This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft File: gmf7Sgtne4N3kHuC-x-4gQov7wg.mft (raw, json) Hash identifier: Xv+hl4/unyg4kuPgrEsikA8jqKjlnCDS9McYp+55484= Subject key identifier: E2:D8:44:40:AE:4F:92:72:79:61:82:A6:E8:16:8A:61:27:BC:F7:F3 Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08 Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08 Certificate serial: 019B4437A438ABFC8E472DB7A1408B52FFA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft Manifest number: 179A Signing time: Mon 22 Dec 2025 04:00:55 +0000 Manifest this update: Mon 22 Dec 2025 04:00:55 +0000 Manifest next update: Tue 23 Dec 2025 04:00:55 +0000 Files and hashes: 1: M06N0gwo3JL6GFlpwhETdttP9PQ.roa (hash: JdKy18XjO1bCDj++PIiRzZGq0fdEiBKbHucnCQRbUms=) 2: gmf7Sgtne4N3kHuC-x-4gQov7wg.crl (hash: Dew+QpR6qIORnfBAj6SUkgWR0/ZCko4ewAUZ3CyIDyI=) 3: l6IYvh1CKLMSrMEr-TM7q3chK9Y.roa (hash: rnPxXzKtfkYxdX0ghFEuYclewjG7j4/p3CTTLzWXDi4=) 4: rJqYPA_Hva-IaBLfUn9RcoY2ojY.roa (hash: o6BNzu4DD6yxBTs+9aSDottFhpX2sbKr1oEfAdwf4NU=) 5: wpH7An9OGaqDDHbjqAXOYrzTOjY.roa (hash: 2UBnZqOnnI+7jNrBotsNcwolkfZL1bsPGHesYmJ3hac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:a4:38:ab:fc:8e:47:2d:b7:a1:40:8b:52:ff:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08 Validity Not Before: Dec 22 04:00:55 2025 GMT Not After : Dec 23 04:00:55 2025 GMT Subject: CN=e2d84440ae4f9272796182a6e8168a6127bcf7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:0f:2a:4c:76:a4:80:61:cc:1c:21:ad:9e: 97:0f:00:46:b5:ff:46:e0:28:dc:53:06:24:9e:40: bd:9b:d7:11:27:4f:6c:c5:04:4b:fa:a7:86:f7:b8: 7a:ef:aa:ef:33:ca:dd:cd:9e:06:0c:f2:01:92:82: 76:95:bb:08:f9:fc:d0:72:f0:61:0e:c7:c8:c5:f4: e2:54:d6:76:ac:7a:73:4f:1d:01:26:18:c9:a2:00: bb:54:f0:0a:82:6b:a2:1c:ae:34:6c:1f:de:40:15: 5a:49:f7:dc:a3:83:6b:af:a6:4e:08:00:e3:1a:01: 7b:ea:db:2a:df:65:7b:84:88:55:42:9a:29:75:ec: 99:64:aa:c1:cf:1d:9c:2c:e6:4b:96:15:0f:1b:25: 36:4b:35:fd:8f:b6:41:56:57:15:78:00:e9:34:25: a8:d7:35:40:82:03:00:fd:1b:fc:f8:9a:27:4f:63: ce:92:a6:e8:f6:9c:28:74:03:14:e2:28:23:43:6f: 79:26:de:4a:d0:01:ce:0a:98:e7:41:40:b9:23:2f: be:a6:9c:fd:ee:db:3d:b6:1c:c1:76:bb:7e:7b:73: ed:32:27:63:82:6c:68:00:0d:8f:16:b5:6e:48:56: 1f:a8:84:a7:66:e1:88:a7:ac:39:88:b1:f7:e2:8b: 1c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D8:44:40:AE:4F:92:72:79:61:82:A6:E8:16:8A:61:27:BC:F7:F3 