This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json) Hash identifier: dky7EqrQtSi3CYgSf4TpZk7vpplhPIh4TtZnaPvROrw= Subject key identifier: 8A:93:4B:D7:18:46:44:5F:32:34:C6:E7:FA:F0:2E:B5:B4:1F:76:C1 Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f Certificate serial: 019B4C95D9050D966100F4CAA76E3D815A5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft Manifest number: 06E1 Signing time: Tue 23 Dec 2025 19:00:47 +0000 Manifest this update: Tue 23 Dec 2025 19:00:47 +0000 Manifest next update: Wed 24 Dec 2025 19:00:47 +0000 Files and hashes: 1: 49O5pgx96ZytOrM35WIfPYDCGFk.roa (hash: tpMUocM9+z+XdoxQXtS3c6GKQdwXFsRGvoi0LW0ME3I=) 2: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: uUFLNvNViRS1InZmTKZNs2rmiQoSoi9iCbXikaNd0bw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:95:d9:05:0d:96:61:00:f4:ca:a7:6e:3d:81:5a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f Validity Not Before: Dec 23 19:00:47 2025 GMT Not After : Dec 24 19:00:47 2025 GMT Subject: CN=8a934bd71846445f3234c6e7faf02eb5b41f76c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4d:cb:84:64:99:81:7b:40:c6:bf:87:d9:3b: 13:56:55:a4:1a:27:29:d9:88:76:68:f9:57:ad:f6: cb:fe:b7:ea:35:14:c1:9a:89:00:11:b8:52:4b:51: 6d:b6:9a:89:9e:60:f3:f5:12:1c:b5:f8:46:0c:83: 03:d9:93:72:55:a0:d6:45:76:82:71:55:87:fc:ee: 7a:8a:a0:ad:2e:33:49:c8:6d:9c:36:8e:a9:86:93: 7a:a7:06:58:92:bd:d5:5c:27:2d:97:15:2f:bc:b3: c1:8d:de:20:90:70:3d:ff:71:86:f6:a4:47:68:b0: 57:13:fd:b2:9b:79:b6:f3:93:ee:0a:4c:f7:e9:72: 40:ba:dd:ef:f8:56:cb:14:a5:4a:4a:42:b5:c1:50: 7f:1d:9b:50:0f:a1:9a:ed:02:7a:b1:f6:23:42:59: 96:39:5e:18:46:1b:05:b0:d6:89:7e:1e:de:e0:7c: 57:63:1c:84:fa:46:43:f7:8a:44:51:9b:de:55:54: e0:6b:a3:42:6f:30:b2:6b:e4:60:23:97:5b:bd:03: e2:70:f7:83:5a:46:47:52:f8:06:e6:5e:e0:76:a6: 37:d7:da:f0:ec:7c:f7:0e:7e:77:ca:2f:49:a5:da: 6a:2c:53:ae:c8:e3:52:e5:a1:0b:a5:a5:d6:05:cc: c9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:93:4B:D7:18:46:44:5F:32:34:C6:E7:FA:F0:2E:B5:B4:1F:76:C1 X509v3 Authority Key Identifier: keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:75:34:bc:c8:fb:1a:45:6f:31:63:55:43:8b:14:97:27:53: c3:9a:a7:09:61:e0:69:ea:36:80:f9:78:b1:42:9b:96:57:78: bb:3f:da:6a:9f:c5:89:64:a6:df:c6:28:e5:df:ee:af:30:27: 2e:dc:7f:dc:cf:c4:07:ef:77:59:5d:81:ce:f2:80:78:a3:10: d2:b3:a5:94:4c:2e:5d:5d:96:0d:da:61:2c:99:6d:fd:78:35: cb:82:65:dc:c0:f2:58:2f:7e:a2:81:4a:a1:0d:03:c9:d4:1a: a9:ec:c6:8a:67:84:74:e5:9d:ec:f8:89:1c:ca:45:b7:6b:5c: e6:35:f7:03:17:7e:0f:b6:c7:98:76:0c:16:8e:e4:61:e0:b9: 8f:6d:24:f1:89:f3:20:23:4d:0a:ee:e8:75:02:22:49:3d:84: a8:be:45:00:6c:c1:43:1d:76:91:65:e0:6e:ec:4e:78:cf:66: 8c:33:03:55:a8:e4:d5:bc:48:a4:62:bc:f8:16:e5:5b:fd:0a: 68:1d:07:dd:5b:8f:5e:a9:33:2e:ff:8e:6e:cd:61:b0:5d:26: a3:5c:49:fb:74:ee:da:4d:f7:c3:f8:f7:3e:5b:d1:a6:c2:a6: fa:b5:04:db:93:58:61:c5:01:b4:7c:95:f8:60:d2:fa:e4:1d: ae:8d:c6:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMldkFDZZhAPTKp249gVpcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZDcyNTM3Y2M1NGFjMTBiNGFiZmFjYzcyYzFiNzU0YzE3 MWFmOGYwHhcNMjUxMjIzMTkwMDQ3WhcNMjUxMjI0MTkwMDQ3WjAzMTEwLwYDVQQD Eyg4YTkzNGJkNzE4NDY0NDVmMzIzNGM2ZTdmYWYwMmViNWI0MWY3NmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5k3LhGSZgXtAxr+H2TsTVlWkGicp 2Yh2aPlXrfbL/rfqNRTBmokAEbhSS1FttpqJnmDz9RIctfhGDIMD2ZNyVaDWRXaC cVWH/O56iqCtLjNJyG2cNo6phpN6pwZYkr3VXCctlxUvvLPBjd4gkHA9/3GG9qRH aLBXE/2ym3m285PuCkz36XJAut3v+FbLFKVKSkK1wVB/HZtQD6Ga7QJ6sfYjQlmW OV4YRhsFsNaJfh7e4HxXYxyE+kZD94pEUZveVVTga6NCbzCya+RgI5dbvQPicPeD WkZHUvgG5l7gdqY319rw7Hz3Dn53yi9JpdpqLFOuyONS5aELpaXWBczJ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqTS9cYRkRfMjTG5/rwLrW0H3bBMB8GA1UdIwQY MBaAFIDXJTfMVKwQtKv6zHLBt1TBca+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ05jbE44eFVyQkMwcV9yTWNzRzNWTUZ4cjQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMDBmYTQtNDU3OC00YWU4LTlmZmIt MmVkMjY5Mzg0YTc0LzEvZ05jbE44eFVyQkMwcV9yTWNzRzNWTUZ4cjQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8yMDBmYTQtNDU3OC00YWU4LTlmZmItMmVkMjY5Mzg0YTc0 LzEvZ05jbE44eFVyQkMwcV9yTWNzRzNWTUZ4cjQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3U0vMj7 GkVvMWNVQ4sUlydTw5qnCWHgaeo2gPl4sUKblld4uz/aap/FiWSm38Yo5d/urzAn Ltx/3M/EB+93WV2BzvKAeKMQ0rOllEwuXV2WDdphLJlt/Xg1y4Jl3MDyWC9+ooFK oQ0DydQaqezGimeEdOWd7PiJHMpFt2tc5jX3Axd+D7bHmHYMFo7kYeC5j20k8Ynz ICNNCu7odQIiST2EqL5FAGzBQx12kWXgbuxOeM9mjDMDVajk1bxIpGK8+BblW/0K aB0H3VuPXqkzLv+Obs1hsF0mo1xJ+3Tu2k33w/j3PlvRpsKm+rUE25NYYcUBtHyV +GDS+uQdro3GkA== -----END CERTIFICATE-----Generated at Wed Dec 24 03:32:05 2025 by rpki-client