This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft File: gySHKx3b4yZPpmambx9OS7Uv2FQ.mft (raw, json) Hash identifier: y9JGi9yWqMZoRgeYbxZZMSUykOMwZSpzT3jqgt7SbX8= Subject key identifier: FC:EE:A9:79:E9:F0:67:97:06:91:B8:A5:2A:6E:2D:94:D9:2B:25:A4 Authority key identifier: 83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54 Certificate issuer: /CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854 Certificate serial: 019B0E253902571DA815168D3F069BC789D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft Manifest number: 0F0A Signing time: Thu 11 Dec 2025 16:01:18 +0000 Manifest this update: Thu 11 Dec 2025 16:01:18 +0000 Manifest next update: Fri 12 Dec 2025 16:01:18 +0000 Files and hashes: 1: aKrIqq5FN4PK-r4L7QHTr_CX9Zo.roa (hash: Kv/OtykFBrcUjfDaS+Pe/Ir6WVEK4q26aEi7qXi5Xx0=) 2: gySHKx3b4yZPpmambx9OS7Uv2FQ.crl (hash: psLGZe8NUpX8nIWwCQuGEsTI3cGXEKNqrWYFYL0itKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:39:02:57:1d:a8:15:16:8d:3f:06:9b:c7:89:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854 Validity Not Before: Dec 11 16:01:18 2025 GMT Not After : Dec 12 16:01:18 2025 GMT Subject: CN=fceea979e9f067970691b8a52a6e2d94d92b25a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:18:0b:6c:e3:00:ae:7b:e6:2b:7a:9e:a6: cf:08:f6:53:6e:c4:8e:fc:22:a1:8b:19:c1:da:d3: 9d:06:71:e8:66:53:0c:c0:3b:05:9a:15:7a:7f:ea: 7c:f5:22:d2:5c:e3:5f:6a:62:7a:ba:12:48:54:c9: 9b:12:66:88:ac:92:ef:a8:3e:73:cb:92:26:e9:39: 1c:88:b5:52:7b:63:1b:85:2d:b1:e1:83:77:f4:ba: 0a:b8:65:81:66:62:ef:c5:00:21:74:4e:b1:06:3c: b8:94:b4:bd:13:3a:d1:32:48:5e:99:71:fa:3e:e0: 1a:fc:5a:7b:e4:a6:27:f4:6f:51:ac:4f:b6:68:74: b4:31:1d:31:87:4b:5f:51:0e:8e:f5:c8:9b:34:e5: 89:78:62:a6:1b:b6:37:3c:30:9a:26:5d:70:ae:c4: 5c:b8:2e:00:42:a2:28:ec:ef:d7:11:84:22:2d:a7: df:6a:54:b9:94:5a:fa:8e:18:5d:be:b6:7a:25:8b: 1c:0a:40:eb:42:db:6d:8b:f8:cd:d2:58:de:bb:02: 52:69:91:c4:51:dc:ee:7f:21:30:6f:aa:93:81:92: 88:d8:16:1a:35:44:9d:be:7d:30:4d:35:b4:50:9a: ce:00:32:47:e8:18:30:a7:d3:f3:c1:2f:83:21:99: 01:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EE:A9:79:E9:F0:67:97:06:91:B8:A5:2A:6E:2D:94:D9:2B:25:A4 X509v3 Authority Key Identifier: keyid:83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:e7:97:49:7c:9f:72:66:86:79:71:29:72:3d:81:6c:e5:32: 5c:62:57:b0:22:0b:95:aa:24:8a:65:23:f2:f0:4e:5d:4a:0a: 