This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json) Hash identifier: 4h5DjpOWC0EAXG4plonwR22Y/OJyRpoj2uO7N6+STGw= Subject key identifier: EE:41:D3:CD:EC:33:53:21:97:7A:95:6A:6A:D2:49:43:B2:D1:E8:58 Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94 Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94 Certificate serial: 019B3D22BC15D7743B0692287AF52C5F726A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 19:00:45 +0000 Manifest this update: Sat 20 Dec 2025 19:00:45 +0000 Manifest next update: Sun 21 Dec 2025 19:00:45 +0000 Files and hashes: 1: dUjydhDtv2Ysc8dEDoiT2yx34lg.roa (hash: ebc83oZNm2ylmobsykoAv58WP6zLL9GO+02NODZysqQ=) 2: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: Z2I6y1wN1SzlTCB5CIyBbLVjcrPOyKLWVHVM915zgio=) 3: wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa (hash: A1fNf8pB5tQL1RUFisCU1kyqkrX8SMY0lp/3rcsduXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:bc:15:d7:74:3b:06:92:28:7a:f5:2c:5f:72:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94 Validity Not Before: Dec 20 19:00:45 2025 GMT Not After : Dec 21 19:00:45 2025 GMT Subject: CN=ee41d3cdec335321977a956a6ad24943b2d1e858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7a:47:73:93:2d:27:a6:ca:1b:81:dd:ea:75: 04:69:5c:69:c5:fc:55:9d:ce:b2:74:2b:aa:8f:71: 97:64:54:4e:2e:9b:06:3a:91:9c:04:70:b9:39:19: 09:e5:78:b0:48:e8:82:cc:a2:90:57:1f:76:99:e6: 52:b8:da:ab:f2:e0:29:c2:f0:a1:af:24:f0:8b:82: e3:6a:48:6b:a8:1d:e5:7c:8c:10:0e:bc:f8:45:27: ac:9a:61:dc:df:6f:bc:8b:24:64:84:e1:30:b4:a0: 10:52:00:b1:cb:ef:17:06:6f:52:2e:f9:da:e8:3e: 9c:70:5e:9e:f7:31:18:f3:7b:66:ad:dc:e0:84:69: da:dc:ae:05:a6:64:50:91:ff:ef:99:50:f4:1f:a0: 35:8c:8d:58:34:2f:b9:c0:de:ed:2b:00:c8:e9:b2: 55:23:93:b7:b5:6e:12:8d:bc:56:ac:f5:5e:18:df: 64:05:03:01:62:56:16:71:e3:b5:d0:37:0f:81:8f: 26:f9:de:47:16:d5:b7:bc:4b:98:21:bb:83:71:39: 30:7d:24:ec:41:96:a1:9d:65:55:5a:6b:5a:84:2e: d6:bd:6f:4a:70:ab:aa:35:38:42:8e:e6:10:57:c9: 0a:d9:62:62:b6:f2:a0:7d:85:e3:0c:68:19:3b:82: 35:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:41:D3:CD:EC:33:53:21:97:7A:95:6A:6A:D2:49:43:B2:D1:E8:58 X509v3 Authority Key Identifier: keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:61:8f:cc:eb:0c:a5:43:0a:f8:8e:60:f3:f9:b2:28:51:c8: ce:e0:47:d0:28:9b:97:43:d7:24:22:84:0a:85:e1:f2:79:91: 68:e3:3a:57:1a:2c:50:ac:2b:68:29:f6:ec:e3:e7:66:f6:35: 93:63:78:c7:05:68:ba:44:e1:73:db:34:ec:4b:5b:7f:7d:58: 85:4d:17:2b:71:bf:c5:98:de:05:0f:bb:45:98:8b:d5:22:59: 05:2c:6f:01:b9:68:23:2e:b4:28:32:32:6d:7d:86:e4:f9:85: 2a:b0:ff:b3:a7:89:bf:ba:fc:99:41:02:d4:c5:59:9a:37:f4: 71:d4:b8:af:5b:4d:d1:ea:79:76:03:19:24:f7:ab:f6:d0:82: 44:6b:13:d3:35:37:43:63:a3:b9:50:da:c6:e8:f2:f2:fe:67: 74:f4:e8:2b:ae:72:1c:d2:9d:06:d9:2b:67:17:27:0d:b0:f6: 9f:5c:40:9c:f0:eb:75:ee:0b:aa:ad:1a:b8:99:d0:5c:8e:24: ae:48:83:0a:4a:d1:0b:5a:ae:da:04:a8:c2:25:d7:65:e3:86: af:65:74:43:eb:b6:c9:66:4f:13:9d:60:0f:e3:7b:b6:29:7f: 4c:bf:4e:61:eb:b2:76:cb:c4:41:6f:ea:d6:c9:ac:8f:86:46: 9b:8d:0b:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IrwV13Q7BpIoevUsX3JqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNjE1MzE1ZGM3NTBjMDNlNjBmYzM2YTc1MGM1ZTNmZjY2 ZWFjOTQwHhcNMjUxMjIwMTkwMDQ1WhcNMjUxMjIxMTkwMDQ1WjAzMTEwLwYDVQQD EyhlZTQxZDNjZGVjMzM1MzIxOTc3YTk1NmE2YWQyNDk0M2IyZDFlODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHpHc5MtJ6bKG4Hd6nUEaVxpxfxV nc6ydCuqj3GXZFROLpsGOpGcBHC5ORkJ5XiwSOiCzKKQVx92meZSuNqr8uApwvCh ryTwi4LjakhrqB3lfIwQDrz4RSesmmHc32+8iyRkhOEwtKAQUgCxy+8XBm9SLvna 6D6ccF6e9zEY83tmrdzghGna3K4FpmRQkf/vmVD0H6A1jI1YNC+5wN7tKwDI6bJV I5O3tW4SjbxWrPVeGN9kBQMBYlYWceO10DcPgY8m+d5HFtW3vEuYIbuDcTkwfSTs QZahnWVVWmtahC7WvW9KcKuqNThCjuYQV8kK2WJitvKgfYXjDGgZO4I1IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5B083sM1Mhl3qVamrSSUOy0ehYMB8GA1UdIwQY MBaAFIBhUxXcdQwD5g/DanUMXj/2bqyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgt ZjhlNWIyZDg2ODBjLzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgtZjhlNWIyZDg2ODBj LzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmGPzOsM pUMK+I5g8/myKFHIzuBH0Cibl0PXJCKECoXh8nmRaOM6VxosUKwraCn27OPnZvY1 k2N4xwVoukThc9s07Etbf31YhU0XK3G/xZjeBQ+7RZiL1SJZBSxvAbloIy60KDIy bX2G5PmFKrD/s6eJv7r8mUEC1MVZmjf0cdS4r1tN0ep5dgMZJPer9tCCRGsT0zU3 Q2OjuVDaxujy8v5ndPToK65yHNKdBtkrZxcnDbD2n1xAnPDrde4Lqq0auJnQXI4k rkiDCkrRC1qu2gSowiXXZeOGr2V0Q+u2yWZPE51gD+N7til/TL9OYeuydsvEQW/q 1smsj4ZGm40L4w== -----END CERTIFICATE-----Generated at Sun Dec 21 04:07:00 2025 by rpki-client