgtC c0ccmaaF6G0tkHIv81zhNowFWmCvLPfd8+3n2rDKJ9zOm42CRg+tURMMysJMy7ad zQz72jARLw7amzQLm1eOL7/6sy0kJ4TEnvhh0Mj8sjbICfPqYqtGGUGFoSYxgM/r Z0+Gemj0oF2uFtCG8fP6/xHaNBi7ZFQBFp/48Myzhqkl4Kf3vC6/8MPqNur9VAMb ZoDVPYRySzw1rE/ClC22kxWVUc4D+wpC1y5sc1BKT53+OuUxEuvfExm23bW2Mw+/ PzjXxkL37S7j8A== -----END CERTIFICATE-----Generated at Mon Dec 8 08:09:53 2025 by rpki-client