This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft File: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft (raw, json) Hash identifier: UNrZAgWMuRD5zeyrIjtiqHwrnL8D1dSvBp0orNYzOac= Subject key identifier: 30:3C:A2:ED:83:CD:7A:A7:FA:72:82:D8:EC:3A:A0:38:6F:87:FD:28 Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd Certificate serial: 019B5D1BAE3D621278AC5DEA582756079C84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft Manifest number: 0F21 Signing time: Sat 27 Dec 2025 00:00:53 +0000 Manifest this update: Sat 27 Dec 2025 00:00:53 +0000 Manifest next update: Sun 28 Dec 2025 00:00:53 +0000 Files and hashes: 1: V6MhSl0Nrd7IbSPP6sogh_K6LdA.roa (hash: BEkq0bd021wy4JLoX8KRN8L/2JdiHbrDtNZgZpB/wOc=) 2: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl (hash: c9mbA7uArI+YuU99mrvwc3BmitiBhhscS/Li7ElNUGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:1b:ae:3d:62:12:78:ac:5d:ea:58:27:56:07:9c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd Validity Not Before: Dec 27 00:00:53 2025 GMT Not After : Dec 28 00:00:53 2025 GMT Subject: CN=303ca2ed83cd7aa7fa7282d8ec3aa0386f87fd28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:da:5e:e4:ff:11:26:23:97:2c:44:94:0d: be:1b:d3:b5:10:41:68:dd:b0:ab:b5:30:f3:67:66: 16:72:fb:0f:18:44:cf:1f:a6:25:7f:79:d8:a3:87: 11:d8:2a:1c:3a:27:f8:53:97:15:ad:c6:f1:33:19: 59:99:78:51:5a:9d:7c:2c:f4:e4:dd:ef:11:80:23: 28:10:51:ae:65:13:dd:c2:19:41:68:5c:0b:77:9b: 2b:89:e5:1b:2a:c6:48:86:87:8c:0d:4f:19:b7:6a: 9d:45:e8:16:7e:67:30:0b:47:72:50:87:d8:40:24: bc:4c:2c:0f:e4:ed:99:7b:95:5f:a4:98:f3:28:f3: d9:98:63:51:e4:38:97:fc:a0:49:b9:a1:ff:9d:2b: f8:8e:54:2a:70:2c:eb:77:b0:cc:d7:8a:8e:54:07: 2d:00:a7:99:50:f7:49:ee:4c:6f:a0:19:15:9b:c8: 00:f0:d3:1c:d5:60:4e:38:e7:d3:27:05:5e:c8:bc: b8:75:36:04:21:5f:48:b8:bc:65:ba:53:8c:5c:70: 51:1c:ed:a8:e9:53:c4:c4:6e:c4:3e:30:3a:79:c8: 84:8c:f4:df:ef:ec:a5:2d:7f:e1:87:0d:4b:09:03: 4b:5b:ae:51:5a:0d:74:4e:c5:01:3a:76:90:b7:1c: a9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3C:A2:ED:83:CD:7A:A7:FA:72:82:D8:EC:3A:A0:38:6F:87:FD:28 X509v3 Authority Key Identifier: keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:59:ab:2b:bb:e7:51:20:2e:91:5e:79:78:6f:bb:4b:b0:88: 3b:60:d4:f3:60:6f:ce:b7:fa:94:a7:92:1c:6d:e0:49:2d:8a: f0:6a:4c:56:9a:53:eb:f2:35:0f:60:9d:6e:b4:69:ca:b8:33: 2c:30:4f:76:68:6b:94:1d:8c:b8:57:81:d6:d7:d4:8c:e6:3b: 95:d9:f5:53:67:26:50:97:4e:c6:cb:bc:ee:d8:4d:d1:29:72: 31:c4:6b:25:4c:dc:bb:1b:76:bb:49:a3:c8:b7:22:82:b1:88: a9:33:e8:90:e3:76:5d:16:2e:06:83:43:fb:bd:91:70:7e:ef: 49:cc:79:36:9f:9b:bb:73:37:0d:56:32:9f:ce:29:69:c0:93: 24:a5:02:3c:95:52:0e:d1:f4:24:53:5e:8b:89:db:02:bc:1a: f7:db:7b:d2:af:e3:43:a8:0c:72:92:dd:7a:e3:14:01:b0:b1: 48:47:55:01:3e:b1:2d:60:62:ba:59:38:14:ed:10:b5:5e:b7: 13:44:93:33:91:e6:0f:9e:fc:59:be:63:25:c0:75:5b:8e:f6: fa:8c:ca:c7:6f:bc:5b:18:5f:00:f3:50:96:a1:60:4c:4c:b5: 40:73:f4:33:de:a7:9a:ee:b6:72:a4:32:5e:71:7b:0a:f1:18: 1b:74:b1:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdG649YhJ4rF3qWCdWB5yEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxODEyMzg1YjgyZGRhMGZkNDgyNmFiYjdhZWZlYjBkZjNl YjhmZmQwHhcNMjUxMjI3MDAwMDUzWhcNMjUxMjI4MDAwMDUzWjAzMTEwLwYDVQQD EygzMDNjYTJlZDgzY2Q3YWE3ZmE3MjgyZDhlYzNhYTAzODZmODdmZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7/aXuT/ESYjlyxElA2+G9O1EEFo 3bCrtTDzZ2YWcvsPGETPH6Ylf3nYo4cR2CocOif4U5cVrcbxMxlZmXhRWp18LPTk 3e8RgCMoEFGuZRPdwhlBaFwLd5srieUbKsZIhoeMDU8Zt2qdRegWfmcwC0dyUIfY QCS8TCwP5O2Ze5VfpJjzKPPZmGNR5DiX/KBJuaH/nSv4jlQqcCzrd7DM14qOVAct AKeZUPdJ7kxvoBkVm8gA8NMc1WBOOOfTJwVeyLy4dTYEIV9IuLxlulOMXHBRHO2o 6VPExG7EPjA6eciEjPTf7+ylLX/hhw1LCQNLW65RWg10TsUBOnaQtxyp8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDA8ou2DzXqn+nKC2Ow6oDhvh/0oMB8GA1UdIwQY MBaAFIGBI4W4LdoP1IJqu3rv6w3z64/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEt ZGEyZWM4Y2ZiODg4LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEtZGEyZWM4Y2ZiODg4 LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1mrK7vn USAukV55eG+7S7CIO2DU82Bvzrf6lKeSHG3gSS2K8GpMVppT6/I1D2CdbrRpyrgz LDBPdmhrlB2MuFeB1tfUjOY7ldn1U2cmUJdOxsu87thN0SlyMcRrJUzcuxt2u0mj yLcigrGIqTPokON2XRYuBoND+72RcH7vScx5Np+bu3M3DVYyn84pacCTJKUCPJVS DtH0JFNei4nbArwa99t70q/jQ6gMcpLdeuMUAbCxSEdVAT6xLWBiulk4FO0QtV63 E0STM5HmD578Wb5jJcB1W472+ozKx2+8WxhfAPNQlqFgTEy1QHP0M96nmu62cqQy XnF7CvEYG3SxCA== -----END CERTIFICATE-----Generated at Sat Dec 27 04:10:38 2025 by rpki-client