This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft File: gmf7Sgtne4N3kHuC-x-4gQov7wg.mft (raw, json) Hash identifier: Iy1r1u2rUX/jIwgee3ofXs83zQLH3sXFrrys7AC9d9E= Subject key identifier: B7:2C:36:3B:7F:D7:0D:49:BB:52:15:03:6F:2B:93:D2:85:A4:30:24 Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08 Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08 Certificate serial: 019AABA7351353E0E0B353B9E322067554AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft Manifest number: 174B Signing time: Sat 22 Nov 2025 13:00:53 +0000 Manifest this update: Sat 22 Nov 2025 13:00:53 +0000 Manifest next update: Sun 23 Nov 2025 13:00:53 +0000 Files and hashes: 1: M06N0gwo3JL6GFlpwhETdttP9PQ.roa (hash: JdKy18XjO1bCDj++PIiRzZGq0fdEiBKbHucnCQRbUms=) 2: gmf7Sgtne4N3kHuC-x-4gQov7wg.crl (hash: Cy45yMXweHGrd1BV1jQ1OsfUUAUPn5dFTzCcSYh/Mcg=) 3: l6IYvh1CKLMSrMEr-TM7q3chK9Y.roa (hash: rnPxXzKtfkYxdX0ghFEuYclewjG7j4/p3CTTLzWXDi4=) 4: rJqYPA_Hva-IaBLfUn9RcoY2ojY.roa (hash: o6BNzu4DD6yxBTs+9aSDottFhpX2sbKr1oEfAdwf4NU=) 5: wpH7An9OGaqDDHbjqAXOYrzTOjY.roa (hash: 2UBnZqOnnI+7jNrBotsNcwolkfZL1bsPGHesYmJ3hac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a7:35:13:53:e0:e0:b3:53:b9:e3:22:06:75:54:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08 Validity Not Before: Nov 22 13:00:53 2025 GMT Not After : Nov 23 13:00:53 2025 GMT Subject: CN=b72c363b7fd70d49bb5215036f2b93d285a43024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:94:97:59:0e:79:ec:eb:a4:eb:46:a5:9f:b2: cd:8d:a6:61:48:07:95:c5:f7:f7:5f:7d:e2:d2:c5: be:a3:df:36:17:39:3d:ac:5c:4c:2d:0b:80:51:3d: 53:10:74:9c:a0:9c:5e:78:5b:d5:5c:0e:aa:4a:10: c9:2a:93:ad:da:ad:14:6d:3e:a5:f9:8b:15:1b:1f: 53:92:01:e9:ac:1f:b6:eb:12:c3:8e:92:4d:75:47: 8f:04:f8:6e:8d:57:5b:b2:cf:4b:d7:95:a1:f6:20: f9:90:a4:6a:fc:39:f6:ca:e9:6a:fb:54:8a:d9:3b: 82:6f:49:db:1a:e1:ec:b5:79:d7:60:0f:1b:e8:71: ba:52:c4:83:50:d9:fe:e8:23:27:66:52:ef:57:04: fe:ac:ff:0b:16:34:fb:5d:d3:9f:b4:ac:86:66:b7: 40:89:a3:ea:b3:67:6e:60:84:38:14:9c:a1:8c:cf: 6c:71:cd:c7:dc:75:9e:89:ad:48:ac:71:1a:7d:df: b9:2a:ce:e8:77:9a:82:19:ba:88:ed:f0:79:6a:ea: f4:44:f2:91:4b:61:a1:49:24:7e:16:41:f7:bf:90: b1:90:50:af:b8:f5:34:83:30:fa:a6:70:32:19:75: e5:b1:f6:94:b8:4c:28:af:7e:14:c2:aa:7d:b8:eb: 56:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2C:36:3B:7F:D7:0D:49:BB:52:15:03:6F:2B:93:D2:85:A4:30:24 