This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json) Hash identifier: +ARCEdTQvF28hgI6ys9ThKisjhdO4s567HPaksfFT74= Subject key identifier: 9D:F8:CF:81:D4:45:39:D6:69:3D:07:2A:7B:40:EE:D9:96:74:41:95 Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63 Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63 Certificate serial: 019B68449AE1015E560BE7F0B24867A0381A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft Manifest number: 0A29 Signing time: Mon 29 Dec 2025 04:01:25 +0000 Manifest this update: Mon 29 Dec 2025 04:01:25 +0000 Manifest next update: Tue 30 Dec 2025 04:01:25 +0000 Files and hashes: 1: 7NcD3v3bTwDr9ocN3-x63vupO1g.roa (hash: HvV0nfI75827YQCzKbYVEWTCzA0c8O1WIDzuDKlaH5w=) 2: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: fcER8PSpzVDP6vj1TumlZq8JgMvMwWNIl8aNuk8Qv54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 04:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:44:9a:e1:01:5e:56:0b:e7:f0:b2:48:67:a0:38:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63 Validity Not Before: Dec 29 04:01:25 2025 GMT Not After : Dec 30 04:01:25 2025 GMT Subject: CN=9df8cf81d44539d6693d072a7b40eed996744195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3e:12:96:91:ac:a0:85:df:da:f4:cb:b4:ad: a9:53:c3:3f:c1:76:ac:28:dc:62:e0:b4:02:d5:d9: ad:7b:f3:9e:7e:4e:3d:d8:46:b8:34:0a:64:0d:b6: 83:66:bd:78:80:67:06:67:63:00:cb:7a:2b:09:41: 5f:d1:bc:76:c8:35:09:20:eb:a1:7b:f1:d5:ba:0e: 42:84:71:c8:f8:94:b4:b2:a0:fd:d6:cd:39:01:ca: 64:40:80:30:a5:ba:f6:02:1a:32:ea:db:50:53:fb: a2:81:61:5b:78:d0:29:96:eb:28:03:25:27:f6:76: 61:88:a2:5d:33:ee:27:a8:c0:e5:3a:35:cc:1e:66: 1a:33:36:a0:84:5f:b2:75:61:09:47:20:ee:b0:cb: 1a:01:31:a8:d7:be:17:d7:7b:49:0b:98:87:f1:85: 02:aa:61:cc:ec:63:5e:9e:0f:2f:a3:4f:3c:a2:9a: 28:ad:6b:3c:23:a3:fc:7b:ae:2c:da:03:7a:55:96: ec:9b:40:49:3d:79:58:cd:37:81:1e:0d:01:60:7b: fd:63:98:d0:3f:94:02:91:68:1e:45:9c:25:82:51: 5c:1a:6d:9d:04:a2:78:8a:7d:7a:df:73:81:88:d1: e4:9f:51:be:de:50:71:ce:66:28:d0:e9:b2:a3:72: bc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F8:CF:81:D4:45:39:D6:69:3D:07:2A:7B:40:EE:D9:96:74:41:95 X509v3 Authority Key Identifier: keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:54:b1:99:99:5d:35:5b:b7:21:43:ed:a9:95:59:11:46:e2: b7:df:42:e5:06:57:e9:f1:c4:ec:24:87:1e:98:a2:10:db:5f: 54:0b:a8:23:b9:0c:a5:6a:73:5f:9c:03:55:6c:9e:2b:1d:0a: 1b:21:d5:49:26:ab:02:29:ff:6e:44:7a:20:8c:15:44:7f:22: 75:5d:cf:0d:0e:ae:13:0e:49:64:a7:66:c2:30:e8:ee:59:1f: 2e:cd:b7:17:7b:00:1e:e4:5a:cb:22:33:b3:c8:63:e3:f2:96: 7e:f0:50:1d:8b:33:78:32:5b:cb:57:c0:00:95:fc:a7:b6:34: d4:ae:69:c2:fe:95:12:35:88:ab:3c:72:92:4b:1d:9a:7b:63: 40:1d:7c:cf:c5:78:23:6d:c7:fa:46:f0:9b:38:f3:ac:cd:d5: 1c:32:ac:ca:70:b2:6e:56:56:39:3e:3d:9f:83:6b:36:e1:49: 46:66:4f:d6:32:6b:60:07:3b:68:b9:09:85:58:1e:7b:77:c3: 09:8d:51:81:b0:af:e1:e0:54:86:b2:ba:e2:39:43:df:40:51: 8f:bc:c3:1b:fe:7b:04:9d:2a:b4:22:20:8c:17:8e:1b:99:a3: 3e:0b:d8:3b:e5:fe:bd:fd:0d:53:b1:3e:10:21:b5:50:58:e1: 1a:6b:6f:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoRJrhAV5WC+fwskhnoDgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ODM2MDRmMDgzZTU4YzNjZDE5ZDM5NDgwYmFhYWRmMzhh MTliNjMwHhcNMjUxMjI5MDQwMTI1WhcNMjUxMjMwMDQwMTI1WjAzMTEwLwYDVQQD Eyg5ZGY4Y2Y4MWQ0NDUzOWQ2NjkzZDA3MmE3YjQwZWVkOTk2NzQ0MTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz4SlpGsoIXf2vTLtK2pU8M/wXas KNxi4LQC1dmte/Oefk492Ea4NApkDbaDZr14gGcGZ2MAy3orCUFf0bx2yDUJIOuh e/HVug5ChHHI+JS0sqD91s05AcpkQIAwpbr2Ahoy6ttQU/uigWFbeNAplusoAyUn 9nZhiKJdM+4nqMDlOjXMHmYaMzaghF+ydWEJRyDusMsaATGo174X13tJC5iH8YUC qmHM7GNeng8vo088opoorWs8I6P8e64s2gN6VZbsm0BJPXlYzTeBHg0BYHv9Y5jQ P5QCkWgeRZwlglFcGm2dBKJ4in1633OBiNHkn1G+3lBxzmYo0Omyo3K8mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ34z4HURTnWaT0HKntA7tmWdEGVMB8GA1UdIwQY MBaAFBmDYE8IPljDzRnTlIC6qt84oZtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85YWM4NmEtODVlZC00YTFjLTg3M2Yt NzUyOTA1MzMwMzkyLzEvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS85YWM4NmEtODVlZC00YTFjLTg3M2YtNzUyOTA1MzMwMzky LzEvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVSxmZld NVu3IUPtqZVZEUbit99C5QZX6fHE7CSHHpiiENtfVAuoI7kMpWpzX5wDVWyeKx0K GyHVSSarAin/bkR6IIwVRH8idV3PDQ6uEw5JZKdmwjDo7lkfLs23F3sAHuRayyIz s8hj4/KWfvBQHYszeDJby1fAAJX8p7Y01K5pwv6VEjWIqzxykksdmntjQB18z8V4 I23H+kbwmzjzrM3VHDKsynCyblZWOT49n4NrNuFJRmZP1jJrYAc7aLkJhVgee3fD CY1RgbCv4eBUhrK64jlD30BRj7zDG/57BJ0qtCIgjBeOG5mjPgvYO+X+vf0NU7E+ ECG1UFjhGmtvRA== -----END CERTIFICATE-----Generated at Mon Dec 29 08:27:08 2025 by rpki-client