This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json) Hash identifier: BgfLQJa4JFa7IBCxo30HOiKGeQge7ZSymKgof36lxWA= Subject key identifier: F6:D5:6B:4F:5B:BA:15:02:6D:21:1B:0D:2F:0D:79:7C:BB:74:D3:17 Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70 Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370 Certificate serial: 019B0CDBA1EF9AB808B5A2E235B3D8733A17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 10:01:18 +0000 Manifest this update: Thu 11 Dec 2025 10:01:18 +0000 Manifest next update: Fri 12 Dec 2025 10:01:18 +0000 Files and hashes: 1: AlDLgq4a_thE-qXe6l8E_xWLXFc.roa (hash: 0ufopEuWXow9IQPbSAY5y6lUJPxjAppqenIRissIhOM=) 2: HbD_TR3_mqlACMnF4iTXIAuOjsg.roa (hash: T3tCAy3O2wLO9qO83uugLqRmkiFNSfdwlXWERB4+Mok=) 3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: WbhCvAKZyPnmu2v4Xk9zI4R39Pd/aZ9IyTYhgY6J9uk=) 4: h5Pey3t7ILGJvHcV0wlWm8IDgRE.roa (hash: /bmLdcY/7qOd0oeU6NCbdR7DKpvTkMz1r7GZ1d675P4=) 5: nId42Q0uPKxNBDzBg-GOcY-a01Q.roa (hash: 43G2ltR87FjAzlwjOiHc7NglbtaxLWslqx/bREI6WQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 10:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:db:a1:ef:9a:b8:08:b5:a2:e2:35:b3:d8:73:3a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370 Validity Not Before: Dec 11 10:01:18 2025 GMT Not After : Dec 12 10:01:18 2025 GMT Subject: CN=f6d56b4f5bba15026d211b0d2f0d797cbb74d317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:52:05:29:1e:da:1f:57:57:9b:ff:d1:bb:51: 8c:77:cd:6b:30:c5:a2:bd:4a:0a:76:ed:e2:32:bd: 61:66:36:00:56:4d:dc:cc:21:68:0c:ba:8c:10:15: 73:96:ab:76:94:b2:2a:e7:19:f2:da:e3:f4:de:47: 3f:d1:e8:34:5e:c2:d9:0a:fa:e8:94:bc:ca:d6:05: f5:e2:c7:e9:5e:ad:cb:36:96:91:2a:db:aa:c4:79: 83:1c:8a:ad:1d:4f:a8:e5:64:f2:3b:f6:3b:e8:5a: 8e:79:aa:3a:4b:a6:27:cf:89:dc:f3:ff:b8:7d:0a: 83:fc:26:52:17:d9:76:fa:67:47:89:65:d0:87:19: 8c:da:69:c7:6b:b7:8e:f7:ff:8d:b6:f0:db:04:25: 91:1e:e4:79:6a:c8:ef:25:60:d0:ed:96:dc:cd:7a: 6c:d7:cf:03:54:30:d8:58:af:fb:19:ef:c9:1a:99: a0:e5:3c:b8:ab:88:d2:ba:d9:ee:4e:45:9a:0e:fd: af:9d:6d:ac:c4:4e:67:5d:e2:c7:91:ee:69:10:41: bb:b8:18:65:0d:f1:06:c0:34:f0:81:a1:56:f4:1f: 93:74:30:31:82:e5:f8:37:0d:90:99:f2:1f:38:18: dc:e6:90:62:73:f7:7f:17:5c:1f:dd:f8:a7:d0:3d: fb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D5:6B:4F:5B:BA:15:02:6D:21:1B:0D:2F:0D:79:7C:BB:74:D3:17 