This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json) Hash identifier: Crw97iZUQUMtthUQcezsD7HWQxjIyJuqtMT0T9MBy1w= Subject key identifier: 30:6D:08:D1:DE:21:4D:DC:5B:0F:94:B4:27:B9:E8:96:A5:85:13:AA Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b Certificate serial: 019B3AFD5CC7ECF95550B7C7C72C575B7990 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft Manifest number: 1425 Signing time: Sat 20 Dec 2025 09:00:41 +0000 Manifest this update: Sat 20 Dec 2025 09:00:41 +0000 Manifest next update: Sun 21 Dec 2025 09:00:41 +0000 Files and hashes: 1: PShglmQTXkIQHkPe8FzwFmHj5JU.roa (hash: /e+wgkBq61bmma1KHWS9Osz5g9pecTkL2xoyoNPkRJQ=) 2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: hsXsYSrCXBh30DAJrpohl07g0V1QVa0mUmcFA44ijAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:5c:c7:ec:f9:55:50:b7:c7:c7:2c:57:5b:79:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b Validity Not Before: Dec 20 09:00:41 2025 GMT Not After : Dec 21 09:00:41 2025 GMT Subject: CN=306d08d1de214ddc5b0f94b427b9e896a58513aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:c4:0b:08:48:a5:45:a9:df:c0:96:2a:aa: 9b:c7:1c:ab:17:82:c0:cd:fb:db:14:33:f0:58:8d: 05:ee:b8:88:01:9f:0c:18:53:34:8a:f0:f8:09:d9: 4f:b9:40:e2:bf:9b:49:2c:8c:0e:02:7a:2d:b9:a4: f3:97:10:ed:88:9a:b6:aa:e4:7f:ba:7e:cf:a5:79: ea:c8:78:35:76:f2:7d:48:b9:1b:db:4f:1b:42:30: 25:93:9f:5b:1c:35:55:90:31:2a:f6:0c:d3:a3:62: 9d:ca:d1:7c:60:4f:58:62:60:34:4b:d1:7b:fc:e4: e3:e7:e8:79:b0:82:cc:eb:fa:2e:dc:7f:54:6a:69: e2:e9:dd:e1:f2:1c:4c:c3:25:a5:e0:f4:09:f1:73: 21:28:ab:57:fa:96:55:b0:03:4d:47:7f:c6:83:50: 4a:06:e9:72:07:b1:06:09:f6:ca:5f:1c:d9:e1:35: 91:76:2a:cb:40:01:3c:08:6a:8e:64:6b:e9:35:88: 5d:67:f0:09:ac:cf:96:fe:dd:ea:a1:53:1c:32:8f: 46:31:82:d3:c4:27:76:aa:ed:c7:e0:88:99:35:ef: 2e:b9:0f:7d:a9:4a:c3:5b:e1:35:02:00:d6:3e:86: a7:0b:52:6c:b6:8b:4b:fe:b3:dc:9b:78:cf:de:80: cb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6D:08:D1:DE:21:4D:DC:5B:0F:94:B4:27:B9:E8:96:A5:85:13:AA X509v3 Authority Key Identifier: keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:da:17:53:31:ee:df:3f:61:90:a8:93:60:a7:31:25:64:d7: d2:b8:d7:4d:7f:68:b2:30:64:18:0b:3f:69:0b:c3:d4:b7:5a: 6d:12:32:33:d4:35:cf:8c:f6:bd:e8:a2:a7:07:3c:ce:5a:10: 66:ea:99:cc:6a:e6:75:b6:5e:38:42:c9:0d:63:f8:d8:25:e9: 95:ef:34:bf:eb:7b:06:be:d8:94:7d:90:29:03:95:c8:f7:57: 8c:c0:a8:02:ad:b7:13:15:91:13:39:1a:15:83:39:0c:74:27: 00:c1:91:61:45:2a:af:a8:a5:a7:20:30:45:29:db:46:06:cf: 40:11:37:51:d3:fd:14:c6:5e:be:4d:f5:59:84:7d:35:47:dc: ff:ed:23:4a:3e:ba:cc:4f:eb:3e:30:3f:05:e0:d7:5c:b1:00: 00:85:8a:b0:c1:ab:c3:f8:f8:5e:b7:c6:fa:fe:aa:17:78:b1: 23:c2:ab:ea:69:5f:a8:e7:f7:3b:74:54:c0:5b:ce:10:b9:14: da:ef:b5:0d:a3:c6:17:1a:2b:80:7b:1c:0c:75:a6:e9:18:c8: 2a:89:d8:b2:82:c9:ea:8b:8e:f6:e7:36:18:66:6f:34:2a:d2: 29:57:56:9b:25:ea:cd:cb:a9:74:24:f6:6e:a4:bf:71:71:9e: 7b:c0:50:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/VzH7PlVULfHxyxXW3mQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNWRiNTY3ODEzOWUyZWVhY2U4OWI1ZWU5OTgyYzM1NDQ5 YzBiM2IwHhcNMjUxMjIwMDkwMDQxWhcNMjUxMjIxMDkwMDQxWjAzMTEwLwYDVQQD EygzMDZkMDhkMWRlMjE0ZGRjNWIwZjk0YjQyN2I5ZTg5NmE1ODUxM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+/ECwhIpUWp38CWKqqbxxyrF4LA zfvbFDPwWI0F7riIAZ8MGFM0ivD4CdlPuUDiv5tJLIwOAnotuaTzlxDtiJq2quR/ un7PpXnqyHg1dvJ9SLkb208bQjAlk59bHDVVkDEq9gzTo2KdytF8YE9YYmA0S9F7 /OTj5+h5sILM6/ou3H9Uamni6d3h8hxMwyWl4PQJ8XMhKKtX+pZVsANNR3/Gg1BK BulyB7EGCfbKXxzZ4TWRdirLQAE8CGqOZGvpNYhdZ/AJrM+W/t3qoVMcMo9GMYLT xCd2qu3H4IiZNe8uuQ99qUrDW+E1AgDWPoanC1JstotL/rPcm3jP3oDLxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBtCNHeIU3cWw+UtCe56JalhROqMB8GA1UdIwQY MBaAFIBdtWeBOeLurOibXumYLDVEnAs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zZGQwODItYzUwMy00NWI4LTliMDct OTIyOTIzZTg5OGU2LzEvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8zZGQwODItYzUwMy00NWI4LTliMDctOTIyOTIzZTg5OGU2 LzEvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdoXUzHu 3z9hkKiTYKcxJWTX0rjXTX9osjBkGAs/aQvD1LdabRIyM9Q1z4z2veiipwc8zloQ ZuqZzGrmdbZeOELJDWP42CXple80v+t7Br7YlH2QKQOVyPdXjMCoAq23ExWREzka FYM5DHQnAMGRYUUqr6ilpyAwRSnbRgbPQBE3UdP9FMZevk31WYR9NUfc/+0jSj66 zE/rPjA/BeDXXLEAAIWKsMGrw/j4XrfG+v6qF3ixI8Kr6mlfqOf3O3RUwFvOELkU 2u+1DaPGFxorgHscDHWm6RjIKonYsoLJ6ouO9uc2GGZvNCrSKVdWmyXqzcupdCT2 bqS/cXGee8BQjQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:38:43 2025 by rpki-client