33:27:8c:79:3c:d2:5e:0e:a9:ce:1b:be:d0:11:8a:bc:73:2b: 71:5e:02:17:08:f8:ec:5e:ca:8f:ca:dc:6c:68:0f:0c:55:a2: ae:f6:91:7b:67:20:e5:9d:6e:3c:f6:e2:2c:7a:d8:a2:fd:20: f3:f3:4d:b2:2b:90:ab:86:d1:12:33:55:a2:1f:1a:bd:6d:c9: 65:5d:71:3b:0d:6e:93:a1:77:e2:8b:0d:45:e0:af:3e:71:0f: da:70:44:be:6f:13:68:20:f2:3c:a6:59:25:bd:76:9d:42:57: 58:ce:02:6b:94:ac:77:59:27:ba:e9:da:da:24:94:20:d3:c8: c8:fd:60:9f:6f:42:cb:7c:e1:a6:f1:d8:96:1f:ab:b7:c9:8f: 80:01:eb:bc:89:ab:50:69:59:37:29:9b:50:d1:14:40:1d:53: a3:ea:82:9a:7b:ec:fa:f0:99:9b:8a:a4:07:8d:4b:38:ea:cf: ec:01:8f:f6:71:e0:8e:c1:60:6b:28:80:0e:f2:90:fd:81:09: b1:db:4d:c4:56:c9:da:d9:53:21:42:83:45:ff:26:c2:66:5d: 23:2f:57:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJTkCVx2oFRaNPwabx4nZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMjQ4NzJiMWRkYmUzMjY0ZmE2NjZhNjZmMWY0ZTRiYjUy ZmQ4NTQwHhcNMjUxMjExMTYwMTE4WhcNMjUxMjEyMTYwMTE4WjAzMTEwLwYDVQQD EyhmY2VlYTk3OWU5ZjA2Nzk3MDY5MWI4YTUyYTZlMmQ5NGQ5MmIyNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1sYC2zjAK575it6nqbPCPZTbsSO /CKhixnB2tOdBnHoZlMMwDsFmhV6f+p89SLSXONfamJ6uhJIVMmbEmaIrJLvqD5z y5Im6TkciLVSe2MbhS2x4YN39LoKuGWBZmLvxQAhdE6xBjy4lLS9EzrRMkhemXH6 PuAa/Fp75KYn9G9RrE+2aHS0MR0xh0tfUQ6O9cibNOWJeGKmG7Y3PDCaJl1wrsRc uC4AQqIo7O/XEYQiLaffalS5lFr6jhhdvrZ6JYscCkDrQttti/jN0ljeuwJSaZHE UdzufyEwb6qTgZKI2BYaNUSdvn0wTTW0UJrOADJH6Bgwp9PzwS+DIZkBkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzuqXnp8GeXBpG4pSpuLZTZKyWkMB8GA1UdIwQY MBaAFIMkhysd2+MmT6Zmpm8fTku1L9hUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3lTSEt4M2I0eVpQcG1hbWJ4OU9TN1V2MkZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83NzhjNjYtOWE1MS00M2M2LTkyYTct Zjg3YjYyZmI2MWZmLzEvZ3lTSEt4M2I0eVpQcG1hbWJ4OU9TN1V2MkZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS83NzhjNjYtOWE1MS00M2M2LTkyYTctZjg3YjYyZmI2MWZm LzEvZ3lTSEt4M2I0eVpQcG1hbWJ4OU9TN1V2MkZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtueXSXyf cmaGeXEpcj2BbOUyXGJXsCILlaokimUj8vBOXUoKMyeMeTzSXg6pzhu+0BGKvHMr cV4CFwj47F7Kj8rcbGgPDFWirvaRe2cg5Z1uPPbiLHrYov0g8/NNsiuQq4bREjNV oh8avW3JZV1xOw1uk6F34osNReCvPnEP2nBEvm8TaCDyPKZZJb12nUJXWM4Ca5Ss d1knuuna2iSUINPIyP1gn29Cy3zhpvHYlh+rt8mPgAHrvImrUGlZNymbUNEUQB1T o+qCmnvs+vCZm4qkB41LOOrP7AGP9nHgjsFgayiADvKQ/YEJsdtNxFbJ2tlTIUKD Rf8mwmZdIy9X0w== -----END CERTIFICATE-----Generated at Thu Dec 11 22:53:12 2025 by rpki-client