This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json) Hash identifier: B75URsMjzOufMhCWevN817plVLsCfAQsmZIkMenk+1c= Subject key identifier: C1:85:54:6C:51:28:55:5A:50:AC:D8:68:A7:10:E2:2B:E7:63:80:AF Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3 Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3 Certificate serial: 019B1A294121BF23348D1760052EE1377996 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft Manifest number: 1775 Signing time: Sun 14 Dec 2025 00:01:09 +0000 Manifest this update: Sun 14 Dec 2025 00:01:09 +0000 Manifest next update: Mon 15 Dec 2025 00:01:09 +0000 Files and hashes: 1: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: hWt6HsaupIUd9/uZYCSb0X2nxK9cTUF7USBG/XfmGZo=) 2: qDh2JY1h_xNgvgx5Db5sVmUy5ks.roa (hash: I1r2aL4TOC/MGm5ShRW+1jSA/7hy7A6Iss+iJbXJ1A8=) 3: rj4zNee9qFUnSWdRyXBl1w5hL7U.roa (hash: ura4XN26mFPNxngI443E4Cbcpg3UZiyC6cycpOaLYgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:41:21:bf:23:34:8d:17:60:05:2e:e1:37:79:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3 Validity Not Before: Dec 14 00:01:09 2025 GMT Not After : Dec 15 00:01:09 2025 GMT Subject: CN=c185546c5128555a50acd868a710e22be76380af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:bd:e9:bb:0b:2b:3b:fe:e9:63:3d:3c:07: c0:4e:af:76:23:c7:34:91:5b:13:55:b7:71:37:5f: 09:2f:a9:0a:06:6a:b3:56:5a:f9:2a:42:1f:7d:b6: 9c:b5:d0:4b:38:c7:f2:1b:e7:8c:b1:e5:c0:8f:f5: b2:c1:77:58:9e:dd:1d:04:95:bc:77:f5:28:05:9f: 2a:61:38:ba:39:39:03:d8:95:94:32:aa:48:0a:d5: 24:4f:9d:39:53:cd:8b:1a:6a:7e:28:62:11:4d:eb: e0:c2:5c:d8:57:e1:fd:3c:b0:0f:38:b6:ea:9c:48: 77:b8:f1:13:6e:21:6e:c0:07:fb:16:7b:d4:5d:c6: 5b:60:87:1e:75:1f:3f:53:1b:6b:7b:bf:77:a1:b4: 34:49:7d:06:5e:fe:47:75:53:3d:23:93:52:2d:11: 16:36:02:32:5b:8b:0d:e3:25:6e:9f:f0:fa:3b:fb: 8c:c5:d7:9e:cd:e5:79:46:cb:b5:83:b5:23:80:ba: d7:0c:b6:2a:20:e5:94:0d:7a:6e:8e:8c:7c:4d:94: 7d:25:42:bc:5e:06:1c:7f:86:95:52:18:1c:90:46: b3:ec:36:39:88:c2:c1:46:97:f1:ff:c0:99:ef:ab: 1f:a2:ae:f9:45:01:86:60:ec:79:ff:30:96:52:fd: cc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:85:54:6C:51:28:55:5A:50:AC:D8:68:A7:10:E2:2B:E7:63:80:AF X509v3 Authority Key Identifier: keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7a:0e:47:95:a6:90:ea:08:5f:02:5b:cf:e3:69:ac:72:14: bf:36:6d:4b:c4:c7:f7:99:dc:b0:94:43:ba:ef:ef:88:bf:e9: 79:ae:40:e9:7e:d9:d6:7b:67:6b:44:2b:c6:5e:29:a8:cd:16: 6a:a7:d4:94:aa:d7:34:91:62:71:f3:e2:24:21:a9:00:03:18: 03:1e:bd:13:47:ed:4a:3e:0c:23:e6:32:f8:08:58:60:b6:f3: 3e:33:c5:a1:f0:89:48:ba:71:ae:74:af:bb:d8:fa:df:f1:64: ab:16:9a:ed:da:18:b9:47:23:9b:b4:e3:26:95:c7:16:4d:d4: e2:7d:fe:21:32:5b:da:ae:39:cc:48:98:60:87:8e:22:d2:0d: 9a:8c:9f:a8:c4:37:bb:62:fd:15:ad:24:c6:02:7d:a1:9f:7f: 39:07:6a:73:4d:f6:6a:30:9e:5d:d9:3e:b1:56:fb:98:4e:66: e5:eb:17:96:e7:40:2e:6c:9e:df:92:7b:d7:1b:6a:ff:47:d7: c5:f1:ee:4c:64:31:2a:f0:fd:2b:ac:f3:06:51:81:49:9c:11: 2a:d8:50:56:39:6f:ac:1b:39:99:1f:d2:f0:4b:69:f4:c9:e3: 02:e0:32:6d:37:cb:c2:90:d0:b1:28:72:c2:01:c6:a8:7e:c8: 79:34:b0:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKUEhvyM0jRdgBS7hN3mWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMmY1YTZjMGI5NTY0N2YwNzAzNTBlNjUyNGUxMjIwZmJh NDdmYTMwHhcNMjUxMjE0MDAwMTA5WhcNMjUxMjE1MDAwMTA5WjAzMTEwLwYDVQQD EyhjMTg1NTQ2YzUxMjg1NTVhNTBhY2Q4NjhhNzEwZTIyYmU3NjM4MGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Fu96bsLKzv+6WM9PAfATq92I8c0 kVsTVbdxN18JL6kKBmqzVlr5KkIffbactdBLOMfyG+eMseXAj/WywXdYnt0dBJW8 d/UoBZ8qYTi6OTkD2JWUMqpICtUkT505U82LGmp+KGIRTevgwlzYV+H9PLAPOLbq nEh3uPETbiFuwAf7FnvUXcZbYIcedR8/Uxtre793obQ0SX0GXv5HdVM9I5NSLREW NgIyW4sN4yVun/D6O/uMxdeezeV5Rsu1g7UjgLrXDLYqIOWUDXpujox8TZR9JUK8 XgYcf4aVUhgckEaz7DY5iMLBRpfx/8CZ76sfoq75RQGGYOx5/zCWUv3M+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGFVGxRKFVaUKzYaKcQ4ivnY4CvMB8GA1UdIwQY MBaAFIIvWmwLlWR/BwNQ5lJOEiD7pH+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMt NWQwZTA5YTAyMDRmLzEvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMtNWQwZTA5YTAyMDRm LzEvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHoOR5Wm kOoIXwJbz+NprHIUvzZtS8TH95ncsJRDuu/viL/pea5A6X7Z1ntna0Qrxl4pqM0W aqfUlKrXNJFicfPiJCGpAAMYAx69E0ftSj4MI+Yy+AhYYLbzPjPFofCJSLpxrnSv u9j63/Fkqxaa7doYuUcjm7TjJpXHFk3U4n3+ITJb2q45zEiYYIeOItINmoyfqMQ3 u2L9Fa0kxgJ9oZ9/OQdqc032ajCeXdk+sVb7mE5m5esXludALmye35J71xtq/0fX xfHuTGQxKvD9K6zzBlGBSZwRKthQVjlvrBs5mR/S8Etp9MnjAuAybTfLwpDQsShy wgHGqH7IeTSwzw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:57:05 2025 by rpki-client