This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json) Hash identifier: dA9o4Ds+ScTjTkaw0fl5XdUoRwE1xtBnyKFLFcbkyso= Subject key identifier: C7:54:E8:B2:93:83:5F:F3:A5:CE:4E:DD:AD:BE:11:F2:20:27:6C:4A Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62 Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62 Certificate serial: 019B5305B1F5366E0FE2E380C3779AE3645B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 01:00:40 +0000 Manifest this update: Thu 25 Dec 2025 01:00:40 +0000 Manifest next update: Fri 26 Dec 2025 01:00:40 +0000 Files and hashes: 1: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: LZgj26pkJ+aoIwNE9Xs8j/IOwIK2qCZsxhHRy5EKfUg=) 2: lrVdWYePrfvjN2tTsNMy_Nf4Gn4.roa (hash: twkAP7rnPOwhMAXsaX+PpZC1dZNkXLlK0+tLwfHke2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:b1:f5:36:6e:0f:e2:e3:80:c3:77:9a:e3:64:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80043f23936622824111e8865a50002067d95a62 Validity Not Before: Dec 25 01:00:40 2025 GMT Not After : Dec 26 01:00:40 2025 GMT Subject: CN=c754e8b293835ff3a5ce4eddadbe11f220276c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:68:50:99:ff:5f:a7:79:2c:80:85:dd:b7: 56:59:ca:57:d6:fb:17:cd:8b:39:c4:37:49:5d:28: ef:9e:36:2f:5a:42:ff:aa:0c:b9:04:77:c7:38:b7: 76:3f:4b:3b:f5:be:a5:f0:4a:98:6d:bc:d4:a8:00: de:37:8b:0d:10:59:61:e3:33:62:55:6c:a9:d7:a7: 2c:73:90:b0:94:77:f4:4e:ab:f5:ee:3b:6f:ba:f9: dd:a0:95:6f:64:a1:90:15:83:c6:a6:45:d1:d0:c3: 5a:e0:38:fa:1b:9c:35:46:08:86:a8:35:e5:53:8e: c9:8b:a6:e6:7e:52:9c:48:0a:09:98:2d:32:9a:12: 5d:42:ed:d0:69:f0:00:db:72:99:f3:95:f7:a6:4f: 85:c6:b4:4f:64:82:d6:7c:c9:ae:6a:77:41:bb:eb: a8:94:50:97:d7:1e:f2:38:b4:f0:18:25:63:e4:34: 17:28:79:00:29:0c:19:e7:e4:b7:41:3e:58:a5:3e: 36:e2:1f:5a:55:b2:00:68:94:12:a0:33:68:bc:37: 35:52:c6:62:ee:a4:a3:10:02:2b:30:df:11:0a:65: a3:67:25:06:e4:e0:80:f4:6c:0a:b5:61:5b:0d:00: e7:a6:6f:a7:99:14:b8:dd:86:2d:3e:8f:ea:63:f1: 52:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:54:E8:B2:93:83:5F:F3:A5:CE:4E:DD:AD:BE:11:F2:20:27:6C:4A X509v3 Authority Key Identifier: keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:1c:5c:bb:51:34:12:82:66:ff:ec:43:c9:7d:3d:79:9f:ca: 20:c2:05:68:84:c9:6a:18:ba:1f:e3:a5:dd:2f:8b:20:9b:b8: dc:e8:1a:8c:19:a1:11:1c:5e:3c:c3:2a:31:ae:10:ed:47:05: b0:dc:f4:10:ed:63:47:2c:12:1e:10:bd:ed:fa:0a:0e:a3:8e: b1:6f:5e:27:3c:97:6b:d1:d4:9c:df:57:74:34:13:35:6f:7c: 42:f6:84:04:2e:cf:b2:9a:33:b7:04:54:aa:7e:97:d6:9a:82: c8:c5:56:07:dc:72:12:88:f1:10:35:b8:bf:88:64:2a:ec:78: bc:ed:b0:ec:47:6f:b0:12:06:5d:1c:a9:c7:3a:8e:18:75:d9: 09:34:66:83:93:35:d7:f8:df:2b:17:b4:e9:2a:00:e1:44:87: 47:49:dc:ca:8d:c7:d2:90:a9:25:14:92:b2:be:d1:ef:d5:a7: c6:4a:f4:e3:fb:02:d0:17:a2:20:a3:9c:87:ea:3d:ea:3c:76: 27:0f:52:63:91:57:0b:fc:b7:15:a1:7c:36:42:15:31:f1:0a: 8e:40:f3:09:c3:bc:e8:25:2c:d9:36:78:6d:de:4c:b6:67:8d: 8d:8d:fb:a1:49:49:f7:cb:be:de:7b:ec:aa:ce:aa:05:54:46: 93:6f:f0:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBbH1Nm4P4uOAw3ea42RbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMDQzZjIzOTM2NjIyODI0MTExZTg4NjVhNTAwMDIwNjdk OTVhNjIwHhcNMjUxMjI1MDEwMDQwWhcNMjUxMjI2MDEwMDQwWjAzMTEwLwYDVQQD EyhjNzU0ZThiMjkzODM1ZmYzYTVjZTRlZGRhZGJlMTFmMjIwMjc2YzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQNoUJn/X6d5LICF3bdWWcpX1vsX zYs5xDdJXSjvnjYvWkL/qgy5BHfHOLd2P0s79b6l8EqYbbzUqADeN4sNEFlh4zNi VWyp16csc5CwlHf0Tqv17jtvuvndoJVvZKGQFYPGpkXR0MNa4Dj6G5w1RgiGqDXl U47Ji6bmflKcSAoJmC0ymhJdQu3QafAA23KZ85X3pk+FxrRPZILWfMmuandBu+uo lFCX1x7yOLTwGCVj5DQXKHkAKQwZ5+S3QT5YpT424h9aVbIAaJQSoDNovDc1UsZi 7qSjEAIrMN8RCmWjZyUG5OCA9GwKtWFbDQDnpm+nmRS43YYtPo/qY/FSXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdU6LKTg1/zpc5O3a2+EfIgJ2xKMB8GA1UdIwQY MBaAFIAEPyOTZiKCQRHohlpQACBn2VpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0FRX0k1Tm1Jb0pCRWVpR1dsQUFJR2ZaV21JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zOWYyOGMtOWViOC00Y2FlLThkOTgt NjhjZGM2OTJhZDA5LzEvZ0FRX0k1Tm1Jb0pCRWVpR1dsQUFJR2ZaV21JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zOWYyOGMtOWViOC00Y2FlLThkOTgtNjhjZGM2OTJhZDA5 LzEvZ0FRX0k1Tm1Jb0pCRWVpR1dsQUFJR2ZaV21JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRxcu1E0 EoJm/+xDyX09eZ/KIMIFaITJahi6H+Ol3S+LIJu43OgajBmhERxePMMqMa4Q7UcF sNz0EO1jRywSHhC97foKDqOOsW9eJzyXa9HUnN9XdDQTNW98QvaEBC7PspoztwRU qn6X1pqCyMVWB9xyEojxEDW4v4hkKux4vO2w7EdvsBIGXRypxzqOGHXZCTRmg5M1 1/jfKxe06SoA4USHR0ncyo3H0pCpJRSSsr7R79Wnxkr04/sC0BeiIKOch+o96jx2 Jw9SY5FXC/y3FaF8NkIVMfEKjkDzCcO86CUs2TZ4bd5MtmeNjY37oUlJ98u+3nvs qs6qBVRGk2/wMA== -----END CERTIFICATE-----Generated at Thu Dec 25 02:13:22 2025 by rpki-client