This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft File: gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json) Hash identifier: XVfmm2Q6UoC8zyVuwH0kFlTM9ucvCMIIIb3NfSzz2kU= Subject key identifier: 02:F0:DD:F2:18:F7:6C:73:91:60:23:C6:95:17:63:7A:D8:9C:04:13 Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68 Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668 Certificate serial: 019B48EFE371E9D025978A721F8189D40FF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft Manifest number: 108F Signing time: Tue 23 Dec 2025 02:00:39 +0000 Manifest this update: Tue 23 Dec 2025 02:00:39 +0000 Manifest next update: Wed 24 Dec 2025 02:00:39 +0000 Files and hashes: 1: 2iJw4EQoXKQlcgvYyAFZ8L2PyY4.roa (hash: iiK5pamhZGxd1XFCTcN85Gnci+JOI25h5MBN1jWndgw=) 2: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: VODgTjYH45efWY8cS6dkf+gHOspfkZXjX+t+z0ClZr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:ef:e3:71:e9:d0:25:97:8a:72:1f:81:89:d4:0f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8166038385b343d55e76b728efe23c0731787668 Validity Not Before: Dec 23 02:00:39 2025 GMT Not After : Dec 24 02:00:39 2025 GMT Subject: CN=02f0ddf218f76c73916023c69517637ad89c0413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:83:f9:6d:ee:72:23:2b:e8:f7:92:db:24:22: fe:5f:6b:ba:a0:d6:14:9e:78:92:a3:05:56:b7:73: a3:a0:6a:9b:8b:4b:c6:ff:9a:08:3a:b4:67:48:4a: f8:2f:9e:70:a7:26:94:fe:e5:2a:b0:85:d1:33:c2: 9f:dc:c6:c5:8c:8a:72:6b:99:65:29:40:64:b3:60: 47:7c:dd:0e:d2:df:03:50:1c:61:f4:1d:75:c4:3d: ce:ff:f3:2b:e8:68:35:78:97:16:6d:80:f0:fa:ac: 9e:01:3e:c1:dc:f2:83:55:a2:13:66:cc:f1:11:6b: 0f:ac:43:93:d6:a1:65:4e:31:56:61:4c:be:92:23: 34:09:f5:d5:28:11:de:16:f9:3f:41:01:1e:38:f7: 20:bd:5f:94:54:08:1c:b3:9e:30:ff:8f:2c:10:f0: f2:47:7a:c1:49:69:f6:1a:dd:26:5a:35:a0:8c:a9: 9a:45:0b:43:15:ba:04:d2:46:bf:43:06:dc:3e:f3: f7:e7:f3:60:b8:55:ee:fa:ed:40:82:ca:2e:7c:1d: 97:9a:eb:59:c9:20:e3:67:4b:3c:3c:de:d3:2e:3b: 53:ba:8c:f6:86:49:0f:29:f7:76:fd:eb:84:c9:4b: 4d:fe:f3:cc:39:2f:d2:49:7e:7b:8a:bb:7e:e7:27: 98:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F0:DD:F2:18:F7:6C:73:91:60:23:C6:95:17:63:7A:D8:9C:04:13 X509v3 Authority Key Identifier: keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:73:f2:dc:6c:6d:46:0c:47:95:7f:a3:be:fb:e8:6b:cd:1f: 89:47:34:be:4b:0c:3a:84:b7:0c:cc:4a:88:02:88:06:00:24: e9:79:67:c1:d2:cf:1d:52:87:84:d7:3a:6b:0f:80:7f:e4:26: 3a:ac:05:5b:5d:2a:97:3f:25:66:e3:eb:fa:c4:27:d3:59:75: 73:c5:5a:b5:44:62:0e:6b:27:b2:fb:f4:6f:8b:94:da:62:26: 91:f2:ee:b9:ff:af:10:82:74:bb:82:ec:2c:b4:2d:f4:3b:f3: 66:5c:13:f5:f9:56:fa:e6:61:f0:5a:98:90:71:c4:b6:fb:be: 4f:6b:7a:35:85:75:ac:32:95:9d:fa:d5:5a:0a:75:d1:a3:21: 09:b9:ed:aa:b5:e8:3c:9d:be:83:65:d4:70:80:53:4d:b3:6e: 2d:4b:a3:f6:0b:c4:d0:4b:89:1d:a8:5a:ba:53:0f:77:81:42: 0a:79:a9:64:b1:3c:66:78:2e:9a:38:dc:39:b1:55:03:a4:7a: f7:0a:4c:0a:87:ac:1b:cb:9c:49:f5:75:d1:ee:bc:57:af:d0: 6e:1f:ba:fc:c3:58:c9:7f:2a:e7:6c:46:f7:5a:a7:34:d5:74: a0:02:3c:92:87:c2:fe:8c:53:8a:39:2e:a8:49:ea:08:22:9c: e9:2f:c4:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI7+Nx6dAll4pyH4GJ1A/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNjYwMzgzODViMzQzZDU1ZTc2YjcyOGVmZTIzYzA3MzE3 ODc2NjgwHhcNMjUxMjIzMDIwMDM5WhcNMjUxMjI0MDIwMDM5WjAzMTEwLwYDVQQD EygwMmYwZGRmMjE4Zjc2YzczOTE2MDIzYzY5NTE3NjM3YWQ4OWMwNDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YP5be5yIyvo95LbJCL+X2u6oNYU nniSowVWt3OjoGqbi0vG/5oIOrRnSEr4L55wpyaU/uUqsIXRM8Kf3MbFjIpya5ll KUBks2BHfN0O0t8DUBxh9B11xD3O//Mr6Gg1eJcWbYDw+qyeAT7B3PKDVaITZszx EWsPrEOT1qFlTjFWYUy+kiM0CfXVKBHeFvk/QQEeOPcgvV+UVAgcs54w/48sEPDy R3rBSWn2Gt0mWjWgjKmaRQtDFboE0ka/QwbcPvP35/NguFXu+u1AgsoufB2XmutZ ySDjZ0s8PN7TLjtTuoz2hkkPKfd2/euEyUtN/vPMOS/SSX57irt+5yeYjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALw3fIY92xzkWAjxpUXY3rYnAQTMB8GA1UdIwQY MBaAFIFmA4OFs0PVXna3KO/iPAcxeHZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy80OGNmZDAtMzIzOC00YWFmLWI2NjMt NDM3M2I2NTc5MGI4LzEvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy80OGNmZDAtMzIzOC00YWFmLWI2NjMtNDM3M2I2NTc5MGI4 LzEvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHPy3Gxt RgxHlX+jvvvoa80fiUc0vksMOoS3DMxKiAKIBgAk6XlnwdLPHVKHhNc6aw+Af+Qm OqwFW10qlz8lZuPr+sQn01l1c8VatURiDmsnsvv0b4uU2mImkfLuuf+vEIJ0u4Ls LLQt9DvzZlwT9flW+uZh8FqYkHHEtvu+T2t6NYV1rDKVnfrVWgp10aMhCbntqrXo PJ2+g2XUcIBTTbNuLUuj9gvE0EuJHahaulMPd4FCCnmpZLE8ZngumjjcObFVA6R6 9wpMCoesG8ucSfV10e68V6/Qbh+6/MNYyX8q52xG91qnNNV0oAI8kofC/oxTijku qEnqCCKc6S/EdA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:54:01 2025 by rpki-client