This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft File: gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft (raw, json) Hash identifier: hXN4CFlYGXrpoTeb/XKanzof8Q0279ZB1oVJa1fd56Q= Subject key identifier: 8A:36:18:40:18:02:A3:94:31:21:8A:A9:35:38:9D:C1:F6:89:7B:42 Authority key identifier: 80:EA:CF:62:B3:4A:4E:FC:5B:2F:D5:24:E5:92:16:7C:67:44:10:1E Certificate issuer: /CN=80eacf62b34a4efc5b2fd524e592167c6744101e Certificate serial: 019B5A883690D87C8BE156345A5DAA46F882 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft Manifest number: C3 Signing time: Fri 26 Dec 2025 12:00:34 +0000 Manifest this update: Fri 26 Dec 2025 12:00:34 +0000 Manifest next update: Sat 27 Dec 2025 12:00:34 +0000 Files and hashes: 1: gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.crl (hash: rGC2YteLWycvLiwQB2//oMi6ldGye2ZL3t5Y22j2KfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft rsync://rpki.ripe.net/repository/DEFAULT/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:36:90:d8:7c:8b:e1:56:34:5a:5d:aa:46:f8:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80eacf62b34a4efc5b2fd524e592167c6744101e Validity Not Before: Dec 26 12:00:34 2025 GMT Not After : Dec 27 12:00:34 2025 GMT Subject: CN=8a3618401802a39431218aa935389dc1f6897b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:11:31:41:78:09:a9:65:2c:b2:cb:21:ca:ae: 3d:e2:ee:79:72:42:3a:57:b1:ef:34:2a:0f:80:5a: ea:73:e1:92:df:e1:a6:8e:64:4b:c3:45:21:a0:44: 9d:8d:fc:0c:d7:3a:dd:31:1e:ea:c0:f7:dc:e8:0d: 4e:0c:2f:74:25:39:e4:13:2f:b1:14:5b:0d:b5:1a: 70:47:a4:bb:30:df:ff:22:39:3f:52:f4:4d:d1:f9: 66:9a:9a:e8:d9:7c:0b:ba:de:5a:7c:e4:85:b4:fa: ce:f1:01:b7:05:89:cb:b5:68:9a:54:66:32:64:2d: a1:55:a5:79:0b:6a:3b:08:41:da:bd:07:76:99:b7: 39:ba:c6:31:f3:54:34:d0:9b:5a:1f:0f:43:eb:a9: 2e:fe:5d:53:96:bc:6f:7e:37:0a:51:92:5b:e8:95: bc:d8:0f:c6:2d:f3:f7:40:3c:c4:27:21:c9:1f:a7: 9d:0a:4e:58:01:a0:be:ca:f9:84:91:b1:a7:d4:bd: fe:c4:92:46:bc:50:59:50:16:ea:01:69:66:46:83: 5a:80:ba:10:98:ee:a1:03:84:a0:03:0f:a8:da:b6: d5:b4:f4:46:68:24:71:d3:bc:ff:34:e3:75:90:4d: 08:39:8a:a9:d8:f5:50:ed:99:90:ba:d0:69:e0:ad: bf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:36:18:40:18:02:A3:94:31:21:8A:A9:35:38:9D:C1:F6:89:7B:42 X509v3 Authority Key Identifier: keyid:80:EA:CF:62:B3:4A:4E:FC:5B:2F:D5:24:E5:92:16:7C:67:44:10:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:85:dc:52:4c:bd:fd:9f:c8:b9:29:61:01:f9:2d:d8:8e:f3: 