This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft File: gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft (raw, json) Hash identifier: ryswRHE57TeA5Xg9WGQg04EEnJ/VpIoq3ON6aZQ6pKw= Subject key identifier: 2A:D7:8A:AA:74:2A:DF:C2:39:F5:39:A4:3E:84:49:3E:15:30:0B:14 Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8 Certificate issuer: /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8 Certificate serial: 019B4FCEB126A74AECA690A1A9C92B281216 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft Manifest number: 1669 Signing time: Wed 24 Dec 2025 10:01:44 +0000 Manifest this update: Wed 24 Dec 2025 10:01:44 +0000 Manifest next update: Thu 25 Dec 2025 10:01:44 +0000 Files and hashes: 1: 0SxQkYZEnXKkmz-KfHE_ng4dFf4.roa (hash: MC7o/cX4pPB7bvBIXoJXRXlWLcMZbnHjOKF7ORQIp5Q=) 2: FIcaLo5Lkwo711cOwWKooXhLRhY.roa (hash: ouIyYU8i1Bc12QJ63/vjQssVyB/lGTByw+wFjtilEFk=) 3: gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl (hash: kMV95WETaU/8pLfSJp/M+dfzM6W/stFeatUWMrvIyjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:b1:26:a7:4a:ec:a6:90:a1:a9:c9:2b:28:12:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8 Validity Not Before: Dec 24 10:01:44 2025 GMT Not After : Dec 25 10:01:44 2025 GMT Subject: CN=2ad78aaa742adfc239f539a43e84493e15300b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6d:1f:b8:22:9d:84:85:73:37:41:a4:88:54: b3:20:17:ba:a9:66:64:b8:6a:89:03:29:4d:78:99: d5:7f:90:73:f2:55:f1:88:8c:d5:19:51:31:59:f6: 09:eb:c2:75:e3:c8:5c:a7:51:04:a2:67:d5:24:31: 68:68:e1:61:14:de:ef:69:23:e5:f2:88:8b:ba:b0: 34:3f:77:96:be:79:0c:c4:06:5a:48:0c:8c:42:5a: b1:ee:ac:a0:cf:5d:ba:62:79:a6:23:d2:52:76:69: 8e:27:8d:8a:f4:b5:1f:36:f0:22:74:3a:50:66:3d: fb:03:56:b0:64:d6:16:fa:c1:0e:d1:dd:b3:4b:b1: c0:10:39:26:80:54:02:5a:03:42:80:e3:aa:4f:80: 2c:8b:db:b6:5c:e0:a9:1b:3d:9e:8a:e2:3d:92:09: 4a:42:e7:a2:11:af:98:ee:0a:be:db:50:48:69:a5: 8a:59:8e:e4:95:2f:c8:4c:7d:07:74:7e:64:1c:c3: d9:fd:84:5b:c7:0e:21:b6:b9:79:3d:5e:d4:3f:18: 1b:2f:63:55:d1:69:00:a1:55:8e:24:a0:38:b7:0f: 1b:3d:f6:a2:7d:b3:4e:ab:86:b0:b2:69:cf:5c:9a: a4:02:65:78:9d:44:f6:36:3a:3c:25:d2:32:63:15: 66:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D7:8A:AA:74:2A:DF:C2:39:F5:39:A4:3E:84:49:3E:15:30:0B:14 X509v3 Authority Key Identifier: keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:9d:bc:f7:be:57:75:88:d8:d7:af:e7:c3:dc:e5:3a:ad:8e: