This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft File: gViH9Fq7wIGqRpplwXmN5hENnIk.mft (raw, json) Hash identifier: IpXbP0Uk4hMGaboDKC/MT0Kcgk1CuiAipaI55T1t4z4= Subject key identifier: 27:6D:BF:3E:0F:F9:64:38:79:A9:3C:B4:35:30:3F:2E:34:FB:5A:CC Authority key identifier: 81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89 Certificate issuer: /CN=815887f45abbc081aa469a65c1798de6110d9c89 Certificate serial: 019B38A1194A34864DC871232A4223E08F50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft Manifest number: 0E67 Signing time: Fri 19 Dec 2025 22:00:40 +0000 Manifest this update: Fri 19 Dec 2025 22:00:40 +0000 Manifest next update: Sat 20 Dec 2025 22:00:40 +0000 Files and hashes: 1: a4XCmBSUFP_yl4L96gtg6U9Ozn0.roa (hash: FJxd7UG3Dpf9Q0TJKoxdhkygKRFy48iyIOOg3rogNwA=) 2: gViH9Fq7wIGqRpplwXmN5hENnIk.crl (hash: 1BB36LYLcFAR9zeIwDLd6b6oezcWYqwf7YAOxUS3D2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:19:4a:34:86:4d:c8:71:23:2a:42:23:e0:8f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=815887f45abbc081aa469a65c1798de6110d9c89 Validity Not Before: Dec 19 22:00:40 2025 GMT Not After : Dec 20 22:00:40 2025 GMT Subject: CN=276dbf3e0ff9643879a93cb435303f2e34fb5acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ab:1e:b0:fc:d5:fb:ba:d1:2d:ec:4e:14:5a: c2:2f:f7:34:23:fe:4d:3a:a0:54:3b:0e:94:3c:a8: 1d:e0:60:86:3a:bc:56:d6:11:b0:91:25:03:00:20: e0:bd:c4:ab:5b:b5:c9:1e:1a:0d:a5:2a:13:d0:4d: 5e:12:f1:ad:03:16:a8:10:13:dc:ca:b3:68:b4:f5: 27:6c:e2:8f:25:64:70:36:26:ba:44:66:b0:40:23: 1d:8b:11:67:1f:9c:2a:bc:c8:80:5b:76:a2:1b:a4: 58:43:61:36:a6:e3:6c:35:59:dc:b3:d3:04:43:9d: 3e:90:4f:b9:08:9d:ce:cc:d6:ac:dd:4b:40:44:a7: 86:ee:d0:c7:4d:67:6d:f3:15:23:f6:09:68:f4:e3: 9d:ac:03:88:b2:5d:44:5c:f1:29:91:d3:d0:66:16: bf:04:3f:c8:9b:fb:f5:ce:d5:3a:6f:08:70:0e:0b: 90:7a:9f:b9:8b:27:6a:0e:0d:52:a7:ad:c8:7d:53: f0:40:da:e8:e0:a7:5f:c8:46:e5:1e:43:7d:65:ad: 32:7a:c9:f6:49:70:5f:ef:2c:ce:d3:f6:c5:96:4b: 2c:4d:d2:55:7f:5a:ce:6a:6e:46:78:48:db:b0:66: 70:0d:cc:69:80:bd:ca:80:b7:e8:d1:1b:35:82:6c: 7e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6D:BF:3E:0F:F9:64:38:79:A9:3C:B4:35:30:3F:2E:34:FB:5A:CC X509v3 Authority Key Identifier: keyid:81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:30:3c:2d:30:90:e9:2c:f0:3e:60:40:7e:5e:f2:e7:e9:be: de:8b:4b:b9:65:12:5e:25:c7:11:a8:61:86:08:d7:b2:59:4a: 