This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft File: gKMz0T3JFfT7-2GyWkh36ROOfx0.mft (raw, json) Hash identifier: oQa4SbicvUd4PQupp8DR+NsmrQDlmZCGYh+furSoE64= Subject key identifier: 6F:FE:29:86:9B:27:BD:54:3C:22:9F:8F:C3:5B:9A:FF:37:D4:DA:BF Authority key identifier: 80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D Certificate issuer: /CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d Certificate serial: 019B1013561EE032DB1E0779539F719FC49B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft Manifest number: 176F Signing time: Fri 12 Dec 2025 01:01:01 +0000 Manifest this update: Fri 12 Dec 2025 01:01:01 +0000 Manifest next update: Sat 13 Dec 2025 01:01:01 +0000 Files and hashes: 1: EdGxyzJhjLRGTiLiEhh2um8kO1M.roa (hash: b/dInnyOZqyh5R7OUhwOIhatYHAF/06vb/nqosHRFis=) 2: gKMz0T3JFfT7-2GyWkh36ROOfx0.crl (hash: v9kyt2PM0AZmMimTPHIQjomfA+OQE/VHrehdBJcKvis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:56:1e:e0:32:db:1e:07:79:53:9f:71:9f:c4:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d Validity Not Before: Dec 12 01:01:01 2025 GMT Not After : Dec 13 01:01:01 2025 GMT Subject: CN=6ffe29869b27bd543c229f8fc35b9aff37d4dabf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:57:b4:a3:91:de:a8:5c:04:04:c3:e7:61:a7: c4:6e:20:46:e9:b2:18:65:9a:c2:5f:6e:6a:33:29: d0:39:70:1a:63:26:53:3c:71:2b:6e:2a:44:bb:e6: 5a:f8:0e:fa:dd:c2:8a:f7:38:3f:8b:74:3b:0a:94: 42:d2:32:92:16:f7:5b:9e:b7:8e:c7:0f:0e:c3:81: d0:05:5b:70:41:11:f1:fd:ce:07:96:2d:f8:c5:03: 5d:75:b7:53:d0:e4:5a:f2:cf:0c:8c:90:fc:26:e4: cb:2a:1a:84:87:b2:c4:65:e5:96:61:37:31:1f:79: 69:a9:89:29:0c:63:2d:84:74:69:3d:a6:9c:b0:2a: 64:6d:f5:f2:97:78:d8:f7:68:1e:0f:77:4b:03:b9: 9c:f2:c8:49:a8:9e:22:b5:ad:1f:0f:c6:41:f6:38: 26:61:c8:7c:54:f7:f3:62:45:28:0c:2a:e9:ba:07: 3d:27:2f:7b:ca:2c:6d:d7:fa:9c:ee:3e:07:f7:86: bb:42:0e:f6:40:e5:3f:3e:5e:d1:54:c8:85:71:14: 35:2a:6a:55:7e:13:e5:f8:11:8d:56:0d:61:80:e1: 33:ac:93:2d:b7:a1:09:67:19:d3:63:b2:0f:cc:21: 54:b6:e1:4c:47:a7:78:00:8a:69:a2:e1:ea:00:34: ab:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FE:29:86:9B:27:BD:54:3C:22:9F:8F:C3:5B:9A:FF:37:D4:DA:BF X509v3 Authority Key Identifier: keyid:80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:09:e6:06:77:02:47:d5:5b:c1:6b:e7:98:d1:8d:0c:58:63: a9:0a:c6:46:59:6e:67:23:28:03:cd:22:09:9a:ab:36:36:d9: 