This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft File: gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft (raw, json) Hash identifier: Np2NCXzVTzrWF8ENbA/7OKFXTLcKA8ocAngAW24hpfM= Subject key identifier: 67:B4:48:77:C4:BB:6E:56:C5:0A:A2:69:57:CA:7E:68:42:A8:A8:03 Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7 Certificate issuer: /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7 Certificate serial: 019B3D599874E65646BBA6C63A5876B89D2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 20:00:40 +0000 Manifest this update: Sat 20 Dec 2025 20:00:40 +0000 Manifest next update: Sun 21 Dec 2025 20:00:40 +0000 Files and hashes: 1: 1GcdqVYrNeFzAfzIvWc1uwT98aA.roa (hash: 4uQf4DSwbX7BKGTdoGDfjY+9K4u0Qbg5gbpIHJoyB/8=) 2: gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl (hash: 4HU7qZkzgWGib7Llsr/nLjBN45LPnbVNV7yJZySmcDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:98:74:e6:56:46:bb:a6:c6:3a:58:76:b8:9d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7 Validity Not Before: Dec 20 20:00:40 2025 GMT Not After : Dec 21 20:00:40 2025 GMT Subject: CN=67b44877c4bb6e56c50aa26957ca7e6842a8a803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:99:1a:cc:db:d2:bb:ed:05:16:71:1c:61:a7: 84:41:41:fc:18:0e:83:d1:1b:98:5f:c5:27:0c:b3: 01:63:12:fc:fc:e4:a3:a0:53:b1:f9:d9:bf:b2:be: 6b:7d:e2:8b:29:75:4b:50:35:4e:ce:91:bf:84:78: 8f:f8:53:e3:e2:84:88:c1:a3:28:05:9d:8b:66:f9: 3a:80:57:20:f4:8a:41:09:d1:78:8a:dd:e3:35:f3: 8b:76:6f:e2:36:cf:52:8d:1e:3c:44:00:ce:9a:fd: c2:0e:6e:00:96:48:fa:cb:d8:0b:6c:0a:34:58:3b: 1d:0c:29:eb:71:ce:6e:80:3f:7d:46:2e:bb:3d:46: 62:b2:45:54:20:3f:4f:f8:b6:d6:38:e3:f3:b6:a8: 62:96:1b:58:7d:17:ca:a9:1e:c3:f1:1f:8b:d7:8a: d2:4f:55:3c:50:da:19:c5:e5:a0:dd:cb:4a:bc:fc: ad:91:92:a7:11:b3:7c:4f:b6:ec:d5:b1:a1:d9:ff: c3:52:57:7e:49:71:46:3e:67:dc:60:19:f5:c6:09: 36:d4:75:7b:f7:44:7d:f6:f7:1c:3a:6e:50:66:6f: 96:fb:c5:45:0e:40:ac:4d:cc:17:74:af:07:bd:3e: bf:b6:05:46:7b:5b:44:5d:a5:0e:31:86:2d:07:23: 51:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B4:48:77:C4:BB:6E:56:C5:0A:A2:69:57:CA:7E:68:42:A8:A8:03 X509v3 Authority Key Identifier: keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b4:ab:18:09:28:d6:ca:cb:d0:fa:81:c7:ce:77:db:ee:4b: 44:15:bf:40:5c:e9:c2:8f:7a:ee:7a:e8:b2:26:47:ec:42:f8: 11:df:8b:52:63:ca:c3:1c:42:27:18:fb:b6:3b:d9:45:2c:1e: 8e:fa:83:8a:76:73:36:99:3f:df:2d:07:bf:19:a9:e6:b9:78: ef:3e:58:ed:83:1a:45:6d:29:55:49:9d:30:4f:69:b4:d8:c9: 5c:e9:c3:2e:9b:ec:ae:65:0d:c1:a3:ba:50:7e:82:f2:2f:31: c4:93:37:44:7d:82:80:01:0f:d8:36:de:14:75:dd:f3:85:e8: 28:2b:80:c7:3a:85:da:ed:78:ca:2d:c8:b1:37:5e:3a:9a:a4: 67:8a:9d:22:83:7a:9d:14:5f:46:63:ca:6a:66:d0:eb:93:b3: 48:a7:ef:16:b5:25:34:37:4f:07:a4:8c:50:fc:f7:dc:03:68: 6a:c7:16:60:ec:43:db:8d:6c:1a:03:7d:08:f4:77:30:95:0e: c8:fd:66:fe:eb:b8:eb:73:78:cc:ac:3a:b2:0d:f2:8c:9e:85: 2f:44:52:d0:a7:33:a4:a5:f4:49:24:4f:42:53:83:99:30:c2: 1e:9e:03:0e:be:9d:c1:76:ef:8e:0f:c5:a0:52:aa:db:ab:bd: eb:1c:a4:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZh05lZGu6bGOlh2uJ0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzllYWQ4MzVhOGZjZmFlMGQ5ZWUyODM5Y2QxNjg4MWJh MTFkZDcwHhcNMjUxMjIwMjAwMDQwWhcNMjUxMjIxMjAwMDQwWjAzMTEwLwYDVQQD Eyg2N2I0NDg3N2M0YmI2ZTU2YzUwYWEyNjk1N2NhN2U2ODQyYThhODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JkazNvSu+0FFnEcYaeEQUH8GA6D 0RuYX8UnDLMBYxL8/OSjoFOx+dm/sr5rfeKLKXVLUDVOzpG/hHiP+FPj4oSIwaMo BZ2LZvk6gFcg9IpBCdF4it3jNfOLdm/iNs9SjR48RADOmv3CDm4Alkj6y9gLbAo0 WDsdDCnrcc5ugD99Ri67PUZiskVUID9P+LbWOOPztqhilhtYfRfKqR7D8R+L14rS T1U8UNoZxeWg3ctKvPytkZKnEbN8T7bs1bGh2f/DUld+SXFGPmfcYBn1xgk21HV7 90R99vccOm5QZm+W+8VFDkCsTcwXdK8HvT6/tgVGe1tEXaUOMYYtByNRmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGe0SHfEu25WxQqiaVfKfmhCqKgDMB8GA1UdIwQY MBaAFIJ56tg1qPz64NnuKDnNFogboR3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUt ZWUyOWM5MTM2ZThiLzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUtZWUyOWM5MTM2ZThi LzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7SrGAko 1srL0PqBx8532+5LRBW/QFzpwo967nrosiZH7EL4Ed+LUmPKwxxCJxj7tjvZRSwe jvqDinZzNpk/3y0Hvxmp5rl47z5Y7YMaRW0pVUmdME9ptNjJXOnDLpvsrmUNwaO6 UH6C8i8xxJM3RH2CgAEP2DbeFHXd84XoKCuAxzqF2u14yi3IsTdeOpqkZ4qdIoN6 nRRfRmPKambQ65OzSKfvFrUlNDdPB6SMUPz33ANoascWYOxD241sGgN9CPR3MJUO yP1m/uu463N4zKw6sg3yjJ6FL0RS0KczpKX0SSRPQlODmTDCHp4DDr6dwXbvjg/F oFKq26u96xykHg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:53:37 2025 by rpki-client