This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json) Hash identifier: 5mAxh9hN8IhDs5t06ge29+JXCI0qFuTJrf6zyoK78rU= Subject key identifier: 26:CE:02:87:86:35:F8:3E:08:3D:86:7A:39:42:A7:C7:30:C2:88:E6 Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02 Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302 Certificate serial: 019B2E54466B3ECFE58E08CE10536F31BEC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft Manifest number: 0B3D Signing time: Wed 17 Dec 2025 22:00:33 +0000 Manifest this update: Wed 17 Dec 2025 22:00:33 +0000 Manifest next update: Thu 18 Dec 2025 22:00:33 +0000 Files and hashes: 1: 0x8juoo7AM8ugf31uQycejLtims.roa (hash: sJQg/bbbZFsef+zbbHa9OzqRT4fumHdl0Xl81Is/6E0=) 2: Nzh8YLpNUF4cU0rzBjfGCERDcYE.roa (hash: i2B2OXXjCTbw2kGS650IvMFo0E46R+ycXmvCyPDbizQ=) 3: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (hash: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=) 4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: Af1Aq2xT6kBUuHloJ99sUEtOepoFZLktYTsyoQp3oh4=) 5: i4pBlijYu7sjz616Su8j6sEp0KM.roa (hash: uHKnyOrHeN8Niu67x/4Qi3vMRGo0ABBXAuttwGbGRuk=) 6: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (hash: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=) 7: sizZNRJeMyfvZoIYAB6UC-zVc7U.roa (hash: Hn9xitBE6shoqbTIVL8aOgZmfrDePFpERxPmyPyqVEs=) 8: vywQrYyohPA7HiVpUnZvxi_OkIw.roa (hash: 9ddLtzX64XyzhFvBqGsy3QFMWw7/oarf8SrkFQVzpQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:46:6b:3e:cf:e5:8e:08:ce:10:53:6f:31:be:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302 Validity Not Before: Dec 17 22:00:33 2025 GMT Not After : Dec 18 22:00:33 2025 GMT Subject: CN=26ce02878635f83e083d867a3942a7c730c288e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6c:62:e5:a1:82:3f:aa:9f:7e:98:9d:38:72: 25:a1:9d:b9:b9:8f:ec:1b:eb:12:36:d8:24:99:cb: b7:36:1e:9e:a9:74:0b:13:8b:57:8b:fa:49:89:cb: ff:0c:d6:93:b2:3b:54:cb:46:d5:f0:c4:3c:31:4b: f7:a1:e5:73:3e:ff:1a:05:c1:48:ee:f6:49:a0:89: 77:a9:7d:fe:ac:9f:80:64:9b:6d:9c:a1:0e:bb:16: fc:c4:2c:99:40:7f:2c:45:da:ca:49:7d:98:c8:23: e6:51:43:0e:54:1a:06:e9:b0:80:fa:c7:e4:d8:6b: e5:a2:ed:d3:19:b3:13:32:b4:17:b2:e4:50:f3:58: db:ec:a6:2a:8b:23:fb:5e:84:87:70:16:bb:20:7f: 88:b3:b7:85:60:12:82:b5:76:75:10:51:ee:c9:d9: ae:b0:52:b9:43:60:90:4a:48:3c:8a:0b:30:0c:e5: e4:03:bd:21:16:32:01:91:0e:0b:57:1b:4c:4c:86: e4:3b:03:3e:bd:be:a0:34:77:4c:c9:cb:6a:c9:16: ff:b5:f2:e6:40:d7:36:95:f3:4a:74:7b:39:7b:4f: aa:6c:89:63:9d:d7:f2:0f:27:e7:95:9a:03:c0:f0: b5:0e:64:19:3d:e8:8f:88:91:f4:60:e9:b6:53:c9: 05:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CE:02:87:86:35:F8:3E:08:3D:86:7A:39:42:A7:C7:30:C2:88:E6 X509v3 Authority Key Identifier: keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f1:ba:b9:2a:5a:8c:11:2f:32:9d:ad:02:99:0a:97:f1:c2: 27:8a:74:d1:01:f9:5c:35:d4:dd:24:4a:f9:6b:2e:e1:bb:2d: 51:02:4f:93:5c:61:92:81:2f:1e:f3:9e:01:2b:da:df:d1:4a: b5:2a:96:d9:61:e0:06:bf:b5:25:45:ba:be:ad:8b:93:4d:ad: 99:20:9b:81:ec:c7:ee:46:7c:91:b7:4f:d2:f6:2f:05:be:8b: ea:59:b2:8c:c8:38:aa:87:c8:eb:a3:1f:44:dc:91:ab:6e:01: ae:9b:37:e3:99:2f:a9:41:38:01:c6:0b:0b:77:ea:47:f0:2e: 96:e5:0a:c7:b5:47:fe:98:be:b0:7d:0b:27:f3:f4:97:5d:f9: 3d:71:ef:04:52:11:aa:a6:e9:17:b7:ed:af:d7:62:1a:92:0e: b2:43:40:ff:d7:65:e2:bb:28:21:9f:29:f7:20:af:96:fb:90: af:67:b1:b2:01:80:23:f5:1b:68:a4:42:e1:0f:1e:6a:2a:7c: e1:f3:62:b7:bc:63:0e:2a:be:f8:c6:f4:19:9c:60:ac:37:b3: 3d:26:c1:63:f5:f9:52:5f:3b:24:b0:8b:42:7a:79:ef:ea:df: 67:47:6f:a7:f2:8b:fa:d5:37:84:42:a8:a6:68:40:ba:3d:05: df:01:58:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVEZrPs/ljgjOEFNvMb7JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYTdjZThiYWNiZWNlZWIxNmY2MDBiNjA3ZDFiZmQwODAz M2IzMDIwHhcNMjUxMjE3MjIwMDMzWhcNMjUxMjE4MjIwMDMzWjAzMTEwLwYDVQQD EygyNmNlMDI4Nzg2MzVmODNlMDgzZDg2N2EzOTQyYTdjNzMwYzI4OGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWxi5aGCP6qffpidOHIloZ25uY/s G+sSNtgkmcu3Nh6eqXQLE4tXi/pJicv/DNaTsjtUy0bV8MQ8MUv3oeVzPv8aBcFI 7vZJoIl3qX3+rJ+AZJttnKEOuxb8xCyZQH8sRdrKSX2YyCPmUUMOVBoG6bCA+sfk 2Gvlou3TGbMTMrQXsuRQ81jb7KYqiyP7XoSHcBa7IH+Is7eFYBKCtXZ1EFHuydmu sFK5Q2CQSkg8igswDOXkA70hFjIBkQ4LVxtMTIbkOwM+vb6gNHdMyctqyRb/tfLm QNc2lfNKdHs5e0+qbIljndfyDyfnlZoDwPC1DmQZPeiPiJH0YOm2U8kFKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbOAoeGNfg+CD2GejlCp8cwwojmMB8GA1UdIwQY MBaAFIGnzousvs7rFvYAtgfRv9CAM7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzct YjI3ZDg3MzBhMjcwLzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzctYjI3ZDg3MzBhMjcw LzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/G6uSpa jBEvMp2tApkKl/HCJ4p00QH5XDXU3SRK+Wsu4bstUQJPk1xhkoEvHvOeASva39FK tSqW2WHgBr+1JUW6vq2Lk02tmSCbgezH7kZ8kbdP0vYvBb6L6lmyjMg4qofI66Mf RNyRq24Brps345kvqUE4AcYLC3fqR/AuluUKx7VH/pi+sH0LJ/P0l135PXHvBFIR qqbpF7ftr9diGpIOskNA/9dl4rsoIZ8p9yCvlvuQr2exsgGAI/UbaKRC4Q8eaip8 4fNit7xjDiq++Mb0GZxgrDezPSbBY/X5Ul87JLCLQnp57+rfZ0dvp/KL+tU3hEKo pmhAuj0F3wFY7A== -----END CERTIFICATE-----Generated at Thu Dec 18 06:53:49 2025 by rpki-client