This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json) Hash identifier: o8n/xsDnNCTSjqU8J2gzUKdQsqu+JOn9mW8gaUx4nmI= Subject key identifier: 9D:D6:F7:89:21:3C:A4:B1:76:B1:D3:C6:E0:91:AB:96:CF:E7:CF:19 Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02 Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302 Certificate serial: 019B2C6617AC3D98CF2B8651DFDA863E32E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft Manifest number: 0B3C Signing time: Wed 17 Dec 2025 13:00:46 +0000 Manifest this update: Wed 17 Dec 2025 13:00:46 +0000 Manifest next update: Thu 18 Dec 2025 13:00:46 +0000 Files and hashes: 1: 0x8juoo7AM8ugf31uQycejLtims.roa (hash: sJQg/bbbZFsef+zbbHa9OzqRT4fumHdl0Xl81Is/6E0=) 2: Nzh8YLpNUF4cU0rzBjfGCERDcYE.roa (hash: i2B2OXXjCTbw2kGS650IvMFo0E46R+ycXmvCyPDbizQ=) 3: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (hash: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=) 4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: gsNQtqPZs7Fj5CyiQ5Xzhnvdc5S5WnARSryTxjCkzLM=) 5: i4pBlijYu7sjz616Su8j6sEp0KM.roa (hash: uHKnyOrHeN8Niu67x/4Qi3vMRGo0ABBXAuttwGbGRuk=) 6: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (hash: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=) 7: sizZNRJeMyfvZoIYAB6UC-zVc7U.roa (hash: Hn9xitBE6shoqbTIVL8aOgZmfrDePFpERxPmyPyqVEs=) 8: vywQrYyohPA7HiVpUnZvxi_OkIw.roa (hash: 9ddLtzX64XyzhFvBqGsy3QFMWw7/oarf8SrkFQVzpQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:17:ac:3d:98:cf:2b:86:51:df:da:86:3e:32:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302 Validity Not Before: Dec 17 13:00:46 2025 GMT Not After : Dec 18 13:00:46 2025 GMT Subject: CN=9dd6f789213ca4b176b1d3c6e091ab96cfe7cf19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:21:e3:a4:5a:85:76:3d:44:45:73:27:1e:32: a1:2d:e0:f7:4c:f6:cb:3b:10:91:fc:77:91:e0:54: 34:7e:5f:77:f8:03:6e:e0:30:f7:7b:6d:98:a9:ea: ef:f2:52:45:3e:a6:81:3d:e9:11:c8:17:a8:b5:4e: 18:ba:36:c1:3c:29:91:66:87:08:ff:c9:cc:1d:48: 30:af:b2:0e:9d:eb:56:dc:9e:f7:db:f1:7e:49:d0: 59:96:92:93:0e:fc:c5:6f:80:7d:5c:ba:be:e8:b2: fb:a6:c9:3d:38:8c:6d:93:61:f7:db:5e:7a:83:dc: b3:ff:2a:b2:74:7d:db:4f:26:52:5b:f6:fb:0f:7d: c0:f5:c5:33:0b:d7:df:fc:b8:d4:0d:83:05:c7:0c: fe:fe:77:04:46:b9:1b:e9:dc:f9:85:da:14:ca:f4: d2:a9:b4:14:71:3f:9c:9e:b6:0d:ee:88:86:09:ea: ea:8d:67:01:cc:41:a4:60:a0:cd:d7:7e:52:02:84: fb:88:14:ee:2d:cd:f9:b5:ef:54:d9:23:33:42:4d: c2:9f:bd:75:8e:8c:93:4e:f0:ed:94:4c:f0:15:bf: 48:7d:c2:c7:f1:f1:39:f4:05:5d:05:ad:46:9f:54: 