This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft File: _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft (raw, json) Hash identifier: hYqmVHvGMzXAx0SuLFCke0HUc1/hpNVUNn7qmnnoE8M= Subject key identifier: E3:B5:46:F0:68:50:B0:39:8F:2E:32:B9:D5:56:DF:68:61:C6:87:1E Authority key identifier: FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01 Certificate issuer: /CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01 Certificate serial: 019B62B01F3C64D1ED71B81BB341DAA03DF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft Manifest number: 0886 Signing time: Sun 28 Dec 2025 02:01:07 +0000 Manifest this update: Sun 28 Dec 2025 02:01:07 +0000 Manifest next update: Mon 29 Dec 2025 02:01:07 +0000 Files and hashes: 1: _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl (hash: OFmH3YnS2MhCdUEX6AsJXRZbJHkxE6P5AfdSWIiZ9Bk=) 2: oYPmCSWvS8EzeEC8QLUq6x_eYrI.roa (hash: 1A9wNN6kYL22cNZ71fS4DQFjU5QHCoE6jNJ2g/Xtw44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:b0:1f:3c:64:d1:ed:71:b8:1b:b3:41:da:a0:3d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01 Validity Not Before: Dec 28 02:01:07 2025 GMT Not After : Dec 29 02:01:07 2025 GMT Subject: CN=e3b546f06850b0398f2e32b9d556df6861c6871e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:37:a3:9b:a5:ce:d3:6d:ce:be:56:b0:af:54: f3:fc:d0:fc:5d:a5:9d:66:a7:e7:3d:39:a9:4c:bf: 3d:a4:14:e6:0a:c2:a9:9f:40:f6:b0:9a:2a:b4:e3: 7c:7f:6d:09:62:ce:8c:10:e2:35:46:5f:ff:c6:33: 82:78:d2:65:3a:a3:58:14:da:3c:50:70:7a:28:18: 5b:82:d2:ba:5a:3a:49:00:3a:64:35:60:63:17:30: 79:3c:d8:99:5b:b4:f7:59:d1:fd:5d:a2:62:e3:ee: 3a:38:aa:a0:c4:25:e5:72:9e:05:39:28:56:76:b2: 81:98:f3:c5:48:e1:9c:dd:32:b6:13:07:f3:36:02: e3:7f:98:76:88:71:f1:d4:9f:ad:a7:05:f7:5d:b4: ee:4c:a8:7d:71:24:57:02:d3:23:ff:5c:a1:3b:ce: 5c:6c:23:fd:9c:1f:64:68:12:ba:f6:66:3d:0d:5c: d5:e5:ed:0b:f0:1c:59:63:83:c2:b4:4d:6a:27:21: af:67:5e:f8:a0:85:e4:67:29:b7:18:e8:41:bd:3f: 96:2e:8c:bf:8e:26:33:8f:fa:2d:c2:c0:55:8d:02: be:6c:76:f3:32:e6:48:d6:ab:d6:8d:59:62:a6:bb: 11:5f:81:24:43:97:f0:94:b8:c1:11:e6:e3:97:d7: 93:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B5:46:F0:68:50:B0:39:8F:2E:32:B9:D5:56:DF:68:61:C6:87:1E X509v3 Authority Key Identifier: keyid:FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:42:29:9d:77:82:dc:ae:ed:8c:94:d2:74:b4:82:11:24:c3: f4:03:8d:83:04:19:47:8d:e7:9e:85:53:e2:f8:dd:7a:43:ab: 