This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft File: gMez3pa5HtxunIXZ1aZoQZIDtfU.mft (raw, json) Hash identifier: lInW+rB/S7B5/ZY/cmuOn+ImgoVY6L+lDzedrUyJv54= Subject key identifier: 1D:43:F7:FF:BC:60:F6:08:5B:D2:E5:9A:6C:70:FE:CD:3D:AC:DC:34 Authority key identifier: 80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5 Certificate issuer: /CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5 Certificate serial: 019B405BF63698A6AC9BAA78FD0F2578A45A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft Manifest number: 0565 Signing time: Sun 21 Dec 2025 10:02:07 +0000 Manifest this update: Sun 21 Dec 2025 10:02:07 +0000 Manifest next update: Mon 22 Dec 2025 10:02:07 +0000 Files and hashes: 1: gMez3pa5HtxunIXZ1aZoQZIDtfU.crl (hash: c/+6O9Ug1ZaVqO10clcvsJ47CqtmJuocf+jQ7CzLh6I=) 2: xVzCoBRTedY1vT9C7xN3NLO-WeY.roa (hash: ystLlP8JPbF13VOw8QCBVAQ5cldgA4v4fXVvBu8BWIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:f6:36:98:a6:ac:9b:aa:78:fd:0f:25:78:a4:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5 Validity Not Before: Dec 21 10:02:07 2025 GMT Not After : Dec 22 10:02:07 2025 GMT Subject: CN=1d43f7ffbc60f6085bd2e59a6c70fecd3dacdc34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2e:75:ae:f9:f1:09:6e:a9:51:d1:2b:ad:f3: 5d:9b:7c:e2:ae:cc:22:65:30:5c:a3:1f:79:5d:c5: 3c:ee:40:15:ad:3b:80:d5:8f:6a:22:d1:aa:9f:27: 04:70:c3:89:46:c1:66:17:84:b5:16:39:1d:17:0b: 25:fb:f0:27:f2:fc:71:18:bf:01:14:f3:b6:2d:4e: f5:ba:5b:4c:e0:5e:c1:fe:9f:10:e5:ff:b9:8e:37: f3:ef:75:1d:07:35:67:fa:46:8f:c3:5a:f8:cc:86: d5:fe:8e:04:f8:13:b3:7e:b3:4a:63:b5:bf:1b:42: d6:9e:14:44:62:1c:c7:20:ae:66:0d:44:6d:63:5a: 86:9b:21:1a:d7:fc:78:c7:67:84:27:67:a3:b3:eb: e5:8d:c2:c2:05:ce:94:c6:5a:e6:b5:f7:47:07:32: 59:2d:9f:74:a1:98:ed:7d:37:6f:f2:6d:78:ad:8a: 9d:5a:9e:c0:a2:b3:eb:60:0e:d0:52:08:e0:24:63: 61:96:32:ea:ca:43:9c:cd:dc:3a:d9:2c:99:ee:68: ab:d2:af:94:cb:b2:ce:4c:f3:39:e8:c3:b0:1f:f8: 3a:1a:f4:97:e1:69:6c:c1:6f:10:b6:13:97:2c:90: b7:85:d3:a0:3f:51:1b:34:8c:09:77:59:0d:07:8f: 35:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:43:F7:FF:BC:60:F6:08:5B:D2:E5:9A:6C:70:FE:CD:3D:AC:DC:34 X509v3 Authority Key Identifier: keyid:80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:4e:62:1b:91:d1:25:a8:57:ee:29:3d:ed:56:ed:fc:82:2d: 9f:2e:2e:4f:5f:e1:bd:53:21:0a:3c:01:09:ec:52:91:b4:e4: 53:df:a7:92:5c:04:0d:e7:10:55:20:d4:40:b0:d5:00:82:b0: c3:67:0f:91:c9:61:f4:b5:e8:22:f8:b0:5c:b8:89:2f:6f:94: 82:43:d0:5c:21:f7:75:87:a3:ad:e3:51:2c:f7:54:08:df:fd: 79:33:1d:63:3a:02:ed:5b:d0:38:31:6a:12:06:74:d8:3d:c8: 03:5f:d5:c3:3f:ca:db:89:d0:50:de:53:b6:af:65:1a:91:70: 3c:57:13:bd:b7:3b:4d:36:1d:c0:44:c5:df:54:30:16:6d:3c: bd:43:09:d7:56:a3:47:3c:3e:33:75:92:a8:ea:18:0c:c4:e1: 8b:e3:63:aa:e0:a7:33:1c:9a:1b:3e:b9:ed:25:57:d7:83:da: bc:68:2e:5e:5c:6f:43:64:1a:d3:87:c9:ee:c5:8d:6d:b6:37: 4e:e4:9a:64:cb:47:3c:92:da:87:40:e5:6a:1a:3a:23:41:55: 54:ee:5f:d9:00:02:db:fd:01:6c:68:19:f2:65:43:6d:51:b3: 7b:1f:6a:ca:5c:19:8d:bf:8f:1e:db:82:c3:78:c8:12:97:02: c6:39:d2:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW/Y2mKasm6p4/Q8leKRaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYzdiM2RlOTZiOTFlZGM2ZTljODVkOWQ1YTY2ODQxOTIw M2I1ZjUwHhcNMjUxMjIxMTAwMjA3WhcNMjUxMjIyMTAwMjA3WjAzMTEwLwYDVQQD EygxZDQzZjdmZmJjNjBmNjA4NWJkMmU1OWE2YzcwZmVjZDNkYWNkYzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi51rvnxCW6pUdErrfNdm3zirswi ZTBcox95XcU87kAVrTuA1Y9qItGqnycEcMOJRsFmF4S1FjkdFwsl+/An8vxxGL8B FPO2LU71ultM4F7B/p8Q5f+5jjfz73UdBzVn+kaPw1r4zIbV/o4E+BOzfrNKY7W/ G0LWnhREYhzHIK5mDURtY1qGmyEa1/x4x2eEJ2ejs+vljcLCBc6UxlrmtfdHBzJZ LZ90oZjtfTdv8m14rYqdWp7AorPrYA7QUgjgJGNhljLqykOczdw62SyZ7mir0q+U y7LOTPM56MOwH/g6GvSX4WlswW8QthOXLJC3hdOgP1EbNIwJd1kNB481XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1D9/+8YPYIW9Llmmxw/s09rNw0MB8GA1UdIwQY MBaAFIDHs96WuR7cbpyF2dWmaEGSA7X1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jMzAxZmItMzE3NC00NWMzLWE0NDct YTdmY2ZiNTI5ZGM3LzEvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9jMzAxZmItMzE3NC00NWMzLWE0NDctYTdmY2ZiNTI5ZGM3 LzEvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFE5iG5HR JahX7ik97Vbt/IItny4uT1/hvVMhCjwBCexSkbTkU9+nklwEDecQVSDUQLDVAIKw w2cPkclh9LXoIviwXLiJL2+UgkPQXCH3dYejreNRLPdUCN/9eTMdYzoC7VvQODFq EgZ02D3IA1/Vwz/K24nQUN5Ttq9lGpFwPFcTvbc7TTYdwETF31QwFm08vUMJ11aj Rzw+M3WSqOoYDMThi+NjquCnMxyaGz657SVX14PavGguXlxvQ2Qa04fJ7sWNbbY3 TuSaZMtHPJLah0Dlaho6I0FVVO5f2QAC2/0BbGgZ8mVDbVGzex9qylwZjb+PHtuC w3jIEpcCxjnSRg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:15:39 2025 by rpki-client