3b:4f:e0:bb:17:17:ee:65:8b:0a:aa:9e:11:f7:89: df:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D6:F7:89:21:3C:A4:B1:76:B1:D3:C6:E0:91:AB:96:CF:E7:CF:19 X509v3 Authority Key Identifier: keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:20:7e:97:20:ce:c1:2c:14:67:ff:ad:04:ab:46:9c:65:e1: 91:d4:13:8c:89:1d:84:9d:6e:dd:ad:1d:89:aa:5b:07:62:64: e3:e2:cc:4c:e1:ed:bd:57:b9:a9:89:69:3c:fd:35:a0:3f:86: 82:60:60:f7:44:dd:3f:95:62:1c:ad:4e:22:1e:b5:3c:fc:83: 3c:87:e6:55:02:8d:8a:fc:f5:54:6d:96:28:be:ef:8a:c1:58: f4:05:7b:05:a8:ef:bc:df:3f:00:6f:4e:7d:e9:42:3c:11:be: e9:a6:7a:a2:ec:52:ba:c2:34:22:d0:68:46:31:cb:5d:ff:a5: 32:ee:8e:aa:37:ed:f1:0f:00:8e:0a:ca:a3:b8:3e:b7:c1:e6: fa:e5:f4:c2:4d:51:dd:2a:9a:48:58:c4:11:2c:3c:ee:16:bd: 57:ea:85:a4:49:4a:2c:41:13:4c:61:29:f8:9f:3f:0d:1c:f7: 19:73:0d:6f:e3:3c:51:a6:33:de:af:02:4d:f1:f1:89:41:6c: 75:57:2e:27:b3:77:b5:80:13:3a:de:17:76:8c:7f:f1:9d:4e: 0c:1f:c6:7c:dc:13:b2:0e:a0:73:f8:9e:41:9b:fb:e4:5a:bc: a4:5b:a6:49:19:82:22:c5:bd:d9:44:88:8f:7c:b8:32:45:5d: 10:c8:21:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZhesPZjPK4ZR39qGPjLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYTdjZThiYWNiZWNlZWIxNmY2MDBiNjA3ZDFiZmQwODAz M2IzMDIwHhcNMjUxMjE3MTMwMDQ2WhcNMjUxMjE4MTMwMDQ2WjAzMTEwLwYDVQQD Eyg5ZGQ2Zjc4OTIxM2NhNGIxNzZiMWQzYzZlMDkxYWI5NmNmZTdjZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryHjpFqFdj1ERXMnHjKhLeD3TPbL OxCR/HeR4FQ0fl93+ANu4DD3e22Yqerv8lJFPqaBPekRyBeotU4YujbBPCmRZocI /8nMHUgwr7IOnetW3J732/F+SdBZlpKTDvzFb4B9XLq+6LL7psk9OIxtk2H32156 g9yz/yqydH3bTyZSW/b7D33A9cUzC9ff/LjUDYMFxwz+/ncERrkb6dz5hdoUyvTS qbQUcT+cnrYN7oiGCerqjWcBzEGkYKDN135SAoT7iBTuLc35te9U2SMzQk3Cn711 joyTTvDtlEzwFb9IfcLH8fE59AVdBa1Gn1Q7T+C7FxfuZYsKqp4R94nfDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3W94khPKSxdrHTxuCRq5bP588ZMB8GA1UdIwQY MBaAFIGnzousvs7rFvYAtgfRv9CAM7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzct YjI3ZDg3MzBhMjcwLzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzctYjI3ZDg3MzBhMjcw LzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCB+lyDO wSwUZ/+tBKtGnGXhkdQTjIkdhJ1u3a0diapbB2Jk4+LMTOHtvVe5qYlpPP01oD+G gmBg90TdP5ViHK1OIh61PPyDPIfmVQKNivz1VG2WKL7visFY9AV7BajvvN8/AG9O felCPBG+6aZ6ouxSusI0ItBoRjHLXf+lMu6Oqjft8Q8AjgrKo7g+t8Hm+uX0wk1R 3SqaSFjEESw87ha9V+qFpElKLEETTGEp+J8/DRz3GXMNb+M8UaYz3q8CTfHxiUFs dVcuJ7N3tYATOt4Xdox/8Z1ODB/GfNwTsg6gc/ieQZv75Fq8pFumSRmCIsW92USI j3y4MkVdEMghyQ== -----END CERTIFICATE-----Generated at Wed Dec 17 16:48:37 2025 by rpki-client