X509v3 Authority Key Identifier: keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:01:a5:5e:1e:64:c8:d6:87:09:c8:a9:f2:25:98:e2:94:74: 80:62:bb:87:0c:f8:9e:f5:cd:ea:c9:33:41:d4:ed:52:5b:19: 70:c2:d9:46:6a:99:72:a1:3e:89:96:f4:4c:32:9a:22:85:a7: 08:20:76:3a:37:a5:3c:c7:fe:a1:2b:66:34:5e:1d:e6:7d:d1: 85:74:6c:e7:02:f0:8e:03:34:e8:98:c7:09:ef:32:9e:ed:e0: fa:58:63:7a:3b:3d:01:85:7d:af:cb:53:45:f2:ec:38:d9:01: da:2e:0d:b8:7a:6b:24:14:ba:82:71:02:65:2a:dd:14:3c:81: 09:3e:0d:9a:76:a9:07:3f:ff:b6:54:2d:f0:70:e1:2c:8d:a8: dd:65:a6:49:f8:d6:e5:32:7f:7c:09:13:b8:6e:f6:61:5c:b7: 3c:7a:3c:24:7a:42:7e:68:46:73:3f:b6:0c:05:e0:db:1e:69: 0f:60:89:02:63:7b:2d:af:2a:ab:32:c2:d9:78:ec:8f:d8:2d: ea:85:d3:74:b7:dc:96:5d:f6:a4:0c:d9:ce:8d:a1:17:3b:66: 66:c5:8e:89:b5:26:96:43:4f:88:78:c2:76:ff:b9:9c:9e:60: 0c:11:f0:1b:8e:41:42:4f:20:50:72:65:48:85:e1:42:fa:d9: a7:45:67:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrpzUTU+Dgs1O54yIGdVStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjdmYjRhMGI2NzdiODM3NzkwN2I4MmZiMWZiODgxMGEy ZmVmMDgwHhcNMjUxMTIyMTMwMDUzWhcNMjUxMTIzMTMwMDUzWjAzMTEwLwYDVQQD EyhiNzJjMzYzYjdmZDcwZDQ5YmI1MjE1MDM2ZjJiOTNkMjg1YTQzMDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJSXWQ557Ouk60aln7LNjaZhSAeV xff3X33i0sW+o982Fzk9rFxMLQuAUT1TEHScoJxeeFvVXA6qShDJKpOt2q0UbT6l +YsVGx9TkgHprB+26xLDjpJNdUePBPhujVdbss9L15Wh9iD5kKRq/Dn2yulq+1SK 2TuCb0nbGuHstXnXYA8b6HG6UsSDUNn+6CMnZlLvVwT+rP8LFjT7XdOftKyGZrdA iaPqs2duYIQ4FJyhjM9scc3H3HWeia1IrHEafd+5Ks7od5qCGbqI7fB5aur0RPKR S2GhSSR+FkH3v5CxkFCvuPU0gzD6pnAyGXXlsfaUuEwor34Uwqp9uOtWKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcsNjt/1w1Ju1IVA28rk9KFpDAkMB8GA1UdIwQY MBaAFIJn+0oLZ3uDd5B7gvsfuIEKL+8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUt NjM5ZTE0ZDA0ZGU2LzEvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUtNjM5ZTE0ZDA0ZGU2 LzEvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANAGlXh5k yNaHCcip8iWY4pR0gGK7hwz4nvXN6skzQdTtUlsZcMLZRmqZcqE+iZb0TDKaIoWn CCB2OjelPMf+oStmNF4d5n3RhXRs5wLwjgM06JjHCe8ynu3g+lhjejs9AYV9r8tT RfLsONkB2i4NuHprJBS6gnECZSrdFDyBCT4NmnapBz//tlQt8HDhLI2o3WWmSfjW 5TJ/fAkTuG72YVy3PHo8JHpCfmhGcz+2DAXg2x5pD2CJAmN7La8qqzLC2Xjsj9gt 6oXTdLfcll32pAzZzo2hFztmZsWOibUmlkNPiHjCdv+5nJ5gDBHwG45BQk8gUHJl SIXhQvrZp0VnJQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:03 2025 by rpki-client