This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json) Hash identifier: j97x07s8J6bsH4dY0Ju72M41REoCyZvJ3uLAaQmsPDA= Subject key identifier: 87:70:A4:B8:26:19:FF:C5:3B:9D:69:FB:97:EB:38:9E:5E:BD:C6:82 Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3 Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3 Certificate serial: 019B390EF9F8A97955EF4A4D10C229D56276 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 00:00:41 +0000 Manifest this update: Sat 20 Dec 2025 00:00:41 +0000 Manifest next update: Sun 21 Dec 2025 00:00:41 +0000 Files and hashes: 1: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: 2slaNWkCVHfAnzcpdAf1WS0933cxvmpG0xbrM6yvz+0=) 2: qDh2JY1h_xNgvgx5Db5sVmUy5ks.roa (hash: I1r2aL4TOC/MGm5ShRW+1jSA/7hy7A6Iss+iJbXJ1A8=) 3: rj4zNee9qFUnSWdRyXBl1w5hL7U.roa (hash: ura4XN26mFPNxngI443E4Cbcpg3UZiyC6cycpOaLYgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:f9:f8:a9:79:55:ef:4a:4d:10:c2:29:d5:62:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3 Validity Not Before: Dec 20 00:00:41 2025 GMT Not After : Dec 21 00:00:41 2025 GMT Subject: CN=8770a4b82619ffc53b9d69fb97eb389e5ebdc682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b3:c9:b5:2a:91:0a:66:3e:b8:1f:4b:29:b9: 1f:3e:0a:30:b8:69:05:49:1d:c2:64:28:4d:b7:f7: d6:37:77:b6:95:ff:82:ee:ed:f3:2c:24:68:58:c8: da:da:ea:26:5d:39:0f:be:cd:9e:14:82:a2:04:9c: 88:cb:cc:06:fb:f0:fe:17:49:8d:1c:cd:21:c3:40: bc:0e:f2:20:58:bf:7e:c0:28:96:6b:6e:4a:58:24: 2c:48:80:4b:5a:ea:72:c5:a1:55:26:57:1f:0c:eb: 9c:ec:46:00:8b:16:4c:d3:cc:11:54:32:51:e4:98: 48:58:cf:68:d7:78:7f:93:12:74:b8:e8:0d:8e:59: e8:b7:05:db:d6:de:b2:51:71:e4:27:5f:ec:e5:c2: 14:c6:f5:59:fb:ac:91:c5:b5:13:c3:81:aa:f0:91: fa:d2:50:6c:f9:71:60:20:5f:82:3b:12:d3:a7:ed: a0:8e:dd:8a:a8:35:fa:44:40:97:01:77:c5:45:0c: 7f:a3:cb:a5:49:00:8b:1b:1c:98:73:e6:af:ac:32: 44:de:3f:31:e4:29:b8:34:fd:8e:80:31:cd:b0:81: 5a:5c:58:ba:32:b0:fc:68:21:8b:33:f9:83:66:32: 48:56:27:2d:cc:76:ea:d0:8f:21:a3:eb:d6:e4:9e: ee:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:70:A4:B8:26:19:FF:C5:3B:9D:69:FB:97:EB:38:9E:5E:BD:C6:82 X509v3 Authority Key Identifier: keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3e:38:da:b4:3a:a8:48:f4:2a:41:31:9a:78:76:72:d1:bd: 53:3e:2d:fa:ab:32:e5:3f:b6:39:08:2e:72:ad:52:0f:e5:40: cd:2d:ed:0c:b0:ca:6b:f3:78:69:9e:d4:2a:11:69:aa:32:fc: bd:48:0e:ab:88:49:0e:30:1d:de:a2:5a:b3:a1:30:20:bf:96: 9e:f3:c2:cf:04:16:2e:9a:49:44:f4:a7:b5:82:bf:ac:ed:70: bd:21:c4:67:16:c8:10:2a:a2:47:78:99:83:07:bf:fa:82:08: 12:dd:75:ff:00:11:6c:0f:91:22:ed:4f:98:9d:ba:f2:39:f7: ec:7e:35:c5:6d:e5:f3:f8:82:66:4e:d9:8b:7d:e2:60:7d:26: 19:ad:dc:eb:b1:01:67:f8:01:ce:30:ce:34:25:ba:b7:e5:a5: 4d:93:b6:a8:98:17:ca:08:a5:2d:ea:e4:59:30:40:ec:6f:e8: 76:80:06:0c:3a:b2:4a:b8:32:a2:7f:2f:99:ab:ef:f6:d4:36: 5b:dc:18:38:7f:31:52:af:83:f8:47:37:cb:fb:7a:33:f5:8b: e0:19:cc:35:ce:dc:7f:c6:4b:2d:94:7f:db:19:cb:7e:0d:a3: 37:e7:7c:4c:d3:b0:34:09:62:32:87:cc:9a:ae:b5:0b:20:db: 71:d7:81:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Dvn4qXlV70pNEMIp1WJ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMmY1YTZjMGI5NTY0N2YwNzAzNTBlNjUyNGUxMjIwZmJh NDdmYTMwHhcNMjUxMjIwMDAwMDQxWhcNMjUxMjIxMDAwMDQxWjAzMTEwLwYDVQQD Eyg4NzcwYTRiODI2MTlmZmM1M2I5ZDY5ZmI5N2ViMzg5ZTVlYmRjNjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7PJtSqRCmY+uB9LKbkfPgowuGkF SR3CZChNt/fWN3e2lf+C7u3zLCRoWMja2uomXTkPvs2eFIKiBJyIy8wG+/D+F0mN HM0hw0C8DvIgWL9+wCiWa25KWCQsSIBLWupyxaFVJlcfDOuc7EYAixZM08wRVDJR 5JhIWM9o13h/kxJ0uOgNjlnotwXb1t6yUXHkJ1/s5cIUxvVZ+6yRxbUTw4Gq8JH6 0lBs+XFgIF+COxLTp+2gjt2KqDX6RECXAXfFRQx/o8ulSQCLGxyYc+avrDJE3j8x 5Cm4NP2OgDHNsIFaXFi6MrD8aCGLM/mDZjJIVictzHbq0I8ho+vW5J7uJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdwpLgmGf/FO51p+5frOJ5evcaCMB8GA1UdIwQY MBaAFIIvWmwLlWR/BwNQ5lJOEiD7pH+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMt NWQwZTA5YTAyMDRmLzEvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMtNWQwZTA5YTAyMDRm LzEvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbj442rQ6 qEj0KkExmnh2ctG9Uz4t+qsy5T+2OQgucq1SD+VAzS3tDLDKa/N4aZ7UKhFpqjL8 vUgOq4hJDjAd3qJas6EwIL+WnvPCzwQWLppJRPSntYK/rO1wvSHEZxbIECqiR3iZ gwe/+oIIEt11/wARbA+RIu1PmJ268jn37H41xW3l8/iCZk7Zi33iYH0mGa3c67EB Z/gBzjDONCW6t+WlTZO2qJgXygilLerkWTBA7G/odoAGDDqySrgyon8vmavv9tQ2 W9wYOH8xUq+D+Ec3y/t6M/WL4BnMNc7cf8ZLLZR/2xnLfg2jN+d8TNOwNAliMofM mq61CyDbcdeB7A== -----END CERTIFICATE-----Generated at Sat Dec 20 04:32:12 2025 by rpki-client