This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json) Hash identifier: oCQ8UiNaUEcl3uuwRkF6vJ/UquO3022FG2wTqWizhKM= Subject key identifier: 97:10:16:1A:EB:EE:12:63:DA:F2:AD:42:45:61:4B:28:EB:C9:D2:37 Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63 Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663 Certificate serial: 019B1FBCEDF203D944DAD26A51E1E68854EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft Manifest number: 0641 Signing time: Mon 15 Dec 2025 02:00:33 +0000 Manifest this update: Mon 15 Dec 2025 02:00:33 +0000 Manifest next update: Tue 16 Dec 2025 02:00:33 +0000 Files and hashes: 1: MWh5oxD0mlPfv3wl5DDlIllo7IY.roa (hash: hCUe3UqGLfLJn0/ykpo1moRqC/s0I/1a6u8vKsOmeBg=) 2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: BdJV7M1OvVn2aUOvf/9XE2sIqhD/Dr99T7zAW8rh5RE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 02:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:bc:ed:f2:03:d9:44:da:d2:6a:51:e1:e6:88:54:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663 Validity Not Before: Dec 15 02:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=9710161aebee1263daf2ad4245614b28ebc9d237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:7f:f9:f4:55:48:a1:06:f0:ce:b9:3b:87: bb:b2:70:99:36:1b:dd:3a:f5:a7:4a:df:a5:34:42: 00:a5:7f:e4:29:82:70:90:b4:1e:0d:8f:f5:a1:07: 74:56:87:25:ad:29:a7:46:79:3a:17:95:f1:2c:63: 34:75:45:43:07:e2:9f:d0:a5:b8:6e:ae:0a:a4:c6: 26:d5:fc:e4:48:4f:59:99:6f:16:15:f8:50:56:2d: 68:9c:15:01:c6:b1:14:6b:ea:a3:d3:c4:1d:ad:ad: c9:df:56:17:71:f3:fb:81:7c:43:44:76:4b:71:bd: 6b:86:3e:49:56:80:12:c8:a9:2c:be:15:08:03:ab: 9e:c1:89:e3:c0:04:26:ce:7a:7d:89:1b:ac:2f:5b: 9b:22:89:90:0d:f5:a2:b1:0e:d6:9f:80:c2:f9:18: cc:62:7e:b8:42:58:39:93:72:8a:da:b0:fe:0d:f1: ea:e1:37:ef:37:4c:c7:3d:9f:85:af:ce:7e:df:9f: 93:fd:f9:d8:5d:c0:af:df:ea:72:2f:65:48:e7:5d: 55:72:2e:dd:31:7f:b2:ee:d3:74:ab:20:dc:e0:ed: 19:11:f0:83:04:8a:59:3b:77:3a:58:0e:65:e8:90: 37:31:b2:27:ea:08:62:3b:b3:9a:e1:a1:f6:aa:00: da:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:10:16:1A:EB:EE:12:63:DA:F2:AD:42:45:61:4B:28:EB:C9:D2:37 X509v3 Authority Key Identifier: keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:3c:88:73:21:80:ed:19:41:40:db:02:30:59:7e:d0:90:0c: 80:07:02:5e:6d:dd:76:13:b9:86:c3:df:94:79:a1:21:2e:96: 3f:08:9f:2c:7a:53:6a:e9:86:b2:f8:32:d3:bf:aa:61:c9:89: 52:4e:13:14:25:1f:be:a2:6d:67:2c:3e:c8:24:73:1f:a2:29: 85:93:c8:d2:76:54:5c:40:3a:fa:ba:3f:18:b4:97:7a:f7:ae: cf:10:c5:78:a3:c8:e1:62:f9:24:7b:70:33:12:9f:79:0e:59: 5d:37:8f:67:d4:56:6f:e7:ff:01:8d:b2:ed:13:f4:36:c7:46: 01:93:4d:73:56:04:cb:8a:4d:e9:f4:4b:c4:80:af:51:86:e5: 48:4f:f2:dc:75:13:bd:11:02:0a:9e:53:77:88:03:fb:e9:bf: 51:7d:f2:ab:cf:86:43:8a:1c:2a:0b:4b:83:9c:39:c7:ef:59: 98:27:93:43:30:df:12:69:da:aa:7d:b8:25:8a:fe:07:25:99: dc:e5:80:bc:a8:6f:5d:91:df:58:2e:24:3d:4e:ad:15:15:9c: f7:d6:68:9d:41:28:a8:20:47:90:64:7d:92:8e:a8:14:fc:da: b3:3c:9a:34:49:d2:eb:69:fc:47:37:47:0c:1c:66:9a:43:81: 59:c0:b2:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfvO3yA9lE2tJqUeHmiFTqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZmU1Njk4YTEyNzk2NGNjMGU0Y2U4ZTNmZGM5ODVlMmEy NWE2NjMwHhcNMjUxMjE1MDIwMDMzWhcNMjUxMjE2MDIwMDMzWjAzMTEwLwYDVQQD Eyg5NzEwMTYxYWViZWUxMjYzZGFmMmFkNDI0NTYxNGIyOGViYzlkMjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwZ/+fRVSKEG8M65O4e7snCZNhvd OvWnSt+lNEIApX/kKYJwkLQeDY/1oQd0VoclrSmnRnk6F5XxLGM0dUVDB+Kf0KW4 bq4KpMYm1fzkSE9ZmW8WFfhQVi1onBUBxrEUa+qj08Qdra3J31YXcfP7gXxDRHZL cb1rhj5JVoASyKksvhUIA6uewYnjwAQmznp9iRusL1ubIomQDfWisQ7Wn4DC+RjM Yn64Qlg5k3KK2rD+DfHq4TfvN0zHPZ+Fr85+35+T/fnYXcCv3+pyL2VI511Vci7d MX+y7tN0qyDc4O0ZEfCDBIpZO3c6WA5l6JA3MbIn6ghiO7Oa4aH2qgDaIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcQFhrr7hJj2vKtQkVhSyjrydI3MB8GA1UdIwQY MBaAFID+VpihJ5ZMwOTOjj/cmF4qJaZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1A1V21LRW5sa3pBNU02T1A5eVlYaW9scG1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zZjlhZDEtNmJlNS00ZmE0LTllNTYt ZDcwMWRjNjk4NjNmLzEvZ1A1V21LRW5sa3pBNU02T1A5eVlYaW9scG1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8zZjlhZDEtNmJlNS00ZmE0LTllNTYtZDcwMWRjNjk4NjNm LzEvZ1A1V21LRW5sa3pBNU02T1A5eVlYaW9scG1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATyIcyGA 7RlBQNsCMFl+0JAMgAcCXm3ddhO5hsPflHmhIS6WPwifLHpTaumGsvgy07+qYcmJ Uk4TFCUfvqJtZyw+yCRzH6IphZPI0nZUXEA6+ro/GLSXeveuzxDFeKPI4WL5JHtw MxKfeQ5ZXTePZ9RWb+f/AY2y7RP0NsdGAZNNc1YEy4pN6fRLxICvUYblSE/y3HUT vRECCp5Td4gD++m/UX3yq8+GQ4ocKgtLg5w5x+9ZmCeTQzDfEmnaqn24JYr+ByWZ 3OWAvKhvXZHfWC4kPU6tFRWc99ZonUEoqCBHkGR9ko6oFPzaszyaNEnS62n8RzdH DBxmmkOBWcCylw== -----END CERTIFICATE-----Generated at Mon Dec 15 12:09:54 2025 by rpki-client