This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json) Hash identifier: IetruffNEGo2+WP3+X+o+KOAzNRrvOaGbiGMnbKP/Zs= Subject key identifier: 4D:9B:01:68:2C:FB:F9:AF:B6:A0:DB:E3:B2:30:54:FD:9D:73:F4:05 Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e Certificate serial: 019B3CEC7CC891B0E678A2B07852BBD1BCEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 18:01:29 +0000 Manifest this update: Sat 20 Dec 2025 18:01:29 +0000 Manifest next update: Sun 21 Dec 2025 18:01:29 +0000 Files and hashes: 1: 3BCTdWPdAwRCl8UX_2fwNUPfXDk.roa (hash: auwwYg2jmDefujiM9dhtcg3qGUezv1eAv9OXRPuNl5Q=) 2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: mWIbw50FivFXHxuhKBCJtkPgBsDCpZmJDeGC3J6suf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:7c:c8:91:b0:e6:78:a2:b0:78:52:bb:d1:bc:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e Validity Not Before: Dec 20 18:01:29 2025 GMT Not After : Dec 21 18:01:29 2025 GMT Subject: CN=4d9b01682cfbf9afb6a0dbe3b23054fd9d73f405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ad:ec:aa:1a:bf:e1:15:f9:52:3e:20:4c:f9: 60:07:67:58:28:f4:f4:ae:6c:bd:95:38:b3:ae:a4: d9:47:b4:90:a4:b3:75:8f:8f:f9:61:b8:c8:f6:a4: fa:61:5a:a6:5a:5d:a6:61:26:46:f2:62:1c:85:65: 16:ef:7f:b2:ef:c4:c5:d3:40:70:df:35:eb:3e:66: 7a:0f:6c:c5:8f:4b:ac:b1:7b:4e:de:0e:df:6f:21: 62:46:4e:79:c4:50:23:60:01:d7:71:38:56:6f:0e: 30:3c:98:ea:f8:90:20:fd:b8:41:2d:b5:2c:e2:45: 91:8d:0e:c0:41:2f:7c:8a:bb:37:d0:c9:4b:6e:2c: 5a:6c:63:e5:0c:36:c7:53:41:81:09:b3:4d:15:87: 75:6c:c3:52:99:44:ed:ed:fa:bd:b1:42:eb:db:c1: 63:72:57:3e:7d:10:c9:7a:3e:31:8f:35:a5:67:00: a4:b5:bf:d1:a0:8a:d9:f8:05:b5:ad:bd:3e:28:49: 45:24:25:45:a3:ba:7f:2a:7b:55:5c:fd:c1:a4:e9: da:69:f2:d6:ae:13:04:cb:1d:74:c1:0b:72:75:c1: e9:b6:b4:fc:9a:e5:ca:39:20:dc:98:d5:56:3f:2f: 1b:6d:1c:d0:e3:8e:bc:0a:43:ca:b9:6d:1f:73:bb: 3e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9B:01:68:2C:FB:F9:AF:B6:A0:DB:E3:B2:30:54:FD:9D:73:F4:05 X509v3 Authority Key Identifier: keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:18:5d:ee:f0:0d:a4:fe:67:ee:9e:69:c7:40:6f:4f:7b:4f: e8:d4:6c:a3:3c:32:63:1b:41:4b:3f:bd:77:dd:45:cc:f7:40: 2c:25:cd:a2:e8:71:31:f1:00:92:24:41:e6:a0:ae:3d:dd:1a: 78:b6:29:b4:e0:bc:0b:cc:28:20:03:cb:a4:75:fa:95:bd:a1: 2c:0e:08:52:75:6d:8d:1b:c4:e1:fe:28:52:9a:c9:3c:00:10: fb:5f:ce:31:9f:aa:d0:e8:f1:6f:56:3f:bb:ba:1e:37:c2:87: f7:bc:3f:db:97:69:77:37:c3:2f:e9:ee:f9:96:b2:39:01:87: 73:1d:42:4b:17:33:71:ff:d7:fb:30:6d:53:e0:8f:24:5e:e5: 4a:d7:ef:8e:93:70:ea:6c:7e:51:68:8f:8c:1f:5f:cc:ff:93: 88:68:4d:d8:1e:aa:5a:53:49:53:09:bc:15:4c:cb:8a:ef:6e: 3c:50:f9:3a:e0:3e:1e:b3:fa:d8:0c:16:54:23:9c:c6:2a:32: d2:1b:a2:f3:7f:78:be:5e:2a:4d:37:c3:e9:6d:c6:1e:54:6c: 7e:0e:06:34:c6:9f:7c:53:86:13:c5:ff:d1:07:6c:93:11:33: c2:b8:9e:a4:e0:ee:c5:3a:a0:6e:5c:d6:67:73:92:a6:86:de: 83:af:17:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87HzIkbDmeKKweFK70bzrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNWMwYzlmMjM3NjNjMDM3YmQ2ODg0NzQ1Y2Y4NDY0ZDJk YjY2M2UwHhcNMjUxMjIwMTgwMTI5WhcNMjUxMjIxMTgwMTI5WjAzMTEwLwYDVQQD Eyg0ZDliMDE2ODJjZmJmOWFmYjZhMGRiZTNiMjMwNTRmZDlkNzNmNDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK3sqhq/4RX5Uj4gTPlgB2dYKPT0 rmy9lTizrqTZR7SQpLN1j4/5YbjI9qT6YVqmWl2mYSZG8mIchWUW73+y78TF00Bw 3zXrPmZ6D2zFj0ussXtO3g7fbyFiRk55xFAjYAHXcThWbw4wPJjq+JAg/bhBLbUs 4kWRjQ7AQS98irs30MlLbixabGPlDDbHU0GBCbNNFYd1bMNSmUTt7fq9sULr28Fj clc+fRDJej4xjzWlZwCktb/RoIrZ+AW1rb0+KElFJCVFo7p/KntVXP3BpOnaafLW rhMEyx10wQtydcHptrT8muXKOSDcmNVWPy8bbRzQ4468CkPKuW0fc7s+8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2bAWgs+/mvtqDb47IwVP2dc/QFMB8GA1UdIwQY MBaAFIBcDJ8jdjwDe9aIR0XPhGTS22Y+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MjQ3ZDUtZTI4My00YjI5LWFjZmQt ODJlMWUyMDA1MDRlLzEvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83MjQ3ZDUtZTI4My00YjI5LWFjZmQtODJlMWUyMDA1MDRl LzEvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBhd7vAN pP5n7p5px0BvT3tP6NRsozwyYxtBSz+9d91FzPdALCXNouhxMfEAkiRB5qCuPd0a eLYptOC8C8woIAPLpHX6lb2hLA4IUnVtjRvE4f4oUprJPAAQ+1/OMZ+q0Ojxb1Y/ u7oeN8KH97w/25dpdzfDL+nu+ZayOQGHcx1CSxczcf/X+zBtU+CPJF7lStfvjpNw 6mx+UWiPjB9fzP+TiGhN2B6qWlNJUwm8FUzLiu9uPFD5OuA+HrP62AwWVCOcxioy 0hui8394vl4qTTfD6W3GHlRsfg4GNMaffFOGE8X/0QdskxEzwriepODuxTqgblzW Z3OSpobeg68XcA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:02:26 2025 by rpki-client