This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft File: gWiVcrIAukh5OByFdCdCZVkqFKs.mft (raw, json) Hash identifier: +YtL0T/qHuzoTyt3CwebAm0h1SqZ443Zv3BiPx10dxs= Subject key identifier: 0E:81:8A:38:60:03:86:B6:41:60:B6:23:4B:B1:F3:F8:ED:D7:84:44 Authority key identifier: 81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB Certificate issuer: /CN=81689572b200ba4879381c8574274265592a14ab Certificate serial: 019B38A10C6E57788F7DC55F09B969C44289 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 22:00:36 +0000 Manifest this update: Fri 19 Dec 2025 22:00:36 +0000 Manifest next update: Sat 20 Dec 2025 22:00:36 +0000 Files and hashes: 1: gWiVcrIAukh5OByFdCdCZVkqFKs.crl (hash: Z53909Rby436SS1PpM/HQJh5WtJm0p2TnQ3cGoGJMUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:0c:6e:57:78:8f:7d:c5:5f:09:b9:69:c4:42:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81689572b200ba4879381c8574274265592a14ab Validity Not Before: Dec 19 22:00:36 2025 GMT Not After : Dec 20 22:00:36 2025 GMT Subject: CN=0e818a38600386b64160b6234bb1f3f8edd78444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c3:c7:d2:1f:5d:70:fb:25:bc:f6:c2:ed:c5: d4:b4:0f:e6:84:9b:97:c4:c2:48:13:42:f6:9a:46: 62:9a:62:fc:b1:a7:01:14:4d:37:dc:24:3b:00:55: c9:0a:02:6b:1a:be:6a:3c:4c:9a:a0:84:81:c3:2e: b1:95:de:20:8c:6e:81:8f:71:3e:f8:f1:2a:7f:cc: d4:89:de:bb:08:65:d5:e6:24:a8:55:30:b0:95:f7: a4:3a:b3:26:1d:1b:d5:a0:ed:8c:c9:ae:97:3f:3c: 3b:e4:b3:ca:d1:83:08:a5:48:f8:43:54:58:70:2c: 2b:9e:2b:54:fc:05:b9:17:62:03:45:1f:e8:d2:76: bd:3f:d6:92:6a:8f:bf:5e:46:0f:71:43:ca:26:a6: 50:fd:4a:3b:4d:42:89:7d:40:27:83:1c:84:79:ee: a8:d9:65:17:27:66:e4:83:10:ef:8e:3f:4d:84:5a: bb:f0:ee:de:3e:b4:93:8c:50:8f:33:cc:3d:b0:6c: 8a:d4:a7:19:64:31:f5:da:af:8e:ed:2d:f3:be:a2: 2c:d0:9c:e3:0f:7b:de:b2:c1:6f:84:26:00:e5:18: a6:93:04:ca:25:96:b6:d4:48:01:e9:1b:e4:ca:78: 40:52:40:fb:46:58:47:75:2b:72:87:9a:d0:f0:94: eb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:81:8A:38:60:03:86:B6:41:60:B6:23:4B:B1:F3:F8:ED:D7:84:44 X509v3 Authority Key Identifier: keyid:81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:50:54:19:98:42:d2:03:6b:2a:08:1c:b3:e1:0b:ba:45:e2: 27:f3:58:33:06:12:52:da:c0:65:ae:c8:c8:a3:fd:c0:48:61: ac:62:b8:e0:81:01:26:e1:42:5c:38:f6:a9:ba:2d:80:b5:69: f0:5b:be:6e:29:c7:5e:bc:70:db:9a:e8:46:ce:80:0c:43:75: db:70:fd:fd:6a:45:a5:30:1f:f8:ed:aa:ff:0b:c4:69:31:79: e0:2a:a1:8d:36:69:12:47:cc:56:11:ce:f9:c3:e7:fe:7a:a8: c6:99:40:dd:2e:dc:08:55:91:40:65:72:f2:43:03:8f:d4:9b: d5:c4:ad:85:16:75:83:60:52:6d:5f:0a:cb:ab:fd:8b:01:7f: 8a:30:15:17:27:ca:56:eb:84:c0:9b:4f:6f:09:72:ed:65:66: 8e:d4:f2:99:7e:49:8f:87:f2:41:55:95:cb:96:f3:cb:fe:dd: 98:8e:92:4c:3c:ba:6a:1f:e5:ee:94:d2:50:d7:0f:33:bb:71: 60:04:22:5d:c2:a1:f7:d6:d0:39:b8:e9:42:b3:ea:3d:b8:d5: 9f:91:ef:a9:73:fe:fc:7d:f3:bd:f6:03:e1:0a:8a:14:24:98: 7d:22:a5:4e:a9:7b:ee:1a:f0:7b:93:0b:86:59:df:e5:35:14: 17:5a:f3:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oQxuV3iPfcVfCblpxEKJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNjg5NTcyYjIwMGJhNDg3OTM4MWM4NTc0Mjc0MjY1NTky YTE0YWIwHhcNMjUxMjE5MjIwMDM2WhcNMjUxMjIwMjIwMDM2WjAzMTEwLwYDVQQD EygwZTgxOGEzODYwMDM4NmI2NDE2MGI2MjM0YmIxZjNmOGVkZDc4NDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cPH0h9dcPslvPbC7cXUtA/mhJuX xMJIE0L2mkZimmL8sacBFE033CQ7AFXJCgJrGr5qPEyaoISBwy6xld4gjG6Bj3E+ +PEqf8zUid67CGXV5iSoVTCwlfekOrMmHRvVoO2Mya6XPzw75LPK0YMIpUj4Q1RY cCwrnitU/AW5F2IDRR/o0na9P9aSao+/XkYPcUPKJqZQ/Uo7TUKJfUAngxyEee6o 2WUXJ2bkgxDvjj9NhFq78O7ePrSTjFCPM8w9sGyK1KcZZDH12q+O7S3zvqIs0Jzj D3vessFvhCYA5RimkwTKJZa21EgB6RvkynhAUkD7RlhHdStyh5rQ8JTrQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6BijhgA4a2QWC2I0ux8/jt14REMB8GA1UdIwQY MBaAFIFolXKyALpIeTgchXQnQmVZKhSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OGQ2ODQtNTYyNy00ZmYyLWFhNGIt NjI0MTU5MmE5NDRiLzEvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84OGQ2ODQtNTYyNy00ZmYyLWFhNGItNjI0MTU5MmE5NDRi LzEvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFBUGZhC 0gNrKggcs+ELukXiJ/NYMwYSUtrAZa7IyKP9wEhhrGK44IEBJuFCXDj2qbotgLVp 8Fu+binHXrxw25roRs6ADEN123D9/WpFpTAf+O2q/wvEaTF54CqhjTZpEkfMVhHO +cPn/nqoxplA3S7cCFWRQGVy8kMDj9Sb1cSthRZ1g2BSbV8Ky6v9iwF/ijAVFyfK VuuEwJtPbwly7WVmjtTymX5Jj4fyQVWVy5bzy/7dmI6STDy6ah/l7pTSUNcPM7tx YAQiXcKh99bQObjpQrPqPbjVn5HvqXP+/H3zvfYD4QqKFCSYfSKlTql77hrwe5ML hlnf5TUUF1rzSg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:54:43 2025 by rpki-client