This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json) Hash identifier: wtjznU7z9Zu+3ftRRvwQTAFe+Nw83YrEaNx+9Tm0qyc= Subject key identifier: 12:52:64:D4:BF:14:2E:D3:C4:69:3C:E2:71:57:5A:DB:87:88:C2:C7 Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19 Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519 Certificate serial: 019B3BA2C39CC15BD566AAD96AC9A90D8ECB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 12:01:21 +0000 Manifest this update: Sat 20 Dec 2025 12:01:21 +0000 Manifest next update: Sun 21 Dec 2025 12:01:21 +0000 Files and hashes: 1: DEbqDj-D0KhPe_ozDfopNhqgvZc.roa (hash: 6XoIqk1u5dfBbYPK0R4bSxJz+kGjtKoT47/COVdRMu0=) 2: FaVvxalLzbpJd7lGg-gIZ4RSuqw.roa (hash: Vq9OXxCy4cXw387lqVrsEZN9rZ1lStx9VD3OgQ3YBXs=) 3: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: IqRYGMYffltd1TTHKPMOHh7M6YBmltC9TVB7MuCNrz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:c3:9c:c1:5b:d5:66:aa:d9:6a:c9:a9:0d:8e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519 Validity Not Before: Dec 20 12:01:21 2025 GMT Not After : Dec 21 12:01:21 2025 GMT Subject: CN=125264d4bf142ed3c4693ce271575adb8788c2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:b7:5d:d4:2b:4a:05:a7:10:a8:03:08:20: 1c:0d:db:44:fe:9c:dd:58:65:0c:ed:14:51:00:af: 9b:ee:b2:69:23:18:41:be:1d:1b:c8:8d:8c:53:47: da:98:e9:ad:be:1b:09:b7:d0:ca:be:f7:8c:d7:ce: f2:20:37:2e:48:b1:ac:13:70:cf:09:1d:42:dc:84: ba:c0:d2:1a:6d:aa:38:60:82:f9:65:7b:1f:1e:4c: c4:a7:10:39:0d:d3:3c:97:ca:fe:3f:a2:83:0e:33: 43:6d:68:26:ce:87:b7:db:6b:17:dc:b9:bf:4b:cc: b0:37:a8:f8:9d:d8:34:09:75:79:16:88:f6:bd:93: 4e:13:22:34:fb:53:fd:18:a5:38:65:79:bf:44:ec: 6d:08:fa:a3:55:04:14:6e:9c:e1:a3:9a:37:ad:ed: 5c:ee:35:ab:38:37:81:5b:df:04:61:75:33:e1:d8: 5e:b4:81:65:75:ac:bf:4b:af:e2:9e:25:09:27:57: e8:76:65:7e:75:6a:04:d2:45:8d:4e:1c:52:20:6e: 94:58:2d:51:ae:e9:46:3c:f9:0a:37:dc:b9:ed:fd: e6:10:24:ff:80:39:51:04:a5:38:a5:4c:56:c3:49: bc:01:77:1c:91:bc:e1:c8:4f:20:5e:59:27:65:18: 92:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:52:64:D4:BF:14:2E:D3:C4:69:3C:E2:71:57:5A:DB:87:88:C2:C7 X509v3 Authority Key Identifier: keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:37:43:0a:63:7f:a4:78:90:14:2a:f7:e2:8d:2b:48:57:f9: 6f:84:36:e0:27:31:d0:88:fb:9d:a9:db:2e:c6:e2:7c:68:b9: 94:a3:cc:4a:4f:b4:22:7c:68:76:28:75:cc:23:22:c4:b3:b1: 00:35:fd:3d:b9:a9:53:c6:4e:61:0c:42:ed:bf:e8:65:92:41: 36:59:f0:eb:81:54:98:15:6a:8c:1e:c5:8d:64:6c:f9:bc:6f: 96:ff:e3:fd:54:2f:ce:e3:44:c9:ae:f0:a8:c6:c8:84:e0:bb: 0d:50:88:b3:27:9a:68:49:4e:da:38:3a:b9:29:81:3d:29:37: e6:aa:9f:d6:a3:10:01:40:d1:73:c0:24:93:7e:87:b5:65:21: db:1f:5f:66:c9:b6:5b:60:e8:5a:4a:f5:34:57:02:e4:90:66: 93:e7:ad:25:27:1e:16:73:f3:4e:bb:bf:01:a8:7b:0d:6d:79: 67:8a:2b:76:5f:ef:d7:ef:ef:01:8c:ec:e7:5d:03:af:45:17: 02:37:a5:05:93:88:7e:73:fb:6d:e0:b4:71:6c:da:3c:60:28: d8:2d:73:e0:4a:de:60:7b:e0:0e:b6:81:5f:eb:3b:77:d2:a9: b3:be:2b:db:af:3f:2d:e5:0b:f1:4e:7d:d1:32:85:a0:cf:15: 1b:a2:7e:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7osOcwVvVZqrZasmpDY7LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZWJhZjJjYmE4MzU5NDM4ZTQzNDEyM2RkYTdhNWEzOTZm NWY1MTkwHhcNMjUxMjIwMTIwMTIxWhcNMjUxMjIxMTIwMTIxWjAzMTEwLwYDVQQD EygxMjUyNjRkNGJmMTQyZWQzYzQ2OTNjZTI3MTU3NWFkYjg3ODhjMmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJG3XdQrSgWnEKgDCCAcDdtE/pzd WGUM7RRRAK+b7rJpIxhBvh0byI2MU0famOmtvhsJt9DKvveM187yIDcuSLGsE3DP CR1C3IS6wNIabao4YIL5ZXsfHkzEpxA5DdM8l8r+P6KDDjNDbWgmzoe322sX3Lm/ S8ywN6j4ndg0CXV5Foj2vZNOEyI0+1P9GKU4ZXm/ROxtCPqjVQQUbpzho5o3re1c 7jWrODeBW98EYXUz4dhetIFlday/S6/iniUJJ1fodmV+dWoE0kWNThxSIG6UWC1R rulGPPkKN9y57f3mECT/gDlRBKU4pUxWw0m8AXcckbzhyE8gXlknZRiSMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJSZNS/FC7TxGk84nFXWtuHiMLHMB8GA1UdIwQY MBaAFIDrryy6g1lDjkNBI92npaOW9fUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMWY4YTAtN2U5NS00ZmUyLTg4MDkt Zjc4YmRiNmY2MGMyLzEvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMWY4YTAtN2U5NS00ZmUyLTg4MDktZjc4YmRiNmY2MGMy LzEvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzdDCmN/ pHiQFCr34o0rSFf5b4Q24Ccx0Ij7nanbLsbifGi5lKPMSk+0Inxodih1zCMixLOx ADX9PbmpU8ZOYQxC7b/oZZJBNlnw64FUmBVqjB7FjWRs+bxvlv/j/VQvzuNEya7w qMbIhOC7DVCIsyeaaElO2jg6uSmBPSk35qqf1qMQAUDRc8Akk36HtWUh2x9fZsm2 W2DoWkr1NFcC5JBmk+etJSceFnPzTru/Aah7DW15Z4ordl/v1+/vAYzs510Dr0UX AjelBZOIfnP7beC0cWzaPGAo2C1z4EreYHvgDraBX+s7d9Kps74r268/LeUL8U59 0TKFoM8VG6J+KQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:55:20 2025 by rpki-client