This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft File: gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json) Hash identifier: Rdllat3+V0HbLIPE4bkWfLuQ0K9AbYg80Y6FegfeANs= Subject key identifier: 23:11:B6:0E:11:7F:EF:C4:A5:A1:31:CC:E2:99:62:C6:98:35:45:C2 Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52 Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52 Certificate serial: 019B330D066FCA14A8DEB3D508ABFFCFA3C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft Manifest number: 178A Signing time: Thu 18 Dec 2025 20:00:50 +0000 Manifest this update: Thu 18 Dec 2025 20:00:50 +0000 Manifest next update: Fri 19 Dec 2025 20:00:50 +0000 Files and hashes: 1: ReUkv2XBhq4jZK8mdlDBfah6_NY.roa (hash: 0JTSyIquJGzLqSds9ko3zMw9Lmr56Y3WjwQhPWRtRNo=) 2: XtfrcY0xGbaYSlWTXL9nm2Diii0.roa (hash: aEZWDKAQcPeSAXKY4jWlj23Ulwbg4fWY9kpGKgMl9kU=) 3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: Phqncvt5DzxpI/e7yK6BmB5ujTqsHfIUueXGsczH6M8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:06:6f:ca:14:a8:de:b3:d5:08:ab:ff:cf:a3:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52 Validity Not Before: Dec 18 20:00:50 2025 GMT Not After : Dec 19 20:00:50 2025 GMT Subject: CN=2311b60e117fefc4a5a131cce29962c6983545c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:87:d9:71:5c:56:4a:52:04:e2:da:29:f0:42: 6e:eb:15:80:51:c4:11:4e:39:23:7f:ed:41:32:d3: 33:ac:87:1a:a8:aa:fe:57:fd:70:f2:4c:62:b4:1f: 65:8d:9a:aa:79:f8:57:de:68:d9:f1:a3:cb:8e:bb: 96:23:9d:99:a1:a8:a3:b2:30:c8:01:69:46:09:b4: cb:69:5d:a0:69:e0:a9:9e:bf:7e:ac:30:5a:f4:55: b8:06:c7:9c:31:1e:a5:38:bd:c1:77:22:22:0f:97: 57:8a:db:07:66:4b:1d:98:c8:0c:ae:75:8d:5a:f2: 67:b7:25:fd:c6:1b:8b:d5:0b:52:ad:6e:77:73:9c: fe:13:aa:b1:ca:d2:ab:67:e8:d1:6a:bf:a6:88:ab: f7:85:cf:d1:8e:4c:c3:19:44:cd:3f:7d:6e:ce:8f: e4:b3:bf:5c:66:82:28:53:af:6d:cd:0d:f0:17:0f: b1:87:98:53:f4:3a:a8:7a:e6:06:d8:49:63:c9:f1: c0:37:d9:40:c2:14:d1:95:55:05:e3:4c:cb:25:94: 40:51:36:fa:77:79:b5:63:3d:94:a8:da:e2:0d:b8: 15:b1:d2:ea:7b:d9:06:b2:cb:88:78:04:1f:dd:fd: 17:91:e2:d1:97:38:e7:52:cd:b1:ab:f7:4b:66:12: a2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:11:B6:0E:11:7F:EF:C4:A5:A1:31:CC:E2:99:62:C6:98:35:45:C2 X509v3 Authority Key Identifier: keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ed:01:a4:a7:c0:9a:47:a9:fb:47:9b:6b:07:9f:d3:cb:3b: 69:b3:74:6d:ff:cf:0f:99:ae:64:4e:b5:d4:75:d1:d1:9e:fc: 8b:f1:2f:76:fe:3b:66:64:ac:f9:6c:a1:13:18:d7:c7:40:11: 7c:63:75:8e:ad:06:7e:fe:2d:a1:2e:91:40:18:25:ab:28:5a: 2e:72:0c:e2:41:6a:f2:33:d8:c8:70:ea:3f:9e:3e:b3:83:21: 41:af:43:7a:60:c1:00:de:89:da:5b:3f:bb:7f:d9:cf:ca:bd: 77:a9:19:63:21:18:aa:dd:66:26:df:08:c5:e6:af:76:d9:2b: bf:5a:6a:4f:1f:96:de:ff:8c:a8:d9:be:26:61:a6:fa:a8:4f: b9:c4:a6:82:88:4b:31:1b:7b:8e:3e:c8:bc:0e:34:12:aa:f3: 8d:2c:16:aa:05:6e:57:12:c0:18:0d:7c:53:b1:c0:5d:ca:32: 7f:84:c2:40:ca:59:f1:c5:2e:ed:b6:4c:dd:c4:8b:03:3b:3e: 8a:ce:36:56:19:97:e3:07:7f:ea:22:18:67:21:9b:d2:e6:42: 14:b9:22:73:2d:96:a0:19:8d:fc:c7:09:41:a1:2d:53:da:77: f6:5f:86:d4:bb:3f:0e:38:59:48:1c:ba:ee:cd:bd:e7:8e:a4: 83:a1:92:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDQZvyhSo3rPVCKv/z6PFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNjlkOWZmZTA0OGE3MDAwM2YxNmYwNmUyNGQ5YmYyZGI4 NWViNTIwHhcNMjUxMjE4MjAwMDUwWhcNMjUxMjE5MjAwMDUwWjAzMTEwLwYDVQQD EygyMzExYjYwZTExN2ZlZmM0YTVhMTMxY2NlMjk5NjJjNjk4MzU0NWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiofZcVxWSlIE4top8EJu6xWAUcQR Tjkjf+1BMtMzrIcaqKr+V/1w8kxitB9ljZqqefhX3mjZ8aPLjruWI52ZoaijsjDI AWlGCbTLaV2gaeCpnr9+rDBa9FW4BsecMR6lOL3BdyIiD5dXitsHZksdmMgMrnWN WvJntyX9xhuL1QtSrW53c5z+E6qxytKrZ+jRar+miKv3hc/RjkzDGUTNP31uzo/k s79cZoIoU69tzQ3wFw+xh5hT9DqoeuYG2EljyfHAN9lAwhTRlVUF40zLJZRAUTb6 d3m1Yz2UqNriDbgVsdLqe9kGssuIeAQf3f0XkeLRlzjnUs2xq/dLZhKiGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMRtg4Rf+/EpaExzOKZYsaYNUXCMB8GA1UdIwQY MBaAFIBp2f/gSKcAA/FvBuJNm/LbhetSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWIt ZTAyMmUzMDA5YTcxLzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWItZTAyMmUzMDA5YTcx LzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+0BpKfA mkep+0ebawef08s7abN0bf/PD5muZE611HXR0Z78i/Evdv47ZmSs+WyhExjXx0AR fGN1jq0Gfv4toS6RQBglqyhaLnIM4kFq8jPYyHDqP54+s4MhQa9DemDBAN6J2ls/ u3/Zz8q9d6kZYyEYqt1mJt8Ixeavdtkrv1pqTx+W3v+MqNm+JmGm+qhPucSmgohL MRt7jj7IvA40EqrzjSwWqgVuVxLAGA18U7HAXcoyf4TCQMpZ8cUu7bZM3cSLAzs+ is42VhmX4wd/6iIYZyGb0uZCFLkicy2WoBmN/McJQaEtU9p39l+G1Ls/DjhZSBy6 7s29546kg6GSYw== -----END CERTIFICATE-----Generated at Fri Dec 19 02:33:15 2025 by rpki-client