4e:dd:bb:14:75:72:e3:be:09:79:49:85:f2:7f:5d:24:b6:ad: ef:a5:78:9e:57:66:04:5f:14:53:41:4f:41:e3:ee:c6:4a:11: d0:5c:b3:96:91:18:a1:48:e1:a3:1a:f8:03:8b:2d:91:a3:0d: f9:1e:6d:ab:82:69:43:bc:d5:c8:49:65:72:b0:8b:5e:a0:0c: 67:13:27:1d:ff:82:16:c6:20:0d:8f:a7:b0:6d:cc:bf:de:1e: 23:75:30:47:bd:20:3b:8c:f3:fe:22:da:cb:cd:89:fc:b6:aa: e8:1c:76:e2:77:8a:7e:57:bb:cc:bd:dc:e6:47:3c:c6:78:b0: e0:9e:cf:02:ba:65:42:1f:c7:4f:79:46:70:06:2d:61:d0:41: 00:20:b7:c3:d6:56:02:1a:6c:30:10:5d:f7:6f:b9:e7:02:ff: a3:83:f4:77:ce:70:4d:b9:98:3e:6d:5b:c7:d2:2e:67:8c:57: 14:0b:4f:be:26:bb:cc:ed:ae:08:2c:52:ba:55:43:41:3c:e7: e1:62:9d:61:eb:eb:67:85:f1:cc:38:c5:55:9e:1c:0d:0f:14: dd:c2:44:cb:95:ac:8b:7d:78:81:36:a5:e7:91:f1:f2:45:c3: 8a:95:0f:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiDaQ2HyL4VY0Wl2qRviCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZWFjZjYyYjM0YTRlZmM1YjJmZDUyNGU1OTIxNjdjNjc0 NDEwMWUwHhcNMjUxMjI2MTIwMDM0WhcNMjUxMjI3MTIwMDM0WjAzMTEwLwYDVQQD Eyg4YTM2MTg0MDE4MDJhMzk0MzEyMThhYTkzNTM4OWRjMWY2ODk3YjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphExQXgJqWUsssshyq494u55ckI6 V7HvNCoPgFrqc+GS3+GmjmRLw0UhoESdjfwM1zrdMR7qwPfc6A1ODC90JTnkEy+x FFsNtRpwR6S7MN//Ijk/UvRN0flmmpro2XwLut5afOSFtPrO8QG3BYnLtWiaVGYy ZC2hVaV5C2o7CEHavQd2mbc5usYx81Q00JtaHw9D66ku/l1TlrxvfjcKUZJb6JW8 2A/GLfP3QDzEJyHJH6edCk5YAaC+yvmEkbGn1L3+xJJGvFBZUBbqAWlmRoNagLoQ mO6hA4SgAw+o2rbVtPRGaCRx07z/NON1kE0IOYqp2PVQ7ZmQutBp4K2/8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIo2GEAYAqOUMSGKqTU4ncH2iXtCMB8GA1UdIwQY MBaAFIDqz2KzSk78Wy/VJOWSFnxnRBAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ09yUFlyTktUdnhiTDlVazVaSVdmR2RFRUI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi80N2MxNmQtN2M0Zi00ZWJkLTliMDAt NzEyOGY4NTNhNDA2LzEvZ09yUFlyTktUdnhiTDlVazVaSVdmR2RFRUI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi80N2MxNmQtN2M0Zi00ZWJkLTliMDAtNzEyOGY4NTNhNDA2 LzEvZ09yUFlyTktUdnhiTDlVazVaSVdmR2RFRUI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4XcUky9 /Z/IuSlhAfkt2I7zTt27FHVy474JeUmF8n9dJLat76V4nldmBF8UU0FPQePuxkoR 0FyzlpEYoUjhoxr4A4stkaMN+R5tq4JpQ7zVyEllcrCLXqAMZxMnHf+CFsYgDY+n sG3Mv94eI3UwR70gO4zz/iLay82J/Laq6Bx24neKfle7zL3c5kc8xniw4J7PArpl Qh/HT3lGcAYtYdBBACC3w9ZWAhpsMBBd92+55wL/o4P0d85wTbmYPm1bx9IuZ4xX FAtPvia7zO2uCCxSulVDQTzn4WKdYevrZ4XxzDjFVZ4cDQ8U3cJEy5Wsi314gTal 55Hx8kXDipUPlg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:02 2025 by rpki-client