This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft File: gJ7XCYERxniJisDwrsl_3Ts7bQI.mft (raw, json) Hash identifier: AbFPnYCi8FnsdjvGdYeugcWB78nIiZsPdn2M1MGUtYU= Subject key identifier: 8C:30:B5:62:7F:28:1C:AF:6E:AA:5B:B2:56:9C:00:C8:90:DA:7A:9A Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02 Certificate issuer: /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02 Certificate serial: 019B0F6E874595FE189CC40625C0E9C39B90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 22:01:00 +0000 Manifest this update: Thu 11 Dec 2025 22:01:00 +0000 Manifest next update: Fri 12 Dec 2025 22:01:00 +0000 Files and hashes: 1: 2rggwcJ8T590aTL5AQq3jnB50qI.roa (hash: Qg0ek4Wah1pBMdvyjGZuqYduAMoQDr2QwiISx+slnhM=) 2: gJ7XCYERxniJisDwrsl_3Ts7bQI.crl (hash: dQl/vZsiQ5rDtjNJrqvp9mBlBYPO8kH8XaA1lI/nW/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:87:45:95:fe:18:9c:c4:06:25:c0:e9:c3:9b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02 Validity Not Before: Dec 11 22:01:00 2025 GMT Not After : Dec 12 22:01:00 2025 GMT Subject: CN=8c30b5627f281caf6eaa5bb2569c00c890da7a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5b:00:2e:f6:0f:38:a8:7c:78:bd:c2:9e:4e: be:e7:e0:de:1a:6e:6f:34:98:f9:20:2f:de:40:7e: 97:b4:0d:e1:83:25:43:cf:6b:8b:ff:8a:f2:57:a0: 17:0e:69:5e:16:5f:6f:04:da:0e:83:57:46:0a:4d: 03:07:7c:04:5c:80:a6:6a:94:e6:90:10:18:4c:ad: a6:2f:c1:8b:62:00:7e:f8:ba:54:60:67:14:5e:51: d9:a5:82:a7:ce:04:0a:6c:2f:92:9c:ad:ca:99:03: f5:b8:03:19:8e:07:92:b3:11:70:96:5b:7d:e3:70: 59:84:79:81:58:1e:31:81:f8:9b:c1:32:18:1d:df: a1:54:80:1b:a0:08:43:e5:ee:33:ef:7e:ab:4d:16: 29:84:1b:b3:4f:e6:82:f0:fd:a7:c9:47:02:c0:cf: 8b:10:9f:85:90:aa:21:7c:38:2b:79:ff:d3:d0:48: 22:4b:1f:e5:c7:2c:f8:d7:bb:15:41:43:3d:5b:d1: f8:97:33:c3:2c:93:58:17:c8:56:59:fe:f8:53:79: 07:d8:d9:32:6c:8a:58:76:fa:90:ff:27:4f:d5:f4: 11:6e:5f:23:29:07:81:cb:d8:a9:5a:af:c9:64:a6: ad:3b:75:fc:39:33:e3:19:17:d7:d1:df:ed:8b:05: 5c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:30:B5:62:7F:28:1C:AF:6E:AA:5B:B2:56:9C:00:C8:90:DA:7A:9A X509v3 Authority Key Identifier: keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e8:f9:50:79:64:d6:ed:e9:d0:91:14:86:29:2a:19:85:f2: 99:de:2f:da:5b:f4:1b:66:27:e1:1c:f5:55:c0:2c:3e:44:69: a0:16:40:84:bc:fc:eb:69:17:74:bb:11:4d:8e:d4:aa:24:82: 