This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json) Hash identifier: BbGM4wQ7IQ80l1VjOgsGk80LJXYEgJyaAflVJf9ylUI= Subject key identifier: E6:26:B3:99:F7:3D:49:5A:F9:80:83:F0:AB:BD:D6:90:14:4B:0E:D1 Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b Certificate serial: 019B28897B08EA2F35B3D9CD2ACCB73041FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft Manifest number: 0DD4 Signing time: Tue 16 Dec 2025 19:00:57 +0000 Manifest this update: Tue 16 Dec 2025 19:00:57 +0000 Manifest next update: Wed 17 Dec 2025 19:00:57 +0000 Files and hashes: 1: _f2qtSqsuNVRAf2aMYbbvbg8ymw.roa (hash: 4sGopdLUwHqj2GkqogChdlm5xcViRd2S6Xz6oo4SiLA=) 2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: /i+rHcsWUT2d6RQ0zSLZaQw7O738iYXPn9hGZgjUO7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:89:7b:08:ea:2f:35:b3:d9:cd:2a:cc:b7:30:41:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b Validity Not Before: Dec 16 19:00:57 2025 GMT Not After : Dec 17 19:00:57 2025 GMT Subject: CN=e626b399f73d495af98083f0abbdd690144b0ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9c:da:6e:8e:39:e6:77:bc:bc:8e:53:6c:8e: 65:a0:0c:45:47:f5:18:e2:f6:f1:4e:39:2f:ac:f3: d0:bf:18:90:dc:0b:d4:1a:67:1a:5f:84:be:ea:3e: 18:28:10:35:3c:c4:9b:ef:68:ca:eb:9a:83:aa:9d: d8:e8:36:11:6b:02:8a:c1:78:69:ad:66:45:0b:95: ae:4c:7a:fa:c8:29:4e:96:ed:aa:88:9a:75:29:f1: 62:df:ca:49:d7:7d:aa:f2:11:a2:b7:97:2a:e3:9b: e9:bd:1c:60:f7:f0:fd:5f:4a:27:da:33:0e:08:e9: 7d:8f:93:51:aa:ef:49:0d:c6:0f:e8:52:14:d1:94: 6b:b3:25:cd:8d:c5:ba:ca:c4:95:24:b2:5a:75:1c: ad:5e:8a:e3:29:ab:98:36:6b:f2:7c:9e:89:39:48: ec:4e:58:a4:73:55:5e:6e:74:cd:d6:ed:fa:30:36: ce:0b:6f:d1:7b:76:bb:a9:52:cd:2a:c5:cd:e7:8b: 0b:f7:73:2a:36:5b:6b:6b:c7:ac:54:c6:51:c0:9f: 13:ff:cf:12:5b:0c:86:9b:e7:ce:cf:d2:a9:53:69: 56:6a:9b:26:f2:18:59:e4:c8:6d:23:29:ba:87:51: 59:1a:9e:86:4f:5d:d0:70:6d:94:18:99:a3:39:60: ca:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:26:B3:99:F7:3D:49:5A:F9:80:83:F0:AB:BD:D6:90:14:4B:0E:D1 X509v3 Authority Key Identifier: keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a7:31:f7:68:23:ab:93:f4:b0:b9:46:cf:3e:af:60:88:db: 7e:54:58:0c:19:98:bb:27:8a:dc:76:89:da:cc:a6:40:4e:c3: 35:0d:e7:96:65:b9:2e:69:f6:4b:ed:8f:e4:d2:95:15:6e:0c: 2b:d7:f2:c9:a6:f3:d9:ed:60:1c:60:46:96:79:12:af:f8:93: 77:aa:ed:b1:79:74:33:9f:99:6b:cc:71:3d:d8:3d:ee:a1:d9: 2a:14:94:36:3c:c9:9c:4c:1d:46:39:42:0a:10:36:f3:89:a3: ed:d1:5c:7b:14:d6:3f:be:a7:b1:38:a0:46:22:22:0f:5b:3a: b8:c6:98:9c:4a:bf:e7:18:20:a2:a8:7c:39:b1:ac:00:13:38: 4f:00:6c:6a:29:5c:16:f5:82:fc:8d:ce:76:89:3e:c4:07:b2: 57:42:93:f6:e0:9b:61:16:46:f2:a7:c9:81:a3:9e:e2:a6:9b: f7:32:1c:6c:55:b3:f0:ce:ae:44:f6:a4:0a:13:55:da:75:8b: 29:87:fa:c9:0f:5a:84:5f:5f:29:4d:82:39:4f:d6:82:be:be: 94:69:da:19:de:31:e9:5f:c0:b3:1e:bc:29:61:2f:73:d9:2e: c4:15:9b:61:4a:13:4b:f1:c3:57:9d:d5:30:a8:d9:b0:a7:35: f1:f9:e4:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoiXsI6i81s9nNKsy3MEH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMzAwMzAwZGU1MDA1YWRhMmJiNjZjMjY4OTk4YTQwYzMz YWQyM2IwHhcNMjUxMjE2MTkwMDU3WhcNMjUxMjE3MTkwMDU3WjAzMTEwLwYDVQQD EyhlNjI2YjM5OWY3M2Q0OTVhZjk4MDgzZjBhYmJkZDY5MDE0NGIwZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZzabo455ne8vI5TbI5loAxFR/UY 4vbxTjkvrPPQvxiQ3AvUGmcaX4S+6j4YKBA1PMSb72jK65qDqp3Y6DYRawKKwXhp rWZFC5WuTHr6yClOlu2qiJp1KfFi38pJ132q8hGit5cq45vpvRxg9/D9X0on2jMO COl9j5NRqu9JDcYP6FIU0ZRrsyXNjcW6ysSVJLJadRytXorjKauYNmvyfJ6JOUjs Tlikc1VebnTN1u36MDbOC2/Re3a7qVLNKsXN54sL93MqNltra8esVMZRwJ8T/88S WwyGm+fOz9KpU2lWapsm8hhZ5MhtIym6h1FZGp6GT13QcG2UGJmjOWDK+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYms5n3PUla+YCD8Ku91pAUSw7RMB8GA1UdIwQY MBaAFIEwAwDeUAWtortmwmiZikDDOtI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RBREFONVFCYTJpdTJiQ2FKbUtRTU02MGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kYmFkODgtZjgxOC00MzFlLTg3YTYt ZGZlZTk4NDAzN2FjLzEvZ1RBREFONVFCYTJpdTJiQ2FKbUtRTU02MGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9kYmFkODgtZjgxOC00MzFlLTg3YTYtZGZlZTk4NDAzN2Fj LzEvZ1RBREFONVFCYTJpdTJiQ2FKbUtRTU02MGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqcx92gj q5P0sLlGzz6vYIjbflRYDBmYuyeK3HaJ2symQE7DNQ3nlmW5Lmn2S+2P5NKVFW4M K9fyyabz2e1gHGBGlnkSr/iTd6rtsXl0M5+Za8xxPdg97qHZKhSUNjzJnEwdRjlC ChA284mj7dFcexTWP76nsTigRiIiD1s6uMaYnEq/5xggoqh8ObGsABM4TwBsailc FvWC/I3Odok+xAeyV0KT9uCbYRZG8qfJgaOe4qab9zIcbFWz8M6uRPakChNV2nWL KYf6yQ9ahF9fKU2COU/Wgr6+lGnaGd4x6V/Asx68KWEvc9kuxBWbYUoTS/HDV53V MKjZsKc18fnkbg== -----END CERTIFICATE-----Generated at Wed Dec 17 01:00:49 2025 by rpki-client