This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft File: gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft (raw, json) Hash identifier: +gyhLt46AZAYMacLF3xFB9ttJTHDoUfXpDfMYExy60w= Subject key identifier: 5A:E8:5D:8B:63:65:86:F6:C5:2E:49:DB:CB:B4:35:99:85:50:05:B2 Authority key identifier: 80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC Certificate issuer: /CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc Certificate serial: 019B40FF77B080AD698E15D368462C77C013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft Manifest number: 7D Signing time: Sun 21 Dec 2025 13:00:42 +0000 Manifest this update: Sun 21 Dec 2025 13:00:42 +0000 Manifest next update: Mon 22 Dec 2025 13:00:42 +0000 Files and hashes: 1: ZPxgsnjv7jwo30luYis5CI0t_T4.roa (hash: EMPPfN7XNvjOmVJeUGZArk1l9zfLaFwM7b+rjzdo6CA=) 2: gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl (hash: /7qDp0GQhQwhipiiOkNsy0557RhckUSTfa/Xkpuh0b0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:77:b0:80:ad:69:8e:15:d3:68:46:2c:77:c0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc Validity Not Before: Dec 21 13:00:42 2025 GMT Not After : Dec 22 13:00:42 2025 GMT Subject: CN=5ae85d8b636586f6c52e49dbcbb43599855005b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:06:2a:eb:d6:3e:0b:bb:2d:3c:f1:15:97:98: 63:ed:f6:36:00:a3:d8:72:3c:72:c3:8b:87:2f:47: 55:1b:c2:f9:0d:59:48:b9:c3:56:04:1a:a3:71:0f: 9f:03:35:f0:67:f1:57:8f:e5:9b:1c:8b:9e:c7:c8: c3:3b:6b:36:e5:5c:92:61:db:e4:e6:cf:2e:3a:3d: 28:90:00:3f:58:b8:1c:bf:29:eb:7f:e6:c8:0d:d3: df:0f:fd:7e:54:51:51:28:93:f5:29:6a:98:16:6f: 8a:3d:dd:41:a2:dc:43:59:65:37:df:3a:bc:9a:4d: 75:8d:e3:5b:39:fb:b2:dd:55:fe:9e:ce:52:da:57: 15:93:22:86:48:04:c5:5e:48:c6:e8:4d:55:98:8c: 93:a6:74:8f:2c:2d:49:fb:6c:b0:38:7c:c5:33:41: 1f:0a:99:88:58:00:e3:40:cb:3a:cd:68:e4:d5:d4: 4d:cf:73:fd:e2:19:cc:af:95:35:c8:56:47:ad:af: 4d:f2:87:67:0a:11:15:41:0b:84:0e:52:d5:c0:fc: 4b:ee:82:7d:ca:d7:25:e0:52:a4:13:15:b0:78:fb: 26:ba:e9:8f:63:87:98:52:aa:ce:d4:76:b8:6a:71: ef:6d:dc:fa:27:2c:5e:e5:29:a9:16:09:0a:22:d7: 36:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E8:5D:8B:63:65:86:F6:C5:2E:49:DB:CB:B4:35:99:85:50:05:B2 X509v3 Authority Key Identifier: keyid:80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:22:e4:72:52:2d:f2:b5:b1:3f:28:8f:f3:73:5e:c8:48:c8: e1:39:79:dd:19:98:d4:32:81:04:97:b6:82:71:44:71:5d:4f: ed:ea:2c:f7:ee:5a:8e:ba:76:c1:8f:94:83:50:cd:52:fb:6c: 03:74:25:dd:d7:b9:85:43:35:41:dc:9f:40:1a:a5:fa:03:a0: e8:72:1b:3b:92:bb:2d:05:7a:91:68:0d:dd:a0:a9:04:fb:94: d4:ae:48:ac:02:65:8b:7b:b6:6d:a9:ea:71:9d:7c:d2:a0:cd: a6:c1:2a:ca:c5:fe:d5:42:35:ed:f3:7a:d7:e7:51:d1:38:58: 76:87:b4:70:72:35:d2:5b:71:0d:5f:8c:ae:67:9c:c6:ce:ad: 6a:e4:25:06:96:73:6f:36:78:bc:17:56:f6:e0:3c:28:f3:17: 97:95:2e:37:8f:97:55:75:74:7c:fb:58:cd:2e:c0:cc:a4:cb: 2d:32:13:2e:8f:fc:35:11:c0:3b:97:45:e1:43:ad:11:36:65: d2:b3:d4:3a:25:a1:d7:1f:9c:2a:77:de:23:f4:01:d5:a1:b1: 99:7f:b3:70:eb:c2:1a:4b:48:e1:c2:71:a9:ff:91:57:10:a5: c6:0a:18:c3:a8:07:c7:47:95:c3:a5:7f:74:63:ad:b8:f9:91: 6a:5a:f3:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/3ewgK1pjhXTaEYsd8ATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZjM1OGIyY2UwMmJhOGZmMGJhMTRlZWM1ZjMzN2E4ZGEx MWMwZGMwHhcNMjUxMjIxMTMwMDQyWhcNMjUxMjIyMTMwMDQyWjAzMTEwLwYDVQQD Eyg1YWU4NWQ4YjYzNjU4NmY2YzUyZTQ5ZGJjYmI0MzU5OTg1NTAwNWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAYq69Y+C7stPPEVl5hj7fY2AKPY cjxyw4uHL0dVG8L5DVlIucNWBBqjcQ+fAzXwZ/FXj+WbHIuex8jDO2s25VySYdvk 5s8uOj0okAA/WLgcvynrf+bIDdPfD/1+VFFRKJP1KWqYFm+KPd1BotxDWWU33zq8 mk11jeNbOfuy3VX+ns5S2lcVkyKGSATFXkjG6E1VmIyTpnSPLC1J+2ywOHzFM0Ef CpmIWADjQMs6zWjk1dRNz3P94hnMr5U1yFZHra9N8odnChEVQQuEDlLVwPxL7oJ9 ytcl4FKkExWwePsmuumPY4eYUqrO1Ha4anHvbdz6Jyxe5SmpFgkKItc2qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFroXYtjZYb2xS5J28u0NZmFUAWyMB8GA1UdIwQY MBaAFIDzWLLOArqP8LoU7sXzN6jaEcDcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BOWXNzNEN1b193dWhUdXhmTTNxTm9Sd053LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kODc5M2QtNDdkOC00ZDc4LTlhZGUt MzUxYmZkODNmY2MxLzEvZ1BOWXNzNEN1b193dWhUdXhmTTNxTm9Sd053Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kODc5M2QtNDdkOC00ZDc4LTlhZGUtMzUxYmZkODNmY2Mx LzEvZ1BOWXNzNEN1b193dWhUdXhmTTNxTm9Sd053LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyLkclIt 8rWxPyiP83NeyEjI4Tl53RmY1DKBBJe2gnFEcV1P7eos9+5ajrp2wY+Ug1DNUvts A3Ql3de5hUM1QdyfQBql+gOg6HIbO5K7LQV6kWgN3aCpBPuU1K5IrAJli3u2banq cZ180qDNpsEqysX+1UI17fN61+dR0ThYdoe0cHI10ltxDV+Mrmecxs6tauQlBpZz bzZ4vBdW9uA8KPMXl5UuN4+XVXV0fPtYzS7AzKTLLTITLo/8NRHAO5dF4UOtETZl 0rPUOiWh1x+cKnfeI/QB1aGxmX+zcOvCGktI4cJxqf+RVxClxgoYw6gHx0eVw6V/ dGOtuPmRalrz1w== -----END CERTIFICATE-----Generated at Sun Dec 21 20:58:25 2025 by rpki-client