This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json) Hash identifier: S1q/GzbhjJpgHkIM6CWO7E2R+c+MCwyXqfrVlLUk5YQ= Subject key identifier: 42:5B:3E:93:B5:79:98:44:91:62:EB:EC:31:5F:35:1A:3E:CB:EA:88 Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab Certificate serial: 019B3FB64EA9DAC16B1B7D444128A7B10795 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 07:01:10 +0000 Manifest this update: Sun 21 Dec 2025 07:01:10 +0000 Manifest next update: Mon 22 Dec 2025 07:01:10 +0000 Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: Jc7M0KvyJLNDbNczPXh1eR7/c7N/Tm4UjbwPGj5/K4Y=) 2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:4e:a9:da:c1:6b:1b:7d:44:41:28:a7:b1:07:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab Validity Not Before: Dec 21 07:01:10 2025 GMT Not After : Dec 22 07:01:10 2025 GMT Subject: CN=425b3e93b57998449162ebec315f351a3ecbea88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a5:c7:1b:9c:39:1b:f1:95:2a:95:9c:22:f4: 24:b1:fc:5f:27:24:0f:3a:62:26:f7:3e:34:a0:5f: 8f:9f:de:d4:d8:c7:dc:d9:e1:54:4e:91:44:12:7d: e1:42:de:d8:82:ac:9a:ad:cc:19:3a:51:92:e3:15: 02:4a:fb:a6:18:8a:31:01:72:1d:52:d2:84:e8:b0: 98:99:89:ce:b5:f0:1f:c1:84:6b:84:56:a9:22:df: 36:cc:77:9a:2e:bf:00:84:01:87:f9:f8:1e:2d:a1: 3a:a5:47:88:7e:65:05:57:a2:83:84:75:a6:57:29: c6:38:04:18:ca:06:1d:d9:f8:8b:0f:af:2d:0b:30: 7e:2a:71:fc:44:dc:1f:66:5b:ad:f2:23:e6:0d:fe: b6:00:86:81:7d:58:0c:42:16:b0:3b:78:39:68:91: c3:ae:d2:a6:e9:33:99:b8:1f:a5:28:2a:40:7a:c8: 87:40:14:40:15:bd:8f:51:da:42:1f:5d:24:f6:27: a0:8f:12:83:cb:13:18:28:e5:80:74:ca:97:1c:a7: 1a:b3:72:c9:46:f6:14:6a:a7:b5:6b:28:80:82:7c: 23:56:ee:23:cf:8b:87:df:79:2a:70:2f:e1:16:f5: e6:a7:c3:6a:a8:d8:7f:e3:eb:56:72:4f:ba:fd:7f: 09:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5B:3E:93:B5:79:98:44:91:62:EB:EC:31:5F:35:1A:3E:CB:EA:88 X509v3 Authority Key Identifier: keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:27:d3:df:78:88:56:84:61:5f:9a:72:83:03:5f:3e:45:3f: 8a:17:e7:40:7b:96:b6:7c:cb:9f:23:2f:3c:ca:f1:11:95:e3: b5:f1:0c:ea:04:b5:60:38:41:90:63:66:53:c2:1f:85:48:70: 7a:c8:79:dd:e1:77:f4:8b:b2:32:97:3c:03:af:6e:3d:76:bc: c7:dd:53:c2:42:8b:e6:cc:c9:4b:b8:19:fc:e6:ed:20:a5:aa: 94:88:25:6d:c2:fc:58:0d:05:29:5e:65:48:6c:3c:a3:11:59: 4a:6b:6b:cc:f9:10:c2:1c:a1:03:b0:e4:bb:dc:7c:b8:8c:6f: 5b:ad:44:06:87:61:d4:e9:35:92:6c:5f:a5:7e:2f:14:bf:6f: 47:9b:c8:9d:00:c9:98:e0:38:fe:67:85:ae:f6:57:41:bb:d8: 6d:8c:f4:f3:39:dc:17:f4:39:ef:f7:ce:9b:f9:78:80:92:ed: df:83:a2:96:1c:7e:fa:7d:aa:07:d8:70:9d:d5:69:98:29:1a: a3:d6:c0:e5:04:6d:7e:d8:9f:87:35:04:0e:0c:5f:46:94:4a: c0:50:1b:ed:16:c8:fc:ce:b1:e9:c2:a4:e8:63:0c:ab:57:af: 09:d9:27:56:5a:61:6e:f5:ef:8c:75:66:c8:3a:23:56:ec:55: 4f:ee:52:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tk6p2sFrG31EQSinsQeVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMjRjNWRmMTk3ODlkNTI1OTEwNGUwYWUwZGNkNDY3MmE4 ZTJiYWIwHhcNMjUxMjIxMDcwMTEwWhcNMjUxMjIyMDcwMTEwWjAzMTEwLwYDVQQD Eyg0MjViM2U5M2I1Nzk5ODQ0OTE2MmViZWMzMTVmMzUxYTNlY2JlYTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6XHG5w5G/GVKpWcIvQksfxfJyQP OmIm9z40oF+Pn97U2Mfc2eFUTpFEEn3hQt7YgqyarcwZOlGS4xUCSvumGIoxAXId UtKE6LCYmYnOtfAfwYRrhFapIt82zHeaLr8AhAGH+fgeLaE6pUeIfmUFV6KDhHWm VynGOAQYygYd2fiLD68tCzB+KnH8RNwfZlut8iPmDf62AIaBfVgMQhawO3g5aJHD rtKm6TOZuB+lKCpAesiHQBRAFb2PUdpCH10k9iegjxKDyxMYKOWAdMqXHKcas3LJ RvYUaqe1ayiAgnwjVu4jz4uH33kqcC/hFvXmp8NqqNh/4+tWck+6/X8JcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJbPpO1eZhEkWLr7DFfNRo+y+qIMB8GA1UdIwQY MBaAFIMkxd8ZeJ1SWRBOCuDc1GcqjiurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80YjJlNDktZjY2Ny00OTRhLWFmZTkt NmRmM2U0YTRlZWIxLzEvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy80YjJlNDktZjY2Ny00OTRhLWFmZTktNmRmM2U0YTRlZWIx LzEvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuCfT33iI VoRhX5pygwNfPkU/ihfnQHuWtnzLnyMvPMrxEZXjtfEM6gS1YDhBkGNmU8IfhUhw esh53eF39IuyMpc8A69uPXa8x91TwkKL5szJS7gZ/ObtIKWqlIglbcL8WA0FKV5l SGw8oxFZSmtrzPkQwhyhA7Dku9x8uIxvW61EBodh1Ok1kmxfpX4vFL9vR5vInQDJ mOA4/meFrvZXQbvYbYz08zncF/Q57/fOm/l4gJLt34Oilhx++n2qB9hwndVpmCka o9bA5QRtftifhzUEDgxfRpRKwFAb7RbI/M6x6cKk6GMMq1evCdknVlphbvXvjHVm yDojVuxVT+5SDg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:16:32 2025 by rpki-client