This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json) Hash identifier: OaffXfeO81qjHYOvjwpNKz8MkiREa6ShfFGUWU8d8tg= Subject key identifier: 84:E1:D7:09:F9:98:C7:AF:05:89:8B:28:BA:FF:32:FB:F7:F7:43:E7 Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63 Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63 Certificate serial: 019B32314A86646CF3465AB9B9016C8E9ECA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft Manifest number: 0A0D Signing time: Thu 18 Dec 2025 16:00:49 +0000 Manifest this update: Thu 18 Dec 2025 16:00:49 +0000 Manifest next update: Fri 19 Dec 2025 16:00:49 +0000 Files and hashes: 1: 7NcD3v3bTwDr9ocN3-x63vupO1g.roa (hash: HvV0nfI75827YQCzKbYVEWTCzA0c8O1WIDzuDKlaH5w=) 2: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: oUfdY/BI3KVX5aiGBTI3+VLoGZ22h+GBtFTPtumf1lg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:4a:86:64:6c:f3:46:5a:b9:b9:01:6c:8e:9e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63 Validity Not Before: Dec 18 16:00:49 2025 GMT Not After : Dec 19 16:00:49 2025 GMT Subject: CN=84e1d709f998c7af05898b28baff32fbf7f743e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6f:61:3a:a0:6d:15:16:38:fc:59:0c:70:59: 41:c8:87:97:63:2f:42:0d:2f:b7:87:d2:7d:d6:c6: 2e:bf:83:a2:9c:4d:a7:1f:be:58:ca:10:ed:4a:ea: 8b:bf:95:75:10:1f:1b:8f:ae:74:ae:40:c5:0e:b9: be:42:06:dc:97:d6:44:e1:9f:90:3b:68:c1:a8:22: bf:bb:c8:19:db:a1:f9:61:19:f0:57:0f:26:dd:5f: e5:8c:57:f9:e0:f6:e3:03:0d:7b:b1:95:75:5e:21: 29:34:d4:ee:f9:31:91:da:1b:15:76:da:2d:cc:a2: 7c:05:d0:d3:ed:33:5d:77:42:3f:30:6e:c0:69:85: 2f:4d:9d:e9:c3:25:ff:c8:ad:d6:cb:4f:b7:d0:18: 83:20:82:13:7c:a0:37:1f:1d:c6:77:fe:8e:05:e6: 8a:c8:a9:95:34:6c:94:e6:27:c5:e8:50:f8:7c:28: 6e:a5:8e:fe:c2:97:f8:9f:e1:f6:0a:88:7d:74:bb: 70:d6:1f:5e:0d:97:44:52:38:48:8d:91:f7:6e:96: 86:da:7b:f8:9f:9b:cb:bc:e6:4b:74:93:73:5d:92: 6a:29:aa:92:7a:b0:f6:59:8c:4d:c3:c8:f7:94:49: 36:43:5d:67:c5:6b:9b:2f:86:7e:76:67:d5:b5:58: bd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E1:D7:09:F9:98:C7:AF:05:89:8B:28:BA:FF:32:FB:F7:F7:43:E7 X509v3 Authority Key Identifier: keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:fb:7b:65:33:c0:4b:99:c9:cc:51:c8:b5:3b:a0:a8:fd:ef: 71:c6:cc:08:ae:d3:d0:e9:12:da:f8:ee:df:8d:52:4b:e2:7c: 18:24:8d:b1:d5:41:fa:58:c9:1c:7d:cb:4d:22:7b:b1:c2:b3: 87:d6:d8:fd:91:43:85:5a:48:44:65:dc:12:ae:a9:48:e4:eb: 59:07:80:ec:0b:34:35:36:a7:8c:a7:b8:ca:53:24:a3:d8:c9: 00:14:08:03:13:aa:0b:b9:eb:9b:68:9d:68:52:3b:f8:06:3a: 65:bd:14:70:c1:37:9a:39:1e:ca:3f:a4:91:e6:d7:56:21:39: ec:65:e6:4b:a8:ee:86:2a:a0:cd:6f:45:20:ab:bf:2c:58:78: 6d:c2:f2:7c:8e:4e:4c:45:02:3a:e8:a0:1f:46:f6:10:45:b8: 9b:32:a6:ff:90:0e:fe:bb:2a:3c:a4:e9:d9:28:01:95:5c:2a: aa:e1:d2:a8:fe:92:3c:f2:e3:23:e4:be:70:44:5e:25:9b:c1: 95:6b:08:21:49:6f:92:15:37:30:90:f1:9f:89:e7:f8:bb:dd: 38:c8:4e:5b:99:ed:f0:14:d4:64:91:b1:61:a1:61:82:a3:89: cc:14:6b:ff:45:53:b0:49:9d:9d:4e:ba:fd:ab:99:cc:bf:61: 0c:e9:ea:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMUqGZGzzRlq5uQFsjp7KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ODM2MDRmMDgzZTU4YzNjZDE5ZDM5NDgwYmFhYWRmMzhh MTliNjMwHhcNMjUxMjE4MTYwMDQ5WhcNMjUxMjE5MTYwMDQ5WjAzMTEwLwYDVQQD Eyg4NGUxZDcwOWY5OThjN2FmMDU4OThiMjhiYWZmMzJmYmY3Zjc0M2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum9hOqBtFRY4/FkMcFlByIeXYy9C DS+3h9J91sYuv4OinE2nH75YyhDtSuqLv5V1EB8bj650rkDFDrm+Qgbcl9ZE4Z+Q O2jBqCK/u8gZ26H5YRnwVw8m3V/ljFf54PbjAw17sZV1XiEpNNTu+TGR2hsVdtot zKJ8BdDT7TNdd0I/MG7AaYUvTZ3pwyX/yK3Wy0+30BiDIIITfKA3Hx3Gd/6OBeaK yKmVNGyU5ifF6FD4fChupY7+wpf4n+H2Coh9dLtw1h9eDZdEUjhIjZH3bpaG2nv4 n5vLvOZLdJNzXZJqKaqSerD2WYxNw8j3lEk2Q11nxWubL4Z+dmfVtVi9iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITh1wn5mMevBYmLKLr/Mvv390PnMB8GA1UdIwQY MBaAFBmDYE8IPljDzRnTlIC6qt84oZtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85YWM4NmEtODVlZC00YTFjLTg3M2Yt NzUyOTA1MzMwMzkyLzEvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS85YWM4NmEtODVlZC00YTFjLTg3M2YtNzUyOTA1MzMwMzky LzEvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVft7ZTPA S5nJzFHItTugqP3vccbMCK7T0OkS2vju341SS+J8GCSNsdVB+ljJHH3LTSJ7scKz h9bY/ZFDhVpIRGXcEq6pSOTrWQeA7As0NTanjKe4ylMko9jJABQIAxOqC7nrm2id aFI7+AY6Zb0UcME3mjkeyj+kkebXViE57GXmS6juhiqgzW9FIKu/LFh4bcLyfI5O TEUCOuigH0b2EEW4mzKm/5AO/rsqPKTp2SgBlVwqquHSqP6SPPLjI+S+cEReJZvB lWsIIUlvkhU3MJDxn4nn+LvdOMhOW5nt8BTUZJGxYaFhgqOJzBRr/0VTsEmdnU66 /auZzL9hDOnqFw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:56:09 2025 by rpki-client