This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json) Hash identifier: GLuXU8HDrjAYb67sk5v5tzNpjaxBEnNpxpquUkv1oYg= Subject key identifier: 40:9C:BF:22:ED:38:07:D9:9C:5E:FD:4A:F1:BA:1F:E4:3C:35:58:4A Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92 Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492 Certificate serial: 019B3EA38018A58541C5A5A88AAC3295B909 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft Manifest number: 04B8 Signing time: Sun 21 Dec 2025 02:01:01 +0000 Manifest this update: Sun 21 Dec 2025 02:01:01 +0000 Manifest next update: Mon 22 Dec 2025 02:01:01 +0000 Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: 97RcKxBFcH1XR84459aopG2yYJNfUpmGmkKV050P1lo=) 2: 3bcszB4ipjOyzxEmMRx3Cb2Frg8.roa (hash: VCt09RErcTdOo8fIexLlVqTQrbVLMl5U72RInG7+sVI=) 3: QT2bGKmHREGB3-sqEAhjlcIYXXI.roa (hash: lsIhMN9LkDQx5Xr58fqlkjIVmBAb+8AMBjPiPSb4cQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:80:18:a5:85:41:c5:a5:a8:8a:ac:32:95:b9:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492 Validity Not Before: Dec 21 02:01:01 2025 GMT Not After : Dec 22 02:01:01 2025 GMT Subject: CN=409cbf22ed3807d99c5efd4af1ba1fe43c35584a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e9:18:37:6d:df:3f:bc:e7:7f:97:ff:3b:e4: ab:eb:c1:7e:51:98:2e:1d:95:ff:98:d7:e6:34:71: 31:dc:3f:93:05:4d:b7:e2:d2:2f:bf:75:10:44:df: 62:b8:b0:cd:70:2b:6b:d0:90:0a:ee:53:5c:1f:c9: 39:c3:cf:70:3f:e6:a4:d0:a5:02:47:24:03:5e:09: 73:e4:56:bd:46:ff:1b:bc:7f:ff:de:81:15:68:cd: e0:0f:78:d0:5d:59:78:7e:e4:c3:26:f2:3f:45:9c: 1e:95:79:e6:22:9e:df:d8:4e:35:67:d2:3a:38:6c: e7:ba:28:3c:56:95:a1:7d:ee:6c:83:a7:ee:57:9f: a3:31:17:ea:81:f8:c6:f7:14:51:b7:fa:45:42:6b: bb:58:70:9d:e8:52:fb:99:d7:69:e0:40:52:2c:23: 57:94:6e:ee:f4:f8:1a:cc:cd:20:61:52:45:e7:73: a6:78:c5:28:c9:e6:9e:10:83:d2:ce:f6:58:a8:22: de:37:b1:20:3d:4a:3f:85:c4:64:72:4d:2c:37:56: 6d:6f:24:66:68:9f:b3:74:6b:55:a0:c4:c7:a4:4f: 41:bc:cc:9b:f5:4d:0c:01:dd:60:c2:73:66:df:2a: e1:88:9b:36:e7:54:02:f7:cb:ee:ea:0e:80:09:17: d7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9C:BF:22:ED:38:07:D9:9C:5E:FD:4A:F1:BA:1F:E4:3C:35:58:4A X509v3 Authority Key Identifier: keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:97:f7:e8:52:91:0d:03:7d:18:81:d9:d0:7d:ee:81:c2:36: da:60:e0:59:30:48:b4:6e:ea:fc:a6:89:99:c1:5b:53:41:38: 34:f9:de:5d:98:cb:a4:a4:a9:13:64:b9:ef:78:24:08:28:4d: d3:7e:76:e0:ef:54:54:58:07:99:6e:8b:ea:0b:30:ce:26:37: 75:59:b4:73:93:c7:a2:2e:cd:5a:5e:1b:05:fa:e6:29:5f:81: 41:0d:c2:33:5f:02:4b:31:37:52:23:6c:26:f7:cb:9c:cd:26: 5a:9e:9b:b9:3b:61:f6:7e:20:c7:08:ba:67:c0:fd:03:02:fc: 26:11:df:ba:69:ee:f3:95:23:aa:d0:8d:c0:f7:f2:d2:d0:f9: 68:60:8b:b8:84:71:67:21:ce:b0:f1:eb:f4:05:97:d1:02:94: 52:67:84:ae:84:fc:09:eb:43:e3:8a:0f:05:b1:d7:38:cb:b4: 49:55:9b:f2:c0:d4:1c:39:11:96:1d:1b:a3:97:90:b0:db:b7: cc:f0:98:2c:a3:38:ea:b9:ec:53:58:e4:2e:41:4b:15:a9:b6: 60:78:5b:a1:d1:26:ae:40:3b:5f:3f:75:b5:0a:50:f3:3e:d6: 31:71:a0:9e:7d:0d:f5:7d:37:97:aa:71:64:74:3e:57:d7:90: bf:b0:1c:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o4AYpYVBxaWoiqwylbkJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMGIwOGU2MDc2NjhlMDYwNTAwODRlZTM3OTI4YTFjMGIw MzU0OTIwHhcNMjUxMjIxMDIwMTAxWhcNMjUxMjIyMDIwMTAxWjAzMTEwLwYDVQQD Eyg0MDljYmYyMmVkMzgwN2Q5OWM1ZWZkNGFmMWJhMWZlNDNjMzU1ODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnukYN23fP7znf5f/O+Sr68F+UZgu HZX/mNfmNHEx3D+TBU234tIvv3UQRN9iuLDNcCtr0JAK7lNcH8k5w89wP+ak0KUC RyQDXglz5Fa9Rv8bvH//3oEVaM3gD3jQXVl4fuTDJvI/RZwelXnmIp7f2E41Z9I6 OGznuig8VpWhfe5sg6fuV5+jMRfqgfjG9xRRt/pFQmu7WHCd6FL7mddp4EBSLCNX lG7u9PgazM0gYVJF53OmeMUoyeaeEIPSzvZYqCLeN7EgPUo/hcRkck0sN1ZtbyRm aJ+zdGtVoMTHpE9BvMyb9U0MAd1gwnNm3yrhiJs251QC98vu6g6ACRfXMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECcvyLtOAfZnF79SvG6H+Q8NVhKMB8GA1UdIwQY MBaAFNILCOYHZo4GBQCE7jeSihwLA1SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2Et MDYyYzg4ODJiYTcxLzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2EtMDYyYzg4ODJiYTcx LzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5f36FKR DQN9GIHZ0H3ugcI22mDgWTBItG7q/KaJmcFbU0E4NPneXZjLpKSpE2S573gkCChN 03524O9UVFgHmW6L6gswziY3dVm0c5PHoi7NWl4bBfrmKV+BQQ3CM18CSzE3UiNs JvfLnM0mWp6buTth9n4gxwi6Z8D9AwL8JhHfumnu85UjqtCNwPfy0tD5aGCLuIRx ZyHOsPHr9AWX0QKUUmeEroT8CetD44oPBbHXOMu0SVWb8sDUHDkRlh0bo5eQsNu3 zPCYLKM46rnsU1jkLkFLFam2YHhbodEmrkA7Xz91tQpQ8z7WMXGgnn0N9X03l6px ZHQ+V9eQv7AcRA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:27:51 2025 by rpki-client