This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft File: gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft (raw, json) Hash identifier: AQYJxpIqqH4o+nB7GqS2dW1T9umpY0hiW9w2XhTjnu0= Subject key identifier: 36:D3:32:E8:C5:B1:AD:22:92:19:D0:1F:00:DF:74:1E:DE:CA:4F:89 Authority key identifier: 81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E Certificate issuer: /CN=81523888eed5311f92a16615ef2cf0175c6fe41e Certificate serial: 019B5260CD3AC418E186F36E65CCBE4E2A43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft Manifest number: 0F20 Signing time: Wed 24 Dec 2025 22:00:34 +0000 Manifest this update: Wed 24 Dec 2025 22:00:34 +0000 Manifest next update: Thu 25 Dec 2025 22:00:34 +0000 Files and hashes: 1: YTi5kVsPsdj_lVOXlLvthRcyZYk.roa (hash: yclAP/FevQD565z0O5X4lV8O1DrwrH9X8Lbd0rW1rtQ=) 2: gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl (hash: +Ht2m/l3BfWNW3y69Q+fzTv5J9GjE7R5G3K0m+Mr4rA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:60:cd:3a:c4:18:e1:86:f3:6e:65:cc:be:4e:2a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81523888eed5311f92a16615ef2cf0175c6fe41e Validity Not Before: Dec 24 22:00:34 2025 GMT Not After : Dec 25 22:00:34 2025 GMT Subject: CN=36d332e8c5b1ad229219d01f00df741edeca4f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:c8:a8:11:e3:28:fa:7c:31:bb:50:31:fe: 29:91:09:fb:28:52:ab:a6:68:50:ad:e0:3f:67:c1: 1e:17:10:e2:01:1e:f3:db:81:7f:46:18:62:e3:b8: 1e:76:f3:74:47:ae:ab:a0:25:7f:08:9a:29:2a:70: be:a1:61:09:76:6a:a1:93:f1:29:28:d8:73:e0:95: 1d:af:88:89:eb:2c:15:ab:9c:f6:44:77:65:25:9d: 1e:96:de:44:10:80:e1:27:d1:27:e1:60:c3:ba:18: 68:16:1d:28:7b:b8:66:4d:b4:84:51:fd:07:aa:74: b4:77:83:e7:fd:bb:18:37:0f:a4:ba:ed:44:fc:3e: c8:9f:2d:bc:d1:fb:96:f1:1a:5e:2e:d2:ca:b4:48: a5:f1:8d:45:00:07:85:ae:fc:59:72:17:30:df:fb: ff:4c:94:cf:63:6c:b7:86:8f:82:18:f5:d2:e1:ad: 88:5b:f7:48:b2:72:02:75:89:31:9e:b6:1b:e4:d2: 17:6f:44:71:11:33:2e:07:a5:c7:34:f4:4d:65:5e: d3:0c:95:06:df:2b:7f:40:32:2f:de:f0:2b:17:bd: fa:50:3c:88:7d:83:46:a8:45:4b:6d:f4:31:e8:e3: 80:fb:e4:c5:9a:9a:5e:79:8a:79:c3:1e:86:7a:12: 7e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D3:32:E8:C5:B1:AD:22:92:19:D0:1F:00:DF:74:1E:DE:CA:4F:89 X509v3 Authority Key Identifier: keyid:81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:a7:91:fc:d3:2c:f5:9e:96:7c:25:47:a6:ad:40:e3:5c:6f: b0:1c:bf:d6:46:3f:f1:61:12:59:3e:f2:dc:d0:09:28:89:61: 17:cd:fb:c7:3b:4a:90:2c:fb:62:bd:c0:af:49:80:15:ec:c8: b4:89:04:ca:76:36:ff:15:0e:7e:33:e5:75:55:1b:55:42:fb: 1e:d0:cb:8e:a2:e0:f6:31:33:7a:f3:8b:4c:8b:08:a1:69:fc: ef:5a:c7:0e:f0:b9:24:bf:e4:b6:81:cb:b9:eb:f1:15:af:08: 45:c1:8c:5a:d4:a8:0c:ce:b3:20:7b:85:b8:5d:bb:fc:0e:13: 50:c1:04:a6:3a:57:d2:71:2b:04:ea:d5:20:4f:79:8d:22:6b: 2a:1e:16:a2:59:28:a7:ea:dd:60:17:ee:3a:44:19:fa:16:f1: e1:cb:6b:dc:bf:6e:83:29:0e:11:e6:c9:c5:9b:d1:10:38:af: 6a:b5:26:fb:36:53:0e:df:fd:0f:5d:10:44:00:bb:ea:0e:f6: 51:c3:ed:35:b5:90:2c:1a:40:9f:ed:43:d5:33:d2:6a:91:9d: 74:63:9d:5e:df:a7:9a:de:49:35:a4:72:33:ee:70:00:21:38: 82:9c:be:2f:35:d7:d6:0e:15:ac:6b:7e:b7:79:05:2a:b0:13: 5c:cf:83:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYM06xBjhhvNuZcy+TipDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNTIzODg4ZWVkNTMxMWY5MmExNjYxNWVmMmNmMDE3NWM2 ZmU0MWUwHhcNMjUxMjI0MjIwMDM0WhcNMjUxMjI1MjIwMDM0WjAzMTEwLwYDVQQD EygzNmQzMzJlOGM1YjFhZDIyOTIxOWQwMWYwMGRmNzQxZWRlY2E0Zjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/jIqBHjKPp8MbtQMf4pkQn7KFKr pmhQreA/Z8EeFxDiAR7z24F/Rhhi47gedvN0R66roCV/CJopKnC+oWEJdmqhk/Ep KNhz4JUdr4iJ6ywVq5z2RHdlJZ0elt5EEIDhJ9En4WDDuhhoFh0oe7hmTbSEUf0H qnS0d4Pn/bsYNw+kuu1E/D7Iny280fuW8RpeLtLKtEil8Y1FAAeFrvxZchcw3/v/ TJTPY2y3ho+CGPXS4a2IW/dIsnICdYkxnrYb5NIXb0RxETMuB6XHNPRNZV7TDJUG 3yt/QDIv3vArF736UDyIfYNGqEVLbfQx6OOA++TFmppeeYp5wx6GehJ+WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbTMujFsa0ikhnQHwDfdB7eyk+JMB8GA1UdIwQY MBaAFIFSOIju1TEfkqFmFe8s8Bdcb+QeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1ZJNGlPN1ZNUi1Tb1dZVjd5endGMXh2NUI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84ODBiMDAtNThhYi00N2RlLTk3Mjgt MGNhZDZjYTdlY2Q3LzEvZ1ZJNGlPN1ZNUi1Tb1dZVjd5endGMXh2NUI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS84ODBiMDAtNThhYi00N2RlLTk3MjgtMGNhZDZjYTdlY2Q3 LzEvZ1ZJNGlPN1ZNUi1Tb1dZVjd5endGMXh2NUI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqeR/NMs 9Z6WfCVHpq1A41xvsBy/1kY/8WESWT7y3NAJKIlhF837xztKkCz7Yr3Ar0mAFezI tIkEynY2/xUOfjPldVUbVUL7HtDLjqLg9jEzevOLTIsIoWn871rHDvC5JL/ktoHL uevxFa8IRcGMWtSoDM6zIHuFuF27/A4TUMEEpjpX0nErBOrVIE95jSJrKh4Wolko p+rdYBfuOkQZ+hbx4ctr3L9ugykOEebJxZvREDivarUm+zZTDt/9D10QRAC76g72 UcPtNbWQLBpAn+1D1TPSapGddGOdXt+nmt5JNaRyM+5wACE4gpy+LzXX1g4VrGt+ t3kFKrATXM+DqA== -----END CERTIFICATE-----Generated at Thu Dec 25 01:24:11 2025 by rpki-client