This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json) Hash identifier: Neu1Rjzvw/qPJy5KOQAFrvqItAr6OYZDP+mEOwIhqsQ= Subject key identifier: 3F:D7:64:68:4B:15:15:79:EB:DE:21:FD:41:3F:9D:82:ED:64:CE:B3 Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94 Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94 Certificate serial: 019B221A18AC74B7772FEF5F2DA554ECE1B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft Manifest number: 1781 Signing time: Mon 15 Dec 2025 13:01:33 +0000 Manifest this update: Mon 15 Dec 2025 13:01:33 +0000 Manifest next update: Tue 16 Dec 2025 13:01:33 +0000 Files and hashes: 1: dUjydhDtv2Ysc8dEDoiT2yx34lg.roa (hash: ebc83oZNm2ylmobsykoAv58WP6zLL9GO+02NODZysqQ=) 2: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: mIRiCVpiPVmi/JRN/2tyKAvzjOKrqiNSXdvHr18lKUA=) 3: wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa (hash: A1fNf8pB5tQL1RUFisCU1kyqkrX8SMY0lp/3rcsduXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:1a:18:ac:74:b7:77:2f:ef:5f:2d:a5:54:ec:e1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94 Validity Not Before: Dec 15 13:01:33 2025 GMT Not After : Dec 16 13:01:33 2025 GMT Subject: CN=3fd764684b151579ebde21fd413f9d82ed64ceb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:01:b5:70:76:96:ca:87:e7:b0:2b:d0:da:18: 72:c2:b7:dd:e5:4a:e5:71:85:a2:2f:30:05:e3:bc: 09:e6:47:c9:52:b8:d9:0d:0f:00:dd:ec:17:43:28: 21:eb:21:d0:73:79:18:d9:36:8b:d9:63:07:e7:f0: 25:d2:e6:25:b2:ce:a9:c8:f0:bf:75:82:7b:23:a5: de:b8:5c:12:29:9c:08:db:b1:7c:61:ec:11:6b:8d: 8d:bf:28:aa:b4:74:d1:6d:29:00:f2:a2:5c:ef:50: 82:f4:78:09:75:f5:3a:c4:1b:5c:b1:af:43:30:ff: 39:3f:21:49:ae:20:b4:c0:51:e3:1e:ce:13:e2:b3: 21:6b:bf:51:b1:dc:75:69:ea:9e:27:94:4a:7e:5d: d7:4d:d9:0a:28:7e:42:f2:e5:ce:25:71:3c:78:ac: f1:31:08:b7:eb:27:c0:86:34:23:dc:0d:f5:e4:94: 5b:20:3f:a4:d8:61:97:58:5d:d5:79:d2:ce:d4:08: 9c:cb:7b:96:9c:dd:00:ee:8e:36:0e:e3:c1:4d:95: 63:0a:3a:24:a7:1c:2a:a4:12:80:3d:29:c5:65:1b: 07:7a:1c:8f:a1:9c:a3:d8:2f:87:51:59:43:33:48: b5:7f:02:59:89:95:1a:b9:d0:b4:e6:88:63:c9:19: eb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D7:64:68:4B:15:15:79:EB:DE:21:FD:41:3F:9D:82:ED:64:CE:B3 X509v3 Authority Key Identifier: keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:af:51:75:10:0b:e6:00:39:0d:93:2d:07:d3:f5:95:e9:e8: 68:5e:43:f7:22:00:a5:a6:a9:e6:6e:36:32:fc:30:94:1a:a5: 61:5b:0f:da:22:d0:e1:f9:2c:70:45:62:4e:d4:a2:4b:bb:cf: fa:f4:6b:6f:a2:c8:e6:32:5e:be:9f:ec:74:13:2e:08:4c:13: e6:be:f3:5d:f8:ab:2f:d3:18:f1:3f:45:79:5e:74:d9:9e:12: db:3a:f2:c3:cb:ac:1d:b3:34:44:0e:a8:68:b2:f9:0d:f8:4e: 07:cb:a4:1f:94:c8:b1:ec:bc:af:45:6a:26:e7:c1:fe:90:ca: f3:b3:bc:d1:bb:6c:fd:c4:e1:37:2d:e5:f6:27:85:6d:3f:f9: e7:3c:57:f5:5f:eb:54:79:ed:9d:3d:6c:24:53:70:e0:79:76: 3e:28:17:a1:53:39:0f:6a:0d:0c:07:aa:f6:a0:d9:21:f0:3a: e6:37:60:88:76:d1:4d:0d:00:b9:4d:88:e5:bd:67:b1:b2:3c: 35:2a:c6:6e:a1:85:9d:65:fb:fe:8c:3d:0a:d5:55:3a:57:48: 50:66:3f:3f:7f:43:cf:b8:be:13:49:7c:0a:42:d2:e7:3e:b4: 71:59:6c:68:2b:ab:96:fb:e4:e1:5b:58:d2:33:ba:81:8d:b6: d9:aa:70:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGhisdLd3L+9fLaVU7OG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNjE1MzE1ZGM3NTBjMDNlNjBmYzM2YTc1MGM1ZTNmZjY2 ZWFjOTQwHhcNMjUxMjE1MTMwMTMzWhcNMjUxMjE2MTMwMTMzWjAzMTEwLwYDVQQD EygzZmQ3NjQ2ODRiMTUxNTc5ZWJkZTIxZmQ0MTNmOWQ4MmVkNjRjZWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQG1cHaWyofnsCvQ2hhywrfd5Url cYWiLzAF47wJ5kfJUrjZDQ8A3ewXQygh6yHQc3kY2TaL2WMH5/Al0uYlss6pyPC/ dYJ7I6XeuFwSKZwI27F8YewRa42NvyiqtHTRbSkA8qJc71CC9HgJdfU6xBtcsa9D MP85PyFJriC0wFHjHs4T4rMha79Rsdx1aeqeJ5RKfl3XTdkKKH5C8uXOJXE8eKzx MQi36yfAhjQj3A315JRbID+k2GGXWF3VedLO1Aicy3uWnN0A7o42DuPBTZVjCjok pxwqpBKAPSnFZRsHehyPoZyj2C+HUVlDM0i1fwJZiZUaudC05ohjyRnrZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/XZGhLFRV5694h/UE/nYLtZM6zMB8GA1UdIwQY MBaAFIBhUxXcdQwD5g/DanUMXj/2bqyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgt ZjhlNWIyZDg2ODBjLzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgtZjhlNWIyZDg2ODBj LzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACK9RdRAL 5gA5DZMtB9P1lenoaF5D9yIApaap5m42MvwwlBqlYVsP2iLQ4fkscEViTtSiS7vP +vRrb6LI5jJevp/sdBMuCEwT5r7zXfirL9MY8T9FeV502Z4S2zryw8usHbM0RA6o aLL5DfhOB8ukH5TIsey8r0VqJufB/pDK87O80bts/cThNy3l9ieFbT/55zxX9V/r VHntnT1sJFNw4Hl2PigXoVM5D2oNDAeq9qDZIfA65jdgiHbRTQ0AuU2I5b1nsbI8 NSrGbqGFnWX7/ow9CtVVOldIUGY/P39Dz7i+E0l8CkLS5z60cVlsaCurlvvk4VtY 0jO6gY222apwCQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:02:59 2025 by rpki-client