This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft File: _gC3BmlCNy_EjPLmHMdRjb8UuvM.mft (raw, json) Hash identifier: 7h38aA5vTvX4LefbnqYJL9mP55QL9u93NuNFihp5TPo= Subject key identifier: 24:17:27:4A:6D:2E:9B:9D:F1:E5:B5:43:1C:CD:32:83:3B:C2:40:76 Authority key identifier: FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3 Certificate issuer: /CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3 Certificate serial: 019B4BF2271E3E617CD85ECB8C15D66A44BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft Manifest number: 027C Signing time: Tue 23 Dec 2025 16:01:59 +0000 Manifest this update: Tue 23 Dec 2025 16:01:59 +0000 Manifest next update: Wed 24 Dec 2025 16:01:59 +0000 Files and hashes: 1: _gC3BmlCNy_EjPLmHMdRjb8UuvM.crl (hash: sdmeMabKmVWjDtUJMwKAewVZmLF+v4ec+xAs4gBDvFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:27:1e:3e:61:7c:d8:5e:cb:8c:15:d6:6a:44:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3 Validity Not Before: Dec 23 16:01:59 2025 GMT Not After : Dec 24 16:01:59 2025 GMT Subject: CN=2417274a6d2e9b9df1e5b5431ccd32833bc24076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0c:08:06:fe:73:4a:f9:cc:9c:db:c4:f2:8d: 37:e9:f4:85:5e:e3:7b:bc:aa:44:5d:bb:72:10:12: 94:d4:3b:d2:45:57:e8:08:d0:17:64:6f:66:29:70: 13:59:d3:df:2e:66:d3:d3:30:22:33:df:a6:c5:5a: bf:01:11:50:4a:f9:3b:1b:b9:a4:84:0a:bd:19:42: c2:7b:3b:07:d5:7a:4e:47:dd:8e:14:ee:9e:20:dc: 5c:f4:ee:1b:4e:b9:c7:70:aa:3b:9f:88:80:d6:a0: c5:b2:56:60:56:6a:07:93:64:ab:af:1c:11:7f:67: 93:24:65:61:f2:6e:e7:2f:40:c3:ab:0c:a5:16:84: 59:53:5c:68:dd:08:79:f7:55:ca:aa:7a:c2:57:01: 1b:a9:cd:c1:10:93:64:5d:bb:a4:ed:ea:7c:c6:3b: 43:93:ce:47:5d:a9:10:de:5b:73:1e:ab:d8:1b:74: 98:ea:e7:bb:fa:c1:8b:16:a6:a0:3e:9d:ec:88:3f: b1:88:c7:81:f4:e1:d5:06:ff:ab:9e:8e:be:46:66: 95:cf:70:7f:d5:44:4e:68:4a:ba:9a:99:d3:cd:36: 0b:02:43:0c:9c:6f:21:c1:b1:55:f4:f3:40:ed:47: 69:d8:13:67:51:0e:04:02:c2:7f:5e:1a:cd:59:bf: 53:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:17:27:4A:6D:2E:9B:9D:F1:E5:B5:43:1C:CD:32:83:3B:C2:40:76 X509v3 Authority Key Identifier: keyid:FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:49:38:60:83:e9:b8:eb:cf:9c:62:97:0c:2e:cd:ac:b4:d1: a2:f8:26:8d:94:8a:f5:d6:78:bd:f7:4d:0c:df:bb:de:c3:98: 7b:6d:04:36:81:9a:e4:53:cc:e2:30:ae:da:8a:8c:d1:67:0d: