This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft File: gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft (raw, json) Hash identifier: vRlJ2VwatKz/9UMAII+z0Tm35XaqEaLU3weYqgoLqSA= Subject key identifier: 63:2B:EA:EE:33:26:87:72:95:74:18:D4:A0:E6:93:EC:B5:68:6A:64 Authority key identifier: 81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5 Certificate issuer: /CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5 Certificate serial: 019B65E7E5288D4061EF6298FD2D629E96ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft Manifest number: 14E0 Signing time: Sun 28 Dec 2025 17:00:54 +0000 Manifest this update: Sun 28 Dec 2025 17:00:54 +0000 Manifest next update: Mon 29 Dec 2025 17:00:54 +0000 Files and hashes: 1: OWKqkK-Ww3RQmH16xNxVWiLvO8I.roa (hash: GAxHkIIERYjerOgQkJ6KzahFSgbI1tnYkcltOUuSvzI=) 2: gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl (hash: 3te3/uxzTPtIJuRwg5wj5JwOvaAcdu2UepTf/68DwDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e7:e5:28:8d:40:61:ef:62:98:fd:2d:62:9e:96:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5 Validity Not Before: Dec 28 17:00:54 2025 GMT Not After : Dec 29 17:00:54 2025 GMT Subject: CN=632beaee33268772957418d4a0e693ecb5686a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:41:0a:e4:8b:3f:f1:57:4a:db:bb:ee:7a:5a: 8f:47:c7:14:1b:8d:43:cf:99:c6:aa:0e:18:05:23: 49:26:9b:a4:cf:9a:15:c2:ff:66:43:e1:cc:24:17: d9:a1:91:98:36:7c:ca:2a:ed:e2:5b:ae:d0:4d:b3: 91:76:ec:91:b0:1e:a5:a3:f3:6d:e3:71:73:43:b9: c1:5a:08:73:3c:99:67:44:f8:1d:1a:42:91:bc:9c: ee:92:9b:86:73:6e:5c:6d:dc:b8:1a:68:67:53:e4: cf:89:19:4b:78:40:76:79:9a:86:09:27:ac:15:a0: a8:24:96:cb:97:70:a8:70:5b:e0:93:e5:00:55:40: bf:6e:62:19:c1:7d:5f:d3:3f:e5:bd:28:ac:ef:99: 32:30:1e:e2:0b:0c:43:f6:73:34:a0:5d:4b:1d:a9: df:df:8b:13:cd:ae:9b:5a:f6:5f:7e:3a:47:86:a3: b4:2f:0e:f2:7b:3a:fd:d6:5a:e3:50:63:49:f6:12: da:bf:4b:7a:78:56:d6:0a:50:88:cf:b7:ab:0b:9c: eb:2d:57:eb:a1:8e:02:05:7b:9e:b0:cc:79:03:76: 38:d7:ce:ff:15:3f:48:b2:61:07:ba:7b:79:6a:87: ef:40:a5:3d:d2:b8:e2:59:e5:84:f1:f9:b7:a9:5e: 2b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2B:EA:EE:33:26:87:72:95:74:18:D4:A0:E6:93:EC:B5:68:6A:64 X509v3 Authority Key Identifier: keyid:81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:6a:58:40:5a:05:9e:c0:6e:ef:48:7b:22:f1:be:c8:8a:ad: 49:fc:6c:c8:e3:8d:d2:d1:68:a2:fe:f8:81:40:ed:af:26:13: 