This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft File: gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json) Hash identifier: 3bA1aYVpM3n1DF5TOo2/+BU6/60Pd99DfIHa7Ldvq+I= Subject key identifier: F8:08:E0:09:C9:FD:DA:A5:41:75:47:77:FE:C4:D3:8B:E1:D9:71:E7 Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52 Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52 Certificate serial: 019B692049805C01407422C327E84D6A7F15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft Manifest number: 17A6 Signing time: Mon 29 Dec 2025 08:01:22 +0000 Manifest this update: Mon 29 Dec 2025 08:01:22 +0000 Manifest next update: Tue 30 Dec 2025 08:01:22 +0000 Files and hashes: 1: ReUkv2XBhq4jZK8mdlDBfah6_NY.roa (hash: 0JTSyIquJGzLqSds9ko3zMw9Lmr56Y3WjwQhPWRtRNo=) 2: XtfrcY0xGbaYSlWTXL9nm2Diii0.roa (hash: aEZWDKAQcPeSAXKY4jWlj23Ulwbg4fWY9kpGKgMl9kU=) 3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: prDxYy+OFhtdmVckkLdm/wbrobXmAZGDRsWzh26MRRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 08:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:20:49:80:5c:01:40:74:22:c3:27:e8:4d:6a:7f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52 Validity Not Before: Dec 29 08:01:22 2025 GMT Not After : Dec 30 08:01:22 2025 GMT Subject: CN=f808e009c9fddaa541754777fec4d38be1d971e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8f:c3:4d:1a:50:78:3b:35:85:7f:a8:ef:51: f8:73:2f:9c:cd:d0:b0:0a:02:01:f9:e7:0a:b1:0b: 4a:93:98:fe:dd:fc:70:53:65:d6:c3:83:28:49:a1: 32:5c:fe:9b:e7:34:a6:15:82:a7:70:8a:be:63:91: 28:21:8d:85:42:2f:be:0b:d0:b6:75:1c:50:ed:e4: c2:01:10:cd:93:d5:ee:29:70:75:4d:e8:a7:e4:d4: 84:9b:b2:f5:23:b9:8f:83:71:d9:e2:e0:c1:8a:c1: e2:d3:fe:61:c9:a9:94:dc:a0:5f:da:49:ff:c4:55: b1:29:d0:df:52:e7:ae:1d:2d:d8:59:a1:97:dc:25: fe:53:5b:3d:f4:63:ba:ef:6c:47:cc:2c:2f:61:0c: 36:81:30:58:e3:c4:df:b6:0b:21:11:aa:dc:90:dd: aa:80:2b:4d:0b:37:cb:a2:84:9d:94:f0:45:48:db: 4c:92:43:84:fd:63:e8:58:0a:7b:97:a2:07:6c:26: d6:9f:82:64:e6:eb:e2:b1:4a:ac:8e:5f:d8:ce:c2: 47:54:35:35:1f:ac:d7:96:0a:b8:86:b3:f5:6f:80: f4:b2:9b:bc:e0:da:f4:b4:e5:cc:c6:c7:c8:21:90: 2d:e6:c9:31:f6:6d:20:a5:08:ae:d1:d9:ad:c7:c8: 44:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:08:E0:09:C9:FD:DA:A5:41:75:47:77:FE:C4:D3:8B:E1:D9:71:E7 X509v3 Authority Key Identifier: keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:2c:b3:bb:6a:f5:f7:7b:8a:e3:cb:b1:26:7c:8c:88:03:76: 74:4d:c4:06:16:fb:47:9a:cb:dc:92:95:54:43:76:56:f4:4a: 06:b6:9a:24:0c:8f:03:4a:06:cb:b3:3a:39:ad:ec:9e:33:ee: ac:eb:bb:64:15:85:c4:73:a8:db:2f:64:25:c0:06:bf:78:2c: 92:05:87:80:4a:53:f5:0e:b8:d1:4a:a5:ac:48:47:98:76:0f: 6e:2e:ed:83:ce:f1:ba:23:0e:b0:c4:f3:4f:41:22:af:51:c8: 88:b9:8c:2b:db:8d:26:82:dd:f7:90:13:a1:2e:5e:81:0f:ed: ac:f4:11:4a:0b:c7:6c:35:c1:2e:29:fb:6a:2b:df:b4:83:a0: 17:45:c3:ec:b3:45:72:e1:e8:a8:0a:17:52:c4:51:c8:a6:4c: 79:d3:bf:db:cd:27:36:91:1c:c1:fd:0f:5c:b7:c7:3f:65:9b: dc:91:8c:68:c1:0a:fc:34:c2:a0:6b:88:a6:3e:14:8b:36:7d: 77:d1:2c:e7:bc:09:84:66:5f:40:39:71:14:37:13:18:7c:61: 5c:21:38:a9:56:43:a9:55:b0:01:0d:d6:74:1b:26:93:93:43: a6:a8:64:24:ef:66:d2:ee:b3:67:04:ed:85:ce:80:1a:5a:04: 64:01:fe:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpIEmAXAFAdCLDJ+hNan8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNjlkOWZmZTA0OGE3MDAwM2YxNmYwNmUyNGQ5YmYyZGI4 NWViNTIwHhcNMjUxMjI5MDgwMTIyWhcNMjUxMjMwMDgwMTIyWjAzMTEwLwYDVQQD EyhmODA4ZTAwOWM5ZmRkYWE1NDE3NTQ3NzdmZWM0ZDM4YmUxZDk3MWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6I/DTRpQeDs1hX+o71H4cy+czdCw CgIB+ecKsQtKk5j+3fxwU2XWw4MoSaEyXP6b5zSmFYKncIq+Y5EoIY2FQi++C9C2 dRxQ7eTCARDNk9XuKXB1Tein5NSEm7L1I7mPg3HZ4uDBisHi0/5hyamU3KBf2kn/ xFWxKdDfUueuHS3YWaGX3CX+U1s99GO672xHzCwvYQw2gTBY48TftgshEarckN2q gCtNCzfLooSdlPBFSNtMkkOE/WPoWAp7l6IHbCbWn4Jk5uvisUqsjl/YzsJHVDU1 H6zXlgq4hrP1b4D0spu84Nr0tOXMxsfIIZAt5skx9m0gpQiu0dmtx8hEWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgI4AnJ/dqlQXVHd/7E04vh2XHnMB8GA1UdIwQY MBaAFIBp2f/gSKcAA/FvBuJNm/LbhetSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWIt ZTAyMmUzMDA5YTcxLzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWItZTAyMmUzMDA5YTcx LzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCyzu2r1 93uK48uxJnyMiAN2dE3EBhb7R5rL3JKVVEN2VvRKBraaJAyPA0oGy7M6Oa3snjPu rOu7ZBWFxHOo2y9kJcAGv3gskgWHgEpT9Q640UqlrEhHmHYPbi7tg87xuiMOsMTz T0Eir1HIiLmMK9uNJoLd95AToS5egQ/trPQRSgvHbDXBLin7aivftIOgF0XD7LNF cuHoqAoXUsRRyKZMedO/280nNpEcwf0PXLfHP2Wb3JGMaMEK/DTCoGuIpj4UizZ9 d9Es57wJhGZfQDlxFDcTGHxhXCE4qVZDqVWwAQ3WdBsmk5NDpqhkJO9m0u6zZwTt hc6AGloEZAH+ow== -----END CERTIFICATE-----Generated at Mon Dec 29 13:28:10 2025 by rpki-client