This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft File: gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json) Hash identifier: sYCyMJWaFwamKFJJRpzVPL3C7/R/2HLGmrmxeEDhtIs= Subject key identifier: DE:C9:41:D8:06:05:E1:10:06:19:1E:DD:5C:CE:12:B0:A9:20:74:D3 Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20 Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220 Certificate serial: 019B619D747274075BF3182161F826FACAE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft Manifest number: 0E8E Signing time: Sat 27 Dec 2025 21:01:07 +0000 Manifest this update: Sat 27 Dec 2025 21:01:07 +0000 Manifest next update: Sun 28 Dec 2025 21:01:07 +0000 Files and hashes: 1: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: XQnzT1YT5vOVa1AgdmQubqBIjOckqbr2kmywZLSmMwQ=) 2: ql09cCtxf2iX9P0d2dUBPQ5PKyY.roa (hash: DXSDjUv3k4luzqmW9TKxBUky0r+na22MITMB3j5FLDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 21:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:9d:74:72:74:07:5b:f3:18:21:61:f8:26:fa:ca:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220 Validity Not Before: Dec 27 21:01:07 2025 GMT Not After : Dec 28 21:01:07 2025 GMT Subject: CN=dec941d80605e11006191edd5cce12b0a92074d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:79:63:6f:15:eb:63:4d:17:c6:0a:79:e0:c5: 12:a1:39:c9:d7:98:9b:2a:91:5f:93:3c:5f:21:85: 4d:b3:05:6c:ef:cb:71:b0:84:aa:e6:f2:de:a2:6b: 42:2f:03:fb:b0:53:a4:a4:6e:3c:bb:df:70:38:c5: ee:00:a4:9e:fa:fd:9e:71:01:86:e2:78:62:11:8e: 1e:11:eb:5b:f0:6f:4b:64:ea:b0:1f:8b:b9:27:76: c9:d3:01:35:76:fc:e2:b9:e5:9b:73:7d:f2:b3:24: 91:16:88:24:c8:21:94:04:51:4d:b9:0e:46:79:a3: 6a:6b:9e:7f:1e:e9:28:2d:fe:78:d0:2f:62:81:38: 89:a4:1a:54:74:eb:03:d8:18:fa:c6:33:22:eb:f0: a6:81:18:59:6f:5d:4b:0b:49:50:52:6d:9e:33:a6: 92:c8:f5:0d:dd:c2:29:d5:66:82:14:e8:11:21:20: 38:99:e4:2c:52:3b:be:e5:f7:9b:a9:d5:fa:e9:cd: 85:08:84:bc:e3:1a:bc:a2:64:aa:19:56:16:75:44: cb:c6:cd:47:29:92:d4:e9:9a:0d:a5:1b:b3:da:f0: 20:18:87:a9:be:97:61:d8:6f:3b:07:f8:f8:d0:c3: ee:51:62:6e:9f:15:7f:08:1c:6a:a7:96:16:44:a3: d0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C9:41:D8:06:05:E1:10:06:19:1E:DD:5C:CE:12:B0:A9:20:74:D3 X509v3 Authority Key Identifier: keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:31:a7:c8:7d:50:9a:b9:c5:1c:65:6e:54:f2:87:8a:c7:71: 9e:ef:b1:6d:3c:7d:62:9d:1c:93:f1:b7:3a:d8:71:dc:7f:c7: 48:46:cf:d4:ed:a1:53:59:b4:ae:78:74:b1:62:45:5f:e8:13: 82:9f:b7:74:df:74:86:31:12:40:40:4f:11:b0:3b:72:5d:3c: bd:de:0f:ad:b6:a5:9a:1f:64:bd:d9:98:34:f7:b9:9f:6c:cb: 2e:99:2d:21:cf:d2:8e:77:68:65:df:a2:6a:d6:9a:4a:74:6f: 28:ce:98:e7:f7:47:89:d8:8f:ca:e9:ff:12:98:c0:ca:f0:00: 39:ab:31:37:61:69:4d:c4:01:65:41:c3:94:d8:4d:67:31:b6: 26:9e:6f:f7:99:c4:01:1d:c6:09:fd:4c:60:18:11:49:7a:d6: e2:a6:1d:ec:bc:cd:a7:91:6a:7b:e3:57:63:60:e3:10:52:eb: ae:50:5c:f2:d0:a6:62:03:71:9e:c8:b2:15:8c:1b:d9:67:c0: 65:ea:4f:97:9d:89:4e:88:18:50:17:f7:89:cc:a6:3a:d4:e4: a1:35:d9:fe:67:0c:ed:26:b0:b2:50:3f:8a:7a:f8:1d:06:97: 23:c3:36:41:0f:17:63:94:e8:64:3f:64:2c:8c:6c:11:91:c6: 6b:b0:06:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthnXRydAdb8xghYfgm+srlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwN2JkNjJmZDhkMzUzMDhkYmM4YjFmZDVmMTcyN2FmNTdh YmQyMjAwHhcNMjUxMjI3MjEwMTA3WhcNMjUxMjI4MjEwMTA3WjAzMTEwLwYDVQQD EyhkZWM5NDFkODA2MDVlMTEwMDYxOTFlZGQ1Y2NlMTJiMGE5MjA3NGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83ljbxXrY00Xxgp54MUSoTnJ15ib KpFfkzxfIYVNswVs78txsISq5vLeomtCLwP7sFOkpG48u99wOMXuAKSe+v2ecQGG 4nhiEY4eEetb8G9LZOqwH4u5J3bJ0wE1dvziueWbc33ysySRFogkyCGUBFFNuQ5G eaNqa55/HukoLf540C9igTiJpBpUdOsD2Bj6xjMi6/CmgRhZb11LC0lQUm2eM6aS yPUN3cIp1WaCFOgRISA4meQsUju+5febqdX66c2FCIS84xq8omSqGVYWdUTLxs1H KZLU6ZoNpRuz2vAgGIepvpdh2G87B/j40MPuUWJunxV/CBxqp5YWRKPQ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7JQdgGBeEQBhke3VzOErCpIHTTMB8GA1UdIwQY MBaAFIB71i/Y01MI28ix/V8XJ69Xq9IgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0h2V0w5alRVd2pieUxIOVh4Y25yMWVyMGlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9hMGFiNTEtOWRhZS00MTBkLThmZDkt MDhmYWRlYjJkYmU3LzEvZ0h2V0w5alRVd2pieUxIOVh4Y25yMWVyMGlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9hMGFiNTEtOWRhZS00MTBkLThmZDktMDhmYWRlYjJkYmU3 LzEvZ0h2V0w5alRVd2pieUxIOVh4Y25yMWVyMGlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzGnyH1Q mrnFHGVuVPKHisdxnu+xbTx9Yp0ck/G3Othx3H/HSEbP1O2hU1m0rnh0sWJFX+gT gp+3dN90hjESQEBPEbA7cl08vd4Prbalmh9kvdmYNPe5n2zLLpktIc/SjndoZd+i ataaSnRvKM6Y5/dHidiPyun/EpjAyvAAOasxN2FpTcQBZUHDlNhNZzG2Jp5v95nE AR3GCf1MYBgRSXrW4qYd7LzNp5Fqe+NXY2DjEFLrrlBc8tCmYgNxnsiyFYwb2WfA ZepPl52JTogYUBf3icymOtTkoTXZ/mcM7SawslA/inr4HQaXI8M2QQ8XY5ToZD9k LIxsEZHGa7AGZQ== -----END CERTIFICATE-----Generated at Sun Dec 28 06:22:41 2025 by rpki-client