This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft File: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft (raw, json) Hash identifier: OZ9YnzhMGv8DAVdu9Am937iif+5+e2EN82sMJIRH1kI= Subject key identifier: 17:32:3D:3F:10:D8:3A:99:E2:99:45:31:0E:B2:00:94:80:61:59:F5 Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd Certificate serial: 019B2708BB7E6BFCD6DE8559593B89679D03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft Manifest number: 0F05 Signing time: Tue 16 Dec 2025 12:00:42 +0000 Manifest this update: Tue 16 Dec 2025 12:00:42 +0000 Manifest next update: Wed 17 Dec 2025 12:00:42 +0000 Files and hashes: 1: V6MhSl0Nrd7IbSPP6sogh_K6LdA.roa (hash: BEkq0bd021wy4JLoX8KRN8L/2JdiHbrDtNZgZpB/wOc=) 2: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl (hash: pOWrEyhWAAHKEd+ZglZfPvYzMNOqaWBAgT9dSMLaBdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:08:bb:7e:6b:fc:d6:de:85:59:59:3b:89:67:9d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd Validity Not Before: Dec 16 12:00:42 2025 GMT Not After : Dec 17 12:00:42 2025 GMT Subject: CN=17323d3f10d83a99e29945310eb20094806159f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a8:cf:b8:17:73:aa:7f:2d:db:6d:26:6e:96: ef:81:d3:9b:d4:fd:21:11:e7:ad:9d:e2:c0:46:fb: fd:ce:29:1f:4b:77:fa:7f:b5:a1:3e:e0:dc:cf:12: 64:59:09:cd:69:8a:71:b8:81:fb:14:10:25:22:40: 70:c4:81:3e:f6:c5:02:fb:7d:2e:f0:7e:37:3c:2f: f4:7e:4e:e0:95:b3:64:a9:79:19:de:aa:71:b0:01: 39:c7:ff:f7:06:43:1c:78:cf:77:59:a3:eb:33:90: bf:43:d3:ca:75:3b:03:55:36:d6:1f:5e:c7:98:13: ba:a0:d4:a2:40:a8:65:1f:83:2f:78:52:0a:a7:9a: 42:b6:21:66:c6:f1:3d:f1:bd:90:de:29:a4:9c:ab: 86:81:c1:e1:38:38:41:fb:de:b0:33:08:fa:e5:ca: 02:ce:11:3f:e8:97:05:56:0d:06:9d:df:d4:ee:dd: 95:31:7d:3b:ec:c8:5f:b1:c2:34:13:49:4a:33:72: b5:d8:9b:c1:09:c3:17:ff:f8:a9:0b:98:0f:ed:dd: c9:0c:12:f3:3a:3d:55:c4:61:47:3d:01:a6:b2:a5: 21:26:5a:31:a2:21:8c:94:85:4b:b5:5d:fb:64:5a: 11:de:d4:47:6f:37:ea:54:39:66:67:98:aa:86:46: 5e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:32:3D:3F:10:D8:3A:99:E2:99:45:31:0E:B2:00:94:80:61:59:F5 X509v3 Authority Key Identifier: keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:6a:93:f4:fe:b7:30:ff:05:30:92:19:f2:f2:f3:b8:61:71: c8:58:43:c9:7e:5b:ed:e2:76:77:d0:ee:88:a1:52:ed:90:8e: 61:7c:01:2e:e3:34:36:e4:01:8b:2c:f3:9a:f1:49:fd:ad:36: f0:b5:a4:3c:dd:1c:9b:b1:ff:32:11:24:f4:39:92:04:a3:59: 9b:58:e3:3e:f7:1e:7c:88:9d:b0:8a:b5:0d:47:50:a6:f3:cd: 84:ee:ac:b4:54:3e:53:0a:68:31:79:be:1a:0b:f0:59:8f:c8: e4:9f:39:c0:95:92:c4:06:d0:6f:bb:54:3e:b9:00:32:7f:5e: 01:73:c0:91:88:29:a3:e7:c6:44:df:4b:f6:ad:a5:9b:05:1a: cb:25:50:68:58:ba:c8:00:e4:10:f8:11:bf:53:01:5a:6c:97: b1:79:31:6e:8f:9d:72:64:48:66:0a:03:af:56:3e:71:a1:68: 68:af:5f:66:ca:1a:db:d1:38:77:0f:f7:c8:af:32:9f:76:71: c9:84:2d:c5:c7:f2:a8:22:db:e7:c7:66:1b:0a:d1:0f:36:a5: 79:14:3e:96:6d:f5:1d:29:eb:f1:62:25:76:6d:92:02:04:e0: 81:4b:4a:56:3c:f6:05:e8:b0:f0:07:a3:40:c8:1c:4d:3a:d1: a7:e0:97:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnCLt+a/zW3oVZWTuJZ50DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxODEyMzg1YjgyZGRhMGZkNDgyNmFiYjdhZWZlYjBkZjNl YjhmZmQwHhcNMjUxMjE2MTIwMDQyWhcNMjUxMjE3MTIwMDQyWjAzMTEwLwYDVQQD EygxNzMyM2QzZjEwZDgzYTk5ZTI5OTQ1MzEwZWIyMDA5NDgwNjE1OWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKjPuBdzqn8t220mbpbvgdOb1P0h EeetneLARvv9zikfS3f6f7WhPuDczxJkWQnNaYpxuIH7FBAlIkBwxIE+9sUC+30u 8H43PC/0fk7glbNkqXkZ3qpxsAE5x//3BkMceM93WaPrM5C/Q9PKdTsDVTbWH17H mBO6oNSiQKhlH4MveFIKp5pCtiFmxvE98b2Q3imknKuGgcHhODhB+96wMwj65coC zhE/6JcFVg0Gnd/U7t2VMX077MhfscI0E0lKM3K12JvBCcMX//ipC5gP7d3JDBLz Oj1VxGFHPQGmsqUhJloxoiGMlIVLtV37ZFoR3tRHbzfqVDlmZ5iqhkZe5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcyPT8Q2DqZ4plFMQ6yAJSAYVn1MB8GA1UdIwQY MBaAFIGBI4W4LdoP1IJqu3rv6w3z64/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEt ZGEyZWM4Y2ZiODg4LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEtZGEyZWM4Y2ZiODg4 LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGqT9P63 MP8FMJIZ8vLzuGFxyFhDyX5b7eJ2d9DuiKFS7ZCOYXwBLuM0NuQBiyzzmvFJ/a02 8LWkPN0cm7H/MhEk9DmSBKNZm1jjPvcefIidsIq1DUdQpvPNhO6stFQ+UwpoMXm+ GgvwWY/I5J85wJWSxAbQb7tUPrkAMn9eAXPAkYgpo+fGRN9L9q2lmwUayyVQaFi6 yADkEPgRv1MBWmyXsXkxbo+dcmRIZgoDr1Y+caFoaK9fZsoa29E4dw/3yK8yn3Zx yYQtxcfyqCLb58dmGwrRDzaleRQ+lm31HSnr8WIldm2SAgTggUtKVjz2Beiw8Aej QMgcTTrRp+CXSA== -----END CERTIFICATE-----Generated at Tue Dec 16 14:23:52 2025 by rpki-client