This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json) Hash identifier: Kf1wHnaY28GkpC+g5xtZQ+AmbgA1L4L0A7wAyBid1Dw= Subject key identifier: D4:BB:E6:47:AD:66:09:FA:FE:73:CC:FC:51:5F:67:23:B4:1B:CC:71 Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95 Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95 Certificate serial: 019B5073567D2AC96FDA660A49CAF74A546A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft Manifest number: 0336 Signing time: Wed 24 Dec 2025 13:01:34 +0000 Manifest this update: Wed 24 Dec 2025 13:01:34 +0000 Manifest next update: Thu 25 Dec 2025 13:01:34 +0000 Files and hashes: 1: 8kCEwQTy5YvIQTKFaII2JxD4ODg.roa (hash: JdAqhL45qRJWMpMP19Zx1i6m/QFY4ebMtaH6THdeVMo=) 2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: BwNPcSPLAEM5r6fq6lc6xAzDXfM2tX3OSadgaE1sLa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:73:56:7d:2a:c9:6f:da:66:0a:49:ca:f7:4a:54:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95 Validity Not Before: Dec 24 13:01:34 2025 GMT Not After : Dec 25 13:01:34 2025 GMT Subject: CN=d4bbe647ad6609fafe73ccfc515f6723b41bcc71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:2c:38:5a:e6:6d:1a:3b:cb:af:4e:b0:2c: f3:fc:19:ca:67:f3:d2:70:60:d4:70:a5:40:c5:3a: f7:b2:9b:3c:a0:55:59:b6:87:94:57:69:ef:b1:0b: e4:ff:52:28:9d:c9:40:e0:9f:c5:b5:6d:ee:2b:41: 2a:e4:80:bc:84:d5:7e:04:2e:4a:3d:99:16:50:b5: b0:00:77:65:c0:6e:56:2e:e2:c3:f3:40:08:65:1a: fc:f7:96:8e:73:81:c0:fb:6b:0b:22:e0:50:ce:c3: e6:d4:e6:c1:54:55:2a:9c:86:4f:42:ec:55:e2:11: 7b:e1:9b:29:8c:b3:af:30:7f:2e:93:70:a6:6c:60: c4:34:35:d3:59:cd:4d:d5:e9:33:e7:1c:50:85:e4: 69:d2:f2:05:59:08:bb:55:e2:1b:a4:a2:bf:46:43: 13:2b:f4:65:9b:c5:36:52:3c:07:87:9a:c1:b6:d2: ca:4c:39:43:e0:e7:65:26:cc:a5:c3:48:ba:16:bc: 79:4c:59:75:db:7f:a2:9c:1e:49:3f:be:f6:06:4a: 69:b2:9c:91:1b:18:56:c3:2c:b9:71:14:ed:d4:62: 07:9f:00:0c:16:c0:e4:fd:46:88:cd:22:e7:5f:9c: 78:32:bc:3d:e8:a3:c8:8b:f1:4c:82:e4:0c:0b:2b: 2a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BB:E6:47:AD:66:09:FA:FE:73:CC:FC:51:5F:67:23:B4:1B:CC:71 X509v3 Authority Key Identifier: keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:6d:57:c5:c8:18:bd:93:ae:f1:77:ce:3e:e8:d8:25:c0:c8: b1:05:ec:4e:6e:38:ae:c9:06:0b:f5:dd:86:34:cb:64:cc:3e: 96:c0:1e:a0:99:ab:30:aa:14:55:df:54:4c:2d:35:6d:77:e2: 01:08:83:33:20:77:42:7d:c9:6d:82:7e:bb:53:41:b0:62:ae: 90:70:36:e7:af:41:9c:44:ba:2d:e5:76:50:55:12:df:a0:f6: dc:1d:54:65:7e:6a:42:2e:6d:83:3a:8e:f2:d5:24:53:be:e5: 53:b3:23:bb:7d:32:70:dd:b7:97:1d:de:8e:e0:49:20:04:0a: 90:9a:91:cf:6a:3c:86:53:13:ee:95:bb:bc:11:a3:87:8e:e4: 96:04:cf:47:55:3a:19:2a:92:c8:8f:f6:8c:87:e3:55:1e:fb: b6:9a:72:c3:4c:e7:6a:ba:37:55:dd:b6:5d:83:8d:1b:fe:19: d5:1e:4e:41:c2:f5:e8:b9:79:cc:e5:96:e0:4c:d5:5f:91:d8: 11:ab:f8:6b:aa:87:ea:48:7d:a5:6a:36:32:a0:b0:16:15:b4: 7a:17:da:17:c3:c1:b4:46:57:f8:e5:3e:3b:a4:9f:8d:17:62: 08:90:bf:dc:c2:77:66:1f:ab:30:5d:d5:b1:c6:66:d8:5d:db: f8:3f:51:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQc1Z9Kslv2mYKScr3SlRqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxODE0NDBhMzY3YTM0ZDMwNmJjMGY2ODVhZTljZDg2OTUy ZjdmOTUwHhcNMjUxMjI0MTMwMTM0WhcNMjUxMjI1MTMwMTM0WjAzMTEwLwYDVQQD EyhkNGJiZTY0N2FkNjYwOWZhZmU3M2NjZmM1MTVmNjcyM2I0MWJjYzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmMsOFrmbRo7y69OsCzz/BnKZ/PS cGDUcKVAxTr3sps8oFVZtoeUV2nvsQvk/1IonclA4J/FtW3uK0Eq5IC8hNV+BC5K PZkWULWwAHdlwG5WLuLD80AIZRr895aOc4HA+2sLIuBQzsPm1ObBVFUqnIZPQuxV 4hF74ZspjLOvMH8uk3CmbGDENDXTWc1N1ekz5xxQheRp0vIFWQi7VeIbpKK/RkMT K/Rlm8U2UjwHh5rBttLKTDlD4OdlJsylw0i6Frx5TFl123+inB5JP772BkppspyR GxhWwyy5cRTt1GIHnwAMFsDk/UaIzSLnX5x4Mrw96KPIi/FMguQMCysq3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNS75ketZgn6/nPM/FFfZyO0G8xxMB8GA1UdIwQY MBaAFIGBRAo2ejTTBrwPaFrpzYaVL3+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQt NTU2OTFhNTY5NzIwLzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8xNjJmOGYtNjg3Zi00NjcxLWE1MjQtNTU2OTFhNTY5NzIw LzEvZ1lGRUNqWjZOTk1HdkE5b1d1bk5ocFV2ZjVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyG1XxcgY vZOu8XfOPujYJcDIsQXsTm44rskGC/XdhjTLZMw+lsAeoJmrMKoUVd9UTC01bXfi AQiDMyB3Qn3JbYJ+u1NBsGKukHA2569BnES6LeV2UFUS36D23B1UZX5qQi5tgzqO 8tUkU77lU7Mju30ycN23lx3ejuBJIAQKkJqRz2o8hlMT7pW7vBGjh47klgTPR1U6 GSqSyI/2jIfjVR77tppyw0znaro3Vd22XYONG/4Z1R5OQcL16Ll5zOWW4EzVX5HY Eav4a6qH6kh9pWo2MqCwFhW0ehfaF8PBtEZX+OU+O6SfjRdiCJC/3MJ3Zh+rMF3V scZm2F3b+D9RjQ== -----END CERTIFICATE-----Generated at Wed Dec 24 18:31:30 2025 by rpki-client