This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft File: gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json) Hash identifier: i1eUTr+eIP2mpejknMQQLaVmkQB8rMYZWfpZlq/EHsE= Subject key identifier: 41:DB:35:16:37:5D:2B:EA:A9:D1:54:41:CD:71:AD:2A:1E:8E:D4:EE Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30 Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630 Certificate serial: 019B1A5FD71E84D7B84428CB3161E92A1B00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 01:00:47 +0000 Manifest this update: Sun 14 Dec 2025 01:00:47 +0000 Manifest next update: Mon 15 Dec 2025 01:00:47 +0000 Files and hashes: 1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: 7i8jDzFzt2hJbFrLJm7ZtThiKbLkylhY4wAPfRmgzxM=) 2: salIHPhc1-U7JhA1wMdzrHIbzfs.roa (hash: nprIOebSdd8+BuExt2/8vOEgtfIuud16f9G3kU2RIx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:5f:d7:1e:84:d7:b8:44:28:cb:31:61:e9:2a:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630 Validity Not Before: Dec 14 01:00:47 2025 GMT Not After : Dec 15 01:00:47 2025 GMT Subject: CN=41db3516375d2beaa9d15441cd71ad2a1e8ed4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:b5:3c:00:66:47:43:ad:17:f3:20:95:b5: 12:a8:cd:ab:6b:3f:0f:29:cc:4f:8a:63:ac:61:ed: 6a:78:86:9e:2a:0b:ca:9f:38:25:37:4a:6e:50:86: 20:d3:30:08:de:a1:d4:74:21:d5:82:95:51:da:15: d4:43:dc:d2:f0:d4:66:2f:df:5f:2b:ca:bd:b2:79: 7b:b3:98:6a:c5:d2:b0:74:07:13:c3:cd:5b:54:93: b3:01:9e:15:d5:53:6c:c5:a6:95:10:81:e5:4d:ca: 36:ef:4b:ba:f6:a8:6f:1a:c6:5c:12:e1:de:6e:9f: 45:a4:f6:6a:81:8d:df:6e:7f:66:94:08:ba:aa:b4: 17:09:e2:2b:d3:1b:e5:10:79:48:13:a2:14:ef:2f: 66:5e:cd:44:57:3b:06:e2:a5:be:b8:fd:d2:3e:35: 65:b0:a9:94:75:f8:a0:dd:8e:f3:ad:cd:3d:42:a9: 93:4c:55:cf:dd:82:0d:39:99:87:51:6c:54:c0:1f: 5a:16:72:6b:7a:da:74:c0:86:32:37:eb:c5:af:be: 42:41:0e:58:d7:12:8b:e0:c7:58:15:3c:30:2a:c1: 21:ad:8d:03:a3:d4:fb:df:79:34:d9:be:d8:1f:77: 75:e6:fc:9f:32:d8:43:91:ac:00:78:ee:cb:91:22: 2e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DB:35:16:37:5D:2B:EA:A9:D1:54:41:CD:71:AD:2A:1E:8E:D4:EE X509v3 Authority Key Identifier: keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:36:17:15:27:07:16:f1:00:96:04:b0:da:a4:49:f6:ea:25: cb:b3:1a:12:f1:b3:9e:58:7b:01:eb:26:44:21:c2:4c:67:64: 5d:b4:db:b3:a0:df:3c:c9:79:6d:4c:e8:3e:0f:d0:54:f4:df: 6b:86:28:0b:4a:f2:1c:97:98:be:ee:ac:78:f6:7b:9a:70:bc: 5a:d5:41:cd:7a:22:f1:04:03:59:4d:e9:9d:c6:b0:24:ae:a9: aa:34:f4:66:40:9b:e0:dd:52:e5:3a:15:7a:15:3b:69:50:43: 77:28:e5:de:49:b9:2d:29:3c:8d:9b:d0:f0:32:f5:a0:26:e2: b6:99:75:91:44:ef:ef:06:3b:65:7c:b8:e4:ac:97:4d:88:b7: f6:12:af:69:09:2b:5a:d7:d1:69:96:0d:d4:69:9e:92:77:7f: 5f:86:c0:6f:3a:0b:5a:b7:37:f8:17:3c:3e:4f:91:9e:8f:f8: b3:02:0d:ad:a9:9f:43:31:96:b6:41:3c:86:c4:07:12:61:46: b4:b6:04:76:c5:49:d1:e8:a0:59:23:f3:a5:29:84:96:95:30: 78:4f:46:f7:8c:42:55:58:ef:73:ba:46:1a:0d:ab:c8:2f:81: 40:2e:6c:4a:fb:13:a7:fb:59:d2:d8:2d:e6:3e:d0:26:f3:bf: a5:68:b3:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaX9cehNe4RCjLMWHpKhsAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYWI0YzA5NDViNzM4ZWRkYTA1ODNhMjc0YjYzYzFiODY3 M2E2MzAwHhcNMjUxMjE0MDEwMDQ3WhcNMjUxMjE1MDEwMDQ3WjAzMTEwLwYDVQQD Eyg0MWRiMzUxNjM3NWQyYmVhYTlkMTU0NDFjZDcxYWQyYTFlOGVkNGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvy1PABmR0OtF/MglbUSqM2raz8P KcxPimOsYe1qeIaeKgvKnzglN0puUIYg0zAI3qHUdCHVgpVR2hXUQ9zS8NRmL99f K8q9snl7s5hqxdKwdAcTw81bVJOzAZ4V1VNsxaaVEIHlTco270u69qhvGsZcEuHe bp9FpPZqgY3fbn9mlAi6qrQXCeIr0xvlEHlIE6IU7y9mXs1EVzsG4qW+uP3SPjVl sKmUdfig3Y7zrc09QqmTTFXP3YINOZmHUWxUwB9aFnJretp0wIYyN+vFr75CQQ5Y 1xKL4MdYFTwwKsEhrY0Do9T733k02b7YH3d15vyfMthDkawAeO7LkSIu5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHbNRY3XSvqqdFUQc1xrSoejtTuMB8GA1UdIwQY MBaAFICrTAlFtzjt2gWDonS2PBuGc6YwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0t0TUNVVzNPTzNhQllPaWRMWThHNFp6cGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mNmZlZTYtYzBhMi00YTAzLWE5ODEt ZjVmZGEwZWEzMDBkLzEvZ0t0TUNVVzNPTzNhQllPaWRMWThHNFp6cGpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9mNmZlZTYtYzBhMi00YTAzLWE5ODEtZjVmZGEwZWEzMDBk LzEvZ0t0TUNVVzNPTzNhQllPaWRMWThHNFp6cGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDYXFScH FvEAlgSw2qRJ9uoly7MaEvGznlh7AesmRCHCTGdkXbTbs6DfPMl5bUzoPg/QVPTf a4YoC0ryHJeYvu6sePZ7mnC8WtVBzXoi8QQDWU3pncawJK6pqjT0ZkCb4N1S5ToV ehU7aVBDdyjl3km5LSk8jZvQ8DL1oCbitpl1kUTv7wY7ZXy45KyXTYi39hKvaQkr WtfRaZYN1Gmeknd/X4bAbzoLWrc3+Bc8Pk+Rno/4swINramfQzGWtkE8hsQHEmFG tLYEdsVJ0eigWSPzpSmElpUweE9G94xCVVjvc7pGGg2ryC+BQC5sSvsTp/tZ0tgt 5j7QJvO/pWiz0Q== -----END CERTIFICATE-----Generated at Sun Dec 14 06:15:53 2025 by rpki-client