This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft File: gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json) Hash identifier: RodBDpxmOKE20zocEnPYNXua0BIWNdLaGrAjkK7X070= Subject key identifier: B2:43:26:15:73:D0:1F:2F:7D:27:0B:28:D7:59:22:CC:88:AF:8B:73 Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68 Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668 Certificate serial: 019B3D599384455E3DB85BA89E93C726D55A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft Manifest number: 1089 Signing time: Sat 20 Dec 2025 20:00:39 +0000 Manifest this update: Sat 20 Dec 2025 20:00:39 +0000 Manifest next update: Sun 21 Dec 2025 20:00:39 +0000 Files and hashes: 1: 2iJw4EQoXKQlcgvYyAFZ8L2PyY4.roa (hash: iiK5pamhZGxd1XFCTcN85Gnci+JOI25h5MBN1jWndgw=) 2: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: 5YJTOBH9n9D46jYWFDdSvr5iqOGR7Aq2KDy1LhZGuts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:93:84:45:5e:3d:b8:5b:a8:9e:93:c7:26:d5:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8166038385b343d55e76b728efe23c0731787668 Validity Not Before: Dec 20 20:00:39 2025 GMT Not After : Dec 21 20:00:39 2025 GMT Subject: CN=b243261573d01f2f7d270b28d75922cc88af8b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:31:ae:8b:af:72:27:26:25:22:a3:5a:89:ce: 4c:84:ed:3b:b1:8d:c7:da:f0:89:c6:0b:4b:5d:b2: d1:04:bc:97:28:c1:42:a4:04:c1:e1:9a:5b:a5:85: 98:4e:6e:75:a9:46:c1:d2:fd:3d:68:66:bb:6e:d2: f1:6e:dc:6f:69:90:1f:07:ef:01:e2:e4:60:1d:b1: e1:24:81:88:02:ad:91:9b:c8:c8:48:25:cd:0e:6f: c8:6c:b9:89:ab:d0:66:81:4e:e5:1a:5b:0f:cf:32: e5:a3:16:25:fc:da:93:d5:a2:f5:43:3a:ff:4b:0e: ec:65:23:29:e1:67:a7:5f:64:95:23:4c:d8:3b:c7: 1b:c3:fd:30:17:fc:fd:9e:3c:c2:d5:da:ce:96:82: 41:a5:18:bc:66:40:76:f5:25:8d:ff:6c:0f:84:49: 54:e9:a8:80:43:61:49:4a:1b:79:b1:98:06:f7:23: bf:14:a9:6a:1c:c2:4f:0a:57:0c:a1:f9:c9:75:d9: 3c:fe:30:42:98:75:1d:b1:de:3e:96:ec:a3:f4:6e: 84:3b:6b:de:11:5d:9e:b4:d6:42:61:d3:cf:bc:6f: ac:85:db:94:1c:25:17:73:1b:4f:aa:b3:01:a5:8f: c4:0f:35:6b:2a:15:71:84:d5:56:f9:8d:1b:b6:92: c6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:43:26:15:73:D0:1F:2F:7D:27:0B:28:D7:59:22:CC:88:AF:8B:73 X509v3 Authority Key Identifier: keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:b0:fb:28:d2:6c:69:1d:52:7f:45:f8:92:f4:25:61:a1:84: 30:01:97:e6:7d:0f:b8:84:85:1d:1c:4a:c1:8b:5d:bc:82:a9: f6:92:40:af:61:24:65:01:33:1e:cd:58:05:be:7d:0b:e2:7e: 54:54:18:42:78:e6:f1:23:75:b9:0f:3c:7d:98:ec:d0:7b:a6: d3:be:3d:d4:67:d2:76:55:50:9c:c7:e1:b8:68:f2:38:64:43: a4:f0:b5:15:5a:77:1c:a3:bf:17:16:2b:86:2e:fa:59:d6:cf: 32:21:64:a5:43:be:4f:96:aa:e8:e0:92:24:df:9d:9c:16:a5: 20:07:08:f9:5b:36:96:50:a8:a4:a8:4a:b5:13:76:02:12:c2: a9:9e:d2:19:26:a7:3e:a1:6d:c0:98:a6:cf:37:0a:0d:88:c8: aa:81:c4:b6:18:d3:6f:89:87:eb:01:42:f3:40:1c:26:7b:32: 42:05:fa:68:d7:49:37:b6:d6:ac:dd:38:dd:41:6f:8c:4e:da: b8:3e:2f:00:cd:be:26:04:5b:8c:27:d5:51:b1:55:51:b7:2c: 08:db:54:65:51:cf:92:c6:36:65:25:5b:2f:bf:22:24:e0:de: 30:53:e0:06:9e:85:99:38:b6:75:55:4e:aa:8a:d9:da:9d:08: 75:98:b4:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZOERV49uFuonpPHJtVaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNjYwMzgzODViMzQzZDU1ZTc2YjcyOGVmZTIzYzA3MzE3 ODc2NjgwHhcNMjUxMjIwMjAwMDM5WhcNMjUxMjIxMjAwMDM5WjAzMTEwLwYDVQQD EyhiMjQzMjYxNTczZDAxZjJmN2QyNzBiMjhkNzU5MjJjYzg4YWY4YjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjGui69yJyYlIqNaic5MhO07sY3H 2vCJxgtLXbLRBLyXKMFCpATB4ZpbpYWYTm51qUbB0v09aGa7btLxbtxvaZAfB+8B 4uRgHbHhJIGIAq2Rm8jISCXNDm/IbLmJq9BmgU7lGlsPzzLloxYl/NqT1aL1Qzr/ Sw7sZSMp4WenX2SVI0zYO8cbw/0wF/z9njzC1drOloJBpRi8ZkB29SWN/2wPhElU 6aiAQ2FJSht5sZgG9yO/FKlqHMJPClcMofnJddk8/jBCmHUdsd4+luyj9G6EO2ve EV2etNZCYdPPvG+shduUHCUXcxtPqrMBpY/EDzVrKhVxhNVW+Y0btpLGWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJDJhVz0B8vfScLKNdZIsyIr4tzMB8GA1UdIwQY MBaAFIFmA4OFs0PVXna3KO/iPAcxeHZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy80OGNmZDAtMzIzOC00YWFmLWI2NjMt NDM3M2I2NTc5MGI4LzEvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy80OGNmZDAtMzIzOC00YWFmLWI2NjMtNDM3M2I2NTc5MGI4 LzEvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrD7KNJs aR1Sf0X4kvQlYaGEMAGX5n0PuISFHRxKwYtdvIKp9pJAr2EkZQEzHs1YBb59C+J+ VFQYQnjm8SN1uQ88fZjs0Hum07491GfSdlVQnMfhuGjyOGRDpPC1FVp3HKO/FxYr hi76WdbPMiFkpUO+T5aq6OCSJN+dnBalIAcI+Vs2llCopKhKtRN2AhLCqZ7SGSan PqFtwJimzzcKDYjIqoHEthjTb4mH6wFC80AcJnsyQgX6aNdJN7bWrN043UFvjE7a uD4vAM2+JgRbjCfVUbFVUbcsCNtUZVHPksY2ZSVbL78iJODeMFPgBp6FmTi2dVVO qorZ2p0IdZi0Aw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:45:38 2025 by rpki-client