This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft File: gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft (raw, json) Hash identifier: hzF4nig+6H/gaiEGB/wLYnPEFSbGq5ow0ep98n0sPUU= Subject key identifier: 6B:4D:25:61:A2:12:7B:62:5F:BC:A6:2C:DC:1C:D3:94:C8:3A:87:DF Authority key identifier: 80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15 Certificate issuer: /CN=80c028ad0e60d7ea8914b13c3a53d8f089160315 Certificate serial: 019B2EFB132749DAD220651624847FB1E485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft Manifest number: 0E92 Signing time: Thu 18 Dec 2025 01:02:44 +0000 Manifest this update: Thu 18 Dec 2025 01:02:44 +0000 Manifest next update: Fri 19 Dec 2025 01:02:44 +0000 Files and hashes: 1: gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl (hash: wocRZuHHJxJzOhmmqEUCL9JjCWhgICEFjBHJJlFIBrI=) 2: kT72_rs6FeeCr3dDSGrEzG7Qc-Y.roa (hash: aU4YilQ/j5WNVY1Q5u9ZzL1FCZbvOH4ANv0D/Jw9+To=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fb:13:27:49:da:d2:20:65:16:24:84:7f:b1:e4:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80c028ad0e60d7ea8914b13c3a53d8f089160315 Validity Not Before: Dec 18 01:02:44 2025 GMT Not After : Dec 19 01:02:44 2025 GMT Subject: CN=6b4d2561a2127b625fbca62cdc1cd394c83a87df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:82:7c:70:a3:b9:68:17:69:e2:37:51:a5:d3: d9:98:a5:ae:49:65:91:8b:91:28:f8:18:1b:19:5b: e7:a5:c6:34:36:e9:15:d8:e7:a5:ec:44:c8:34:06: c9:54:4b:8e:8f:c0:9b:e0:d7:d4:b0:b4:f0:8e:00: d2:93:89:8f:f5:d7:1c:1a:96:b4:f5:ca:6a:5e:cf: 30:d4:a0:df:36:cf:d4:89:00:f8:a6:36:fd:6a:b7: 87:bc:8f:0a:a1:d1:d9:68:98:18:d9:34:53:a1:dd: 3e:97:d3:64:05:81:6a:82:75:1e:3e:5f:4d:4d:ae: 2d:48:ec:b2:e0:a9:ea:ad:3b:db:64:86:f1:7d:fb: 6c:8f:a9:86:f7:38:8f:7f:5f:b6:49:93:41:70:2c: ab:94:6e:9d:7d:f7:f7:56:1c:dc:76:48:1e:17:a8: bf:30:46:df:6b:91:ed:ce:bb:d1:6b:7f:54:47:6e: e2:36:cd:63:65:05:59:7c:2a:25:c5:e2:30:00:84: df:c9:02:02:be:4b:1b:30:56:da:5f:ca:3e:58:fe: 8e:c8:f1:42:45:91:92:16:1e:47:50:29:42:80:49: b8:1d:ad:c6:89:da:d9:cf:bd:65:db:19:d6:45:23: 11:05:59:9a:f4:af:ee:de:6d:62:ed:5b:f7:16:94: c1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4D:25:61:A2:12:7B:62:5F:BC:A6:2C:DC:1C:D3:94:C8:3A:87:DF X509v3 Authority Key Identifier: keyid:80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8f:de:c6:52:3f:65:e2:e2:c0:72:d5:9a:08:15:46:1a:b9: