This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft File: gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft (raw, json) Hash identifier: cS+K9zbuNkBItnJgSCqftwUteuI+j5yMa3PORc/shUk= Subject key identifier: AA:64:B3:66:4E:B1:F1:0C:3B:1F:D6:B5:D6:A5:9E:57:91:41:28:5E Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34 Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34 Certificate serial: 019B71EC1636DBE5599980C6D0D77AA74568 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft Manifest number: 0D08 Signing time: Wed 31 Dec 2025 01:00:56 +0000 Manifest this update: Wed 31 Dec 2025 01:00:56 +0000 Manifest next update: Thu 01 Jan 2026 01:00:56 +0000 Files and hashes: 1: gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl (hash: //UWCb6v9U2JaFFyEADhRyUbOYDoSlHRP51K39b+HT0=) 2: gi0_EyMqvU0B6RLloJeCvIjrKZc.roa (hash: SmxwMosUzjILazIuYN/g07frRTjtu/khfxltbXPY3+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:ec:16:36:db:e5:59:99:80:c6:d0:d7:7a:a7:45:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34 Validity Not Before: Dec 31 01:00:56 2025 GMT Not After : Jan 1 01:00:56 2026 GMT Subject: CN=aa64b3664eb1f10c3b1fd6b5d6a59e579141285e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:73:ca:8b:c4:11:a7:2b:bc:14:43:02:1e:50: 2c:75:cb:65:b8:9a:a7:a3:c1:cc:10:fa:82:5d:46: 24:3b:63:49:44:87:3a:f4:be:f5:2c:cf:dd:a0:1d: 81:f7:8d:3f:af:c6:80:62:64:b9:43:c7:33:3d:55: c3:d2:79:8b:c9:c5:3a:92:99:e7:8e:ce:a2:d3:cd: 33:d6:83:e6:1e:0f:6d:a4:cd:62:3b:55:82:da:53: 29:f3:5c:ff:1a:d6:1d:ef:51:8b:3d:46:42:ac:ee: 90:14:8f:c1:95:d2:81:1e:4b:8b:d0:00:3b:1a:c8: f3:3e:58:4e:2b:8c:22:a4:45:12:d3:71:44:7b:d9: f7:5b:a6:74:ba:98:f9:e4:c1:df:b7:b0:22:79:e9: 47:ec:20:3c:71:15:89:ea:6d:c9:32:99:a8:21:ee: 15:dd:ae:20:da:9e:99:9d:42:36:b8:38:26:8f:8a: 83:02:b6:93:e4:0f:99:52:f9:d8:f5:37:cd:e1:c0: 78:9c:24:56:c3:1e:d0:fd:e6:fc:d6:bd:7e:de:9a: e3:05:2e:8f:df:28:96:10:b3:e7:70:04:bf:85:e2: 12:a3:de:53:6f:33:26:5e:0d:24:56:ab:04:28:80: d0:51:7b:4b:10:96:d6:e7:ad:3a:59:2d:60:68:3a: 2d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:64:B3:66:4E:B1:F1:0C:3B:1F:D6:B5:D6:A5:9E:57:91:41:28:5E X509v3 Authority Key Identifier: keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:60:01:e3:d6:3e:a9:1d:1d:0b:fb:a5:91:47:0f:eb:a8:51: 52:8f:29:c8:8b:6d:2b:6d:b5:a6:11:71:4e:fd:1d:32:0a:33: ed:ae:91:e1:ff:d8:6c:c3:cf:a9:3d:b6:94:30:00:0c:93:19: 43:5d:a4:00:19:33:2b:8d:91:ce:db:0e:83:78:0b:f6:38:13: 1f:d0:6a:92:5d:d4:88:04:a4:e9:c2:30:f8:b3:c1:26:b7:00: 55:5f:74:d9:b0:f0:96:22:d9:89:85:31:76:39:31:43:93:d6: 11:95:5c:5b:80:7d:ab:d8:86:98:fb:cc:c5:05:b0:78:8b:cb: e8:ba:2c:ce:42:24:77:2a:03:f3:8b:e8:62:ad:77:b5:ea:e5: dc:13:0f:3d:7a:5c:1b:99:9f:ab:c3:4e:55:29:ea:4e:cd:42: b0:bb:b5:b6:6b:91:34:84:e8:e3:f5:04:98:98:e7:f7:3f:ed: 71:cd:1d:d4:cf:3c:99:5a:28:ea:af:7d:79:1c:54:e6:3c:49: a9:46:a4:3f:d3:17:99:c0:a9:1a:f9:3b:30:c0:78:10:6b:e2: a8:d9:f0:44:b5:e9:9c:27:3d:58:58:4d:98:82:a4:3c:d4:da: 2c:6a:37:86:92:ec:50:ba:9e:2c:fc:4b:d1:e9:fa:75:3c:ac: c4:71:bf:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtx7BY22+VZmYDG0Nd6p0VoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZDFjMGI0ZWYwOTBjNDRkNzhiN2NjYjBiZjcyZjA5ZDA4 MzFmMzQwHhcNMjUxMjMxMDEwMDU2WhcNMjYwMTAxMDEwMDU2WjAzMTEwLwYDVQQD EyhhYTY0YjM2NjRlYjFmMTBjM2IxZmQ2YjVkNmE1OWU1NzkxNDEyODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HPKi8QRpyu8FEMCHlAsdctluJqn o8HMEPqCXUYkO2NJRIc69L71LM/doB2B940/r8aAYmS5Q8czPVXD0nmLycU6kpnn js6i080z1oPmHg9tpM1iO1WC2lMp81z/GtYd71GLPUZCrO6QFI/BldKBHkuL0AA7 GsjzPlhOK4wipEUS03FEe9n3W6Z0upj55MHft7AieelH7CA8cRWJ6m3JMpmoIe4V 3a4g2p6ZnUI2uDgmj4qDAraT5A+ZUvnY9TfN4cB4nCRWwx7Q/eb81r1+3prjBS6P 3yiWELPncAS/heISo95TbzMmXg0kVqsEKIDQUXtLEJbW5606WS1gaDot7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpks2ZOsfEMOx/WtdalnleRQSheMB8GA1UdIwQY MBaAFIDRwLTvCQxE14t8ywv3LwnQgx80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9kZTY0ZjctMzlkOS00YmJkLWIwMjMt YmVkY2JjNWEwMTc0LzEvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9kZTY0ZjctMzlkOS00YmJkLWIwMjMtYmVkY2JjNWEwMTc0 LzEvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2AB49Y+ qR0dC/ulkUcP66hRUo8pyIttK221phFxTv0dMgoz7a6R4f/YbMPPqT22lDAADJMZ Q12kABkzK42RztsOg3gL9jgTH9Bqkl3UiASk6cIw+LPBJrcAVV902bDwliLZiYUx djkxQ5PWEZVcW4B9q9iGmPvMxQWweIvL6LoszkIkdyoD84voYq13terl3BMPPXpc G5mfq8NOVSnqTs1CsLu1tmuRNITo4/UEmJjn9z/tcc0d1M88mVoo6q99eRxU5jxJ qUakP9MXmcCpGvk7MMB4EGviqNnwRLXpnCc9WFhNmIKkPNTaLGo3hpLsULqeLPxL 0en6dTysxHG/9A== -----END CERTIFICATE-----Generated at Wed Dec 31 03:27:01 2025 by rpki-client