This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft File: gnfY854_j7Zjj3CDq58WwEfQ02Q.mft (raw, json) Hash identifier: A5bnajnDJt63fOglhOMREpuI8IvjEtAwPlULJ2jC9Ek= Subject key identifier: EA:3B:AD:10:70:9A:60:3B:A8:5A:F3:AE:35:B7:31:8B:6B:12:60:DA Authority key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64 Certificate issuer: /CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364 Certificate serial: 019B39EB1A1213B01EAF1C3F38B9FE755642 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft Manifest number: 1266 Signing time: Sat 20 Dec 2025 04:01:07 +0000 Manifest this update: Sat 20 Dec 2025 04:01:07 +0000 Manifest next update: Sun 21 Dec 2025 04:01:07 +0000 Files and hashes: 1: 9flLcmlhEqT9lrkmfyvcqwcZaPE.roa (hash: s8DMn0SNfjEZl7A0rydWGLHujZ1siiQiNSjrpdgAWxo=) 2: gnfY854_j7Zjj3CDq58WwEfQ02Q.crl (hash: r8DDWX8lZ15cSONqY/eYYFZsnE3N3QYD39yJsi2rvkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:1a:12:13:b0:1e:af:1c:3f:38:b9:fe:75:56:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364 Validity Not Before: Dec 20 04:01:07 2025 GMT Not After : Dec 21 04:01:07 2025 GMT Subject: CN=ea3bad10709a603ba85af3ae35b7318b6b1260da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ed:5a:9d:6c:83:2a:3b:16:3b:89:ca:3c:69: ef:91:e6:5e:07:d7:49:69:62:b2:18:f2:75:6b:a4: 80:37:a5:32:54:7c:d0:b0:15:d8:d5:c5:a0:8b:22: 79:04:1e:93:e1:95:6d:c6:6a:94:97:43:b5:fa:c9: 64:13:aa:b0:ed:b8:a8:fd:3b:6b:8e:6b:f0:ed:f4: a4:15:b6:8c:01:1a:d3:5c:77:f2:58:bf:5a:75:40: 09:0d:5a:2f:94:e6:50:ee:d5:69:32:b8:04:e2:85: f8:a1:3c:dd:3d:d5:0a:00:57:f4:86:8e:61:db:28: 25:42:a0:7b:e0:f0:a3:d3:97:b4:e0:8b:0a:14:62: 61:1a:01:45:be:4b:bb:61:66:2b:0a:03:e8:fe:f8: bc:5d:48:64:ad:79:63:cd:13:19:dd:8f:89:b7:d1: 2a:0c:5e:8d:fa:10:55:2b:a8:75:26:4b:8e:6f:6c: 4c:6c:b5:d0:f1:e4:df:2e:df:8c:91:39:f7:a5:a4: 2a:52:3a:5e:67:68:60:c9:b4:73:99:15:5a:d0:2e: f4:e8:4a:fc:4d:8f:7d:78:82:90:c4:5b:73:51:4c: bb:40:50:af:68:8a:16:8d:3c:93:ab:36:d3:53:eb: 39:fa:1f:2f:f6:e3:ff:6a:e0:ec:37:6f:41:01:eb: 6b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3B:AD:10:70:9A:60:3B:A8:5A:F3:AE:35:B7:31:8B:6B:12:60:DA X509v3 Authority Key Identifier: keyid:82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:85:2e:1b:3a:88:c3:0f:0f:b2:42:08:9f:d6:28:c9:46:f7: 82:9a:eb:b1:3b:1f:e5:89:38:6f:85:50:d3:ba:59:be:ea:47: bc:5a:73:14:98:a0:35:ac:7d:0e:19:9b:f1:c6:43:85:68:7e: 1f:bf:aa:1c:01:fc:57:e0:50:ad:32:52:8e:67:79:96:71:74: 09:9e:c6:18:8d:69:c6:c8:de:ef:0a:2f:cb:20:3a:c2:83:bc: e9:eb:01:4d:0e:4e:21:bb:4f:cb:da:b3:70:66:9f:13:b3:57: 53:01:8c:db:51:9f:79:2c:b4:a0:36:97:71:10:13:82:9b:f3: d0:8b:e4:f2:49:ea:fa:ce:63:d9:8b:64:c5:a6:e8:50:e7:e8: 08:e4:8e:1b:0e:88:98:d0:25:11:c1:f2:a7:db:df:6a:76:2c: b3:b3:fc:8a:3a:cc:c6:89:86:e4:7f:e4:64:f4:1d:eb:3a:f9: 71:0c:13:d8:a8:64:2b:bc:86:ca:a8:68:f3:ae:cb:71:03:dc: 22:69:13:7c:b1:82:68:e0:d6:59:f9:97:bb:16:15:e0:81:b1: 4a:82:81:db:2a:34:77:a7:6c:9b:3a:8d:6e:a9:a8:90:6a:07: fe:35:40:0b:fc:66:79:97:f5:87:2f:55:88:71:40:5b:42:d5: f9:4c:6e:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56xoSE7Aerxw/OLn+dVZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzdkOGYzOWUzZjhmYjY2MzhmNzA4M2FiOWYxNmMwNDdk MGQzNjQwHhcNMjUxMjIwMDQwMTA3WhcNMjUxMjIxMDQwMTA3WjAzMTEwLwYDVQQD EyhlYTNiYWQxMDcwOWE2MDNiYTg1YWYzYWUzNWI3MzE4YjZiMTI2MGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne1anWyDKjsWO4nKPGnvkeZeB9dJ aWKyGPJ1a6SAN6UyVHzQsBXY1cWgiyJ5BB6T4ZVtxmqUl0O1+slkE6qw7bio/Ttr jmvw7fSkFbaMARrTXHfyWL9adUAJDVovlOZQ7tVpMrgE4oX4oTzdPdUKAFf0ho5h 2yglQqB74PCj05e04IsKFGJhGgFFvku7YWYrCgPo/vi8XUhkrXljzRMZ3Y+Jt9Eq DF6N+hBVK6h1JkuOb2xMbLXQ8eTfLt+MkTn3paQqUjpeZ2hgybRzmRVa0C706Er8 TY99eIKQxFtzUUy7QFCvaIoWjTyTqzbTU+s5+h8v9uP/auDsN29BAetr1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOo7rRBwmmA7qFrzrjW3MYtrEmDaMB8GA1UdIwQY MBaAFIJ32POeP4+2Y49wg6ufFsBH0NNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNDkxYmYtODRhZC00OGEzLWE2MTkt NTc3ZGExMmUzNjQ4LzEvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8xNDkxYmYtODRhZC00OGEzLWE2MTktNTc3ZGExMmUzNjQ4 LzEvZ25mWTg1NF9qN1pqajNDRHE1OFd3RWZRMDJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIUuGzqI ww8PskIIn9YoyUb3gprrsTsf5Yk4b4VQ07pZvupHvFpzFJigNax9Dhmb8cZDhWh+ H7+qHAH8V+BQrTJSjmd5lnF0CZ7GGI1pxsje7wovyyA6woO86esBTQ5OIbtPy9qz cGafE7NXUwGM21GfeSy0oDaXcRATgpvz0Ivk8knq+s5j2YtkxaboUOfoCOSOGw6I mNAlEcHyp9vfanYss7P8ijrMxomG5H/kZPQd6zr5cQwT2KhkK7yGyqho867LcQPc ImkTfLGCaODWWfmXuxYV4IGxSoKB2yo0d6dsmzqNbqmokGoH/jVAC/xmeZf1hy9V iHFAW0LV+UxuhQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:50:30 2025 by rpki-client