This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json) Hash identifier: +yYD5cFhr9ghuVPaYpI7wNnoyurVw3qepX8GrALF70I= Subject key identifier: 0E:35:4A:8D:A0:C9:5F:46:4C:DB:B0:08:11:A5:FD:50:D6:31:AA:3E Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e Certificate serial: 019B3532F3E4535654249DCDDC2DCD95C05F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 06:01:30 +0000 Manifest this update: Fri 19 Dec 2025 06:01:30 +0000 Manifest next update: Sat 20 Dec 2025 06:01:30 +0000 Files and hashes: 1: 3BCTdWPdAwRCl8UX_2fwNUPfXDk.roa (hash: auwwYg2jmDefujiM9dhtcg3qGUezv1eAv9OXRPuNl5Q=) 2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: ive18cylEF+oOYzLRMC+hQaVIJVAYXqLs4eMUAlY2l4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:f3:e4:53:56:54:24:9d:cd:dc:2d:cd:95:c0:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e Validity Not Before: Dec 19 06:01:30 2025 GMT Not After : Dec 20 06:01:30 2025 GMT Subject: CN=0e354a8da0c95f464cdbb00811a5fd50d631aa3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c3:88:83:de:a2:40:2f:bc:12:41:25:2b:c6: a8:a1:ac:e6:ec:ba:ad:1e:bd:47:2b:18:89:38:74: 74:04:63:31:d0:03:db:95:18:4e:60:81:cd:00:63: bd:fd:41:f0:a4:88:ea:ce:6f:2e:29:0c:c4:0c:ba: c7:d8:50:82:c9:f0:73:26:55:30:74:e6:00:34:e4: 62:18:33:62:3b:4c:a3:72:6c:98:27:4f:16:25:fa: 10:df:af:24:69:53:cb:ff:a3:73:9f:36:77:b2:79: d1:a1:b7:ca:7c:55:11:25:9e:12:31:19:cc:ce:76: 67:74:29:01:1a:02:ba:7a:97:42:01:40:6b:cd:9a: 00:8c:44:94:e4:d7:16:f4:67:77:c2:c1:89:e6:c3: a7:64:79:88:ae:c9:12:68:c3:d6:78:0c:73:5d:05: ea:58:72:06:d2:93:1b:78:be:e1:04:30:84:2e:07: dd:8b:da:6d:71:e6:d8:e9:4b:25:96:0b:b2:b0:19: 67:aa:34:1d:7f:92:95:ed:c4:63:e9:4d:e7:b8:09: 0e:85:04:ba:2c:ce:63:f7:93:80:5d:78:46:cb:1d: e4:7e:5e:16:90:2d:84:d4:08:76:cb:ed:cc:64:0d: d2:25:aa:2a:d2:69:1f:06:51:a2:74:4d:e5:ed:ce: e8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:35:4A:8D:A0:C9:5F:46:4C:DB:B0:08:11:A5:FD:50:D6:31:AA:3E X509v3 Authority Key Identifier: keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1e:b5:16:ea:c9:1a:9a:81:85:99:85:ff:78:98:fd:e5:7c: 2f:f0:84:4e:90:89:cb:d5:b2:79:9d:6a:3f:c4:c5:15:65:8f: 7f:a5:c8:c0:13:f3:7b:13:64:3f:d6:2a:e0:80:51:b9:e2:e3: 2a:45:94:24:c7:f4:73:13:05:13:51:62:66:cc:c7:72:0d:3e: df:97:61:6e:3e:f3:26:87:db:9d:83:3a:9a:a3:69:8f:38:8d: 3d:bf:03:7b:91:56:80:b5:d0:98:e5:96:3f:11:06:4e:3f:54: ab:0b:c0:ef:d7:28:7f:07:1a:a6:40:2f:8b:ca:7c:99:80:fc: 67:b6:8c:c9:f8:2b:4b:70:5b:e4:55:03:a9:14:a0:d6:42:ae: ca:d0:05:65:57:fa:c4:0c:d8:e7:03:da:6c:1e:77:01:73:00: e1:75:3e:f8:31:00:dc:24:62:dc:9d:6a:d3:92:2c:f7:08:e4: 4e:fa:8a:8a:7a:6a:17:26:47:e9:75:bb:87:68:41:bc:d5:f1: bb:c3:3d:1c:31:e5:16:53:5c:e1:ba:ee:1f:40:af:d5:db:28: 90:de:58:dc:7c:96:3c:49:ec:b1:10:f4:26:1e:9f:35:73:12: c0:3d:98:e8:3f:c5:d9:6c:3a:62:a3:d5:ac:4d:1d:aa:62:e6: 7b:bf:81:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MvPkU1ZUJJ3N3C3NlcBfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNWMwYzlmMjM3NjNjMDM3YmQ2ODg0NzQ1Y2Y4NDY0ZDJk YjY2M2UwHhcNMjUxMjE5MDYwMTMwWhcNMjUxMjIwMDYwMTMwWjAzMTEwLwYDVQQD EygwZTM1NGE4ZGEwYzk1ZjQ2NGNkYmIwMDgxMWE1ZmQ1MGQ2MzFhYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8OIg96iQC+8EkElK8aooazm7Lqt Hr1HKxiJOHR0BGMx0APblRhOYIHNAGO9/UHwpIjqzm8uKQzEDLrH2FCCyfBzJlUw dOYANORiGDNiO0yjcmyYJ08WJfoQ368kaVPL/6NznzZ3snnRobfKfFURJZ4SMRnM znZndCkBGgK6epdCAUBrzZoAjESU5NcW9Gd3wsGJ5sOnZHmIrskSaMPWeAxzXQXq WHIG0pMbeL7hBDCELgfdi9ptcebY6UsllguysBlnqjQdf5KV7cRj6U3nuAkOhQS6 LM5j95OAXXhGyx3kfl4WkC2E1Ah2y+3MZA3SJaoq0mkfBlGidE3l7c7ohwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA41So2gyV9GTNuwCBGl/VDWMao+MB8GA1UdIwQY MBaAFIBcDJ8jdjwDe9aIR0XPhGTS22Y+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MjQ3ZDUtZTI4My00YjI5LWFjZmQt ODJlMWUyMDA1MDRlLzEvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83MjQ3ZDUtZTI4My00YjI5LWFjZmQtODJlMWUyMDA1MDRl LzEvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADB61FurJ GpqBhZmF/3iY/eV8L/CETpCJy9WyeZ1qP8TFFWWPf6XIwBPzexNkP9Yq4IBRueLj KkWUJMf0cxMFE1FiZszHcg0+35dhbj7zJofbnYM6mqNpjziNPb8De5FWgLXQmOWW PxEGTj9UqwvA79cofwcapkAvi8p8mYD8Z7aMyfgrS3Bb5FUDqRSg1kKuytAFZVf6 xAzY5wPabB53AXMA4XU++DEA3CRi3J1q05Is9wjkTvqKinpqFyZH6XW7h2hBvNXx u8M9HDHlFlNc4bruH0Cv1dsokN5Y3HyWPEnssRD0Jh6fNXMSwD2Y6D/F2Ww6YqPV rE0dqmLme7+BMg== -----END CERTIFICATE-----Generated at Fri Dec 19 09:29:34 2025 by rpki-client