This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft File: gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft (raw, json) Hash identifier: U/4SO19jVLoUBkwwsjdKryYQ9Wf1UlFa6KsRd6eqVaI= Subject key identifier: 7E:5D:36:3C:1D:07:45:0B:42:2C:30:1C:6B:13:B3:37:06:C5:3F:CC Authority key identifier: 80:2D:2F:85:05:E2:BA:EE:DF:7E:05:0D:27:94:2F:54:AC:6A:0A:56 Certificate issuer: /CN=802d2f8505e2baeedf7e050d27942f54ac6a0a56 Certificate serial: 019B5A1B0893A1E3381BFF352637BAFE3BDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft Manifest number: 92 Signing time: Fri 26 Dec 2025 10:01:19 +0000 Manifest this update: Fri 26 Dec 2025 10:01:19 +0000 Manifest next update: Sat 27 Dec 2025 10:01:19 +0000 Files and hashes: 1: gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl (hash: fe8sUPdSCw0TYhtVajBrMVKxnVjtgO0qteI4bZcNpYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:08:93:a1:e3:38:1b:ff:35:26:37:ba:fe:3b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802d2f8505e2baeedf7e050d27942f54ac6a0a56 Validity Not Before: Dec 26 10:01:19 2025 GMT Not After : Dec 27 10:01:19 2025 GMT Subject: CN=7e5d363c1d07450b422c301c6b13b33706c53fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:e4:1d:d8:b9:47:84:23:08:25:65:74:ce: c4:b2:a2:fe:a0:8b:9d:50:63:36:eb:f4:46:96:b8: 29:f4:49:89:26:93:ef:a4:f3:31:9d:c8:01:c9:19: 18:09:94:5a:9d:45:d9:23:3f:71:14:20:af:4d:46: 83:18:28:88:96:a4:af:e4:83:0f:4e:42:9c:6b:b6: 8c:13:26:20:e1:bb:6f:c7:c7:e4:f6:62:fd:34:3a: dc:8a:2b:03:9e:1e:f0:eb:41:b8:44:57:ad:2a:7f: f7:6a:45:34:1b:22:52:d6:e6:28:70:2d:89:23:46: a1:15:97:1f:50:3a:d5:29:8b:8e:df:7a:8b:93:31: c7:fd:de:40:90:d3:b2:63:ea:3b:b1:b5:25:95:bf: 85:8a:80:a3:03:74:b6:23:32:4b:0b:31:a7:6a:b4: e2:0c:fd:95:85:7d:7f:ee:9f:f5:d1:20:be:33:cd: 83:d2:a3:11:a5:cb:ec:fe:6d:2b:5a:b3:5c:04:5a: 32:ad:55:fb:eb:53:1f:1e:5b:6c:e9:70:ac:cb:96: 6c:43:1c:45:69:25:7c:55:5b:f4:15:2f:66:ba:98: 58:79:95:8a:26:28:49:23:04:fa:2c:f1:2d:06:2c: b5:2c:ec:e1:57:84:1e:ab:10:51:9e:60:41:f5:56: d2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5D:36:3C:1D:07:45:0B:42:2C:30:1C:6B:13:B3:37:06:C5:3F:CC X509v3 Authority Key Identifier: keyid:80:2D:2F:85:05:E2:BA:EE:DF:7E:05:0D:27:94:2F:54:AC:6A:0A:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:61:3b:5b:9c:33:6e:91:c8:5e:9b:3b:0a:2f:4c:83:a2:ff: ee:84:7f:b1:77:f2:df:c1:54:fe:87:50:a8:8e:95:0a:35:90: 