This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json) Hash identifier: Xs5PGuzykcqSbBe8KvP5XfmDI3c1dGcs2Jdv2WUqQHI= Subject key identifier: CE:89:C3:B0:BE:63:59:F6:3D:49:E1:F5:C2:18:44:93:B8:C2:AF:D6 Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4 Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4 Certificate serial: 019B3DFE3C9120B1A8BD641117051DAA8FB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft Manifest number: 15A0 Signing time: Sat 20 Dec 2025 23:00:30 +0000 Manifest this update: Sat 20 Dec 2025 23:00:30 +0000 Manifest next update: Sun 21 Dec 2025 23:00:30 +0000 Files and hashes: 1: 1-n1FQJdtrmSwdnekLdBoJCXaZLE.roa (hash: vl5yvgIUqNuSQTIxMaS41AEZa6z2Ung/hJMgS4H/xOQ=) 2: KUPJ1lDWM9H_O_nug1XhCm8CDY0.roa (hash: N5MTKqEvC4tpTv0nenMYPQJAtm9LjBH+zL/o+EsRhto=) 3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: xaddTcYN3XJzODUC9EfeI8o89ccQtBJlpeDS4Jf/XYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:3c:91:20:b1:a8:bd:64:11:17:05:1d:aa:8f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4 Validity Not Before: Dec 20 23:00:30 2025 GMT Not After : Dec 21 23:00:30 2025 GMT Subject: CN=ce89c3b0be6359f63d49e1f5c2184493b8c2afd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:89:be:f6:30:05:ba:42:d3:63:15:15:ab: a9:f2:56:27:77:b0:18:5c:38:cc:1d:e8:c1:3b:bb: ce:f8:1d:19:06:5c:ef:fd:9c:fa:08:ca:98:a0:66: 09:b7:a8:3b:00:2b:63:ab:46:b4:de:a2:0d:c3:5d: 60:46:2e:a0:ee:78:b6:1d:b5:73:b8:19:32:0e:5b: fb:fd:1a:fb:bf:9f:4d:e2:7c:7d:02:2a:51:ca:13: df:c9:4a:d6:26:f1:5c:c0:f8:d8:c0:81:00:01:2c: bf:c2:5b:a0:db:66:f2:b2:ce:d9:7b:c8:85:0a:9c: 64:f7:a5:3c:aa:7e:91:d8:62:f7:e5:ea:5c:31:44: 53:e8:61:86:e1:5b:8a:f8:8e:63:08:28:cb:db:d4: de:31:17:64:64:22:a0:c2:4a:c8:3b:56:d4:df:42: 72:5b:51:f7:6d:10:64:d7:a0:12:9b:5a:03:49:f3: dd:c4:df:f6:05:89:ab:d3:1e:46:1b:75:ac:f3:30: 01:16:e4:6c:0b:cc:32:2d:31:cf:38:74:07:0a:72: ba:d6:68:d8:64:8c:ec:f8:d0:1d:7d:01:75:e8:26: 23:25:9a:7f:f0:52:0d:72:00:d8:eb:e6:8e:d6:54: 19:d6:a0:fa:8c:37:71:b7:99:d6:40:a4:1b:1c:8b: eb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:89:C3:B0:BE:63:59:F6:3D:49:E1:F5:C2:18:44:93:B8:C2:AF:D6 X509v3 Authority Key Identifier: keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:42:ac:f1:1e:30:04:4b:24:ae:13:4b:08:b1:71:a7:ef:5b: ff:f2:98:ce:59:ad:b4:08:59:0b:e1:e6:a1:97:5a:c3:c1:cd: 43:cb:f7:f7:b2:fe:4e:82:12:f5:22:a7:28:46:a9:c8:31:28: 1f:fe:bf:57:ca:b7:1f:40:0b:6b:87:97:d7:2f:0c:3f:c1:4f: ea:bd:9b:48:05:52:61:85:40:18:ee:ec:93:ab:a1:a7:ce:7a: 2a:ce:a9:ac:df:69:4a:25:05:50:47:32:52:0e:98:42:25:d6: c3:38:ef:18:17:49:6d:ff:a1:0f:0a:81:18:76:71:fd:52:3c: c5:e3:c1:f5:74:32:90:84:eb:69:b7:dc:e3:49:82:9d:d3:d8: cd:fb:26:16:36:cf:84:38:3a:53:fc:da:78:12:ea:b8:18:b1: 28:15:01:b5:d3:f5:7a:b9:56:39:86:91:30:20:7b:25:dd:ce: e7:fe:1c:93:56:b5:52:9a:b5:fe:84:1a:f7:5d:b3:f4:c0:47: ee:0f:23:48:05:64:22:5c:8e:b0:0f:2f:df:15:a7:a0:ef:8b: f9:5c:95:92:78:87:2a:21:44:9d:18:85:8a:43:1d:97:46:ed: e1:03:88:e3:2e:87:ca:26:a2:50:12:c2:b8:59:03:f2:c5:47: a6:df:bc:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/jyRILGovWQRFwUdqo+4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMjNiOTczMWIxOTZiMWFjYmM4MjlmNWIyOGIzMjVmZDlk M2UzZDQwHhcNMjUxMjIwMjMwMDMwWhcNMjUxMjIxMjMwMDMwWjAzMTEwLwYDVQQD EyhjZTg5YzNiMGJlNjM1OWY2M2Q0OWUxZjVjMjE4NDQ5M2I4YzJhZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZGJvvYwBbpC02MVFaup8lYnd7AY XDjMHejBO7vO+B0ZBlzv/Zz6CMqYoGYJt6g7ACtjq0a03qINw11gRi6g7ni2HbVz uBkyDlv7/Rr7v59N4nx9AipRyhPfyUrWJvFcwPjYwIEAASy/wlug22byss7Ze8iF Cpxk96U8qn6R2GL35epcMURT6GGG4VuK+I5jCCjL29TeMRdkZCKgwkrIO1bU30Jy W1H3bRBk16ASm1oDSfPdxN/2BYmr0x5GG3Ws8zABFuRsC8wyLTHPOHQHCnK61mjY ZIzs+NAdfQF16CYjJZp/8FINcgDY6+aO1lQZ1qD6jDdxt5nWQKQbHIvraQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6Jw7C+Y1n2PUnh9cIYRJO4wq/WMB8GA1UdIwQY MBaAFIMjuXMbGWsay8gp9bKLMl/Z0+PUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2Yt Y2ExZTVmMDgxOTUwLzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2YtY2ExZTVmMDgxOTUw LzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUKs8R4w BEskrhNLCLFxp+9b//KYzlmttAhZC+HmoZdaw8HNQ8v397L+ToIS9SKnKEapyDEo H/6/V8q3H0ALa4eX1y8MP8FP6r2bSAVSYYVAGO7sk6uhp856Ks6prN9pSiUFUEcy Ug6YQiXWwzjvGBdJbf+hDwqBGHZx/VI8xePB9XQykITrabfc40mCndPYzfsmFjbP hDg6U/zaeBLquBixKBUBtdP1erlWOYaRMCB7Jd3O5/4ck1a1Upq1/oQa912z9MBH 7g8jSAVkIlyOsA8v3xWnoO+L+VyVkniHKiFEnRiFikMdl0bt4QOI4y6HyiaiUBLC uFkD8sVHpt+8ow== -----END CERTIFICATE-----Generated at Sun Dec 21 09:03:19 2025 by rpki-client