d1:c9:c7:7b:41:b9:df:87:fc:2a:cb:94:9a:36:c0:92:b4:f8: 49:c7:aa:be:65:a4:28:47:1c:7e:5e:f4:db:ef:c4:72:84:b6: bd:1d:55:6f:5e:46:ac:f4:1d:ae:0a:5a:b6:99:0f:a7:29:19: 1f:54:bc:4c:f3:bf:fe:a4:4e:2e:47:34:db:b1:4c:78:3e:4a: 7e:0a:b2:27:3a:a7:25:3a:b9:fa:44:e7:d0:4c:76:92:03:20: de:0c:3f:a7:a7:a8:5c:37:fd:e9:60:93:01:de:30:eb:93:67: a1:cb:cc:c0:72:d0:e3:87:d2:b3:e6:7c:18:c4:d5:05:05:31: d9:ed:30:bc:24:dc:38:66:d1:f9:75:77:f7:53:b8:93:f5:ab: d0:58:f2:29:7b:1e:a9:5d:8d:a1:4a:ca:81:0b:c5:d4:a7:86: 46:d2:47:6a:5e:51:1c:d1:00:a6:12:23:9b:31:f0:67:be:47: 01:d6:ee:1b:1f:51:7c:63:25:2d:83:e0:13:58:6a:a4:d8:a4: a8:b7:d1:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8icePmF82F7LjBXWakS6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMDBiNzA2Njk0MjM3MmZjNDhjZjJlNjFjYzc1MThkYmYx NGJhZjMwHhcNMjUxMjIzMTYwMTU5WhcNMjUxMjI0MTYwMTU5WjAzMTEwLwYDVQQD EygyNDE3Mjc0YTZkMmU5YjlkZjFlNWI1NDMxY2NkMzI4MzNiYzI0MDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQwIBv5zSvnMnNvE8o036fSFXuN7 vKpEXbtyEBKU1DvSRVfoCNAXZG9mKXATWdPfLmbT0zAiM9+mxVq/ARFQSvk7G7mk hAq9GULCezsH1XpOR92OFO6eINxc9O4bTrnHcKo7n4iA1qDFslZgVmoHk2SrrxwR f2eTJGVh8m7nL0DDqwylFoRZU1xo3Qh591XKqnrCVwEbqc3BEJNkXbuk7ep8xjtD k85HXakQ3ltzHqvYG3SY6ue7+sGLFqagPp3siD+xiMeB9OHVBv+rno6+RmaVz3B/ 1UROaEq6mpnTzTYLAkMMnG8hwbFV9PNA7Udp2BNnUQ4EAsJ/XhrNWb9TLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQXJ0ptLpud8eW1QxzNMoM7wkB2MB8GA1UdIwQY MBaAFP4AtwZpQjcvxIzy5hzHUY2/FLrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2dDM0JtbENOeV9FalBMbUhNZFJqYjhVdXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mZDhiNmYtNDk4Ny00ZDE4LWIxODEt NWQ1NmQ0ZDIwOTM2LzEvX2dDM0JtbENOeV9FalBMbUhNZFJqYjhVdXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9mZDhiNmYtNDk4Ny00ZDE4LWIxODEtNWQ1NmQ0ZDIwOTM2 LzEvX2dDM0JtbENOeV9FalBMbUhNZFJqYjhVdXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUk4YIPp uOvPnGKXDC7NrLTRovgmjZSK9dZ4vfdNDN+73sOYe20ENoGa5FPM4jCu2oqM0WcN 0cnHe0G534f8KsuUmjbAkrT4SceqvmWkKEccfl702+/EcoS2vR1Vb15GrPQdrgpa tpkPpykZH1S8TPO//qROLkc027FMeD5KfgqyJzqnJTq5+kTn0Ex2kgMg3gw/p6eo XDf96WCTAd4w65NnocvMwHLQ44fSs+Z8GMTVBQUx2e0wvCTcOGbR+XV391O4k/Wr 0FjyKXseqV2NoUrKgQvF1KeGRtJHal5RHNEAphIjmzHwZ75HAdbuGx9RfGMlLYPg E1hqpNikqLfRHw== -----END CERTIFICATE-----Generated at Tue Dec 23 18:33:54 2025 by rpki-client