This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json) Hash identifier: YQ1Of3g4I2cZ3zsbzuAv8FdHJXlK1MtoWF/0kVjUUhw= Subject key identifier: 1D:C7:C0:7D:E6:9A:D5:AB:A4:6B:39:F3:7A:AF:3E:2C:9E:EF:73:CA Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4 Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4 Certificate serial: 019B4EF284E36F0B4FA7A4702216B731DFF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft Manifest number: 1796 Signing time: Wed 24 Dec 2025 06:01:14 +0000 Manifest this update: Wed 24 Dec 2025 06:01:14 +0000 Manifest next update: Thu 25 Dec 2025 06:01:14 +0000 Files and hashes: 1: Q9IYaPHKKKlO4sA9XCWmtz8FcgA.roa (hash: 3b2rcgvaeO3+9CrEYVWEp7XSo1030UaTBYseGkhn6jc=) 2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: HFoj5jdSQVohnLrz9iVIxwsKhOoK2ezVggujUlsSs8o=) 3: zHD1UIuWQeduzn45VRXboBoA5NM.roa (hash: ToC2fZb+9n4mNoZ0Xp4h8y1142lDAhVM0QODtU55JXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:84:e3:6f:0b:4f:a7:a4:70:22:16:b7:31:df:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4 Validity Not Before: Dec 24 06:01:14 2025 GMT Not After : Dec 25 06:01:14 2025 GMT Subject: CN=1dc7c07de69ad5aba46b39f37aaf3e2c9eef73ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:7a:09:29:ad:00:61:ad:00:d5:a8:4b:e3: 45:6f:c2:e1:07:a1:ee:b7:ca:c0:66:3a:dd:af:ea: 68:a3:31:2d:47:e9:77:03:1b:b8:45:02:58:b1:09: df:e4:b8:c3:0a:91:e0:72:1a:e0:39:cc:cd:ab:eb: 7b:32:64:d0:fa:7f:b4:48:45:79:ef:5d:c7:b2:71: 31:da:19:e6:73:69:a1:53:22:ae:5c:cc:93:61:84: d1:46:ec:5e:50:6b:a0:21:2d:be:4d:6c:09:f6:4f: 61:91:2f:7b:0c:47:a2:35:6a:9e:00:9c:91:10:84: 7d:2b:fe:95:bb:eb:88:4d:1b:ab:f9:5c:e8:8d:f3: 06:e7:98:a1:1d:c3:10:2f:d3:51:2b:36:e1:1d:88: 5c:6c:88:92:31:be:74:7a:38:b0:90:d8:0a:66:af: a2:cc:2b:f0:16:77:a0:f7:d5:40:4d:fb:d1:2b:39: f4:49:f9:ca:82:9f:95:6a:e4:8a:e3:18:88:d3:75: 9a:23:6d:cb:32:ff:05:71:5a:29:c6:00:87:ef:cd: 39:7e:c5:3e:77:d8:ee:c6:bf:ad:72:70:13:5f:b9: e3:a6:0f:6e:7d:6e:f4:69:d5:f8:04:83:b5:5b:d0: a5:c1:c2:02:d7:c3:16:96:8c:b7:9d:eb:27:ad:11: 48:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C7:C0:7D:E6:9A:D5:AB:A4:6B:39:F3:7A:AF:3E:2C:9E:EF:73:CA X509v3 Authority Key Identifier: keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:1d:81:83:3d:0a:b7:27:25:5e:4b:33:9e:aa:c8:bf:b4:70: bc:56:62:b4:e9:2e:b1:10:f3:67:08:37:b0:8d:e4:02:e9:19: 80:40:e6:b3:6c:1c:88:ad:97:30:07:fd:45:a3:9c:5b:42:b7: f5:36:5d:8f:57:61:7c:dc:8c:3d:c3:f5:98:b7:0a:41:6e:55: 33:f9:f7:8e:17:87:c7:0d:94:69:ea:17:4b:fb:c6:fb:6c:1d: 81:6f:9a:7a:c5:1e:12:98:b3:be:f6:e7:e1:e9:46:59:09:c3: aa:ca:e9:06:b4:f9:ea:05:ac:02:74:15:0f:cd:a2:8c:fe:c6: e1:f2:f4:87:22:f1:7e:8f:a9:5c:19:c7:f4:dc:02:64:97:ea: ac:6c:48:11:09:f2:a3:8e:a9:d5:bf:39:05:6f:ca:ce:81:eb: 07:81:d4:e5:2f:a0:21:fd:83:60:0d:97:ce:0d:9c:0f:28:2b: 75:d9:ee:b1:4c:92:af:c4:9b:4b:77:0a:7c:00:88:53:0f:9f: 82:0f:5f:a9:69:c6:64:9e:c0:ca:a5:f9:14:60:87:93:67:17: fd:3e:fd:84:ca:99:2e:92:8f:6c:e5:da:3a:49:3d:17:e0:8e: 72:c5:d1:e1:6a:e9:3f:9c:2d:eb:29:fb:1b:45:52:67:3d:18: a8:05:57:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8oTjbwtPp6RwIha3Md/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYmQwMDgyOTUzNmQ0Nzc0NWY0N2RhOWQxYThhNzJmNmRk NDYyZDQwHhcNMjUxMjI0MDYwMTE0WhcNMjUxMjI1MDYwMTE0WjAzMTEwLwYDVQQD EygxZGM3YzA3ZGU2OWFkNWFiYTQ2YjM5ZjM3YWFmM2UyYzllZWY3M2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZp6CSmtAGGtANWoS+NFb8LhB6Hu t8rAZjrdr+poozEtR+l3Axu4RQJYsQnf5LjDCpHgchrgOczNq+t7MmTQ+n+0SEV5 713HsnEx2hnmc2mhUyKuXMyTYYTRRuxeUGugIS2+TWwJ9k9hkS97DEeiNWqeAJyR EIR9K/6Vu+uITRur+VzojfMG55ihHcMQL9NRKzbhHYhcbIiSMb50ejiwkNgKZq+i zCvwFneg99VATfvRKzn0SfnKgp+VauSK4xiI03WaI23LMv8FcVopxgCH7805fsU+ d9juxr+tcnATX7njpg9ufW70adX4BIO1W9ClwcIC18MWloy3nesnrRFIGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3HwH3mmtWrpGs583qvPiye73PKMB8GA1UdIwQY MBaAFIC9AIKVNtR3RfR9qdGopy9t1GLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMt MDliOTkyMGZlMDBmLzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMtMDliOTkyMGZlMDBm LzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArB2Bgz0K tyclXksznqrIv7RwvFZitOkusRDzZwg3sI3kAukZgEDms2wciK2XMAf9RaOcW0K3 9TZdj1dhfNyMPcP1mLcKQW5VM/n3jheHxw2UaeoXS/vG+2wdgW+aesUeEpizvvbn 4elGWQnDqsrpBrT56gWsAnQVD82ijP7G4fL0hyLxfo+pXBnH9NwCZJfqrGxIEQny o46p1b85BW/KzoHrB4HU5S+gIf2DYA2Xzg2cDygrddnusUySr8SbS3cKfACIUw+f gg9fqWnGZJ7AyqX5FGCHk2cX/T79hMqZLpKPbOXaOkk9F+COcsXR4WrpP5wt6yn7 G0VSZz0YqAVXVQ== -----END CERTIFICATE-----Generated at Wed Dec 24 09:01:55 2025 by rpki-client