7c:13:32:22:eb:6d:78:78:80:9a:91:c6:f6:a0:ea:a9:ac:59: 3c:c4:4b:5f:10:2b:bc:7e:c8:79:ab:c1:0d:70:d6:5f:6c:21: 3b:b9:3e:f1:53:03:66:55:de:0c:51:01:49:ca:43:d5:b8:02: 11:54:c0:8d:28:78:9a:b8:03:a2:b2:7a:0b:17:40:86:eb:95: 6b:2d:23:e7:07:bc:7e:c4:96:d4:a9:b5:bf:c8:d9:d8:c4:7d: 0b:57:7f:1d:24:2b:2a:11:87:9d:5c:c2:4c:69:79:3c:d3:b5: 31:12:8f:bc:09:a1:15:81:7c:5f:de:e9:5e:9d:04:97:db:dc: b0:52:65:1f:fd:ea:ca:51:c1:89:44:38:24:fe:5a:7c:c6:e6: ed:3f:85:ee:a1:f9:6a:4a:ee:a4:89:9b:5f:3a:bc:cb:39:58: f6:e3:cf:e2:a6:e9:1d:fe:85:31:ff:b7:98:47:03:c8:68:73: 54:4b:bb:f4:6e:ff:f2:65:16:8c:81:89:df:12:c4:ca:4e:76: d3:c1:82:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbodFlf4YnMQGJcDpw5uQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOWVkNzA5ODExMWM2Nzg4OThhYzBmMGFlYzk3ZmRkM2Iz YjZkMDIwHhcNMjUxMjExMjIwMTAwWhcNMjUxMjEyMjIwMTAwWjAzMTEwLwYDVQQD Eyg4YzMwYjU2MjdmMjgxY2FmNmVhYTViYjI1NjljMDBjODkwZGE3YTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVsALvYPOKh8eL3Cnk6+5+DeGm5v NJj5IC/eQH6XtA3hgyVDz2uL/4ryV6AXDmleFl9vBNoOg1dGCk0DB3wEXICmapTm kBAYTK2mL8GLYgB++LpUYGcUXlHZpYKnzgQKbC+SnK3KmQP1uAMZjgeSsxFwllt9 43BZhHmBWB4xgfibwTIYHd+hVIAboAhD5e4z736rTRYphBuzT+aC8P2nyUcCwM+L EJ+FkKohfDgref/T0EgiSx/lxyz417sVQUM9W9H4lzPDLJNYF8hWWf74U3kH2Nky bIpYdvqQ/ydP1fQRbl8jKQeBy9ipWq/JZKatO3X8OTPjGRfX0d/tiwVcMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwwtWJ/KByvbqpbslacAMiQ2nqaMB8GA1UdIwQY MBaAFICe1wmBEcZ4iYrA8K7Jf907O20CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0o3WENZRVJ4bmlKaXNEd3JzbF8zVHM3YlFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iNGE0NzctMDhhMi00ZThjLThjNGQt MDEwY2Q5MDc5YWJmLzEvZ0o3WENZRVJ4bmlKaXNEd3JzbF8zVHM3YlFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9iNGE0NzctMDhhMi00ZThjLThjNGQtMDEwY2Q5MDc5YWJm LzEvZ0o3WENZRVJ4bmlKaXNEd3JzbF8zVHM3YlFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOj5UHlk 1u3p0JEUhikqGYXymd4v2lv0G2Yn4Rz1VcAsPkRpoBZAhLz862kXdLsRTY7UqiSC fBMyIutteHiAmpHG9qDqqaxZPMRLXxArvH7IeavBDXDWX2whO7k+8VMDZlXeDFEB ScpD1bgCEVTAjSh4mrgDorJ6CxdAhuuVay0j5we8fsSW1Km1v8jZ2MR9C1d/HSQr KhGHnVzCTGl5PNO1MRKPvAmhFYF8X97pXp0El9vcsFJlH/3qylHBiUQ4JP5afMbm 7T+F7qH5akrupImbXzq8yzlY9uPP4qbpHf6FMf+3mEcDyGhzVEu79G7/8mUWjIGJ 3xLEyk5208GChw== -----END CERTIFICATE-----Generated at Fri Dec 12 08:02:11 2025 by rpki-client