This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft File: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft (raw, json) Hash identifier: Fm909Y7iSVCzZHSbkPe7wvgI0PCdHGRmiBVYg4vJt+g= Subject key identifier: 93:93:66:35:1A:66:2C:99:60:7D:CF:12:A9:97:04:87:A7:DF:A9:F1 Authority key identifier: 82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98 Certificate issuer: /CN=8260c94351066ec06debfab2bca9dfaed407e698 Certificate serial: 019B372096B53038EAFD8F3CDF2C4D307EE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft Manifest number: 0833 Signing time: Fri 19 Dec 2025 15:00:41 +0000 Manifest this update: Fri 19 Dec 2025 15:00:41 +0000 Manifest next update: Sat 20 Dec 2025 15:00:41 +0000 Files and hashes: 1: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl (hash: zrX+iWqR5iSlg8Z9dZ2+/znHnsW+sWAdSWWZvXTmROc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:96:b5:30:38:ea:fd:8f:3c:df:2c:4d:30:7e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8260c94351066ec06debfab2bca9dfaed407e698 Validity Not Before: Dec 19 15:00:41 2025 GMT Not After : Dec 20 15:00:41 2025 GMT Subject: CN=939366351a662c99607dcf12a9970487a7dfa9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6e:79:10:4f:d2:5f:fc:70:aa:7f:76:f3:05: 8f:a0:4d:a4:07:c3:7a:7c:01:61:98:51:76:8e:fa: 5a:1a:9e:3a:07:ff:f4:de:66:65:c3:e2:cc:f9:a7: 05:aa:90:8f:03:20:df:e5:29:d2:04:aa:a1:4b:55: 15:43:6f:1a:a7:25:83:f7:de:d0:09:15:e1:8b:80: 69:80:80:c3:3a:15:ee:13:d8:00:b3:e7:1c:cf:17: 98:98:cc:4f:ed:8f:0f:9b:85:a2:cd:2d:19:38:a1: 82:59:2a:e7:de:9f:5e:2a:20:84:0e:e5:7a:c8:c6: a8:87:c9:11:e5:48:7e:9d:8a:9e:75:57:4c:b6:89: 2b:0a:87:91:42:8f:70:9d:ba:f5:85:fb:7f:12:65: 15:84:1a:7a:38:52:3c:de:77:22:25:60:ae:b8:bb: 0b:25:43:e0:0d:0f:dd:8a:6f:e7:37:a3:2e:86:c4: 4f:0e:3d:5f:56:7f:c1:95:e3:7d:1f:36:8f:b4:90: e6:c6:82:80:35:23:e4:bd:5c:46:76:0d:d8:a1:7e: e5:ab:5e:18:16:dd:8a:91:b7:7c:fa:e4:a6:41:dd: 0e:80:fb:99:a5:a2:82:13:8c:c8:ce:5c:83:c2:fe: f3:79:35:98:58:b1:07:ab:96:a3:54:5d:ea:ae:85: ec:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:93:66:35:1A:66:2C:99:60:7D:CF:12:A9:97:04:87:A7:DF:A9:F1 X509v3 Authority Key Identifier: keyid:82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:4d:ec:a4:93:60:08:71:17:6f:b9:27:32:d7:6a:83:40:c0: 6b:bf:9b:a9:53:6d:ff:c0:cf:54:83:7b:ef:52:29:88:a7:cb: 87:67:ed:7c:93:1e:cc:a4:5d:4e:80:82:fe:72:a4:9d:75:0f: 40:d7:a7:44:60:3a:92:15:a7:2a:35:8b:92:7f:6a:2e:48:cd: 58:b7:5e:fa:88:d3:29:41:5b:ad:97:70:9d:39:e1:be:c7:c9: 44:5d:6a:72:53:3d:14:6e:80:02:69:71:e5:cc:42:ef:d4:80: 50:24:fe:9e:86:1b:b7:58:12:0f:3e:39:78:a3:4a:a4:b0:27: f6:60:3e:03:d1:9d:97:99:fb:9d:8e:61:62:2e:9d:ef:16:5e: 61:fa:70:45:fe:a4:dd:8b:b8:37:62:e7:b5:0a:fc:18:8d:e8: 87:c4:b7:b0:89:d6:d6:38:08:5f:5d:bf:18:60:bb:7e:7d:79: 73:c7:da:e3:53:08:31:22:5a:17:d4:02:d7:6b:71:d2:ed:5a: 8f:83:95:17:70:6f:08:01:73:3c:1a:e9:cc:66:c9:b1:9d:f9: ae:03:b4:09:bb:04:4a:c0:2e:7d:ff:15:c8:11:22:f8:86:e2: 83:d6:44:25:b0:00:0b:e6:0d:d7:63:53:c5:12:3b:e2:78:4d: 2f:49:48:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IJa1MDjq/Y883yxNMH7jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjBjOTQzNTEwNjZlYzA2ZGViZmFiMmJjYTlkZmFlZDQw N2U2OTgwHhcNMjUxMjE5MTUwMDQxWhcNMjUxMjIwMTUwMDQxWjAzMTEwLwYDVQQD Eyg5MzkzNjYzNTFhNjYyYzk5NjA3ZGNmMTJhOTk3MDQ4N2E3ZGZhOWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8255EE/SX/xwqn928wWPoE2kB8N6 fAFhmFF2jvpaGp46B//03mZlw+LM+acFqpCPAyDf5SnSBKqhS1UVQ28apyWD997Q CRXhi4BpgIDDOhXuE9gAs+cczxeYmMxP7Y8Pm4WizS0ZOKGCWSrn3p9eKiCEDuV6 yMaoh8kR5Uh+nYqedVdMtokrCoeRQo9wnbr1hft/EmUVhBp6OFI83nciJWCuuLsL JUPgDQ/dim/nN6MuhsRPDj1fVn/BleN9HzaPtJDmxoKANSPkvVxGdg3YoX7lq14Y Ft2Kkbd8+uSmQd0OgPuZpaKCE4zIzlyDwv7zeTWYWLEHq5ajVF3qroXs+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOTZjUaZiyZYH3PEqmXBIen36nxMB8GA1UdIwQY MBaAFIJgyUNRBm7Abev6sryp367UB+aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ESlExRUdic0J0Nl9xeXZLbmZydFFINXBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84NmNkOWEtZTczMi00ZmY1LWFlNDQt ODQ2NGE4MTE0MTgwLzEvZ21ESlExRUdic0J0Nl9xeXZLbmZydFFINXBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS84NmNkOWEtZTczMi00ZmY1LWFlNDQtODQ2NGE4MTE0MTgw LzEvZ21ESlExRUdic0J0Nl9xeXZLbmZydFFINXBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIE3spJNg CHEXb7knMtdqg0DAa7+bqVNt/8DPVIN771IpiKfLh2ftfJMezKRdToCC/nKknXUP QNenRGA6khWnKjWLkn9qLkjNWLde+ojTKUFbrZdwnTnhvsfJRF1qclM9FG6AAmlx 5cxC79SAUCT+noYbt1gSDz45eKNKpLAn9mA+A9Gdl5n7nY5hYi6d7xZeYfpwRf6k 3Yu4N2LntQr8GI3oh8S3sInW1jgIX12/GGC7fn15c8fa41MIMSJaF9QC12tx0u1a j4OVF3BvCAFzPBrpzGbJsZ35rgO0CbsESsAuff8VyBEi+Ibig9ZEJbAAC+YN12NT xRI74nhNL0lIGg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:48:03 2025 by rpki-client