This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json) Hash identifier: 8PRuMrLvbV7je8q3ncNQJuXwyNyyKb8JKSsCLxBMcJM= Subject key identifier: F9:5E:63:5A:70:EE:52:85:07:78:11:17:E3:36:7A:3F:62:73:99:16 Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3 Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3 Certificate serial: 019B0E258A3FB65652297378F6EF8F0E4E59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft Manifest number: 08CB Signing time: Thu 11 Dec 2025 16:01:39 +0000 Manifest this update: Thu 11 Dec 2025 16:01:39 +0000 Manifest next update: Fri 12 Dec 2025 16:01:39 +0000 Files and hashes: 1: PWVVCu9dDfBo5aJQ6tlPGGlV6B0.roa (hash: 7Oj98eAXsnZMzEk2r6cNh4fSjsZETDRb2EQ95CICh04=) 2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: kEBKfqg3DegkkeoE4CmQ3RwDEVlKcGcg2usiTvZH1W0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:8a:3f:b6:56:52:29:73:78:f6:ef:8f:0e:4e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3 Validity Not Before: Dec 11 16:01:39 2025 GMT Not After : Dec 12 16:01:39 2025 GMT Subject: CN=f95e635a70ee528507781117e3367a3f62739916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:96:78:6b:e6:fe:bc:07:30:53:91:7c:2f: 2b:7e:61:b5:6a:1d:b3:f8:13:7d:c1:01:d4:eb:81: 31:d5:0d:e9:8e:5a:2a:95:d4:40:3c:97:68:b2:07: 32:f0:d8:ee:16:d6:c9:9c:21:e6:f3:95:e4:39:27: 02:97:68:74:bb:26:a1:dd:f1:88:39:66:0e:3c:01: 4b:1a:cc:b4:28:34:8f:0c:f1:0f:a8:da:71:2b:d3: 09:2f:f1:56:46:ea:2c:1a:5e:a4:ea:74:15:66:d8: 53:06:d4:c4:9f:b5:f3:93:aa:61:21:e9:b9:f8:f1: b9:12:26:9d:58:8b:a6:73:41:fc:f3:25:79:eb:aa: 1f:64:f4:51:3a:c3:e1:7f:c4:f0:41:26:16:4b:0c: 92:8e:7d:c6:2d:94:25:80:8f:5e:19:a9:22:20:bc: 72:c5:1a:a9:06:8a:8f:82:9f:df:26:3f:0a:f0:99: 89:9c:2f:26:cb:9c:c7:1f:20:34:be:b6:ac:52:c3: 3b:b9:eb:31:79:f0:ea:a4:32:c8:ef:65:99:7d:8a: 84:71:53:fc:4f:95:7f:6c:40:1d:b1:80:3e:7a:34: 6c:c3:2e:44:76:df:c3:50:a2:fa:21:04:da:17:ad: f8:30:fb:85:cc:1c:c7:99:ff:8e:fa:79:e2:65:32: 4c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5E:63:5A:70:EE:52:85:07:78:11:17:E3:36:7A:3F:62:73:99:16 X509v3 Authority Key Identifier: keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:d6:e7:47:5e:b3:f8:2f:5e:0b:eb:9d:79:1c:e9:aa:b6:b9: a2:f6:75:47:de:fb:95:d7:e3:55:58:7c:74:b2:e0:56:b5:b9: ec:80:5a:11:f8:fc:14:88:84:83:78:9c:af:ff:95:6d:32:79: c1:cb:da:fe:ce:43:62:93:d1:d2:e0:c5:7f:46:45:42:50:63: 47:35:6c:9c:28:91:1a:d6:f6:9e:b1:9d:ce:a8:5a:e5:a6:8d: c2:02:a0:28:cb:9b:bf:7b:f4:3c:4a:94:62:af:18:83:47:f8: 05:54:d4:e5:44:cc:f5:50:b0:b4:5e:75:61:53:0c:98:48:00: 07:7b:a1:fa:26:94:b1:f8:0f:a9:fb:28:eb:97:ef:0b:a7:25: 1f:6d:7e:4b:47:59:01:04:84:35:a6:19:a3:d3:18:b6:48:96: 54:c5:e6:10:25:a9:b2:4b:a3:d8:08:6e:7e:43:5d:12:35:09: 13:3b:e8:2f:3d:2a:67:7e:0c:85:c6:9c:32:00:06:8c:26:38: 69:72:dd:d4:37:02:96:e1:94:18:00:f1:27:db:f4:1b:5e:58: b9:4f:8f:37:9d:1e:ce:1e:ce:51:06:da:e4:a6:15:8b:75:a6: 50:dd:2b:25:d4:4c:43:5a:8f:5d:e0:bc:ec:3a:c4:02:e7:c7: 4e:e4:90:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJYo/tlZSKXN49u+PDk5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYWU3MGRmZDQzMDUyNzM2ZmU4NWYwMGQyOTg0Y2UzNzZi NzZlYjMwHhcNMjUxMjExMTYwMTM5WhcNMjUxMjEyMTYwMTM5WjAzMTEwLwYDVQQD EyhmOTVlNjM1YTcwZWU1Mjg1MDc3ODExMTdlMzM2N2EzZjYyNzM5OTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2qWeGvm/rwHMFORfC8rfmG1ah2z +BN9wQHU64Ex1Q3pjloqldRAPJdosgcy8NjuFtbJnCHm85XkOScCl2h0uyah3fGI OWYOPAFLGsy0KDSPDPEPqNpxK9MJL/FWRuosGl6k6nQVZthTBtTEn7Xzk6phIem5 +PG5EiadWIumc0H88yV566ofZPRROsPhf8TwQSYWSwySjn3GLZQlgI9eGakiILxy xRqpBoqPgp/fJj8K8JmJnC8my5zHHyA0vrasUsM7uesxefDqpDLI72WZfYqEcVP8 T5V/bEAdsYA+ejRswy5Edt/DUKL6IQTaF634MPuFzBzHmf+O+nniZTJM2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPleY1pw7lKFB3gRF+M2ej9ic5kWMB8GA1UdIwQY MBaAFIGucN/UMFJzb+hfANKYTON2t26zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgt YmI1ODkzYTZhYzkxLzEvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS82ZWExNmMtYjkyZi00MDQxLWE1MDgtYmI1ODkzYTZhYzkx LzEvZ2E1dzM5UXdVbk52NkY4QTBwaE00M2EzYnJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxNbnR16z +C9eC+udeRzpqra5ovZ1R977ldfjVVh8dLLgVrW57IBaEfj8FIiEg3icr/+VbTJ5 wcva/s5DYpPR0uDFf0ZFQlBjRzVsnCiRGtb2nrGdzqha5aaNwgKgKMubv3v0PEqU Yq8Yg0f4BVTU5UTM9VCwtF51YVMMmEgAB3uh+iaUsfgPqfso65fvC6clH21+S0dZ AQSENaYZo9MYtkiWVMXmECWpskuj2AhufkNdEjUJEzvoLz0qZ34MhcacMgAGjCY4 aXLd1DcCluGUGADxJ9v0G15YuU+PN50ezh7OUQba5KYVi3WmUN0rJdRMQ1qPXeC8 7DrEAufHTuSQgA== -----END CERTIFICATE-----Generated at Thu Dec 11 22:59:59 2025 by rpki-client