This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json) Hash identifier: kY0u93y7jD9LtleUvJrP47bfgmGW4UHSaLh8slar4Is= Subject key identifier: FD:D7:0C:B2:02:F3:A4:AF:69:4A:E3:71:6D:1B:9C:AE:E4:D6:6C:35 Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c Certificate serial: 019B3BD92B70290214E84BA6CC8A6958FB6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft Manifest number: 0EB8 Signing time: Sat 20 Dec 2025 13:00:46 +0000 Manifest this update: Sat 20 Dec 2025 13:00:46 +0000 Manifest next update: Sun 21 Dec 2025 13:00:46 +0000 Files and hashes: 1: JQj924cUZ739dTo2CAmTW-Nn1zw.roa (hash: wLvSRyuv0hEPp/uJ8ZfBwX5TJv2CK5mAgRM5bxes1Tg=) 2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: RcZ4a8ZVQvGh6d2iPLPVaLopwFZUoN95WwdUMo4KsBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:2b:70:29:02:14:e8:4b:a6:cc:8a:69:58:fb:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c Validity Not Before: Dec 20 13:00:46 2025 GMT Not After : Dec 21 13:00:46 2025 GMT Subject: CN=fdd70cb202f3a4af694ae3716d1b9caee4d66c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f8:95:84:6d:78:b0:53:cb:39:ad:6a:ce:b7: 46:4c:e5:12:99:9c:0f:e9:d2:9f:39:30:94:d9:b7: 95:c1:24:55:77:88:a6:87:36:38:35:72:a2:c1:e3: a6:c0:21:78:61:b7:e1:b6:ca:24:04:5c:77:d3:bb: ff:0d:6c:60:ea:40:ee:5d:48:2c:e3:d2:5a:78:e1: e0:60:e5:6a:db:6d:c6:bd:fe:c2:e1:3a:5a:ae:38: bd:46:ae:f0:a9:91:72:97:6d:5d:41:a3:8d:da:82: 74:92:f8:df:74:22:79:1c:54:c1:4f:46:2e:38:78: 1e:c7:d6:26:cd:cb:bb:bd:cb:45:a8:b8:0b:d6:c7: 75:9d:c7:83:4d:3c:f1:a1:c1:07:05:d1:a5:d6:0c: 8c:3b:66:82:d6:75:4a:7f:3f:b7:e5:09:54:bc:2e: ac:98:c3:21:a2:f0:6e:d4:22:58:19:31:71:ba:ba: 5e:c6:8c:40:0a:81:e7:a0:61:19:1c:c1:e5:db:73: 1b:c6:77:46:c1:31:25:f1:3e:8c:73:c9:1d:ba:96: 21:e5:79:6b:f8:f0:77:d9:a2:4b:44:3b:c7:ee:d9: 69:0e:28:30:15:c4:ab:c2:19:ed:11:1d:75:8d:d6: a8:c2:07:d2:83:c9:42:c4:c6:8f:3b:ad:a6:6a:6b: 72:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D7:0C:B2:02:F3:A4:AF:69:4A:E3:71:6D:1B:9C:AE:E4:D6:6C:35 X509v3 Authority Key Identifier: keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d0:b8:7f:4c:b6:e3:58:9a:fd:1b:74:ce:83:ec:af:63:3d: f8:5e:66:89:f3:48:c9:83:a0:75:d2:77:b7:71:7c:dd:54:8a: b7:14:d7:82:f2:22:4f:99:2d:d6:cd:2c:ff:80:65:9c:a6:91: 09:b6:ee:62:fe:ee:32:2d:02:9a:0b:ed:22:b2:0e:be:3f:85: ec:25:4e:31:40:68:ba:f1:6e:db:96:4d:e2:e1:46:45:0b:8f: 30:e5:2b:a5:b6:69:26:c5:f9:32:25:cc:38:c6:21:c8:c7:60: a9:27:ca:44:b0:51:80:43:46:16:21:f1:5d:d3:c9:04:35:35: 46:95:f2:55:71:32:54:76:fd:ad:e2:07:9c:56:bc:bc:ae:bc: e8:15:e5:29:ab:82:19:ae:57:c5:b0:e4:0e:32:be:8c:1d:02: 2d:c9:b1:b8:4d:af:1e:e9:d7:49:bc:cd:25:2f:20:47:b3:bb: ed:85:50:3a:cc:e8:e1:07:93:e7:c6:fe:53:bd:a3:a8:b9:2b: 79:d1:9a:7e:1e:6c:0e:af:78:5b:c3:c5:39:72:d6:08:a9:39: c5:52:6a:bf:0a:62:e8:e2:3a:05:cd:2b:be:17:9d:c5:38:1f: 90:64:33:a8:9a:d8:f2:2b:d8:c2:cc:33:57:9f:28:96:a4:01: c9:11:3a:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72StwKQIU6EumzIppWPtrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNTNkOWI1MWY0N2FhNTVmOWU1MjcwNDc1NDg2OWY1NTM2 YmFlNGMwHhcNMjUxMjIwMTMwMDQ2WhcNMjUxMjIxMTMwMDQ2WjAzMTEwLwYDVQQD EyhmZGQ3MGNiMjAyZjNhNGFmNjk0YWUzNzE2ZDFiOWNhZWU0ZDY2YzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPiVhG14sFPLOa1qzrdGTOUSmZwP 6dKfOTCU2beVwSRVd4imhzY4NXKiweOmwCF4YbfhtsokBFx307v/DWxg6kDuXUgs 49JaeOHgYOVq223Gvf7C4Tparji9Rq7wqZFyl21dQaON2oJ0kvjfdCJ5HFTBT0Yu OHgex9Ymzcu7vctFqLgL1sd1nceDTTzxocEHBdGl1gyMO2aC1nVKfz+35QlUvC6s mMMhovBu1CJYGTFxurpexoxACoHnoGEZHMHl23MbxndGwTEl8T6Mc8kdupYh5Xlr +PB32aJLRDvH7tlpDigwFcSrwhntER11jdaowgfSg8lCxMaPO62mamtyswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3XDLIC86SvaUrjcW0bnK7k1mw1MB8GA1UdIwQY MBaAFIBT2bUfR6pV+eUnBHVIafVTa65MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWIt YTE1YWY1ZThmMTNjLzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWItYTE1YWY1ZThmMTNj LzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNC4f0y2 41ia/Rt0zoPsr2M9+F5mifNIyYOgddJ3t3F83VSKtxTXgvIiT5kt1s0s/4BlnKaR CbbuYv7uMi0CmgvtIrIOvj+F7CVOMUBouvFu25ZN4uFGRQuPMOUrpbZpJsX5MiXM OMYhyMdgqSfKRLBRgENGFiHxXdPJBDU1RpXyVXEyVHb9reIHnFa8vK686BXlKauC Ga5XxbDkDjK+jB0CLcmxuE2vHunXSbzNJS8gR7O77YVQOszo4QeT58b+U72jqLkr edGafh5sDq94W8PFOXLWCKk5xVJqvwpi6OI6Bc0rvhedxTgfkGQzqJrY8ivYwswz V58olqQByRE6mA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:47:00 2025 by rpki-client