This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json) Hash identifier: Wsx8rkjtiXMiZP2eCiRm5gAso45l1dIe4hy7YKSr4FY= Subject key identifier: BD:47:FA:CC:40:30:7A:01:3A:EC:B3:62:87:76:B4:D0:4E:CE:1F:C5 Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92 Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692 Certificate serial: 019B61D3E51827DA5468B615714E21577592 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft Manifest number: 0FC4 Signing time: Sat 27 Dec 2025 22:00:35 +0000 Manifest this update: Sat 27 Dec 2025 22:00:35 +0000 Manifest next update: Sun 28 Dec 2025 22:00:35 +0000 Files and hashes: 1: WLQJ8zcZCMsER4r6hGR6_boxEBI.roa (hash: 8yJ5VPtEriA2v8Qxk3Uyit7MsAAT1OiV71AZSGLF2yM=) 2: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: 0SrQVoR7niyp7MhVgl6REO2GzDtfzbPrZIdMbfyBE6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 22:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:d3:e5:18:27:da:54:68:b6:15:71:4e:21:57:75:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692 Validity Not Before: Dec 27 22:00:35 2025 GMT Not After : Dec 28 22:00:35 2025 GMT Subject: CN=bd47facc40307a013aecb3628776b4d04ece1fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:3b:66:d7:d8:97:31:fc:be:2b:0c:55:64: 5e:62:78:4d:e3:30:0e:d2:43:be:4d:32:56:82:8a: b3:a7:d4:fc:76:c4:dd:8a:7e:04:6c:44:37:ce:80: 83:e8:ab:8a:3d:24:45:f3:cc:5a:19:1e:44:56:1e: 93:02:6b:77:1f:6e:44:e0:75:8e:83:74:d1:1a:fc: f8:3d:b5:36:1b:2b:b5:bc:89:5b:99:c6:8a:c3:85: 84:0a:e7:c4:f4:cf:17:c6:fc:31:a3:f7:7b:7c:81: 70:87:b8:6b:4e:1b:d6:60:91:4b:e4:9f:a9:8f:94: e2:cd:d1:38:02:ab:aa:83:b3:7f:1f:86:10:81:cd: 9a:7a:68:b3:99:5f:58:c5:ac:4d:a6:fc:d7:e0:b0: fe:d1:90:a6:81:bc:a2:19:3d:83:17:42:e8:30:c0: b9:af:2b:47:26:55:32:7b:af:06:4f:5c:1d:38:b8: 49:6f:c0:12:70:3d:6b:28:2d:3d:a1:82:ae:3a:c4: 07:0a:32:39:8d:77:c5:fa:1f:a8:01:c3:dd:79:39: 7d:53:07:b1:22:6b:0c:43:d1:ff:27:6b:33:48:4e: cc:f6:26:ed:5e:95:b8:f9:ad:2d:5e:8a:67:08:ee: 56:98:3c:ce:15:cd:40:bd:9f:38:bc:10:08:dc:c6: c1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:47:FA:CC:40:30:7A:01:3A:EC:B3:62:87:76:B4:D0:4E:CE:1F:C5 X509v3 Authority Key Identifier: keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:d7:e2:5b:23:9f:9b:74:19:2d:88:dd:50:4c:9d:1a:9a:5b: 82:c1:55:ef:cd:94:e6:11:33:f4:ae:3d:64:05:51:b4:54:8b: 01:5e:5c:30:be:9d:aa:d9:18:a8:20:bf:43:29:c4:9a:8b:73: 16:0c:98:59:77:fe:03:f6:8c:c6:b9:62:8e:1e:67:1e:41:2c: 70:87:ae:a6:e5:71:9b:62:a9:6a:bc:a2:8f:1b:2d:ce:2b:48: 4e:20:ab:24:61:06:c4:09:cc:5f:f1:1b:73:c7:e4:33:80:1d: f4:8b:e2:5a:d8:b0:8d:51:6f:98:1f:3e:e4:dc:41:a2:e4:26: 86:50:2a:04:0f:f1:fb:3c:46:38:e7:6f:00:40:f5:e5:4c:6b: 3e:c5:5d:c3:a7:98:a4:c4:d2:b1:0a:82:1f:32:c8:1b:4e:16: 88:fd:c6:2f:aa:48:f5:9e:6c:87:05:8c:72:c9:82:77:a2:c8: 84:8b:a2:97:2b:d1:fd:dc:b4:47:eb:89:5a:ac:34:42:49:f2: 51:eb:0c:55:b4:53:97:19:85:38:fe:0f:d2:80:fe:6b:96:72: 0d:d8:2e:16:70:1b:1d:07:eb:59:33:fe:19:81:19:5b:00:0a: 51:d4:c1:2b:4b:1e:9d:ff:1e:7e:5e:33:8f:fc:66:39:e6:f5: 01:27:74:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZth0+UYJ9pUaLYVcU4hV3WSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjlhMDI1YTg0ZjQyZWYzZWYwYjYwNTJkZTNmZDY1ZThj MDg2OTIwHhcNMjUxMjI3MjIwMDM1WhcNMjUxMjI4MjIwMDM1WjAzMTEwLwYDVQQD EyhiZDQ3ZmFjYzQwMzA3YTAxM2FlY2IzNjI4Nzc2YjRkMDRlY2UxZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG07ZtfYlzH8visMVWReYnhN4zAO 0kO+TTJWgoqzp9T8dsTdin4EbEQ3zoCD6KuKPSRF88xaGR5EVh6TAmt3H25E4HWO g3TRGvz4PbU2Gyu1vIlbmcaKw4WECufE9M8Xxvwxo/d7fIFwh7hrThvWYJFL5J+p j5TizdE4Aquqg7N/H4YQgc2aemizmV9YxaxNpvzX4LD+0ZCmgbyiGT2DF0LoMMC5 rytHJlUye68GT1wdOLhJb8AScD1rKC09oYKuOsQHCjI5jXfF+h+oAcPdeTl9Uwex ImsMQ9H/J2szSE7M9ibtXpW4+a0tXopnCO5WmDzOFc1AvZ84vBAI3MbBewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1H+sxAMHoBOuyzYod2tNBOzh/FMB8GA1UdIwQY MBaAFHBpoCWoT0LvPvC2BS3j/WXowIaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMt NTE5OWE3MTE2ODRkLzEvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMtNTE5OWE3MTE2ODRk LzEvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9fiWyOf m3QZLYjdUEydGppbgsFV782U5hEz9K49ZAVRtFSLAV5cML6dqtkYqCC/QynEmotz FgyYWXf+A/aMxrlijh5nHkEscIeupuVxm2KparyijxstzitITiCrJGEGxAnMX/Eb c8fkM4Ad9IviWtiwjVFvmB8+5NxBouQmhlAqBA/x+zxGOOdvAED15UxrPsVdw6eY pMTSsQqCHzLIG04WiP3GL6pI9Z5shwWMcsmCd6LIhIuilyvR/dy0R+uJWqw0Qkny UesMVbRTlxmFOP4P0oD+a5ZyDdguFnAbHQfrWTP+GYEZWwAKUdTBK0senf8efl4z j/xmOeb1ASd0NQ== -----END CERTIFICATE-----Generated at Sun Dec 28 04:59:28 2025 by rpki-client