X509v3 Authority Key Identifier: keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8c:4d:f6:a7:37:5b:a7:34:84:32:d3:b2:9f:1e:10:73:4f: 9a:fa:04:b5:d6:98:3c:51:eb:11:b8:53:bc:34:a3:8c:cd:ee: c9:e5:a0:6c:04:65:f6:55:ef:17:9c:9e:2e:e1:a3:81:4d:3b: 43:65:24:ce:91:5b:89:3b:53:fe:44:1e:54:4d:b9:33:2f:67: 34:f0:37:79:a3:b7:bb:56:b1:a7:9d:b1:58:30:87:68:54:c1: 1d:48:be:fd:d8:63:ea:fd:79:68:cb:13:33:54:89:19:12:5e: 77:94:b8:c8:0d:bc:45:b6:76:84:d2:c4:20:d8:76:6e:dc:b8: 6f:33:e0:1c:d5:8d:e2:2b:ef:c4:78:fe:f6:cf:ef:57:7a:de: 4d:3e:cd:10:f7:86:8d:c4:97:8d:8b:9b:41:ed:d6:b7:53:e1: e3:87:5d:3a:ad:c4:50:db:62:54:ba:77:a0:d8:55:8d:91:f0: 05:6e:84:db:63:96:41:7b:6b:66:00:9f:9d:95:bd:8e:b6:6d: 57:92:f1:1c:05:32:7a:47:44:ce:9f:1e:55:f7:8b:63:d8:e0: d8:b7:b6:12:43:43:2a:97:76:9b:0c:27:5e:08:62:7c:53:65: a8:c0:03:cc:47:b4:e9:45:4e:ff:07:51:97:1d:09:0a:3c:7b: 96:23:7a:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsM26HvmrgItaLiNbPYczoXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYWQ4YzUyMGJiOTY3NzQ2MWRkYzRlYzA5Yjc2ZDczM2I3 ZDgzNzAwHhcNMjUxMjExMTAwMTE4WhcNMjUxMjEyMTAwMTE4WjAzMTEwLwYDVQQD EyhmNmQ1NmI0ZjViYmExNTAyNmQyMTFiMGQyZjBkNzk3Y2JiNzRkMzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FIFKR7aH1dXm//Ru1GMd81rMMWi vUoKdu3iMr1hZjYAVk3czCFoDLqMEBVzlqt2lLIq5xny2uP03kc/0eg0XsLZCvro lLzK1gX14sfpXq3LNpaRKtuqxHmDHIqtHU+o5WTyO/Y76FqOeao6S6Ynz4nc8/+4 fQqD/CZSF9l2+mdHiWXQhxmM2mnHa7eO9/+NtvDbBCWRHuR5asjvJWDQ7ZbczXps 188DVDDYWK/7Ge/JGpmg5Ty4q4jSutnuTkWaDv2vnW2sxE5nXeLHke5pEEG7uBhl DfEGwDTwgaFW9B+TdDAxguX4Nw2QmfIfOBjc5pBic/d/F1wf3fin0D37rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbVa09buhUCbSEbDS8NeXy7dNMXMB8GA1UdIwQY MBaAFICtjFILuWd0Yd3E7Am3bXM7fYNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEt YzYxNzUxYzZiMTk1LzEvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEtYzYxNzUxYzZiMTk1 LzEvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4xN9qc3 W6c0hDLTsp8eEHNPmvoEtdaYPFHrEbhTvDSjjM3uyeWgbARl9lXvF5yeLuGjgU07 Q2UkzpFbiTtT/kQeVE25My9nNPA3eaO3u1axp52xWDCHaFTBHUi+/dhj6v15aMsT M1SJGRJed5S4yA28RbZ2hNLEINh2bty4bzPgHNWN4ivvxHj+9s/vV3reTT7NEPeG jcSXjYubQe3Wt1Ph44ddOq3EUNtiVLp3oNhVjZHwBW6E22OWQXtrZgCfnZW9jrZt V5LxHAUyekdEzp8eVfeLY9jg2Le2EkNDKpd2mwwnXghifFNlqMADzEe06UVO/wdR lx0JCjx7liN6eA== -----END CERTIFICATE-----Generated at Thu Dec 11 19:22:19 2025 by rpki-client