This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft File: gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json) Hash identifier: RdiQJOLikLIpmDToeXym1vFYWLPdUSPkf91D6eeUguw= Subject key identifier: A8:68:45:B5:AF:4C:A0:AF:8A:8F:88:A3:6C:38:8F:2A:6D:E6:A0:D4 Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20 Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220 Certificate serial: 019B3CEC2E21D5B7A0D645566AC907EA3ADC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft Manifest number: 0E7B Signing time: Sat 20 Dec 2025 18:01:09 +0000 Manifest this update: Sat 20 Dec 2025 18:01:09 +0000 Manifest next update: Sun 21 Dec 2025 18:01:09 +0000 Files and hashes: 1: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: UMie60TrGiz6F1yFNzKMkUTOhuN+pCJr5vIaSX+ykdQ=) 2: ql09cCtxf2iX9P0d2dUBPQ5PKyY.roa (hash: DXSDjUv3k4luzqmW9TKxBUky0r+na22MITMB3j5FLDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:2e:21:d5:b7:a0:d6:45:56:6a:c9:07:ea:3a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220 Validity Not Before: Dec 20 18:01:09 2025 GMT Not After : Dec 21 18:01:09 2025 GMT Subject: CN=a86845b5af4ca0af8a8f88a36c388f2a6de6a0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:45:d6:ea:27:27:74:14:13:19:33:70:fb: 4b:4a:eb:19:1b:27:2c:8f:f7:ed:f0:3c:be:b4:53: 07:1e:20:bc:4f:cd:19:59:a0:e8:e2:00:9d:9b:df: 91:42:eb:42:1c:7c:3d:26:47:90:3d:1d:ab:63:8f: 43:8d:cb:6e:7f:3b:08:7e:17:75:a5:48:ae:31:6e: 8b:bd:34:3b:3b:d6:76:05:bd:75:34:37:50:13:34: ce:b3:52:29:14:64:4d:8c:0d:37:36:5a:0a:93:b7: ba:8f:c3:a9:f5:25:7a:1f:d9:d6:a2:35:0d:17:8c: a1:88:5d:a5:32:30:b4:4d:32:4a:65:84:71:5b:c0: af:77:ff:4b:21:91:ae:de:0d:76:02:fb:00:71:24: 6e:75:79:73:a7:d8:fd:44:e0:4a:ec:e5:e1:2c:9c: a8:4f:9c:5f:2e:5b:b9:cf:20:0c:31:1b:25:ae:17: dd:4d:3d:52:13:ad:d3:ab:9a:52:dd:d6:eb:8e:ec: 52:1c:1d:e8:de:6e:9a:60:f7:5e:f3:b3:ac:3a:11: 79:7c:bf:1c:a0:af:5f:d7:04:ca:45:3f:ae:0b:1b: ae:bc:1d:b2:f9:7f:3c:c5:2e:0f:5f:1f:ed:13:9d: a9:8b:c7:b1:b4:f8:16:67:82:12:14:b0:c4:ff:a9: 06:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:68:45:B5:AF:4C:A0:AF:8A:8F:88:A3:6C:38:8F:2A:6D:E6:A0:D4 X509v3 Authority Key Identifier: keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:2a:48:b2:f9:b8:b6:aa:75:f6:43:f5:52:63:48:9a:06:89: cc:d6:26:75:5c:b8:76:c8:27:0a:06:77:fe:15:f3:84:b4:aa: 