This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft File: gDCVaDspR93Unu6sDb2eqVSuoUQ.mft (raw, json) Hash identifier: EpFHGJT7hXnNY0CgI38pW/SYxdJblQZp8/6Ulo2YRpo= Subject key identifier: EA:D2:00:47:1A:18:0E:6A:BC:65:2A:8F:D0:B9:65:01:67:1B:F1:FA Authority key identifier: 80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44 Certificate issuer: /CN=803095683b2947ddd49eeeac0dbd9ea954aea144 Certificate serial: 019B1C855F55790DC7CE276A6137BC92413E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft Manifest number: 068D Signing time: Sun 14 Dec 2025 11:01:01 +0000 Manifest this update: Sun 14 Dec 2025 11:01:01 +0000 Manifest next update: Mon 15 Dec 2025 11:01:01 +0000 Files and hashes: 1: W5iuUvjQHKES7b_m2-IC5Q7IB04.roa (hash: usyzAXKt0ilcyhdvyj8HiQdu4iL1ydlMcUp3wQXJixw=) 2: gDCVaDspR93Unu6sDb2eqVSuoUQ.crl (hash: e9bB424qobbY819BoKFVSt9m4Fzx4IVmmd+URp8Jp+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:5f:55:79:0d:c7:ce:27:6a:61:37:bc:92:41:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803095683b2947ddd49eeeac0dbd9ea954aea144 Validity Not Before: Dec 14 11:01:01 2025 GMT Not After : Dec 15 11:01:01 2025 GMT Subject: CN=ead200471a180e6abc652a8fd0b96501671bf1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:33:e3:f4:52:7e:ae:95:47:38:48:1d:31:e9: 0b:70:47:9f:e2:bf:8a:33:dc:2c:43:76:9e:48:f8: 19:a5:22:b5:9b:cc:8d:08:32:77:6d:1e:13:7a:36: f3:f1:be:c6:d0:0b:4d:24:04:5a:7e:c9:f6:f1:2e: 20:6e:92:2e:8f:ed:61:14:49:84:d8:9c:12:b6:bd: 9f:8d:47:1c:fa:19:ff:7a:c0:29:ab:54:d5:a2:06: 66:22:ac:97:dc:6e:d0:92:c9:2b:a9:24:bd:d4:0a: 92:0a:ed:3d:4d:fa:4d:d6:43:98:54:b5:0d:2d:a4: a9:39:17:df:a9:ed:22:33:80:c6:5b:c6:2e:d8:d3: bd:7a:81:39:45:c9:9b:49:ae:23:24:21:42:8c:ae: ac:64:e6:de:f3:ec:e0:67:22:cb:75:9d:80:42:35: b1:95:2a:c5:27:8d:e7:0f:89:ae:33:c4:0e:d4:69: bc:58:df:ec:06:c5:fe:a9:fb:6c:00:e4:62:49:11: 6a:40:e6:44:8e:b4:5a:b1:ba:26:2a:a6:56:58:7c: 45:52:25:74:95:42:68:98:05:11:48:f6:41:8a:98: 40:50:96:2d:4d:02:cd:47:a3:04:d8:d3:46:5f:d8: bc:5b:d1:70:26:dc:e5:71:bd:77:99:72:ff:f8:30: 7f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D2:00:47:1A:18:0E:6A:BC:65:2A:8F:D0:B9:65:01:67:1B:F1:FA X509v3 Authority Key Identifier: keyid:80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:2c:50:10:d6:f8:71:79:1d:e8:ae:5f:b5:66:ff:35:2c:ea: ac:8f:29:1a:ad:45:7b:20:eb:dc:60:ea:90:aa:e7:58:f5:d1: 