This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft File: gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json) Hash identifier: Nymz4zvSb4OcVQ7d2Sl5tkNfxCNufODl79KA7H5iGiY= Subject key identifier: 61:18:A7:4E:EF:03:CE:03:81:C0:BE:90:31:27:0B:21:C1:52:B1:D7 Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E Certificate issuer: /CN=81665d6cf26d937484dbb4633743e0657eccdc5e Certificate serial: 019B2740CE70D7E6182F540F4614C8F90D6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft Manifest number: 174A Signing time: Tue 16 Dec 2025 13:01:57 +0000 Manifest this update: Tue 16 Dec 2025 13:01:57 +0000 Manifest next update: Wed 17 Dec 2025 13:01:57 +0000 Files and hashes: 1: 8FLRYVQdX3uKC3EUcIINM4PPH70.roa (hash: AvJSbDISdiRpzDgo8gSH1kCL/FtFtirNCOoP+EDCSag=) 2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: YHch3LygoJFOdMmx+Ufcp8VCNN1yqW+LR9BD8+Bfbso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:40:ce:70:d7:e6:18:2f:54:0f:46:14:c8:f9:0d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e Validity Not Before: Dec 16 13:01:57 2025 GMT Not After : Dec 17 13:01:57 2025 GMT Subject: CN=6118a74eef03ce0381c0be9031270b21c152b1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5a:3e:d7:11:46:da:77:df:da:eb:b7:aa:d9: a6:80:74:6c:84:de:ee:9e:47:29:c7:a7:6e:42:99: 7a:00:07:ac:e0:e0:c1:76:ed:a5:ef:c9:10:71:ee: 80:8b:46:0d:ae:81:a8:6e:f3:b9:0f:d4:ec:4c:45: a7:2c:ae:b2:73:ed:ec:f8:85:f6:29:ed:6e:cb:1e: b4:9f:27:e0:4a:ae:bc:1b:81:94:fd:e0:82:5e:fb: 35:c4:11:ae:65:11:03:e6:b9:85:f5:d6:59:63:4d: ea:c6:8e:95:d5:d7:7a:a8:94:cb:46:78:ae:3b:f2: ea:4c:71:4b:92:63:aa:18:fc:92:bb:cf:d6:96:4b: 78:e1:33:3b:ae:f6:59:14:10:5d:27:18:ab:af:1b: 93:c1:15:25:d4:87:1a:df:d5:06:93:cc:9e:f7:6b: a6:3c:cf:d3:04:10:27:9f:8f:55:b9:8a:bd:b4:af: b4:8d:4b:1a:2a:bc:f5:67:e2:d1:b8:f8:42:84:85: 19:4c:db:42:e2:e7:14:88:54:9e:03:95:9a:8c:a2: 05:13:f5:4d:77:a3:10:42:35:0c:41:1f:cc:43:c0: 40:5c:5a:81:31:e7:ae:c3:ff:f6:87:a3:ce:8c:1d: 21:a5:60:e5:c8:e2:5e:87:48:25:53:c5:3b:20:c9: c8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:18:A7:4E:EF:03:CE:03:81:C0:BE:90:31:27:0B:21:C1:52:B1:D7 X509v3 Authority Key Identifier: keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e8:af:96:02:02:d2:82:ec:c5:23:f9:b6:96:a3:c9:8c:aa: 84:87:73:0c:35:6d:6d:a7:54:4e:c7:98:f7:0b:d2:b9:e9:19: