This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json) Hash identifier: tDOyVfL0DNnjc9j5E3KahCEcto60DZN/TQsSPBicV8k= Subject key identifier: D4:F8:94:17:2E:8A:40:18:21:FA:C2:91:45:B4:6A:83:B0:A5:92:B1 Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b Certificate serial: 019B27AE61E47125A3CBDCB5AC2B4C0FBDCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft Manifest number: 141B Signing time: Tue 16 Dec 2025 15:01:38 +0000 Manifest this update: Tue 16 Dec 2025 15:01:38 +0000 Manifest next update: Wed 17 Dec 2025 15:01:38 +0000 Files and hashes: 1: PShglmQTXkIQHkPe8FzwFmHj5JU.roa (hash: /e+wgkBq61bmma1KHWS9Osz5g9pecTkL2xoyoNPkRJQ=) 2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: 8ot4W8Y/T1g3SXHbxzmBQS1u3SNiZbNpdKUdcnd7soU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ae:61:e4:71:25:a3:cb:dc:b5:ac:2b:4c:0f:bd:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b Validity Not Before: Dec 16 15:01:38 2025 GMT Not After : Dec 17 15:01:38 2025 GMT Subject: CN=d4f894172e8a401821fac29145b46a83b0a592b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b0:8e:ef:f1:ea:ca:95:2e:c4:c4:92:63:49: 4a:5d:30:73:f5:53:0a:e9:8a:b7:d5:43:69:7e:36: dd:9f:7b:f9:66:90:7a:3f:b9:71:cb:b8:f5:ac:c4: c6:38:14:8a:2d:1e:f0:70:ef:d4:a2:71:b0:f4:1b: 2e:1f:37:04:c5:64:47:8d:89:1c:19:6a:4b:b8:d2: 10:f7:7e:bf:f2:a8:a0:71:a7:03:d1:11:3f:3a:e4: 1a:d5:d7:00:a7:01:ce:f7:00:3c:6e:fa:3c:af:55: aa:d2:11:db:14:f3:ea:de:01:66:80:64:37:2f:78: 57:25:84:a2:bf:36:19:dd:f5:5e:74:45:01:de:70: ee:16:f5:24:7f:dc:ca:fc:ed:7f:13:ec:ae:9a:e3: cf:f4:3a:77:6f:cf:c8:48:6c:a1:6f:95:fa:89:25: 48:32:41:9d:a1:57:b5:52:8c:78:0a:4c:73:9b:20: 22:43:8c:96:7c:57:4e:a2:c8:83:ab:1b:a5:4c:03: 6a:cc:44:d2:cd:73:82:31:61:02:18:e1:52:4a:a5: 83:c8:9b:2e:a5:05:62:d3:e0:0f:18:31:d9:6f:e6: 3b:c3:b7:aa:91:be:f6:2e:a4:1e:78:65:a0:d8:4b: 07:54:4c:d7:e3:f8:b4:95:99:10:d3:1d:1f:73:de: a4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F8:94:17:2E:8A:40:18:21:FA:C2:91:45:B4:6A:83:B0:A5:92:B1 X509v3 Authority Key Identifier: keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b6:2c:9b:ad:b8:3e:b7:d2:79:2c:0e:9c:38:a3:68:02:b9: cf:dd:0c:a4:bd:e5:0f:b1:fd:43:9d:ee:5a:78:c9:d6:5f:e2: 74:b6:cb:08:5c:1c:67:a4:8c:e3:a6:89:8d:f0:b4:65:ae:fa: 56:bd:32:06:7c:c5:82:60:9c:4a:0d:80:1d:ce:83:44:da:6b: f8:a0:cb:6f:6a:b0:b3:fe:c6:fc:34:cf:cb:47:28:23:a2:40: ab:64:7d:ff:c5:ed:a3:00:2a:8f:09:5b:87:fd:49:ca:14:5b: c7:50:30:79:b7:90:26:89:ab:8b:c3:b2:73:73:a2:49:26:c8: 68:0c:f0:d0:b1:77:62:cf:03:a0:53:4d:17:6b:1a:1f:6b:55: 9f:3e:86:37:7c:97:99:e1:1a:db:73:3b:a0:6e:9d:19:05:8e: c4:5e:95:9d:1e:4c:b1:6b:23:8f:56:9e:f9:b7:68:e3:4b:b8: fe:ba:f8:5c:0c:ce:f5:0c:f7:cc:0d:fd:01:e7:2d:b4:0b:aa: cb:9e:4f:2c:eb:75:55:0e:f2:d0:be:96:99:9a:e6:f6:9d:78: 93:c9:d6:ab:f9:37:24:e6:d3:1d:24:12:b2:8c:e5:db:44:c0: 5c:42:46:ba:40:10:69:a5:a3:ba:2a:d7:1b:8e:07:9c:dc:05: e6:3d:da:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrmHkcSWjy9y1rCtMD73OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNWRiNTY3ODEzOWUyZWVhY2U4OWI1ZWU5OTgyYzM1NDQ5 YzBiM2IwHhcNMjUxMjE2MTUwMTM4WhcNMjUxMjE3MTUwMTM4WjAzMTEwLwYDVQQD EyhkNGY4OTQxNzJlOGE0MDE4MjFmYWMyOTE0NWI0NmE4M2IwYTU5MmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurCO7/HqypUuxMSSY0lKXTBz9VMK 6Yq31UNpfjbdn3v5ZpB6P7lxy7j1rMTGOBSKLR7wcO/UonGw9BsuHzcExWRHjYkc GWpLuNIQ936/8qigcacD0RE/OuQa1dcApwHO9wA8bvo8r1Wq0hHbFPPq3gFmgGQ3 L3hXJYSivzYZ3fVedEUB3nDuFvUkf9zK/O1/E+yumuPP9Dp3b8/ISGyhb5X6iSVI MkGdoVe1Uox4CkxzmyAiQ4yWfFdOosiDqxulTANqzETSzXOCMWECGOFSSqWDyJsu pQVi0+APGDHZb+Y7w7eqkb72LqQeeGWg2EsHVEzX4/i0lZkQ0x0fc96keQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNT4lBcuikAYIfrCkUW0aoOwpZKxMB8GA1UdIwQY MBaAFIBdtWeBOeLurOibXumYLDVEnAs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zZGQwODItYzUwMy00NWI4LTliMDct OTIyOTIzZTg5OGU2LzEvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8zZGQwODItYzUwMy00NWI4LTliMDctOTIyOTIzZTg5OGU2 LzEvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbYsm624 PrfSeSwOnDijaAK5z90MpL3lD7H9Q53uWnjJ1l/idLbLCFwcZ6SM46aJjfC0Za76 Vr0yBnzFgmCcSg2AHc6DRNpr+KDLb2qws/7G/DTPy0coI6JAq2R9/8XtowAqjwlb h/1JyhRbx1AwebeQJomri8Oyc3OiSSbIaAzw0LF3Ys8DoFNNF2saH2tVnz6GN3yX meEa23M7oG6dGQWOxF6VnR5MsWsjj1ae+bdo40u4/rr4XAzO9Qz3zA39AecttAuq y55PLOt1VQ7y0L6WmZrm9p14k8nWq/k3JObTHSQSsozl20TAXEJGukAQaaWjuirX G44HnNwF5j3aCg== -----END CERTIFICATE-----Generated at Tue Dec 16 17:39:15 2025 by rpki-client