This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft File: gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft (raw, json) Hash identifier: t2OQ1W0kIiLMthjwDRVFBUjPYB3QKltlnsb3xLabEzI= Subject key identifier: 8E:04:FF:A9:F8:8C:13:17:87:FC:4B:9B:ED:8E:4B:F7:87:B6:38:6C Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34 Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34 Certificate serial: 019B5ABF70473FC449D818893235D4046996 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft Manifest number: 0CFC Signing time: Fri 26 Dec 2025 13:00:54 +0000 Manifest this update: Fri 26 Dec 2025 13:00:54 +0000 Manifest next update: Sat 27 Dec 2025 13:00:54 +0000 Files and hashes: 1: gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl (hash: j1vi9tw41WsSvtBmZahS1gCdotpsIRGfFr2k7lY3wxQ=) 2: gi0_EyMqvU0B6RLloJeCvIjrKZc.roa (hash: SmxwMosUzjILazIuYN/g07frRTjtu/khfxltbXPY3+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:70:47:3f:c4:49:d8:18:89:32:35:d4:04:69:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34 Validity Not Before: Dec 26 13:00:54 2025 GMT Not After : Dec 27 13:00:54 2025 GMT Subject: CN=8e04ffa9f88c131787fc4b9bed8e4bf787b6386c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c4:16:a9:96:ad:3f:d5:0f:58:d0:37:b4:81: 07:c4:1d:70:19:23:42:ab:f3:1a:24:51:28:9e:22: f7:dc:d1:e6:92:65:e1:b4:12:9f:fb:de:07:09:53: 64:77:77:cc:02:5e:66:ca:7a:63:48:cd:98:83:c0: 86:d8:c4:02:49:64:48:84:a1:92:f0:41:2f:1b:fb: b7:fd:8d:bd:dd:a3:1d:3b:e2:91:76:e2:79:2f:2a: 05:d1:7d:44:f7:de:d3:e1:d9:a4:a6:5e:ef:5b:51: af:ad:0d:de:07:60:82:80:23:53:31:f6:4d:c2:fd: 0c:19:6f:a4:51:e1:19:00:7f:f1:5b:44:32:92:a7: 03:a0:ec:95:b5:a4:59:c1:84:f1:9c:20:70:0d:17: 49:db:f9:0c:2b:04:77:62:44:94:d8:6b:31:0b:8d: 42:32:34:8f:5f:e0:bb:fd:35:8d:b6:f4:06:69:3a: 6a:ee:d3:28:24:e7:94:8c:d5:01:76:14:6e:7b:c6: c4:a6:f8:4e:16:2d:67:aa:b8:02:ed:19:b1:25:51: fe:c7:d9:28:4a:e4:f6:ce:46:bc:a8:31:27:fb:47: 72:ed:42:31:54:4f:99:39:ad:f2:8e:42:f0:91:e4: 06:2a:c7:07:52:eb:6a:70:0a:67:0f:f9:33:11:ee: c0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:04:FF:A9:F8:8C:13:17:87:FC:4B:9B:ED:8E:4B:F7:87:B6:38:6C X509v3 Authority Key Identifier: keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:1a:bb:10:5d:dd:6b:06:27:99:c2:75:73:2f:ea:dc:81:e3: 8d:83:2c:1d:c2:cd:46:10:8b:e1:a1:9c:95:5b:81:12:85:85: 71:7f:93:17:57:3c:4f:18:eb:a4:b0:8e:14:4c:b7:1c:15:be: 60:a2:35:12:c0:21:16:dd:4e:4b:a1:29:98:79:ed:0f:1d:7c: 55:20:f4:71:3d:e7:34:bb:8e:e6:91:03:79:8a:61:3a:26:0c: 9f:c2:b8:57:8b:1d:2f:34:31:fb:ad:b9:1d:19:e7:e4:c0:98: bb:8c:97:9b:90:44:77:7c:22:bc:40:fb:4e:ee:60:46:25:41: c9:15:22:3a:6c:32:c2:cd:32:fa:e0:f0:96:07:87:e4:fd:e3: 29:74:72:b4:a3:83:06:fa:02:d2:c1:0f:1d:21:87:89:bf:9b: c2:de:e2:80:b1:52:5c:ed:4c:7c:0f:f1:b2:a2:b9:b0:c7:7b: 7c:d1:0d:a5:ad:4a:76:71:d3:9c:16:05:83:ca:4e:40:b6:d7: a3:80:c9:5d:3b:25:ee:8b:8d:9c:4a:b8:79:62:74:7a:2e:2c: 08:78:7f:f9:1c:f4:6e:f5:ac:77:5f:2b:4f:b2:fa:cf:49:db: 61:71:b8:d2:66:e7:ed:6a:87:19:6d:ab:12:af:a0:81:a9:73: f5:59:1f:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav3BHP8RJ2BiJMjXUBGmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZDFjMGI0ZWYwOTBjNDRkNzhiN2NjYjBiZjcyZjA5ZDA4 MzFmMzQwHhcNMjUxMjI2MTMwMDU0WhcNMjUxMjI3MTMwMDU0WjAzMTEwLwYDVQQD Eyg4ZTA0ZmZhOWY4OGMxMzE3ODdmYzRiOWJlZDhlNGJmNzg3YjYzODZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsQWqZatP9UPWNA3tIEHxB1wGSNC q/MaJFEoniL33NHmkmXhtBKf+94HCVNkd3fMAl5mynpjSM2Yg8CG2MQCSWRIhKGS 8EEvG/u3/Y293aMdO+KRduJ5LyoF0X1E997T4dmkpl7vW1GvrQ3eB2CCgCNTMfZN wv0MGW+kUeEZAH/xW0QykqcDoOyVtaRZwYTxnCBwDRdJ2/kMKwR3YkSU2GsxC41C MjSPX+C7/TWNtvQGaTpq7tMoJOeUjNUBdhRue8bEpvhOFi1nqrgC7RmxJVH+x9ko SuT2zka8qDEn+0dy7UIxVE+ZOa3yjkLwkeQGKscHUutqcApnD/kzEe7AZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4E/6n4jBMXh/xLm+2OS/eHtjhsMB8GA1UdIwQY MBaAFIDRwLTvCQxE14t8ywv3LwnQgx80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9kZTY0ZjctMzlkOS00YmJkLWIwMjMt YmVkY2JjNWEwMTc0LzEvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9kZTY0ZjctMzlkOS00YmJkLWIwMjMtYmVkY2JjNWEwMTc0 LzEvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxq7EF3d awYnmcJ1cy/q3IHjjYMsHcLNRhCL4aGclVuBEoWFcX+TF1c8TxjrpLCOFEy3HBW+ YKI1EsAhFt1OS6EpmHntDx18VSD0cT3nNLuO5pEDeYphOiYMn8K4V4sdLzQx+625 HRnn5MCYu4yXm5BEd3wivED7Tu5gRiVByRUiOmwyws0y+uDwlgeH5P3jKXRytKOD BvoC0sEPHSGHib+bwt7igLFSXO1MfA/xsqK5sMd7fNENpa1KdnHTnBYFg8pOQLbX o4DJXTsl7ouNnEq4eWJ0ei4sCHh/+Rz0bvWsd18rT7L6z0nbYXG40mbn7WqHGW2r Eq+ggalz9VkfYw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:27 2025 by rpki-client