This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json) Hash identifier: s5UlBjsvEOBbyVDbJo4EaMsMapOSW4OBN3b5lTZ5SoI= Subject key identifier: 91:42:26:5C:C5:08:CE:92:3C:D7:D3:39:C4:9A:2F:47:23:2F:67:AA Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70 Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370 Certificate serial: 019B394639BDA327F21CBFCB7E244637C8DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 01:01:02 +0000 Manifest this update: Sat 20 Dec 2025 01:01:02 +0000 Manifest next update: Sun 21 Dec 2025 01:01:02 +0000 Files and hashes: 1: AlDLgq4a_thE-qXe6l8E_xWLXFc.roa (hash: 0ufopEuWXow9IQPbSAY5y6lUJPxjAppqenIRissIhOM=) 2: HbD_TR3_mqlACMnF4iTXIAuOjsg.roa (hash: T3tCAy3O2wLO9qO83uugLqRmkiFNSfdwlXWERB4+Mok=) 3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: etXfza3wUYTSTg64ImCSZ+Ro3VhiCtstpzIR/5IMdm0=) 4: h5Pey3t7ILGJvHcV0wlWm8IDgRE.roa (hash: /bmLdcY/7qOd0oeU6NCbdR7DKpvTkMz1r7GZ1d675P4=) 5: nId42Q0uPKxNBDzBg-GOcY-a01Q.roa (hash: 43G2ltR87FjAzlwjOiHc7NglbtaxLWslqx/bREI6WQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:39:bd:a3:27:f2:1c:bf:cb:7e:24:46:37:c8:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370 Validity Not Before: Dec 20 01:01:02 2025 GMT Not After : Dec 21 01:01:02 2025 GMT Subject: CN=9142265cc508ce923cd7d339c49a2f47232f67aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:c3:68:23:eb:b2:7d:33:b1:1c:cb:5b:b4: 58:f5:c3:f3:6d:4e:44:1a:c9:8f:b8:cd:69:24:3c: 80:18:41:18:64:c4:97:15:ce:a5:55:7b:41:00:15: ce:a8:ab:cf:d6:e0:ea:06:ef:0a:27:c2:2a:17:2b: f2:31:6e:39:75:76:70:0b:80:3f:27:64:3b:e2:39: ce:ab:22:c6:1b:a8:a5:e2:9d:82:c6:df:29:46:3f: 55:83:b0:08:6a:a4:55:c2:72:25:33:2e:03:ea:91: f0:ea:26:41:fd:b5:6d:0f:b7:c7:4a:dd:e9:a2:99: b2:3b:50:20:74:71:44:88:36:83:ab:a5:07:fc:4d: 9d:27:9c:d9:cf:3f:07:47:66:17:d9:66:b8:e6:33: 5b:53:41:1e:06:82:9c:e3:80:06:ab:17:4c:37:44: 10:f4:b9:3a:f4:d8:b2:5f:bd:fd:a3:d9:f5:d5:c5: ea:78:46:f4:34:6c:58:3e:75:b4:2f:ab:67:c5:9f: 5a:3e:17:af:00:44:08:3a:4c:68:e6:cc:ff:66:4b: 42:9c:15:8a:ea:a8:13:c9:19:c2:bd:ef:2b:e1:28: ae:08:bb:63:b6:7e:8a:2c:ea:6b:24:ab:3d:c8:a6: b1:35:b3:53:fe:5c:7c:63:f6:01:80:47:84:e9:2d: b0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:42:26:5C:C5:08:CE:92:3C:D7:D3:39:C4:9A:2F:47:23:2F:67:AA X509v3 Authority Key Identifier: keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:a6:2b:96:12:4b:b2:f4:b7:da:03:ce:2d:bb:89:b2:60:04: d4:77:d7:aa:e8:cb:0f:e4:63:71:50:a2:4f:15:58:c7:ba:a6: cf:d0:27:0d:f1:8c:47:d1:4f:79:b3:9a:5a:df:7a:a3:32:6b: d0:3f:25:ae:1a:53:33:6e:ee:5d:a1:e3:e4:76:0c:9d:33:c2: 46:26:20:5f:90:3f:a9:57:d2:8a:d6:aa:25:fd:b4:6c:a3:6f: 84:c1:9c:c8:30:92:a2:49:a5:2e:51:51:d0:0f:a3:96:4b:59: 44:30:e8:83:06:0b:93:7a:68:6d:8d:7a:cc:c8:3c:d9:91:f2: fc:dc:05:10:35:42:d7:71:e2:98:0a:39:5f:8d:d5:47:12:f9: 88:d1:52:df:36:1a:ad:aa:24:ca:55:62:17:b3:ad:ef:ed:5f: 17:9c:9f:83:60:b5:bd:59:32:5f:47:da:e2:67:a2:cf:e1:70: 38:54:62:c9:ef:df:ae:b9:4c:66:02:21:b9:6a:2a:b2:fb:58: 90:8d:bf:dc:f5:2d:3f:8d:64:5d:b1:0d:53:a3:2b:28:ad:a1: 04:6a:1a:45:4d:d7:b0:35:ab:46:16:df:bd:da:5b:9e:f0:29: a5:0a:d8:52:94:a1:e7:78:33:de:dd:51:de:2a:61:02:ba:2c: ef:1c:27:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Rjm9oyfyHL/LfiRGN8jaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYWQ4YzUyMGJiOTY3NzQ2MWRkYzRlYzA5Yjc2ZDczM2I3 ZDgzNzAwHhcNMjUxMjIwMDEwMTAyWhcNMjUxMjIxMDEwMTAyWjAzMTEwLwYDVQQD Eyg5MTQyMjY1Y2M1MDhjZTkyM2NkN2QzMzljNDlhMmY0NzIzMmY2N2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOnDaCPrsn0zsRzLW7RY9cPzbU5E GsmPuM1pJDyAGEEYZMSXFc6lVXtBABXOqKvP1uDqBu8KJ8IqFyvyMW45dXZwC4A/ J2Q74jnOqyLGG6il4p2Cxt8pRj9Vg7AIaqRVwnIlMy4D6pHw6iZB/bVtD7fHSt3p opmyO1AgdHFEiDaDq6UH/E2dJ5zZzz8HR2YX2Wa45jNbU0EeBoKc44AGqxdMN0QQ 9Lk69NiyX739o9n11cXqeEb0NGxYPnW0L6tnxZ9aPhevAEQIOkxo5sz/ZktCnBWK 6qgTyRnCve8r4SiuCLtjtn6KLOprJKs9yKaxNbNT/lx8Y/YBgEeE6S2wzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFCJlzFCM6SPNfTOcSaL0cjL2eqMB8GA1UdIwQY MBaAFICtjFILuWd0Yd3E7Am3bXM7fYNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEt YzYxNzUxYzZiMTk1LzEvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yMjVlYzMtMDM4Ny00YjVkLTg4YzEtYzYxNzUxYzZiMTk1 LzEvZ0syTVVndTVaM1JoM2NUc0NiZHRjenQ5ZzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt6YrlhJL svS32gPOLbuJsmAE1HfXqujLD+RjcVCiTxVYx7qmz9AnDfGMR9FPebOaWt96ozJr 0D8lrhpTM27uXaHj5HYMnTPCRiYgX5A/qVfSitaqJf20bKNvhMGcyDCSokmlLlFR 0A+jlktZRDDogwYLk3pobY16zMg82ZHy/NwFEDVC13HimAo5X43VRxL5iNFS3zYa raokylViF7Ot7+1fF5yfg2C1vVkyX0fa4meiz+FwOFRiye/frrlMZgIhuWoqsvtY kI2/3PUtP41kXbENU6MrKK2hBGoaRU3XsDWrRhbfvdpbnvAppQrYUpSh53gz3t1R 3iphAros7xwnyg== -----END CERTIFICATE-----Generated at Sat Dec 20 04:28:15 2025 by rpki-client