This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft File: v3DW_GPRd37tzY9GpVk2F8YxneY.mft (raw, json) Hash identifier: UAU1JcOhM6RFQaqA0bWSlsoev5mFxa2KsQ9FB+HJcag= Subject key identifier: D2:01:1A:98:5A:BB:14:46:66:E2:13:0E:7E:FE:6A:8A:1B:78:ED:8C Authority key identifier: BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6 Certificate issuer: /CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6 Certificate serial: 019B53062B93392CE59A3C74231D846B3A60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 01:01:11 +0000 Manifest this update: Thu 25 Dec 2025 01:01:11 +0000 Manifest next update: Fri 26 Dec 2025 01:01:11 +0000 Files and hashes: 1: uCVmenLcASyNoh4ZOZE-C9n4LLY.roa (hash: d6oXAE1yERYBjWPnG7isycEkaI7F0yqfWlZw0H+T+Mo=) 2: v3DW_GPRd37tzY9GpVk2F8YxneY.crl (hash: kzPeZLrWaPjoF/nK3PMW7AtM84HGWGsC5J3urwBkdOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:2b:93:39:2c:e5:9a:3c:74:23:1d:84:6b:3a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6 Validity Not Before: Dec 25 01:01:11 2025 GMT Not After : Dec 26 01:01:11 2025 GMT Subject: CN=d2011a985abb144666e2130e7efe6a8a1b78ed8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:d7:a4:f7:3d:d6:69:1b:ed:2e:c7:91:77: 14:b0:4a:29:bc:01:5f:8e:68:ec:87:8f:b7:c9:72: 68:d5:64:0a:ca:81:66:69:c6:73:55:50:59:c1:c4: 88:d7:c1:a2:08:eb:76:0e:3c:8a:ef:aa:98:a0:2c: 6d:29:80:f8:99:e2:a0:2e:7d:79:66:cf:68:fe:16: d8:37:c1:a5:85:c4:30:be:9f:93:f4:3d:5f:47:aa: ad:f8:ca:90:29:b6:c8:3a:91:2c:81:47:29:0e:80: 1f:bc:83:e6:6e:b4:7d:42:15:cc:dd:ec:34:74:98: 9e:19:e2:e5:03:4d:60:f1:8f:45:fb:c7:39:88:bb: ad:c8:50:3a:bc:a2:14:c4:20:b6:c8:d5:bf:6f:9d: bf:eb:53:95:eb:6b:61:bd:27:7e:7b:33:8e:3f:ee: bc:a5:21:e8:73:53:94:a3:34:f7:44:ba:98:06:34: 36:d2:cb:0a:40:bf:22:52:54:54:99:0a:ac:28:b9: 54:d1:c5:45:0a:72:28:ed:a7:eb:49:1a:ae:c8:9e: 28:e0:35:71:9d:55:92:ed:51:ac:bd:d4:1e:ba:73: b7:07:90:92:65:0f:28:3b:97:be:3d:f8:f7:a9:bf: ac:0a:31:11:47:49:72:01:83:c8:1a:2b:c9:6d:b0: 0e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:01:1A:98:5A:BB:14:46:66:E2:13:0E:7E:FE:6A:8A:1B:78:ED:8C X509v3 Authority Key Identifier: keyid:BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:67:29:73:47:46:f6:c9:af:0c:a3:6f:8d:73:6d:4d:09:9f: a1:b4:02:e0:88:f8:ad:c3:1b:4b:84:cd:66:a7:9e:a5:20:db: 24:f1:ab:14:63:33:9f:d3:22:f0:26:60:47:78:f6:45:6c:6d: 