This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json) Hash identifier: xuThuTF8h9ES8IeIBixplhUDKt7hsU2M/voKu/Shl/A= Subject key identifier: 30:14:0C:E9:38:B9:5A:38:5A:D3:3B:0A:12:42:10:AE:04:3A:88:79 Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b Certificate serial: 019B3CEBC890CCDDFC1CCF927B00FA9EDDB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft Manifest number: 1426 Signing time: Sat 20 Dec 2025 18:00:43 +0000 Manifest this update: Sat 20 Dec 2025 18:00:43 +0000 Manifest next update: Sun 21 Dec 2025 18:00:43 +0000 Files and hashes: 1: PShglmQTXkIQHkPe8FzwFmHj5JU.roa (hash: /e+wgkBq61bmma1KHWS9Osz5g9pecTkL2xoyoNPkRJQ=) 2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: CzC59uubt9tT3ltI04HjXBt611Gq+Dq1HvafI2xdmJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:c8:90:cc:dd:fc:1c:cf:92:7b:00:fa:9e:dd:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b Validity Not Before: Dec 20 18:00:43 2025 GMT Not After : Dec 21 18:00:43 2025 GMT Subject: CN=30140ce938b95a385ad33b0a124210ae043a8879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:e0:40:b5:f9:ba:e3:6c:e9:b5:79:1d:6b: 45:6c:37:65:3d:c4:9b:27:00:74:89:ae:d3:c5:61: fd:bb:c5:44:85:80:0f:6d:99:2d:5b:cb:69:3f:ac: 37:fc:29:a7:d2:30:a4:c8:10:c6:2a:65:25:2e:00: 67:9b:6a:41:24:ce:bc:03:5a:be:67:e3:5f:38:a7: 15:19:84:07:ec:d3:cf:3d:5a:60:49:86:34:49:40: 26:a9:83:2f:a0:3b:f2:e3:af:78:3e:d8:ac:2b:42: b2:63:9a:43:fc:83:49:6e:1b:c1:0f:e9:fc:15:54: 7a:c7:b3:4a:ca:e0:29:0a:18:ba:17:51:b8:b3:d7: 59:b5:b4:ac:44:46:23:b5:d8:e5:b8:ad:1e:43:80: 48:7e:1e:c8:3a:91:bf:31:0f:de:9d:24:33:a2:17: 07:e1:20:42:58:40:81:e1:a0:9b:0a:a4:1e:14:50: 03:0c:1f:1b:dc:7f:0c:22:93:2a:42:76:5c:30:95: a9:e2:3f:47:be:f7:94:0f:3b:0b:0b:1f:52:3e:d7: 79:58:f4:32:d5:e5:7a:6d:12:87:80:e3:94:4c:fe: bf:e3:76:0f:ff:7a:75:61:48:f8:8b:6d:62:b9:82: 3a:55:91:a7:c6:ca:46:a6:b6:fe:73:c5:93:84:d4: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:14:0C:E9:38:B9:5A:38:5A:D3:3B:0A:12:42:10:AE:04:3A:88:79 X509v3 Authority Key Identifier: keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:70:80:4d:9b:64:ed:8d:3d:2d:73:26:5d:85:a0:d5:fc:29: 96:a1:70:47:d5:bb:3f:9c:77:50:92:a1:4e:86:5e:07:47:73: 13:47:9f:50:72:56:31:7c:c2:2f:f9:00:f2:33:2f:4f:aa:d6: 1a:a9:f9:16:9a:46:f6:f2:17:18:1b:d8:d8:f3:7d:2e:9b:01: 16:c8:c3:37:e4:a2:8d:9b:68:92:b1:f4:30:49:a8:40:30:c0: 01:a1:e2:39:7f:31:a8:38:ef:04:97:eb:e7:be:36:61:7f:fd: 1b:8f:a9:8a:dd:6e:8c:f7:fc:24:8e:06:31:ab:02:af:10:1a: 83:d3:fa:9a:8f:f2:38:81:3e:d2:3e:83:f7:8c:72:c8:2a:d6: fa:43:f8:ef:cd:78:35:55:f9:6e:26:3e:79:75:c6:06:6e:2b: 54:66:84:75:0a:0a:8f:f7:21:60:85:4d:bc:10:ec:74:b0:1d: 79:2a:2c:78:5b:f6:cf:e7:8a:dd:79:52:23:0d:e9:ae:4c:4f: bd:4c:68:7d:5b:be:05:fe:a7:7d:5a:68:ff:19:e4:84:80:80: ec:87:de:25:a4:0a:3c:70:df:bb:f7:21:c2:32:94:88:96:6b: 49:7f:6a:5d:b1:c0:96:d9:1b:19:b4:7f:f4:14:21:9d:32:e3: 89:26:71:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs868iQzN38HM+SewD6nt2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNWRiNTY3ODEzOWUyZWVhY2U4OWI1ZWU5OTgyYzM1NDQ5 YzBiM2IwHhcNMjUxMjIwMTgwMDQzWhcNMjUxMjIxMTgwMDQzWjAzMTEwLwYDVQQD EygzMDE0MGNlOTM4Yjk1YTM4NWFkMzNiMGExMjQyMTBhZTA0M2E4ODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqbgQLX5uuNs6bV5HWtFbDdlPcSb JwB0ia7TxWH9u8VEhYAPbZktW8tpP6w3/Cmn0jCkyBDGKmUlLgBnm2pBJM68A1q+ Z+NfOKcVGYQH7NPPPVpgSYY0SUAmqYMvoDvy4694PtisK0KyY5pD/INJbhvBD+n8 FVR6x7NKyuApChi6F1G4s9dZtbSsREYjtdjluK0eQ4BIfh7IOpG/MQ/enSQzohcH 4SBCWECB4aCbCqQeFFADDB8b3H8MIpMqQnZcMJWp4j9HvveUDzsLCx9SPtd5WPQy 1eV6bRKHgOOUTP6/43YP/3p1YUj4i21iuYI6VZGnxspGprb+c8WThNS1YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAUDOk4uVo4WtM7ChJCEK4EOoh5MB8GA1UdIwQY MBaAFIBdtWeBOeLurOibXumYLDVEnAs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zZGQwODItYzUwMy00NWI4LTliMDct OTIyOTIzZTg5OGU2LzEvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8zZGQwODItYzUwMy00NWI4LTliMDctOTIyOTIzZTg5OGU2 LzEvZ0YyMVo0RTU0dTZzNkp0ZTZaZ3NOVVNjQ3pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHCATZtk 7Y09LXMmXYWg1fwplqFwR9W7P5x3UJKhToZeB0dzE0efUHJWMXzCL/kA8jMvT6rW Gqn5FppG9vIXGBvY2PN9LpsBFsjDN+SijZtokrH0MEmoQDDAAaHiOX8xqDjvBJfr 5742YX/9G4+pit1ujPf8JI4GMasCrxAag9P6mo/yOIE+0j6D94xyyCrW+kP47814 NVX5biY+eXXGBm4rVGaEdQoKj/chYIVNvBDsdLAdeSoseFv2z+eK3XlSIw3prkxP vUxofVu+Bf6nfVpo/xnkhICA7IfeJaQKPHDfu/chwjKUiJZrSX9qXbHAltkbGbR/ 9BQhnTLjiSZxCw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:40:28 2025 by rpki-client