This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft File: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft (raw, json) Hash identifier: hzre3g6g4Ls1A87TFm2/VWySxDVWxW7v/I96JtNWDYk= Subject key identifier: 3B:8A:43:FC:E9:2D:5D:4B:70:64:FB:6E:5E:26:A8:03:B7:31:5B:AD Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd Certificate serial: 019B4023E31394AC2539800824F6FC646166 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft Manifest number: 0F12 Signing time: Sun 21 Dec 2025 09:00:52 +0000 Manifest this update: Sun 21 Dec 2025 09:00:52 +0000 Manifest next update: Mon 22 Dec 2025 09:00:52 +0000 Files and hashes: 1: V6MhSl0Nrd7IbSPP6sogh_K6LdA.roa (hash: BEkq0bd021wy4JLoX8KRN8L/2JdiHbrDtNZgZpB/wOc=) 2: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl (hash: Y814eC/ctfNAJp70p1Kx438SECoCGZ0sO4uQM5v3Vps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:23:e3:13:94:ac:25:39:80:08:24:f6:fc:64:61:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd Validity Not Before: Dec 21 09:00:52 2025 GMT Not After : Dec 22 09:00:52 2025 GMT Subject: CN=3b8a43fce92d5d4b7064fb6e5e26a803b7315bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a2:b6:73:b5:37:84:2a:43:49:7b:9f:bc:71: 65:c2:ae:ab:49:2e:6d:ac:d6:eb:24:e8:e6:6e:e4: 06:75:66:51:8b:bc:35:f9:37:fe:2f:2b:c7:1b:a5: ed:31:9a:48:a3:60:05:d5:a7:c1:10:d5:32:ca:12: 24:d2:d9:d1:8a:67:df:e6:34:dd:c4:59:1a:ea:3c: ce:73:06:13:d3:b9:aa:4a:59:d7:bd:1f:94:fd:eb: 9b:3b:7f:e9:d9:da:a3:0f:18:37:ad:7d:52:16:0d: c0:77:49:e3:4f:c1:27:95:06:d2:e8:19:0b:7e:43: 3f:52:2f:14:a3:f4:7f:ea:5b:2b:5c:c4:20:14:a8: b8:08:7c:3e:f5:1a:b6:b0:db:13:71:3c:99:66:4f: 27:e9:47:0b:bc:3f:e9:8f:84:c8:1f:8d:d0:5d:2d: 9d:ce:ff:fa:b8:a3:9d:1c:4c:53:69:c2:b4:e5:0c: 49:07:8b:a8:b7:86:b3:c1:86:1e:67:3f:b9:98:f5: 72:5f:22:93:99:32:7e:b0:d4:bd:23:ca:a8:70:82: 00:36:05:53:81:65:ec:17:a0:e6:e8:69:2c:d5:ce: f7:f5:96:15:4d:88:cd:89:8b:35:d4:80:9e:13:d9: 3c:49:f0:04:f9:40:c4:9a:5d:42:a1:69:c7:32:5d: 23:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8A:43:FC:E9:2D:5D:4B:70:64:FB:6E:5E:26:A8:03:B7:31:5B:AD X509v3 Authority Key Identifier: keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:39:7d:95:cb:ba:84:e4:21:9c:4b:82:d0:29:bf:8e:cb:04: 77:81:29:d9:f1:f6:42:45:2d:b7:7f:44:55:df:0a:39:a9:6a: e0:ea:aa:c0:c0:8c:e1:37:8c:90:ab:8f:08:0a:cf:fb:70:b9: ca:9c:b6:d7:82:94:03:7f:2f:4b:1f:74:9f:cd:1b:d2:5c:42: 12:4e:3a:9b:5e:06:53:57:d9:18:66:17:18:ee:8f:32:40:8e: 77:9f:39:ae:11:78:d8:a4:1a:28:18:72:1c:4d:f1:34:55:f8: e7:20:98:62:00:b5:ac:53:45:0e:a2:b4:d8:e8:46:1e:f9:48: a2:66:5d:98:85:78:b7:45:41:14:bc:79:fe:40:b7:47:a3:cf: 44:c9:8c:cf:44:a6:67:15:39:92:71:1b:eb:81:d9:bc:f3:1c: bf:7e:c9:cc:43:5c:d8:56:98:11:5d:33:16:07:1e:7a:a2:65: 8b:34:97:1a:aa:99:1f:dc:06:ef:51:71:f1:59:80:30:bf:a9: c3:5c:fe:7b:21:07:8b:17:63:59:85:ee:a1:98:23:45:b2:24: ca:8d:ae:35:5b:81:ec:57:7d:53:b9:5c:86:46:fb:66:a4:ff: 34:45:6a:6a:38:15:36:f5:c0:5a:04:34:2f:5e:e1:93:f0:e4: 9a:17:92:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAI+MTlKwlOYAIJPb8ZGFmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxODEyMzg1YjgyZGRhMGZkNDgyNmFiYjdhZWZlYjBkZjNl YjhmZmQwHhcNMjUxMjIxMDkwMDUyWhcNMjUxMjIyMDkwMDUyWjAzMTEwLwYDVQQD EygzYjhhNDNmY2U5MmQ1ZDRiNzA2NGZiNmU1ZTI2YTgwM2I3MzE1YmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqK2c7U3hCpDSXufvHFlwq6rSS5t rNbrJOjmbuQGdWZRi7w1+Tf+LyvHG6XtMZpIo2AF1afBENUyyhIk0tnRimff5jTd xFka6jzOcwYT07mqSlnXvR+U/eubO3/p2dqjDxg3rX1SFg3Ad0njT8EnlQbS6BkL fkM/Ui8Uo/R/6lsrXMQgFKi4CHw+9Rq2sNsTcTyZZk8n6UcLvD/pj4TIH43QXS2d zv/6uKOdHExTacK05QxJB4uot4azwYYeZz+5mPVyXyKTmTJ+sNS9I8qocIIANgVT gWXsF6Dm6Gks1c739ZYVTYjNiYs11ICeE9k8SfAE+UDEml1CoWnHMl0j0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuKQ/zpLV1LcGT7bl4mqAO3MVutMB8GA1UdIwQY MBaAFIGBI4W4LdoP1IJqu3rv6w3z64/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEt ZGEyZWM4Y2ZiODg4LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEtZGEyZWM4Y2ZiODg4 LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITl9lcu6 hOQhnEuC0Cm/jssEd4Ep2fH2QkUtt39EVd8KOalq4OqqwMCM4TeMkKuPCArP+3C5 ypy214KUA38vSx90n80b0lxCEk46m14GU1fZGGYXGO6PMkCOd585rhF42KQaKBhy HE3xNFX45yCYYgC1rFNFDqK02OhGHvlIomZdmIV4t0VBFLx5/kC3R6PPRMmMz0Sm ZxU5knEb64HZvPMcv37JzENc2FaYEV0zFgceeqJlizSXGqqZH9wG71Fx8VmAML+p w1z+eyEHixdjWYXuoZgjRbIkyo2uNVuB7Fd9U7lchkb7ZqT/NEVqajgVNvXAWgQ0 L17hk/DkmheSFA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:45:14 2025 by rpki-client