1f:47:46:9a:d3:fe:e5:12:6a:9b:51:50:4d:96:53:b9:d6:12: 1d:4b:c1:04:ce:ae:1f:fb:6d:90:9a:5f:74:dc:e9:9c:3f:68: 7d:cf:2d:a8:ad:db:70:6f:1d:fb:ef:0f:2e:a0:9d:47:47:a3: ad:b5:e2:4a:1a:f5:74:88:22:87:bf:c5:5d:4e:f3:f9:43:9b: 76:d3:e5:31:de:d2:7e:e9:99:91:7c:e5:25:7d:28:20:cd:d1: df:03:e0:ad:c1:fb:f4:6f:96:9c:31:b0:3f:d4:1e:b1:5f:69: af:4b:97:13:01:67:c1:45:34:09:ed:f7:25:96:d7:24:c7:c1: d5:dc:c2:2e:71:77:74:55:01:1f:61:de:29:9d:f7:32:7a:32: 11:71:f7:97:bd:e7:b6:62:80:11:12:93:1d:66:7e:d6:d8:71: b0:80:87:3a:2c:9c:4f:0e:f7:84:05:0d:1a:f3:c1:db:39:f2: 31:be:ff:0e:4d:27:03:d3:31:36:d9:5b:3f:a7:f9:e2:dd:b0: 8f:76:1b:97:70:62:3d:6a:d7:fb:cc:1d:be:dd:d9:0e:98:76: 45:f7:d2:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oRlKNIZNyHEjKkIj4I9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNTg4N2Y0NWFiYmMwODFhYTQ2OWE2NWMxNzk4ZGU2MTEw ZDljODkwHhcNMjUxMjE5MjIwMDQwWhcNMjUxMjIwMjIwMDQwWjAzMTEwLwYDVQQD EygyNzZkYmYzZTBmZjk2NDM4NzlhOTNjYjQzNTMwM2YyZTM0ZmI1YWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6sesPzV+7rRLexOFFrCL/c0I/5N OqBUOw6UPKgd4GCGOrxW1hGwkSUDACDgvcSrW7XJHhoNpSoT0E1eEvGtAxaoEBPc yrNotPUnbOKPJWRwNia6RGawQCMdixFnH5wqvMiAW3aiG6RYQ2E2puNsNVncs9ME Q50+kE+5CJ3OzNas3UtARKeG7tDHTWdt8xUj9glo9OOdrAOIsl1EXPEpkdPQZha/ BD/Im/v1ztU6bwhwDguQep+5iydqDg1Sp63IfVPwQNro4KdfyEblHkN9Za0yesn2 SXBf7yzO0/bFlkssTdJVf1rOam5GeEjbsGZwDcxpgL3KgLfo0Rs1gmx+uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdtvz4P+WQ4eak8tDUwPy40+1rMMB8GA1UdIwQY MBaAFIFYh/Rau8CBqkaaZcF5jeYRDZyJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1ZpSDlGcTd3SUdxUnBwbHdYbU41aEVObklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85YTg2ZDItNGRkNS00MGYwLWE2MjIt MzE4YjBlOTk2YWQxLzEvZ1ZpSDlGcTd3SUdxUnBwbHdYbU41aEVObklrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS85YTg2ZDItNGRkNS00MGYwLWE2MjItMzE4YjBlOTk2YWQx LzEvZ1ZpSDlGcTd3SUdxUnBwbHdYbU41aEVObklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDA8LTCQ 6SzwPmBAfl7y5+m+3otLuWUSXiXHEahhhgjXsllKH0dGmtP+5RJqm1FQTZZTudYS HUvBBM6uH/ttkJpfdNzpnD9ofc8tqK3bcG8d++8PLqCdR0ejrbXiShr1dIgih7/F XU7z+UObdtPlMd7SfumZkXzlJX0oIM3R3wPgrcH79G+WnDGwP9QesV9pr0uXEwFn wUU0Ce33JZbXJMfB1dzCLnF3dFUBH2HeKZ33MnoyEXH3l73ntmKAERKTHWZ+1thx sICHOiycTw73hAUNGvPB2znyMb7/Dk0nA9MxNtlbP6f54t2wj3Ybl3BiPWrX+8wd vt3ZDph2RffSkg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:23:31 2025 by rpki-client