This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft File: gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft (raw, json) Hash identifier: T3RfqWUMz/BXAdKbcdkCkfanq0B8lySgVhYueTUb4Xw= Subject key identifier: 41:90:BB:84:02:31:9D:66:77:71:07:38:35:17:1A:39:9F:EA:7E:34 Authority key identifier: 80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F Certificate issuer: /CN=803f6e8176c911daa2c343053311fe3f03d7d67f Certificate serial: 019B32D71CA04A7FBDE1B97A637C6D724509 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft Manifest number: 14BB Signing time: Thu 18 Dec 2025 19:01:56 +0000 Manifest this update: Thu 18 Dec 2025 19:01:56 +0000 Manifest next update: Fri 19 Dec 2025 19:01:56 +0000 Files and hashes: 1: gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl (hash: rLZzmUy4hgT/GL15pjuLJD0XMq6ldaYc12IvTVjWS5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:1c:a0:4a:7f:bd:e1:b9:7a:63:7c:6d:72:45:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803f6e8176c911daa2c343053311fe3f03d7d67f Validity Not Before: Dec 18 19:01:56 2025 GMT Not After : Dec 19 19:01:56 2025 GMT Subject: CN=4190bb8402319d667771073835171a399fea7e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b4:82:04:a3:f0:5a:cf:f1:93:82:bb:3b:be: 15:6b:3c:80:46:c9:3a:26:80:b2:0b:00:04:6f:92: 46:0a:46:95:cd:8c:b1:70:be:a5:ed:b4:a3:a2:4d: 65:3c:86:b3:cf:53:cf:2f:d1:ec:5e:18:d1:1e:17: f3:53:32:57:86:35:34:18:53:1e:1c:53:76:3b:36: 99:46:2c:05:44:7c:9d:66:7e:30:41:ec:b8:5d:94: bb:b5:bb:58:79:e4:b7:e2:de:22:cb:3f:e9:93:3c: ca:3f:5b:95:a1:83:8d:fb:33:69:05:78:24:f7:24: bd:b2:6b:17:07:98:d6:85:80:f0:be:da:81:bd:bf: 47:e4:cd:dd:09:ad:68:e9:41:ef:94:75:f8:82:26: 83:8f:ca:f0:6a:2d:cc:1a:bd:c0:f2:aa:1f:52:51: e1:ef:20:d0:08:9c:c1:3b:98:59:92:03:46:c2:ea: 23:53:e2:04:92:93:41:e4:da:b6:72:65:06:b2:41: 3a:7e:ab:76:98:01:f2:6b:f5:98:4e:06:ff:8b:44: e0:4d:d3:d0:c6:b5:a9:e9:a7:84:68:a7:62:be:93: c7:c1:86:59:6d:95:c3:25:1e:3b:5c:db:e4:05:99: 65:f9:03:8a:c7:d1:5c:f3:17:e0:ce:5d:72:af:e0: 4a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:90:BB:84:02:31:9D:66:77:71:07:38:35:17:1A:39:9F:EA:7E:34 X509v3 Authority Key Identifier: keyid:80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d7:e3:e7:a6:87:1a:06:cd:f5:ea:ff:04:1c:c0:39:1a:12: 4e:e5:c0:22:26:77:de:9e:1c:c7:76:09:8f:69:24:ba:b1:eb: 39:34:5b:57:a4:1e:86:64:c3:1b:64:ce:07:75:60:3c:b6:fd: c1:c2:4c:70:df:d0:3b:d5:fb:5e:a7:cb:3f:c7:36:14:1b:31: 06:bd:89:f7:93:ec:76:79:ce:71:f8:05:00:06:92:60:4b:7e: 10:59:64:a8:b2:02:ee:ac:c2:3b:32:7e:d3:54:5a:2e:26:d0: b5:bd:00:ad:35:5e:98:c1:f3:08:64:91:3e:22:14:6b:80:d7: 34:8f:2a:f6:86:ae:9d:57:9f:ad:7f:5b:34:54:28:2c:45:68: f9:2f:1a:76:4c:36:7b:69:10:1b:d3:2f:62:88:01:a1:05:b3: 9b:f9:15:83:a0:00:a2:00:99:70:93:5c:bb:d8:de:e2:82:e6: ce:4d:ca:86:d5:53:b6:e2:67:8f:63:fe:03:d0:80:78:f9:08: aa:b9:9f:bd:93:97:2c:cc:2f:3b:92:c2:ba:d8:6f:e2:aa:64: ec:3b:f8:c5:23:62:83:f7:67:11:56:49:69:53:4c:1e:c3:c7: fe:17:83:0e:92:41:dd:22:15:8b:03:ef:e1:8c:8d:a8:0c:73: 82:31:71:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1xygSn+94bl6Y3xtckUJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwM2Y2ZTgxNzZjOTExZGFhMmMzNDMwNTMzMTFmZTNmMDNk N2Q2N2YwHhcNMjUxMjE4MTkwMTU2WhcNMjUxMjE5MTkwMTU2WjAzMTEwLwYDVQQD Eyg0MTkwYmI4NDAyMzE5ZDY2Nzc3MTA3MzgzNTE3MWEzOTlmZWE3ZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrSCBKPwWs/xk4K7O74VazyARsk6 JoCyCwAEb5JGCkaVzYyxcL6l7bSjok1lPIazz1PPL9HsXhjRHhfzUzJXhjU0GFMe HFN2OzaZRiwFRHydZn4wQey4XZS7tbtYeeS34t4iyz/pkzzKP1uVoYON+zNpBXgk 9yS9smsXB5jWhYDwvtqBvb9H5M3dCa1o6UHvlHX4giaDj8rwai3MGr3A8qofUlHh 7yDQCJzBO5hZkgNGwuojU+IEkpNB5Nq2cmUGskE6fqt2mAHya/WYTgb/i0TgTdPQ xrWp6aeEaKdivpPHwYZZbZXDJR47XNvkBZll+QOKx9Fc8xfgzl1yr+BK9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGQu4QCMZ1md3EHODUXGjmf6n40MB8GA1UdIwQY MBaAFIA/boF2yRHaosNDBTMR/j8D19Z/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0Q5dWdYYkpFZHFpdzBNRk14SC1Qd1BYMW44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jY2E1ZTctYWEyYS00MTVjLWEwMDMt MGUzNDQ3ZjcxYjVmLzEvZ0Q5dWdYYkpFZHFpdzBNRk14SC1Qd1BYMW44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9jY2E1ZTctYWEyYS00MTVjLWEwMDMtMGUzNDQ3ZjcxYjVm LzEvZ0Q5dWdYYkpFZHFpdzBNRk14SC1Qd1BYMW44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdfj56aH GgbN9er/BBzAORoSTuXAIiZ33p4cx3YJj2kkurHrOTRbV6QehmTDG2TOB3VgPLb9 wcJMcN/QO9X7XqfLP8c2FBsxBr2J95PsdnnOcfgFAAaSYEt+EFlkqLIC7qzCOzJ+ 01RaLibQtb0ArTVemMHzCGSRPiIUa4DXNI8q9oaunVefrX9bNFQoLEVo+S8adkw2 e2kQG9MvYogBoQWzm/kVg6AAogCZcJNcu9je4oLmzk3KhtVTtuJnj2P+A9CAePkI qrmfvZOXLMwvO5LCuthv4qpk7Dv4xSNig/dnEVZJaVNMHsPH/heDDpJB3SIViwPv 4YyNqAxzgjFx0A== -----END CERTIFICATE-----Generated at Fri Dec 19 04:50:50 2025 by rpki-client