5a:9d:86:13:c8:1b:d2:8c:c9:72:9e:23:a6:f9:e3:48:b4:fe: 32:1e:51:cd:f8:82:7b:e1:36:cd:fc:56:20:19:18:4c:96:fd: 0d:a7:a1:7e:d9:33:ac:c8:97:5e:81:2f:db:55:56:ef:aa:e5: d4:7c:4a:bd:c9:a3:04:94:ed:a3:10:e9:95:06:36:bf:ff:52: d8:ba:d1:a3:7c:4a:52:37:de:67:ce:22:86:1c:af:96:9d:61: 99:b8:e9:93:80:47:2c:a5:cd:48:4a:b6:10:22:f4:03:73:8a: 76:b6:7e:b0:98:cb:01:14:23:97:3e:d3:a9:7a:5b:91:eb:69: 77:0e:ca:59:5b:91:b5:cb:a6:c6:cd:26:ff:37:87:99:25:d2: 88:04:55:11:f2:27:7f:7b:46:e7:f8:0b:40:f1:3d:6e:23:0d: 6f:c4:d0:da:4a:f2:67:a9:6f:e1:fc:21:e6:6b:cf:e1:37:39: c0:ce:56:62:50:8b:4e:94:45:90:27:38:0e:d5:68:63:b2:2b: 91:cd:c3:13:af:29:e1:6a:6c:20:c9:41:60:eb:b1:b9:3b:ef: 46:cc:26:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschV9VeQ3HzidqYTe8kkE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMzA5NTY4M2IyOTQ3ZGRkNDllZWVhYzBkYmQ5ZWE5NTRh ZWExNDQwHhcNMjUxMjE0MTEwMTAxWhcNMjUxMjE1MTEwMTAxWjAzMTEwLwYDVQQD EyhlYWQyMDA0NzFhMTgwZTZhYmM2NTJhOGZkMGI5NjUwMTY3MWJmMWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDPj9FJ+rpVHOEgdMekLcEef4r+K M9wsQ3aeSPgZpSK1m8yNCDJ3bR4Tejbz8b7G0AtNJARafsn28S4gbpIuj+1hFEmE 2JwStr2fjUcc+hn/esApq1TVogZmIqyX3G7QkskrqSS91AqSCu09TfpN1kOYVLUN LaSpORffqe0iM4DGW8Yu2NO9eoE5RcmbSa4jJCFCjK6sZObe8+zgZyLLdZ2AQjWx lSrFJ43nD4muM8QO1Gm8WN/sBsX+qftsAORiSRFqQOZEjrRasbomKqZWWHxFUiV0 lUJomAURSPZBiphAUJYtTQLNR6ME2NNGX9i8W9FwJtzlcb13mXL/+DB/+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrSAEcaGA5qvGUqj9C5ZQFnG/H6MB8GA1UdIwQY MBaAFIAwlWg7KUfd1J7urA29nqlUrqFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0RDVmFEc3BSOTNVbnU2c0RiMmVxVlN1b1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zOTkyNjktNWUxNC00ZDVlLWExYmMt NmJkZDM0NzhkMTBjLzEvZ0RDVmFEc3BSOTNVbnU2c0RiMmVxVlN1b1VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zOTkyNjktNWUxNC00ZDVlLWExYmMtNmJkZDM0NzhkMTBj LzEvZ0RDVmFEc3BSOTNVbnU2c0RiMmVxVlN1b1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdixQENb4 cXkd6K5ftWb/NSzqrI8pGq1FeyDr3GDqkKrnWPXRWp2GE8gb0ozJcp4jpvnjSLT+ Mh5RzfiCe+E2zfxWIBkYTJb9DaehftkzrMiXXoEv21VW76rl1HxKvcmjBJTtoxDp lQY2v/9S2LrRo3xKUjfeZ84ihhyvlp1hmbjpk4BHLKXNSEq2ECL0A3OKdrZ+sJjL ARQjlz7TqXpbketpdw7KWVuRtcumxs0m/zeHmSXSiARVEfInf3tG5/gLQPE9biMN b8TQ2kryZ6lv4fwh5mvP4Tc5wM5WYlCLTpRFkCc4DtVoY7Irkc3DE68p4WpsIMlB YOuxuTvvRswmZQ== -----END CERTIFICATE-----Generated at Sun Dec 14 15:11:31 2025 by rpki-client