7a:cf:9c:93:b8:d0:c8:17:9d:7b:6b:05:f5:92:27:1a:5b:75: c1:bf:56:c7:b6:bb:eb:c1:17:12:2d:5d:e8:0b:0b:29:65:5b: 56:a0:00:8c:a3:91:44:91:4f:b0:d9:e3:c9:5f:ef:db:35:1f: b2:bd:8c:af:64:f1:4f:4b:2f:86:e5:f9:41:aa:55:b0:7d:c4: 5b:6d:b2:b9:72:16:96:38:6c:18:1a:8d:40:f5:9f:82:ae:5a: c7:43:e2:4e:37:38:11:38:df:a5:a6:7e:0c:fc:90:ad:14:90: 41:44:bb:6d:5d:65:ab:59:d0:16:0a:b4:6e:3b:a4:b1:af:1a: 42:1f:1b:6b:8d:60:44:c8:59:3b:92:45:a0:9e:cc:65:f5:b9: 54:20:80:91:e1:93:9b:f1:6d:3e:aa:cd:8e:fa:f2:eb:ba:9a: 8c:63:db:82:35:d5:d9:a2:17:8f:1d:d1:21:ac:a5:1c:2a:0c: 52:7b:38:34:f2:71:b6:ca:26:25:0c:1d:c3:72:c5:bd:b5:4e: e1:d0:7a:f9:78:71:cc:fa:58:2b:cd:4d:4c:50:42:12:fd:1f: 8a:f4:7a:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87C4h1beg1kVWaskH6jrcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwN2JkNjJmZDhkMzUzMDhkYmM4YjFmZDVmMTcyN2FmNTdh YmQyMjAwHhcNMjUxMjIwMTgwMTA5WhcNMjUxMjIxMTgwMTA5WjAzMTEwLwYDVQQD EyhhODY4NDViNWFmNGNhMGFmOGE4Zjg4YTM2YzM4OGYyYTZkZTZhMGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnFF1uonJ3QUExkzcPtLSusZGycs j/ft8Dy+tFMHHiC8T80ZWaDo4gCdm9+RQutCHHw9JkeQPR2rY49DjctufzsIfhd1 pUiuMW6LvTQ7O9Z2Bb11NDdQEzTOs1IpFGRNjA03NloKk7e6j8Op9SV6H9nWojUN F4yhiF2lMjC0TTJKZYRxW8Cvd/9LIZGu3g12AvsAcSRudXlzp9j9ROBK7OXhLJyo T5xfLlu5zyAMMRslrhfdTT1SE63Tq5pS3dbrjuxSHB3o3m6aYPde87OsOhF5fL8c oK9f1wTKRT+uCxuuvB2y+X88xS4PXx/tE52pi8extPgWZ4ISFLDE/6kGOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhoRbWvTKCvio+Io2w4jypt5qDUMB8GA1UdIwQY MBaAFIB71i/Y01MI28ix/V8XJ69Xq9IgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0h2V0w5alRVd2pieUxIOVh4Y25yMWVyMGlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9hMGFiNTEtOWRhZS00MTBkLThmZDkt MDhmYWRlYjJkYmU3LzEvZ0h2V0w5alRVd2pieUxIOVh4Y25yMWVyMGlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9hMGFiNTEtOWRhZS00MTBkLThmZDktMDhmYWRlYjJkYmU3 LzEvZ0h2V0w5alRVd2pieUxIOVh4Y25yMWVyMGlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuSpIsvm4 tqp19kP1UmNImgaJzNYmdVy4dsgnCgZ3/hXzhLSqes+ck7jQyBede2sF9ZInGlt1 wb9Wx7a768EXEi1d6AsLKWVbVqAAjKORRJFPsNnjyV/v2zUfsr2Mr2TxT0svhuX5 QapVsH3EW22yuXIWljhsGBqNQPWfgq5ax0PiTjc4ETjfpaZ+DPyQrRSQQUS7bV1l q1nQFgq0bjuksa8aQh8ba41gRMhZO5JFoJ7MZfW5VCCAkeGTm/FtPqrNjvry67qa jGPbgjXV2aIXjx3RIaylHCoMUns4NPJxtsomJQwdw3LFvbVO4dB6+XhxzPpYK81N TFBCEv0fivR6Ag== -----END CERTIFICATE-----Generated at Sat Dec 20 22:25:54 2025 by rpki-client