13:da:59:78:d1:e1:09:77:36:46:34:d6:de:b4:8e:d2:b8:26: 74:0f:69:50:d1:f0:5e:d1:b2:f1:5c:05:fa:8d:cc:e7:9b:ce: b2:b2:66:8a:7f:81:42:c2:64:a2:0e:98:88:f8:71:8d:86:4b: 4e:ea:35:ae:c9:8e:20:38:1e:ac:fe:3e:87:d0:28:a4:24:28: 14:84:40:cb:90:8e:0b:30:1e:e4:0c:6d:ac:b7:d5:a1:63:89: 91:3a:cb:73:e7:47:d8:8a:54:5b:49:94:67:5e:1f:1b:e9:95: 3a:df:93:65:b5:30:6d:3f:58:0e:83:1b:06:88:e8:09:23:c5: f1:e8:47:0c:d2:92:34:21:c6:18:41:10:e4:48:58:f6:cb:33: 1c:60:20:ba:a1:10:f2:dd:3f:d0:09:50:a5:20:fa:b4:28:b4: 10:e1:06:ce:9d:4f:e6:c6:f7:75:96:35:43:e3:67:7d:ca:57: 8f:dc:2c:7d:81:cf:01:ba:73:9f:f0:e6:66:cc:85:5a:d9:7a: ad:54:de:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBiuTOSzlmjx0Ix2EazpgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNzBkNmZjNjNkMTc3N2VlZGNkOGY0NmE1NTkzNjE3YzYz MTlkZTYwHhcNMjUxMjI1MDEwMTExWhcNMjUxMjI2MDEwMTExWjAzMTEwLwYDVQQD EyhkMjAxMWE5ODVhYmIxNDQ2NjZlMjEzMGU3ZWZlNmE4YTFiNzhlZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBHXpPc91mkb7S7HkXcUsEopvAFf jmjsh4+3yXJo1WQKyoFmacZzVVBZwcSI18GiCOt2DjyK76qYoCxtKYD4meKgLn15 Zs9o/hbYN8GlhcQwvp+T9D1fR6qt+MqQKbbIOpEsgUcpDoAfvIPmbrR9QhXM3ew0 dJieGeLlA01g8Y9F+8c5iLutyFA6vKIUxCC2yNW/b52/61OV62thvSd+ezOOP+68 pSHoc1OUozT3RLqYBjQ20ssKQL8iUlRUmQqsKLlU0cVFCnIo7afrSRquyJ4o4DVx nVWS7VGsvdQeunO3B5CSZQ8oO5e+Pfj3qb+sCjERR0lyAYPIGivJbbAOxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIBGphauxRGZuITDn7+aoobeO2MMB8GA1UdIwQY MBaAFL9w1vxj0Xd+7c2PRqVZNhfGMZ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjNEV19HUFJkMzd0elk5R3BWazJGOFl4bmVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNmI2NWMtMmZjMy00MTk2LWFmMzAt Mzk0MGQxMzViMjhiLzEvdjNEV19HUFJkMzd0elk5R3BWazJGOFl4bmVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jNmI2NWMtMmZjMy00MTk2LWFmMzAtMzk0MGQxMzViMjhi LzEvdjNEV19HUFJkMzd0elk5R3BWazJGOFl4bmVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWcpc0dG 9smvDKNvjXNtTQmfobQC4Ij4rcMbS4TNZqeepSDbJPGrFGMzn9Mi8CZgR3j2RWxt E9pZeNHhCXc2RjTW3rSO0rgmdA9pUNHwXtGy8VwF+o3M55vOsrJmin+BQsJkog6Y iPhxjYZLTuo1rsmOIDgerP4+h9AopCQoFIRAy5COCzAe5AxtrLfVoWOJkTrLc+dH 2IpUW0mUZ14fG+mVOt+TZbUwbT9YDoMbBojoCSPF8ehHDNKSNCHGGEEQ5EhY9ssz HGAguqEQ8t0/0AlQpSD6tCi0EOEGzp1P5sb3dZY1Q+NnfcpXj9wsfYHPAbpzn/Dm ZsyFWtl6rVTe5A== -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:28 2025 by rpki-client