94:60:15:30:df:23:05:70:85:1c:20:2b:0f:d9:f7:27:ce:e6: 74:3e:2f:88:e1:f9:89:8b:2a:0b:dd:fe:a7:d6:a5:fd:90:75: bf:cf:34:32:59:84:cd:dc:8d:71:dc:4c:ac:a1:c4:ef:19:3b: 22:12:a1:d0:64:d4:ef:5c:80:4e:0f:5c:29:e0:9d:d3:4a:c1: 5a:d5:d6:ac:8a:24:9c:b3:85:d1:e8:e7:65:4a:2a:50:40:6d: db:93:36:29:59:6f:73:e0:09:d3:a0:2d:7b:be:a6:69:02:2d: f2:c0:87:9b:a9:44:7c:1c:5b:73:24:63:ba:df:b0:b6:6c:53: bc:be:be:5f:c3:d6:ec:a5:0c:64:ba:b2:bb:f4:7b:06:58:77: 6a:17:55:4d:be:ee:e6:4a:a0:0e:30:19:eb:9c:48:22:c4:46: c5:da:18:c9:62:78:6b:47:be:b5:cf:1c:76:89:c6:73:6c:89: d6:a0:29:91:ff:b7:f3:b6:11:3f:49:d4:1c:33:5b:00:15:8f: e5:b0:74:5c:39:10:70:a1:e2:cd:e8:b6:33:ab:50:c7:7c:67: 55:6a:51:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtisB88ZNHtcbgbs0HaoD34MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMGMxNGEwYmRjMTE5ZjFlZDQ5NjIwMmQ4OWJlNGZkMjY1 OWZmMDEwHhcNMjUxMjI4MDIwMTA3WhcNMjUxMjI5MDIwMTA3WjAzMTEwLwYDVQQD EyhlM2I1NDZmMDY4NTBiMDM5OGYyZTMyYjlkNTU2ZGY2ODYxYzY4NzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjejm6XO023Ovlawr1Tz/ND8XaWd ZqfnPTmpTL89pBTmCsKpn0D2sJoqtON8f20JYs6MEOI1Rl//xjOCeNJlOqNYFNo8 UHB6KBhbgtK6WjpJADpkNWBjFzB5PNiZW7T3WdH9XaJi4+46OKqgxCXlcp4FOShW drKBmPPFSOGc3TK2EwfzNgLjf5h2iHHx1J+tpwX3XbTuTKh9cSRXAtMj/1yhO85c bCP9nB9kaBK69mY9DVzV5e0L8BxZY4PCtE1qJyGvZ174oIXkZym3GOhBvT+WLoy/ jiYzj/otwsBVjQK+bHbzMuZI1qvWjVliprsRX4EkQ5fwlLjBEebjl9eTUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOO1RvBoULA5jy4yudVW32hhxoceMB8GA1UdIwQY MBaAFP4MFKC9wRnx7UliAtib5P0mWf8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2d3VW9MM0JHZkh0U1dJQzJKdmtfU1paX3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83MTFkMGItYzYzMS00YjZiLTg3MDAt Y2VhNjViY2U3MzI0LzEvX2d3VW9MM0JHZkh0U1dJQzJKdmtfU1paX3dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83MTFkMGItYzYzMS00YjZiLTg3MDAtY2VhNjViY2U3MzI0 LzEvX2d3VW9MM0JHZkh0U1dJQzJKdmtfU1paX3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUIpnXeC 3K7tjJTSdLSCESTD9AONgwQZR43nnoVT4vjdekOrlGAVMN8jBXCFHCArD9n3J87m dD4viOH5iYsqC93+p9al/ZB1v880MlmEzdyNcdxMrKHE7xk7IhKh0GTU71yATg9c KeCd00rBWtXWrIoknLOF0ejnZUoqUEBt25M2KVlvc+AJ06Ate76maQIt8sCHm6lE fBxbcyRjut+wtmxTvL6+X8PW7KUMZLqyu/R7Blh3ahdVTb7u5kqgDjAZ65xIIsRG xdoYyWJ4a0e+tc8cdonGc2yJ1qApkf+387YRP0nUHDNbABWP5bB0XDkQcKHizei2 M6tQx3xnVWpR0g== -----END CERTIFICATE-----Generated at Sun Dec 28 07:29:16 2025 by rpki-client