X509v3 Authority Key Identifier: keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:44:7d:ea:72:24:be:dc:f1:fc:3e:5f:28:9b:2e:ad:40:bc: 7d:4b:82:c6:98:96:b4:92:30:3e:07:00:cf:37:cf:c7:51:1d: 75:71:1e:43:3f:54:13:7c:32:2e:f1:7a:76:cb:6c:c4:4a:39: 0c:61:28:e8:b3:3c:c4:de:db:6e:f5:5e:4f:4c:b5:1a:a3:00: 09:7f:7a:df:ca:2a:58:e1:b4:a9:99:4b:06:4f:1f:41:92:d9: 57:76:a9:78:0c:52:e2:9a:ae:6b:45:ee:e8:8c:ec:8f:37:a5: 4f:be:0d:35:4b:10:6d:f9:1e:d6:c9:1e:5f:f5:c0:e8:ee:73: dd:d5:d8:0a:46:7c:0b:55:4b:ce:61:c7:64:16:ff:f6:ac:58: dc:6b:06:c1:58:f4:8b:46:de:4b:ce:59:44:af:c3:67:a9:4c: ef:2f:0c:4f:d9:c5:25:cc:94:13:d6:48:3e:d2:f1:ee:33:4f: c9:9d:23:47:6a:b8:dd:fb:12:59:0d:42:a8:3b:c1:51:ec:9b: ed:fb:ee:67:1a:56:68:04:03:a0:7c:e5:23:d4:3a:fc:fd:32: f8:ed:2c:3c:e8:9a:90:b8:4c:e1:54:67:29:10:84:14:0e:d7: 5d:74:61:71:fa:e4:fa:b6:36:55:ca:f5:17:19:89:53:f3:48: 5f:fd:c1:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN6Q4q/yORy23oUCLUv+jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjdmYjRhMGI2NzdiODM3NzkwN2I4MmZiMWZiODgxMGEy ZmVmMDgwHhcNMjUxMjIyMDQwMDU1WhcNMjUxMjIzMDQwMDU1WjAzMTEwLwYDVQQD EyhlMmQ4NDQ0MGFlNGY5MjcyNzk2MTgyYTZlODE2OGE2MTI3YmNmN2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIQPKkx2pIBhzBwhrZ6XDwBGtf9G 4CjcUwYknkC9m9cRJ09sxQRL+qeG97h676rvM8rdzZ4GDPIBkoJ2lbsI+fzQcvBh DsfIxfTiVNZ2rHpzTx0BJhjJogC7VPAKgmuiHK40bB/eQBVaSffco4Nrr6ZOCADj GgF76tsq32V7hIhVQpopdeyZZKrBzx2cLOZLlhUPGyU2SzX9j7ZBVlcVeADpNCWo 1zVAggMA/Rv8+JonT2POkqbo9pwodAMU4igjQ295Jt5K0AHOCpjnQUC5Iy++ppz9 7ts9thzBdrt+e3PtMidjgmxoAA2PFrVuSFYfqISnZuGIp6w5iLH34oscXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLYRECuT5JyeWGCpugWimEnvPfzMB8GA1UdIwQY MBaAFIJn+0oLZ3uDd5B7gvsfuIEKL+8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUt NjM5ZTE0ZDA0ZGU2LzEvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUtNjM5ZTE0ZDA0ZGU2 LzEvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikR96nIk vtzx/D5fKJsurUC8fUuCxpiWtJIwPgcAzzfPx1EddXEeQz9UE3wyLvF6dstsxEo5 DGEo6LM8xN7bbvVeT0y1GqMACX9638oqWOG0qZlLBk8fQZLZV3apeAxS4pqua0Xu 6IzsjzelT74NNUsQbfke1skeX/XA6O5z3dXYCkZ8C1VLzmHHZBb/9qxY3GsGwVj0 i0beS85ZRK/DZ6lM7y8MT9nFJcyUE9ZIPtLx7jNPyZ0jR2q43fsSWQ1CqDvBUeyb 7fvuZxpWaAQDoHzlI9Q6/P0y+O0sPOiakLhM4VRnKRCEFA7XXXRhcfrk+rY2Vcr1 FxmJU/NIX/3Bdw== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:43 2025 by rpki-client