This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft File: gViH9Fq7wIGqRpplwXmN5hENnIk.mft (raw, json) Hash identifier: FVbbsc3SLvXugkvVhfuL+2In1k1C4kYftC1MjFuKX14= Subject key identifier: 7D:15:9B:E8:6E:92:68:7A:53:44:7B:B9:BE:A5:27:59:4F:A7:A4:94 Authority key identifier: 81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89 Certificate issuer: /CN=815887f45abbc081aa469a65c1798de6110d9c89 Certificate serial: 019B0E267F5D67A5168E6F9CFB9ECCD712C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft Manifest number: 0E51 Signing time: Thu 11 Dec 2025 16:02:42 +0000 Manifest this update: Thu 11 Dec 2025 16:02:42 +0000 Manifest next update: Fri 12 Dec 2025 16:02:42 +0000 Files and hashes: 1: a4XCmBSUFP_yl4L96gtg6U9Ozn0.roa (hash: FJxd7UG3Dpf9Q0TJKoxdhkygKRFy48iyIOOg3rogNwA=) 2: gViH9Fq7wIGqRpplwXmN5hENnIk.crl (hash: C/Y6kvpn9db+nvo4nU9mIcdeaUrRP/At/wnlemSkzqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:7f:5d:67:a5:16:8e:6f:9c:fb:9e:cc:d7:12:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=815887f45abbc081aa469a65c1798de6110d9c89 Validity Not Before: Dec 11 16:02:42 2025 GMT Not After : Dec 12 16:02:42 2025 GMT Subject: CN=7d159be86e92687a53447bb9bea527594fa7a494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:84:0c:bb:7c:3d:22:d7:0d:14:2b:1f:10:82: 6e:8e:94:0d:fc:ff:c7:07:c2:7b:24:0e:37:07:4c: 8c:58:22:b3:7a:36:0f:d9:e2:fb:e4:a8:2d:88:a4: 17:09:f3:a3:9b:32:15:f4:c4:6f:32:7d:fe:df:82: db:9e:8a:d3:26:42:bf:56:1c:a9:c8:ea:b8:cd:8a: 89:b2:21:7b:ba:29:95:0e:64:8d:18:bd:60:41:7f: 68:c7:63:83:bd:fb:a4:f0:18:bd:28:06:ae:17:ea: 83:dc:d1:32:d4:bc:a4:74:a2:c9:63:63:7c:b2:3a: 25:6a:d6:35:25:87:aa:df:a7:d7:5b:da:fe:66:ca: e2:30:bd:64:96:48:97:ec:19:4f:df:11:69:19:fc: dd:fa:10:cd:fa:1e:3f:81:99:ec:bc:93:93:41:bd: 72:44:48:94:d7:9d:61:f3:fd:ea:a4:e5:12:10:40: 63:08:aa:f1:84:c3:70:ac:16:af:49:96:f6:8d:c9: ae:f3:3f:67:ff:d1:2e:81:af:f7:fb:89:4c:2b:eb: c4:ef:ba:76:c0:b8:fa:ae:ef:6e:b8:10:28:c3:15: 37:79:c1:c0:75:67:f0:52:68:8d:ed:13:31:8a:76: c0:2a:39:68:e7:9a:b9:1a:90:6a:d9:e9:fd:3b:80: ec:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:15:9B:E8:6E:92:68:7A:53:44:7B:B9:BE:A5:27:59:4F:A7:A4:94 X509v3 Authority Key Identifier: keyid:81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f2:60:31:06:c6:bd:f1:4c:96:4a:42:ce:51:be:8a:a9:ac: 40:12:69:e1:a7:74:c7:28:06:a0:5a:e3:62:69:a4:3d:db:78: 