b9:63:e6:14:aa:07:7b:fe:c8:6c:02:f4:1b:84:44:b5:bc:c7: a3:08:ef:b5:c5:2d:99:10:14:75:a5:34:ec:16:16:db:7c:ec: 08:00:9f:a2:35:18:87:b5:54:7b:e8:b8:8d:9d:af:4b:39:12: dc:7f:74:49:a3:04:a1:f8:25:46:ad:cd:fd:75:75:82:b4:fd: 9b:ce:c5:b6:54:c1:0a:e8:63:99:eb:f6:d9:46:bc:42:b6:a1: 50:b7:70:e6:ea:5f:b8:27:37:68:f4:47:2c:cc:6f:73:ac:31: 3a:7e:84:7c:f7:f7:32:26:ba:4b:04:0b:30:2e:9d:d6:b4:34: 17:98:c4:04:80:00:eb:eb:d1:13:cf:88:bb:b9:93:e5:44:13: d1:87:b2:81:94:cf:90:99:52:69:56:f7:09:c0:67:41:2c:16: 9a:de:ae:48:c1:74:7b:29:f0:b7:39:18:5d:e6:d4:c7:ec:52: 6b:91:e6:54:9d:02:50:e3:e2:aa:54:0c:14:6d:e0:37:fa:b7: 6b:68:a8:50:9c:15:4e:c5:4d:31:29:d3:aa:3b:5f:52:42:be: a0:b2:32:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQM5w1+YYL1QPRhTI+Q1uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNjY1ZDZjZjI2ZDkzNzQ4NGRiYjQ2MzM3NDNlMDY1N2Vj Y2RjNWUwHhcNMjUxMjE2MTMwMTU3WhcNMjUxMjE3MTMwMTU3WjAzMTEwLwYDVQQD Eyg2MTE4YTc0ZWVmMDNjZTAzODFjMGJlOTAzMTI3MGIyMWMxNTJiMWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Vo+1xFG2nff2uu3qtmmgHRshN7u nkcpx6duQpl6AAes4ODBdu2l78kQce6Ai0YNroGobvO5D9TsTEWnLK6yc+3s+IX2 Ke1uyx60nyfgSq68G4GU/eCCXvs1xBGuZRED5rmF9dZZY03qxo6V1dd6qJTLRniu O/LqTHFLkmOqGPySu8/Wlkt44TM7rvZZFBBdJxirrxuTwRUl1Ica39UGk8ye92um PM/TBBAnn49VuYq9tK+0jUsaKrz1Z+LRuPhChIUZTNtC4ucUiFSeA5WajKIFE/VN d6MQQjUMQR/MQ8BAXFqBMeeuw//2h6POjB0hpWDlyOJeh0glU8U7IMnIawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEYp07vA84DgcC+kDEnCyHBUrHXMB8GA1UdIwQY MBaAFIFmXWzybZN0hNu0YzdD4GV+zNxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1daZGJQSnRrM1NFMjdSak4wUGdaWDdNM0Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wMGY2NmItZmU4My00Y2NkLTgyZWUt YzU2ZjA1ZGEzZDI1LzEvZ1daZGJQSnRrM1NFMjdSak4wUGdaWDdNM0Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wMGY2NmItZmU4My00Y2NkLTgyZWUtYzU2ZjA1ZGEzZDI1 LzEvZ1daZGJQSnRrM1NFMjdSak4wUGdaWDdNM0Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeivlgIC 0oLsxSP5tpajyYyqhIdzDDVtbadUTseY9wvSuekZuWPmFKoHe/7IbAL0G4REtbzH owjvtcUtmRAUdaU07BYW23zsCACfojUYh7VUe+i4jZ2vSzkS3H90SaMEofglRq3N /XV1grT9m87FtlTBCuhjmev22Ua8QrahULdw5upfuCc3aPRHLMxvc6wxOn6EfPf3 Mia6SwQLMC6d1rQ0F5jEBIAA6+vRE8+Iu7mT5UQT0YeygZTPkJlSaVb3CcBnQSwW mt6uSMF0eynwtzkYXebUx+xSa5HmVJ0CUOPiqlQMFG3gN/q3a2ioUJwVTsVNMSnT qjtfUkK+oLIyug== -----END CERTIFICATE-----Generated at Tue Dec 16 22:29:38 2025 by rpki-client