a8:30:0c:b0:fb:6d:02:ff:ba:62:dc:a1:ef:27:61:c6:e1:97: 2c:9a:34:41:f6:2a:37:85:0d:4e:83:09:6c:5a:35:d2:9e:2f: e0:71:43:e4:8a:3b:7d:4c:b4:2c:7d:e4:fc:d9:c9:b0:90:86: 85:fb:b2:c7:c9:80:c0:df:37:98:24:a1:f5:d8:f4:cf:18:a3: e7:6d:a0:05:74:99:91:c6:7b:a6:68:7c:57:86:79:86:b5:2d: b3:76:ad:54:36:06:e5:f1:f2:65:ed:61:b5:b0:7f:12:4d:ad: 58:f7:e1:b3:1d:93:51:86:ac:34:72:f1:2c:e7:ec:e0:7d:52: 0f:43:88:d5:83:fc:d6:ba:05:5a:40:f6:42:84:92:7c:ff:01: 66:1f:5b:b1:c4:f7:26:37:ef:5d:9e:aa:12:6c:a9:34:eb:f4: 30:48:f7:78:f9:10:a5:3a:f4:0a:8f:17:27:16:80:81:f2:02: 6a:6d:ca:9d:d7:b2:34:5e:00:14:35:28:9a:fe:8a:8c:3a:35: 3b:98:dc:b6:81:26:39:ba:e5:08:4a:4f:2c:04:67:db:d4:ff: d2:56:5b:0b:59:f7:00:35:96:90:bc:15:d9:94:66:a7:e2:a5: 2a:9e:f1:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+xMnSdrSIGUWJIR/seSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYzAyOGFkMGU2MGQ3ZWE4OTE0YjEzYzNhNTNkOGYwODkx NjAzMTUwHhcNMjUxMjE4MDEwMjQ0WhcNMjUxMjE5MDEwMjQ0WjAzMTEwLwYDVQQD Eyg2YjRkMjU2MWEyMTI3YjYyNWZiY2E2MmNkYzFjZDM5NGM4M2E4N2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIJ8cKO5aBdp4jdRpdPZmKWuSWWR i5Eo+BgbGVvnpcY0NukV2Oel7ETINAbJVEuOj8Cb4NfUsLTwjgDSk4mP9dccGpa0 9cpqXs8w1KDfNs/UiQD4pjb9areHvI8KodHZaJgY2TRTod0+l9NkBYFqgnUePl9N Ta4tSOyy4KnqrTvbZIbxfftsj6mG9ziPf1+2SZNBcCyrlG6dfff3VhzcdkgeF6i/ MEbfa5HtzrvRa39UR27iNs1jZQVZfColxeIwAITfyQICvksbMFbaX8o+WP6OyPFC RZGSFh5HUClCgEm4Ha3GidrZz71l2xnWRSMRBVma9K/u3m1i7Vv3FpTBNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtNJWGiEntiX7ymLNwc05TIOoffMB8GA1UdIwQY MBaAFIDAKK0OYNfqiRSxPDpT2PCJFgMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ01Bb3JRNWcxLXFKRkxFOE9sUFk4SWtXQXhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iNWZmNjYtODA3ZC00YmYxLWFiZTkt YTNiNGM5MDAyNDFmLzEvZ01Bb3JRNWcxLXFKRkxFOE9sUFk4SWtXQXhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iNWZmNjYtODA3ZC00YmYxLWFiZTktYTNiNGM5MDAyNDFm LzEvZ01Bb3JRNWcxLXFKRkxFOE9sUFk4SWtXQXhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHY/exlI/ ZeLiwHLVmggVRhq5qDAMsPttAv+6Ytyh7ydhxuGXLJo0QfYqN4UNToMJbFo10p4v 4HFD5Io7fUy0LH3k/NnJsJCGhfuyx8mAwN83mCSh9dj0zxij522gBXSZkcZ7pmh8 V4Z5hrUts3atVDYG5fHyZe1htbB/Ek2tWPfhsx2TUYasNHLxLOfs4H1SD0OI1YP8 1roFWkD2QoSSfP8BZh9bscT3JjfvXZ6qEmypNOv0MEj3ePkQpTr0Co8XJxaAgfIC am3KndeyNF4AFDUomv6KjDo1O5jctoEmObrlCEpPLARn29T/0lZbC1n3ADWWkLwV 2ZRmp+KlKp7xrw== -----END CERTIFICATE-----Generated at Thu Dec 18 10:23:48 2025 by rpki-client