82:c2:01:64:c1:10:4c:71:9e:35:d1:a9:7d:d6:d7:cd:96:86: 81:78:17:d6:fe:03:13:d6:2d:56:e4:41:51:42:d6:c8:48:b7: 11:39:87:9f:2b:17:72:5b:5c:41:b9:d1:4a:42:d8:fb:64:19: 48:aa:d5:d2:6f:94:d2:c5:ec:e9:2b:ec:d1:f4:36:f3:c0:32: 47:e2:cb:18:2e:66:9c:c1:c3:12:c5:38:52:af:7a:61:aa:49: 2d:64:69:e8:2a:db:c5:28:48:34:45:1f:68:a5:1e:7f:96:49: 08:fe:dc:cb:2a:12:17:bd:82:5f:75:e5:af:c6:cd:34:57:aa: 89:61:36:0f:87:9a:fa:36:4d:75:d1:86:45:70:fa:76:9f:87: 1c:f8:8d:17:6c:30:c7:59:95:95:b1:70:8c:47:6b:77:42:a1: 78:bd:33:17:1e:ca:96:c6:f4:2c:a0:c0:99:e4:87:be:6a:83: 8a:be:66:01:a8:c9:a4:e4:b0:98:12:75:71:b2:75:4f:f2:f3: 4b:20:a7:0c:52:54:15:6a:23:83:2a:78:bb:f8:d4:11:5c:00: 7e:58:5a:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJn9dZ6UWjm+c+57M1xLCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNTg4N2Y0NWFiYmMwODFhYTQ2OWE2NWMxNzk4ZGU2MTEw ZDljODkwHhcNMjUxMjExMTYwMjQyWhcNMjUxMjEyMTYwMjQyWjAzMTEwLwYDVQQD Eyg3ZDE1OWJlODZlOTI2ODdhNTM0NDdiYjliZWE1Mjc1OTRmYTdhNDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IQMu3w9ItcNFCsfEIJujpQN/P/H B8J7JA43B0yMWCKzejYP2eL75KgtiKQXCfOjmzIV9MRvMn3+34LbnorTJkK/Vhyp yOq4zYqJsiF7uimVDmSNGL1gQX9ox2ODvfuk8Bi9KAauF+qD3NEy1LykdKLJY2N8 sjolatY1JYeq36fXW9r+ZsriML1klkiX7BlP3xFpGfzd+hDN+h4/gZnsvJOTQb1y REiU151h8/3qpOUSEEBjCKrxhMNwrBavSZb2jcmu8z9n/9Euga/3+4lMK+vE77p2 wLj6ru9uuBAowxU3ecHAdWfwUmiN7RMxinbAKjlo55q5GpBq2en9O4DsHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0Vm+hukmh6U0R7ub6lJ1lPp6SUMB8GA1UdIwQY MBaAFIFYh/Rau8CBqkaaZcF5jeYRDZyJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1ZpSDlGcTd3SUdxUnBwbHdYbU41aEVObklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85YTg2ZDItNGRkNS00MGYwLWE2MjIt MzE4YjBlOTk2YWQxLzEvZ1ZpSDlGcTd3SUdxUnBwbHdYbU41aEVObklrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS85YTg2ZDItNGRkNS00MGYwLWE2MjItMzE4YjBlOTk2YWQx LzEvZ1ZpSDlGcTd3SUdxUnBwbHdYbU41aEVObklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPJgMQbG vfFMlkpCzlG+iqmsQBJp4ad0xygGoFrjYmmkPdt4gsIBZMEQTHGeNdGpfdbXzZaG gXgX1v4DE9YtVuRBUULWyEi3ETmHnysXcltcQbnRSkLY+2QZSKrV0m+U0sXs6Svs 0fQ288AyR+LLGC5mnMHDEsU4Uq96YapJLWRp6CrbxShINEUfaKUef5ZJCP7cyyoS F72CX3Xlr8bNNFeqiWE2D4ea+jZNddGGRXD6dp+HHPiNF2wwx1mVlbFwjEdrd0Kh eL0zFx7Klsb0LKDAmeSHvmqDir5mAajJpOSwmBJ1cbJ1T/LzSyCnDFJUFWojgyp4 u/jUEVwAflha8Q== -----END CERTIFICATE-----Generated at Fri Dec 12 00:28:15 2025 by rpki-client