This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft File: GYOwLhDKghv-G-bnUdks9z1tTAs.mft (raw, json) Hash identifier: Jq2MJoWekgk+NALtfQS7H3qg3o8afOfu53I7eHleJXg= Subject key identifier: 4D:94:D8:01:7D:6D:62:70:22:7F:23:D3:DE:1B:5C:0C:2F:DC:E8:F8 Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B Certificate issuer: /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b Certificate serial: 019B0E93226FA07BEAEE686B837ACBAA31BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft Manifest number: 0A83 Signing time: Thu 11 Dec 2025 18:01:22 +0000 Manifest this update: Thu 11 Dec 2025 18:01:22 +0000 Manifest next update: Fri 12 Dec 2025 18:01:22 +0000 Files and hashes: 1: GYOwLhDKghv-G-bnUdks9z1tTAs.crl (hash: l5rZce3sYuGwRb4+76KSLmMy4tNJ+tluJFsRkS5MMVw=) 2: Ni5vtm0M3bjCTeGdNSnDAVszYLE.roa (hash: OME01+LPKlOdHdZ6RncStdMa9nK9uQNDcVGUK02vlcM=) 3: W5JHXs8zLwGJy4IeuX9pjg56ARk.roa (hash: oTtfujgJJ/+mSfltfqB/Zo/A05YAt91LC0YvRqH4YGg=) 4: YRiImFoNZVxU37wmm_1wL-_QqNY.roa (hash: xKbt/nH87U6XbMkmr2VvoP8n6E36rmfBqZRV+O9xVJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:22:6f:a0:7b:ea:ee:68:6b:83:7a:cb:aa:31:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b Validity Not Before: Dec 11 18:01:22 2025 GMT Not After : Dec 12 18:01:22 2025 GMT Subject: CN=4d94d8017d6d6270227f23d3de1b5c0c2fdce8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:22:a5:c1:21:ec:80:90:d8:35:7e:60:91: 04:b7:e7:46:29:c4:4c:10:c9:78:71:3a:e2:cd:74: 26:dc:d7:aa:6d:10:16:92:bc:28:f6:8e:38:a4:c1: 7c:33:4c:e5:1f:f9:8c:ca:35:dc:e7:f2:1e:97:69: fb:ce:e7:81:c8:da:17:1d:42:2c:08:e3:26:30:4f: ee:d9:cd:fd:b8:4c:27:3f:ec:05:76:9e:a2:ac:c9: 29:dc:67:24:2d:38:9d:33:ee:da:42:b3:b5:22:db: 3e:fb:d3:0e:7e:b6:04:72:c8:89:16:2c:1c:ad:ed: 88:44:73:e7:2e:fa:da:19:d7:17:e8:0c:91:ce:34: ff:56:66:b4:f3:73:a8:12:fa:f0:e4:86:a4:eb:87: 5b:ed:ca:c2:38:15:63:ba:79:87:f6:4f:f9:a3:aa: 16:bc:6f:1c:34:8d:73:48:06:be:8c:ba:34:de:93: fc:67:f9:b5:08:4b:4f:c8:be:1f:6f:82:a5:ba:8f: d8:24:81:fb:4b:8b:4e:7e:d6:37:22:ec:3f:63:c4: 15:4f:ca:c8:d1:e7:d0:ca:84:2a:81:a6:5b:96:d1: 4a:be:bd:ce:bc:49:23:bf:6f:8c:74:4e:5d:6a:99: 15:1e:89:6f:5f:7c:eb:38:90:5c:71:d0:45:53:e9: 5a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:94:D8:01:7D:6D:62:70:22:7F:23:D3:DE:1B:5C:0C:2F:DC:E8:F8 X509v3 Authority Key Identifier: keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:9a:d0:1c:4b:05:9c:5d:22:bb:5c:b7:2f:1c:40:22:a8:1b: cb:3f:4d:e6:64:50:d9:42:12:bd:1a:7a:74:23:a1:15:b6:0b: 3a:f8:a5:98:f9:d2:bc:ce:df:64:b9:7b:a6:10:74:82:eb:b7: ec:5b:40:6a:3e:d7:cf:80:d8:04:dd:a8:7c:51:b4:67:69:61: 36:b6:89:b9:3c:3b:06:94:1e:c1:60:86:6f:34:f1:b9:6c:19: 95:32:86:a4:5b:b8:17:82:c0:36:db:db:eb:b8:43:ef:48:44: da:12:27:c9:5f:74:c8:7f:fd:62:29:95:d7:b2:fa:96:47:74: 75:e7:6c:61:4c:71:27:ce:0c:c6:0c:6c:19:55:6b:a9:c0:f5: 07:e2:a2:43:46:e1:6c:1f:c4:fe:71:08:00:e8:23:3e:5f:26: cb:86:22:52:b2:5e:19:ca:dc:73:86:ac:ed:c8:b3:0e:aa:e4: bc:80:bc:ed:64:15:12:9c:ed:f0:7f:65:18:55:6a:c5:a7:be: 61:3d:e0:b2:74:1b:bd:e0:10:b9:53:64:c9:c1:84:3c:c8:94: 9d:c1:c4:00:f8:fc:c5:51:d1:86:52:23:bf:d2:95:9c:32:82: d4:b5:b6:cc:2d:43:bb:d1:71:c4:4d:db:f3:98:81:02:da:93: 48:34:6c:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkyJvoHvq7mhrg3rLqjG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ODNiMDJlMTBjYTgyMWJmZTFiZTZlNzUxZDkyY2Y3M2Q2 ZDRjMGIwHhcNMjUxMjExMTgwMTIyWhcNMjUxMjEyMTgwMTIyWjAzMTEwLwYDVQQD Eyg0ZDk0ZDgwMTdkNmQ2MjcwMjI3ZjIzZDNkZTFiNWMwYzJmZGNlOGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueQipcEh7ICQ2DV+YJEEt+dGKcRM EMl4cTrizXQm3NeqbRAWkrwo9o44pMF8M0zlH/mMyjXc5/Iel2n7zueByNoXHUIs COMmME/u2c39uEwnP+wFdp6irMkp3GckLTidM+7aQrO1Its++9MOfrYEcsiJFiwc re2IRHPnLvraGdcX6AyRzjT/Vma083OoEvrw5Iak64db7crCOBVjunmH9k/5o6oW vG8cNI1zSAa+jLo03pP8Z/m1CEtPyL4fb4Kluo/YJIH7S4tOftY3Iuw/Y8QVT8rI 0efQyoQqgaZbltFKvr3OvEkjv2+MdE5dapkVHolvX3zrOJBccdBFU+laWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2U2AF9bWJwIn8j094bXAwv3Oj4MB8GA1UdIwQY MBaAFBmDsC4QyoIb/hvm51HZLPc9bUwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wOTZjMTctZGQ4My00MDU4LTgyZTEt Y2RhMzYyNTYyOTZjLzEvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wOTZjMTctZGQ4My00MDU4LTgyZTEtY2RhMzYyNTYyOTZj LzEvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZrQHEsF nF0iu1y3LxxAIqgbyz9N5mRQ2UISvRp6dCOhFbYLOvilmPnSvM7fZLl7phB0guu3 7FtAaj7Xz4DYBN2ofFG0Z2lhNraJuTw7BpQewWCGbzTxuWwZlTKGpFu4F4LANtvb 67hD70hE2hInyV90yH/9YimV17L6lkd0dedsYUxxJ84MxgxsGVVrqcD1B+KiQ0bh bB/E/nEIAOgjPl8my4YiUrJeGcrcc4as7cizDqrkvIC87WQVEpzt8H9lGFVqxae+ YT3gsnQbveAQuVNkycGEPMiUncHEAPj8xVHRhlIjv9KVnDKC1LW2zC1Du9FxxE3b 85iBAtqTSDRsiA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:04:19 2025 by rpki-client