43:a7:e0:3d:25:47:02:72:4b:20:3e:35:c5:1b:8c:eb:c4:f3: eb:ba:54:f5:c7:a3:81:9c:b3:47:f9:f4:95:c0:f6:55:c1:ab: b8:9f:ca:f2:3f:8d:86:0f:aa:9f:5c:fd:80:8f:97:32:08:88: 5d:23:35:78:d5:02:8b:33:06:56:a9:63:72:96:e0:a1:d5:a0: a3:c3:61:bb:ea:4d:14:3e:26:0d:e8:8e:9c:e0:25:49:99:29: 14:02:b4:f9:e4:c0:8b:12:13:19:00:0d:79:c7:73:52:b0:5f: 71:ba:2f:81:a9:c5:bd:6c:d0:1a:7d:32:ec:e2:4e:37:e4:ad: 84:cd:87:65:20:88:ae:1f:c6:5e:a2:e5:0c:8e:5e:da:22:9d: c6:44:0a:5c:64:d3:71:31:9c:86:77:d9:76:d9:91:a5:f9:9f: d1:29:23:b0:a2:9b:46:d2:63:ad:9d:87:23:d6:01:cc:00:9b: 25:27:00:c0:74:77:f1:0d:76:06:92:51:35:92:d5:bd:77:b9: c6:92:c0:72:c3:94:ab:60:ce:88:1d:06:ed:85:29:39:8a:1b: cc:51:7d:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE1Ye4DLbHgd5U59xn8SbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYTMzM2QxM2RjOTE1ZjRmYmZiNjFiMjVhNDg3N2U5MTM4 ZTdmMWQwHhcNMjUxMjEyMDEwMTAxWhcNMjUxMjEzMDEwMTAxWjAzMTEwLwYDVQQD Eyg2ZmZlMjk4NjliMjdiZDU0M2MyMjlmOGZjMzViOWFmZjM3ZDRkYWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFe0o5HeqFwEBMPnYafEbiBG6bIY ZZrCX25qMynQOXAaYyZTPHErbipEu+Za+A763cKK9zg/i3Q7CpRC0jKSFvdbnreO xw8Ow4HQBVtwQRHx/c4Hli34xQNddbdT0ORa8s8MjJD8JuTLKhqEh7LEZeWWYTcx H3lpqYkpDGMthHRpPaacsCpkbfXyl3jY92geD3dLA7mc8shJqJ4ita0fD8ZB9jgm Ych8VPfzYkUoDCrpugc9Jy97yixt1/qc7j4H94a7Qg72QOU/Pl7RVMiFcRQ1KmpV fhPl+BGNVg1hgOEzrJMtt6EJZxnTY7IPzCFUtuFMR6d4AIppouHqADSr9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/+KYabJ71UPCKfj8Nbmv831Nq/MB8GA1UdIwQY MBaAFICjM9E9yRX0+/thslpId+kTjn8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0tNejBUM0pGZlQ3LTJHeVdraDM2Uk9PZngwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xMzliMzgtNWIyNC00MDdkLWIxN2Ut NGNhMzU0MzBkY2EzLzEvZ0tNejBUM0pGZlQ3LTJHeVdraDM2Uk9PZngwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8xMzliMzgtNWIyNC00MDdkLWIxN2UtNGNhMzU0MzBkY2Ez LzEvZ0tNejBUM0pGZlQ3LTJHeVdraDM2Uk9PZngwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwnmBncC R9VbwWvnmNGNDFhjqQrGRlluZyMoA80iCZqrNjbZQ6fgPSVHAnJLID41xRuM68Tz 67pU9cejgZyzR/n0lcD2VcGruJ/K8j+Nhg+qn1z9gI+XMgiIXSM1eNUCizMGVqlj cpbgodWgo8Nhu+pNFD4mDeiOnOAlSZkpFAK0+eTAixITGQANecdzUrBfcbovganF vWzQGn0y7OJON+SthM2HZSCIrh/GXqLlDI5e2iKdxkQKXGTTcTGchnfZdtmRpfmf 0SkjsKKbRtJjrZ2HI9YBzACbJScAwHR38Q12BpJRNZLVvXe5xpLAcsOUq2DOiB0G 7YUpOYobzFF9Zg== -----END CERTIFICATE-----Generated at Fri Dec 12 05:17:43 2025 by rpki-client