87:aa:ad:d5:fd:7d:50:29:88:53:4b:77:e2:a1:7f:ee:ea:d6: e8:b3:98:59:85:d9:ef:0e:37:f4:7d:6d:dc:b0:b5:10:f6:ff: c3:45:f4:d8:13:cc:c4:e4:f0:fe:ee:75:72:98:c2:27:d4:a4: ea:d5:ea:24:fa:50:11:3c:b3:e1:2c:b6:18:e5:ad:a6:ec:5c: f4:cb:a0:2f:39:4a:77:b2:0c:75:a3:72:62:49:df:c2:74:a5: 41:b9:de:e4:1a:3c:5e:f8:87:24:f2:54:a6:f8:86:55:fb:02: f6:19:0d:56:cf:ee:49:3a:14:0c:4b:2a:c4:c7:46:ea:b5:95: 87:94:e3:33:4e:83:18:a6:70:4a:f9:b2:24:39:41:ca:2a:63: bd:64:f1:31:93:af:75:8c:78:34:59:25:ec:a6:ec:a3:be:15: e4:73:4b:2c:4f:f6:8d:5e:38:f7:cc:c7:ca:89:13:56:83:78: d1:c8:65:69:af:b7:0c:18:c4:53:01:f2:65:83:8c:e4:22:ce: dc:ea:54:97:9a:64:40:51:f9:de:99:1f:2c:c3:8e:a1:a5:85: f6:8d:92:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl5+UojUBh72KY/S1inpbtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYTAyMWQ1NDBlZDdkODJjNjkwYWRjMDRmYmQ5ZGQ2ZWU1 MGU4ZDUwHhcNMjUxMjI4MTcwMDU0WhcNMjUxMjI5MTcwMDU0WjAzMTEwLwYDVQQD Eyg2MzJiZWFlZTMzMjY4NzcyOTU3NDE4ZDRhMGU2OTNlY2I1Njg2YTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0EK5Is/8VdK27vuelqPR8cUG41D z5nGqg4YBSNJJpukz5oVwv9mQ+HMJBfZoZGYNnzKKu3iW67QTbORduyRsB6lo/Nt 43FzQ7nBWghzPJlnRPgdGkKRvJzukpuGc25cbdy4GmhnU+TPiRlLeEB2eZqGCSes FaCoJJbLl3CocFvgk+UAVUC/bmIZwX1f0z/lvSis75kyMB7iCwxD9nM0oF1LHanf 34sTza6bWvZffjpHhqO0Lw7yezr91lrjUGNJ9hLav0t6eFbWClCIz7erC5zrLVfr oY4CBXuesMx5A3Y4187/FT9IsmEHunt5aofvQKU90rjiWeWE8fm3qV4rLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMr6u4zJodylXQY1KDmk+y1aGpkMB8GA1UdIwQY MBaAFIGgIdVA7X2CxpCtwE+9ndbuUOjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2FBaDFVRHRmWUxHa0szQVQ3MmQxdTVRNk5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMmI5NDYtMWI0YS00MjE0LTkyMzQt YWQwMjczMjdmOWQ4LzEvZ2FBaDFVRHRmWUxHa0szQVQ3MmQxdTVRNk5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lMmI5NDYtMWI0YS00MjE0LTkyMzQtYWQwMjczMjdmOWQ4 LzEvZ2FBaDFVRHRmWUxHa0szQVQ3MmQxdTVRNk5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWpYQFoF nsBu70h7IvG+yIqtSfxsyOON0tFoov74gUDtryYTh6qt1f19UCmIU0t34qF/7urW 6LOYWYXZ7w439H1t3LC1EPb/w0X02BPMxOTw/u51cpjCJ9Sk6tXqJPpQETyz4Sy2 GOWtpuxc9MugLzlKd7IMdaNyYknfwnSlQbne5Bo8XviHJPJUpviGVfsC9hkNVs/u SToUDEsqxMdG6rWVh5TjM06DGKZwSvmyJDlByipjvWTxMZOvdYx4NFkl7Kbso74V 5HNLLE/2jV4498zHyokTVoN40chlaa+3DBjEUwHyZYOM5CLO3OpUl5pkQFH53pkf LMOOoaWF9o2Ssg== -----END CERTIFICATE-----Generated at Sun Dec 28 20:16:26 2025 by rpki-client