f0:2b:9f:4a:36:ff:25:0a:5d:e5:ba:75:71:b7:31:f5:fb:fc: 90:80:32:ea:07:63:e3:df:ad:4d:fd:05:69:71:c0:51:21:18: cc:7a:a8:bc:90:68:84:10:39:ec:9b:35:b9:48:30:d8:ad:60: 69:97:ce:e7:87:dd:e4:7e:45:f0:3b:f9:f1:24:a2:a7:fd:b7: f9:11:15:88:29:f3:79:e1:d6:1c:1d:10:bf:02:32:99:4f:84: cf:84:cb:c0:a8:8a:f7:76:b2:c4:43:29:d4:00:48:b6:73:01: d6:c9:91:79:c9:e7:21:f2:68:b2:74:ea:e2:f8:54:ac:e4:4c: 1a:2e:3e:f2:9d:f2:36:e9:f6:ea:70:21:43:68:ec:40:4c:65: bc:f0:03:a5:64:29:54:b1:f4:9b:b9:a0:ae:d6:a4:28:34:ad: 63:15:66:21:f5:d1:e5:58:42:a4:e0:40:8e:a1:8a:e2:a0:31: 5a:05:e4:2e:71:04:10:22:52:a2:42:d8:4a:7e:77:91:87:88: 0f:d3:be:4f:9b:f8:fa:30:07:18:e1:03:64:60:ac:83:fe:b2: 18:40:eb:8c:7a:dc:29:a0:ac:f1:50:de:db:10:09:0f:58:cc: 69:3e:6e:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzrEmp0rsppChqckrKBIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZGYwY2JkZDU1NzFlNTgwZWE1N2UxOGE0NDBjYTJiZWE0 ODA2ZjgwHhcNMjUxMjI0MTAwMTQ0WhcNMjUxMjI1MTAwMTQ0WjAzMTEwLwYDVQQD EygyYWQ3OGFhYTc0MmFkZmMyMzlmNTM5YTQzZTg0NDkzZTE1MzAwYjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G0fuCKdhIVzN0GkiFSzIBe6qWZk uGqJAylNeJnVf5Bz8lXxiIzVGVExWfYJ68J148hcp1EEomfVJDFoaOFhFN7vaSPl 8oiLurA0P3eWvnkMxAZaSAyMQlqx7qygz126YnmmI9JSdmmOJ42K9LUfNvAidDpQ Zj37A1awZNYW+sEO0d2zS7HAEDkmgFQCWgNCgOOqT4Asi9u2XOCpGz2eiuI9kglK QueiEa+Y7gq+21BIaaWKWY7klS/ITH0HdH5kHMPZ/YRbxw4htrl5PV7UPxgbL2NV 0WkAoVWOJKA4tw8bPfaifbNOq4awsmnPXJqkAmV4nUT2Njo8JdIyYxVm+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrXiqp0Kt/COfU5pD6EST4VMAsUMB8GA1UdIwQY MBaAFIDfDL3VVx5YDqV+GKRAyivqSAb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ044TXZkVlhIbGdPcFg0WXBFREtLLXBJQnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85MjkxZTEtNTdjYS00YzI5LTllOTMt YmQ3NWVmOWI1Nzk4LzEvZ044TXZkVlhIbGdPcFg0WXBFREtLLXBJQnZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85MjkxZTEtNTdjYS00YzI5LTllOTMtYmQ3NWVmOWI1Nzk4 LzEvZ044TXZkVlhIbGdPcFg0WXBFREtLLXBJQnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJ28975X dYjY16/nw9zlOq2O8CufSjb/JQpd5bp1cbcx9fv8kIAy6gdj49+tTf0FaXHAUSEY zHqovJBohBA57Js1uUgw2K1gaZfO54fd5H5F8Dv58SSip/23+REViCnzeeHWHB0Q vwIymU+Ez4TLwKiK93ayxEMp1ABItnMB1smRecnnIfJosnTq4vhUrORMGi4+8p3y Nun26nAhQ2jsQExlvPADpWQpVLH0m7mgrtakKDStYxVmIfXR5VhCpOBAjqGK4qAx WgXkLnEEECJSokLYSn53kYeID9O+T5v4+jAHGOEDZGCsg/6yGEDrjHrcKaCs8VDe 2xAJD1jMaT5ugA== -----END CERTIFICATE-----Generated at Wed Dec 24 13:37:18 2025 by rpki-client