9b:63:df:74:5e:5b:2f:fc:2e:94:13:a4:ee:10:30:bd:f0:8c: 4b:9d:b4:5d:7e:cb:86:d4:c8:44:e5:3e:13:d5:04:f9:5c:9f: 90:e1:68:8a:00:75:62:18:24:70:be:14:0d:19:02:84:35:72: c4:1b:64:1c:40:29:4e:1b:bf:f4:9e:67:c3:dc:a2:1f:52:fd: 8e:ee:e8:60:9f:12:db:03:c0:66:da:ac:fb:0b:ee:20:21:b0: 28:fa:0f:ee:5d:bc:11:3d:fb:79:cd:05:c2:53:e8:32:8a:3e: 2d:3e:b0:11:78:38:8c:4c:49:5e:e6:24:b5:fb:05:78:65:a8: 13:6e:03:3a:be:f6:e0:e7:72:fb:7e:14:73:f1:38:38:e2:1c: 0e:37:4e:33:97:2f:84:ce:9e:0c:e0:44:f4:fd:1f:09:3c:fe: 0e:df:b9:69:41:99:4f:7e:93:32:a8:46:24:5a:09:b1:55:71: b9:2e:b8:92:95:82:c9:77:cb:74:a9:7a:02:cf:27:c9:68:60: 76:67:c2:9a:6d:dc:f5:25:5e:80:5c:8e:99:fc:f0:5f:27:2d: 1a:55:a7:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGwiToeM4G/81Jje6/jvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMmQyZjg1MDVlMmJhZWVkZjdlMDUwZDI3OTQyZjU0YWM2 YTBhNTYwHhcNMjUxMjI2MTAwMTE5WhcNMjUxMjI3MTAwMTE5WjAzMTEwLwYDVQQD Eyg3ZTVkMzYzYzFkMDc0NTBiNDIyYzMwMWM2YjEzYjMzNzA2YzUzZmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVvkHdi5R4QjCCVldM7EsqL+oIud UGM26/RGlrgp9EmJJpPvpPMxncgByRkYCZRanUXZIz9xFCCvTUaDGCiIlqSv5IMP TkKca7aMEyYg4btvx8fk9mL9NDrciisDnh7w60G4RFetKn/3akU0GyJS1uYocC2J I0ahFZcfUDrVKYuO33qLkzHH/d5AkNOyY+o7sbUllb+FioCjA3S2IzJLCzGnarTi DP2VhX1/7p/10SC+M82D0qMRpcvs/m0rWrNcBFoyrVX761MfHlts6XCsy5ZsQxxF aSV8VVv0FS9muphYeZWKJihJIwT6LPEtBiy1LOzhV4QeqxBRnmBB9VbS6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5dNjwdB0ULQiwwHGsTszcGxT/MMB8GA1UdIwQY MBaAFIAtL4UF4rru334FDSeUL1SsagpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0MwdmhRWGl1dTdmZmdVTko1UXZWS3hxQ2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jYTdkODAtYjNhMi00OWRjLTk5OWIt YWQyMDFmMWViMTk0LzEvZ0MwdmhRWGl1dTdmZmdVTko1UXZWS3hxQ2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jYTdkODAtYjNhMi00OWRjLTk5OWItYWQyMDFmMWViMTk0 LzEvZ0MwdmhRWGl1dTdmZmdVTko1UXZWS3hxQ2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWE7W5wz bpHIXps7Ci9Mg6L/7oR/sXfy38FU/odQqI6VCjWQm2PfdF5bL/wulBOk7hAwvfCM S520XX7LhtTIROU+E9UE+VyfkOFoigB1YhgkcL4UDRkChDVyxBtkHEApThu/9J5n w9yiH1L9ju7oYJ8S2wPAZtqs+wvuICGwKPoP7l28ET37ec0FwlPoMoo+LT6wEXg4 jExJXuYktfsFeGWoE24DOr724Ody+34Uc/E4OOIcDjdOM5cvhM6eDOBE9P0fCTz+ Dt+5aUGZT36TMqhGJFoJsVVxuS64kpWCyXfLdKl6As8nyWhgdmfCmm3c9SVegFyO mfzwXyctGlWnag== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:19 2025 by rpki-client