This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft File: gynJE4dY3-i6EjXuDsfZtlifSyc.mft (raw, json) Hash identifier: +duxzp1hUWAMPgdKSL83VBDxnapmHIis+tLvSz7Op1w= Subject key identifier: 9F:23:C9:CA:6F:04:54:DF:F1:4E:D6:F9:72:94:95:77:5A:4D:93:32 Authority key identifier: 83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27 Certificate issuer: /CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27 Certificate serial: 019B1B3C22444BF28E53A5391AF883950344 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft Manifest number: 0761 Signing time: Sun 14 Dec 2025 05:01:24 +0000 Manifest this update: Sun 14 Dec 2025 05:01:24 +0000 Manifest next update: Mon 15 Dec 2025 05:01:24 +0000 Files and hashes: 1: NEtfj8eymwkFpDG7BP2gOv3cbAs.roa (hash: J8/tby/ZFT8OsdOz/hNiW3bEdXZu2ngXmdS3bjVWlAA=) 2: gynJE4dY3-i6EjXuDsfZtlifSyc.crl (hash: qA2PWfkrMUsEM9SGj+x5OTBcDS2cAF5VDI5xxkHZBJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3c:22:44:4b:f2:8e:53:a5:39:1a:f8:83:95:03:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27 Validity Not Before: Dec 14 05:01:24 2025 GMT Not After : Dec 15 05:01:24 2025 GMT Subject: CN=9f23c9ca6f0454dff14ed6f9729495775a4d9332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:48:48:0d:f6:90:d6:0e:7a:22:db:90:a6: b1:11:0b:9d:79:9c:83:a0:9e:31:58:2c:1b:7e:6d: 17:0f:4d:da:1d:39:89:9d:82:6f:8a:fa:4b:40:55: 04:00:67:2d:7e:0e:60:e0:ae:fe:73:43:d3:07:ff: cb:65:bb:25:a1:f2:65:b2:b7:b6:9e:81:be:9e:64: 4f:28:df:24:2d:9a:04:22:6b:86:82:61:b6:a0:4b: f8:18:bd:95:83:96:42:35:c9:9d:06:ad:8a:b4:4c: 8c:0a:fa:2d:23:4b:2b:8a:66:4b:d0:74:ec:cd:26: e2:0e:03:55:ac:1a:ad:10:6c:3f:a6:ab:af:97:4b: 24:91:41:80:e2:0d:3d:a3:1c:67:2c:18:f7:46:6f: e2:22:d7:5a:33:e7:95:ad:e7:dd:9d:60:0f:0c:62: 96:a6:4a:2c:98:1e:6d:69:40:32:a3:09:9d:bb:c6: a7:74:cd:99:3a:85:46:55:39:db:73:c7:e7:e6:77: 6c:8a:aa:1d:f3:0f:10:25:97:3a:90:54:ba:5c:81: 02:72:89:17:d7:c9:3f:2c:8f:a7:58:be:61:fc:f6: 7c:81:e7:1e:4f:d1:c2:ee:67:5c:a4:8b:dc:33:24: 77:49:fe:41:11:ac:b8:82:91:1c:6e:81:0b:b7:73: 75:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:23:C9:CA:6F:04:54:DF:F1:4E:D6:F9:72:94:95:77:5A:4D:93:32 X509v3 Authority Key Identifier: keyid:83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b5:91:18:64:c1:83:41:e5:17:95:7c:c3:df:51:bd:ff:23: 46:95:bf:83:a6:30:78:12:05:13:28:a2:1b:27:0a:f5:38:ab: bb:d8:67:c9:00:f6:33:63:84:ab:83:4a:ca:f4:98:3e:79:a1: e5:ea:cf:30:e2:43:6f:f8:b0:15:bd:1c:f2:d3:65:64:d1:d2: 8e:c5:37:25:fe:ed:2b:b9:a9:97:8d:bf:aa:92:e5:0e:ee:31: 3c:72:7d:ce:de:65:0f:ea:13:26:2d:02:51:98:58:5d:47:c3: 93:bd:92:b6:04:1e:50:8c:52:72:c8:0a:49:11:15:58:e1:25: 9f:a6:6c:aa:e3:60:dd:a9:04:1d:1f:8f:ae:c0:f9:41:39:69: 97:c0:2f:af:09:6e:bf:8b:c0:ff:2a:72:91:9a:24:83:a6:e5: e3:f8:43:48:94:fd:6e:48:65:b3:cc:f0:f4:a9:50:63:29:17: 3e:0f:5b:bd:5b:f8:28:5e:78:6d:59:87:e9:43:c7:e0:ea:f3: d9:07:38:dc:f2:1a:a5:1b:1f:51:33:46:7a:dd:ee:a3:32:22: 61:45:f5:0c:a9:a0:eb:26:e0:ff:d0:75:58:cb:85:b5:28:d1: 2a:44:43:a9:50:f0:bc:ab:ff:7b:b9:02:f8:96:7b:7e:2f:12: 4e:a2:01:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbPCJES/KOU6U5GviDlQNEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMjljOTEzODc1OGRmZThiYTEyMzVlZTBlYzdkOWI2NTg5 ZjRiMjcwHhcNMjUxMjE0MDUwMTI0WhcNMjUxMjE1MDUwMTI0WjAzMTEwLwYDVQQD Eyg5ZjIzYzljYTZmMDQ1NGRmZjE0ZWQ2Zjk3Mjk0OTU3NzVhNGQ5MzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6VISA32kNYOeiLbkKaxEQudeZyD oJ4xWCwbfm0XD03aHTmJnYJvivpLQFUEAGctfg5g4K7+c0PTB//LZbslofJlsre2 noG+nmRPKN8kLZoEImuGgmG2oEv4GL2Vg5ZCNcmdBq2KtEyMCvotI0srimZL0HTs zSbiDgNVrBqtEGw/pquvl0skkUGA4g09oxxnLBj3Rm/iItdaM+eVrefdnWAPDGKW pkosmB5taUAyowmdu8andM2ZOoVGVTnbc8fn5ndsiqod8w8QJZc6kFS6XIECcokX 18k/LI+nWL5h/PZ8geceT9HC7mdcpIvcMyR3Sf5BEay4gpEcboELt3N1DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8jycpvBFTf8U7W+XKUlXdaTZMyMB8GA1UdIwQY MBaAFIMpyROHWN/ouhI17g7H2bZYn0snMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3luSkU0ZFkzLWk2RWpYdURzZlp0bGlmU3ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83OGY4MmQtMGJiOS00M2RlLTk4MTAt MWNhN2EwYjZhYzlhLzEvZ3luSkU0ZFkzLWk2RWpYdURzZlp0bGlmU3ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni83OGY4MmQtMGJiOS00M2RlLTk4MTAtMWNhN2EwYjZhYzlh LzEvZ3luSkU0ZFkzLWk2RWpYdURzZlp0bGlmU3ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7WRGGTB g0HlF5V8w99Rvf8jRpW/g6YweBIFEyiiGycK9Tiru9hnyQD2M2OEq4NKyvSYPnmh 5erPMOJDb/iwFb0c8tNlZNHSjsU3Jf7tK7mpl42/qpLlDu4xPHJ9zt5lD+oTJi0C UZhYXUfDk72StgQeUIxScsgKSREVWOEln6ZsquNg3akEHR+PrsD5QTlpl8Avrwlu v4vA/ypykZokg6bl4/hDSJT9bkhls8zw9KlQYykXPg9bvVv4KF54bVmH6UPH4Orz 2Qc43PIapRsfUTNGet3uozIiYUX1DKmg6ybg/9B1WMuFtSjRKkRDqVDwvKv/e7kC +JZ7fi8STqIBPg== -----END CERTIFICATE-----Generated at Sun Dec 14 08:38:53 2025 by rpki-client