This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json) Hash identifier: 28senr3rf6xNcn7sQ3oa+8FmGYe5rtzZtZD/j4lp0zU= Subject key identifier: 0C:69:21:57:64:9B:F3:BE:B8:73:88:2A:AF:F9:85:70:FF:C1:F6:C7 Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63 Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63 Certificate serial: 019B3DC7DFE01FCBCB39C535B24B75A1199E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft Manifest number: 0A13 Signing time: Sat 20 Dec 2025 22:01:07 +0000 Manifest this update: Sat 20 Dec 2025 22:01:07 +0000 Manifest next update: Sun 21 Dec 2025 22:01:07 +0000 Files and hashes: 1: 7NcD3v3bTwDr9ocN3-x63vupO1g.roa (hash: HvV0nfI75827YQCzKbYVEWTCzA0c8O1WIDzuDKlaH5w=) 2: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: 0trdp8cYCKahATn8/2DFwW//a+2UtqC4Uw+eOUA0gbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:df:e0:1f:cb:cb:39:c5:35:b2:4b:75:a1:19:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63 Validity Not Before: Dec 20 22:01:07 2025 GMT Not After : Dec 21 22:01:07 2025 GMT Subject: CN=0c692157649bf3beb873882aaff98570ffc1f6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:03:39:cf:d7:b6:b4:97:2c:53:cd:3c:0e:a2: f3:c7:ad:00:4d:5e:a9:ed:2d:69:6b:57:6a:b3:b4: ea:9e:f6:0a:ba:f6:31:ac:3f:2d:57:61:46:8f:5c: ec:bd:12:4b:83:0b:27:4f:2a:00:e9:e8:9e:f0:79: 15:f1:a6:f6:e1:67:1d:1d:a6:33:5d:d0:c3:2e:8d: 01:2c:3b:53:8e:83:84:d9:7f:42:67:b3:01:af:d9: a9:8a:e8:89:50:1f:cb:10:e8:78:cd:2f:70:c0:cd: 3a:28:c8:1b:11:e5:be:84:70:0e:d4:33:e2:2c:eb: 0d:47:71:39:c5:61:0b:80:76:ea:5f:9d:69:72:7c: b7:bf:fe:0b:dc:76:a1:4b:56:46:b4:8a:1b:00:7f: 11:54:eb:9c:98:8c:07:b7:bd:96:65:2b:0b:c0:85: 06:95:48:32:81:6a:82:e4:dc:28:2f:26:a2:d9:76: 13:9f:85:9a:61:b0:82:49:3c:4a:64:3d:b3:c9:34: 2c:78:d9:34:cf:41:0e:33:70:26:b4:40:78:ce:77: 2e:05:58:c9:01:b7:28:07:14:e3:86:b5:78:79:75: 1f:c9:39:0e:00:7c:26:b0:39:17:d9:b0:d9:94:72: 40:26:dd:0d:e3:08:5b:74:61:69:af:8a:a4:28:6c: 51:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:69:21:57:64:9B:F3:BE:B8:73:88:2A:AF:F9:85:70:FF:C1:F6:C7 X509v3 Authority Key Identifier: keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:fd:17:10:20:36:80:91:49:d4:81:f7:54:b4:3e:94:7f:9e: 74:07:89:17:5f:22:2e:f5:bb:75:cc:3d:1d:5a:c1:8c:73:00: 93:04:bb:5c:eb:19:a2:85:78:dc:9c:4e:4f:31:54:30:99:86: 48:8c:ee:83:71:cc:cd:1a:58:4e:76:cd:87:eb:f0:49:5a:b9: b6:38:a8:bb:52:8e:2b:d6:41:29:48:84:53:ab:ec:ba:71:e5: ca:42:f6:11:41:56:37:c2:1d:fd:d0:28:f2:4c:3c:f7:f2:e7: 1c:8c:12:c4:8c:0b:fd:dd:16:e9:1c:2c:67:ec:0a:63:6f:42: 2f:dd:bc:de:00:67:0c:8d:b2:ae:fc:30:9d:be:0c:96:24:ac: 82:01:9e:ce:a2:88:20:0b:9d:b7:91:5c:34:35:47:6e:cb:7b: 99:ac:45:fd:22:ed:99:60:96:6d:65:01:37:ce:91:99:94:bc: 2f:a0:ac:31:4b:1d:4d:88:91:ae:35:3c:7e:c9:ec:a3:ea:58: 5e:24:af:f5:23:f6:d1:04:37:4e:fd:a4:c9:39:cd:25:de:f6: b3:10:03:89:89:61:f0:a6:8c:ae:d7:bd:40:bc:11:1c:9e:fb: 0b:51:f4:fd:4c:3d:4f:38:c9:db:58:da:4b:7c:a6:d5:65:30: 9b:40:49:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x9/gH8vLOcU1skt1oRmeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ODM2MDRmMDgzZTU4YzNjZDE5ZDM5NDgwYmFhYWRmMzhh MTliNjMwHhcNMjUxMjIwMjIwMTA3WhcNMjUxMjIxMjIwMTA3WjAzMTEwLwYDVQQD EygwYzY5MjE1NzY0OWJmM2JlYjg3Mzg4MmFhZmY5ODU3MGZmYzFmNmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wM5z9e2tJcsU808DqLzx60ATV6p 7S1pa1dqs7TqnvYKuvYxrD8tV2FGj1zsvRJLgwsnTyoA6eie8HkV8ab24WcdHaYz XdDDLo0BLDtTjoOE2X9CZ7MBr9mpiuiJUB/LEOh4zS9wwM06KMgbEeW+hHAO1DPi LOsNR3E5xWELgHbqX51pcny3v/4L3HahS1ZGtIobAH8RVOucmIwHt72WZSsLwIUG lUgygWqC5NwoLyai2XYTn4WaYbCCSTxKZD2zyTQseNk0z0EOM3AmtEB4zncuBVjJ AbcoBxTjhrV4eXUfyTkOAHwmsDkX2bDZlHJAJt0N4whbdGFpr4qkKGxRlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxpIVdkm/O+uHOIKq/5hXD/wfbHMB8GA1UdIwQY MBaAFBmDYE8IPljDzRnTlIC6qt84oZtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85YWM4NmEtODVlZC00YTFjLTg3M2Yt NzUyOTA1MzMwMzkyLzEvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS85YWM4NmEtODVlZC00YTFjLTg3M2YtNzUyOTA1MzMwMzky LzEvR1lOZ1R3Zy1XTVBOR2RPVWdMcXEzemlobTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwv0XECA2 gJFJ1IH3VLQ+lH+edAeJF18iLvW7dcw9HVrBjHMAkwS7XOsZooV43JxOTzFUMJmG SIzug3HMzRpYTnbNh+vwSVq5tjiou1KOK9ZBKUiEU6vsunHlykL2EUFWN8Id/dAo 8kw89/LnHIwSxIwL/d0W6RwsZ+wKY29CL9283gBnDI2yrvwwnb4MliSsggGezqKI IAudt5FcNDVHbst7maxF/SLtmWCWbWUBN86RmZS8L6CsMUsdTYiRrjU8fsnso+pY XiSv9SP20QQ3Tv2kyTnNJd72sxADiYlh8KaMrte9QLwRHJ77C1H0/Uw9TzjJ21ja S3ym1WUwm0BJbA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:22 2025 by rpki-client