This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft File: GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json) Hash identifier: JIhrCnuh0TsQSz38D8qZ7a+Wr/p0Qh77jQDHrbe/NUA= Subject key identifier: 0A:5E:79:4C:0F:CE:9F:D8:79:B6:F2:45:83:81:6B:50:ED:D5:40:87 Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e Certificate serial: 019B4325101DE3BE047AD90546D31A5D3503 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft Manifest number: 02B4 Signing time: Sun 21 Dec 2025 23:01:00 +0000 Manifest this update: Sun 21 Dec 2025 23:01:00 +0000 Manifest next update: Mon 22 Dec 2025 23:01:00 +0000 Files and hashes: 1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: 2msJtOWhYEh21kuPo4MeL8pqIHh9H1cB8eWAPB4Eat8=) 2: uNOJmAq6voVkPfj182da4gb5W7g.roa (hash: /Vgo6Tc+QicjXS2eidHAg9cx4rFLuic3fsDr6FFDDKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:10:1d:e3:be:04:7a:d9:05:46:d3:1a:5d:35:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e Validity Not Before: Dec 21 23:01:00 2025 GMT Not After : Dec 22 23:01:00 2025 GMT Subject: CN=0a5e794c0fce9fd879b6f24583816b50edd54087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7d:ca:9d:92:47:0c:9a:1e:49:09:5e:4b:08: b9:50:d9:f7:cf:48:a3:4a:df:99:8a:fb:3c:68:1b: 90:97:1a:84:df:2b:43:cd:cc:21:55:4a:9d:1a:d0: cd:73:ea:b6:c6:38:30:a3:bd:59:90:7c:68:69:c7: f8:11:63:3d:be:bb:47:bf:83:46:39:38:8c:3b:21: f3:f3:a3:d9:25:86:78:02:23:d6:39:e2:cc:3e:be: 4c:2a:f7:d4:ea:95:fc:e2:f2:ed:c3:ea:80:dc:ff: ad:5b:38:63:28:fd:c0:4f:99:1f:7f:4f:75:e6:eb: e2:db:03:44:a3:d6:c2:b2:9a:8d:eb:1a:8e:7b:a1: 74:f6:9a:66:89:8f:51:40:37:cc:ae:7c:14:c9:3b: ce:d4:d0:75:8e:9a:54:c6:12:77:6d:8e:64:11:c2: b8:c0:0d:cf:19:d0:65:9b:e1:72:03:85:b2:16:22: 74:0d:21:77:47:46:9c:1d:0e:94:a1:57:43:cb:25: 8d:35:3c:65:fb:9a:72:0d:9b:de:1a:62:80:ef:7e: 4b:76:b7:92:a3:b0:0d:50:2b:6f:47:f0:57:9b:2b: 46:12:02:2c:cf:a2:4c:4d:d7:9e:f5:19:0d:66:41: 37:ce:31:9f:70:15:ec:eb:dd:06:42:85:e3:e2:be: 81:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5E:79:4C:0F:CE:9F:D8:79:B6:F2:45:83:81:6B:50:ED:D5:40:87 X509v3 Authority Key Identifier: keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:96:20:82:85:de:b3:7f:48:bc:2d:a3:55:3d:37:5a:54:a3: ef:d0:e9:bc:c4:79:dc:17:75:8e:5b:ea:b7:26:b4:e4:9d:08: 63:9f:e0:ec:42:9d:97:35:be:32:16:00:a0:a8:5f:78:e5:d5: c6:39:9c:9b:51:b2:bc:6f:88:54:38:2e:c8:c3:99:f5:1d:4d: 8d:72:11:97:08:44:fc:49:c0:14:fc:10:3a:47:9f:69:b2:89: 4b:68:99:d3:19:7c:25:b7:9a:53:80:f5:4e:2f:8b:bf:af:4d: 6b:9c:e2:6a:39:1e:e5:f0:0d:4a:61:02:b5:16:de:7a:90:88: 72:14:75:2e:ae:b0:83:c9:ae:97:7f:9c:d2:4e:b0:9d:dd:f1: a5:e0:07:bd:0a:3e:b0:0b:cf:93:6b:51:d0:1d:aa:9d:bb:19: 08:f4:44:38:90:5f:34:0c:da:ee:2f:97:97:cd:ac:91:d1:30: 48:fd:d6:77:9d:2e:ee:10:a3:c7:d7:83:31:0a:e7:8f:b4:06: 15:47:3d:ce:b6:31:6b:f3:10:ef:fd:3d:b4:9f:67:83:53:b7: ca:cb:91:92:04:93:92:b4:4a:c3:a3:b2:b8:64:96:f2:3c:bd: e9:f1:7b:0b:5f:02:f8:46:4a:0c:29:59:be:4e:b6:5b:f1:f9: 48:ad:1c:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJRAd474EetkFRtMaXTUDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZmNkODdlNjFmOTE3NjVjMmMxMDAyMDQxNDFiNTk0ZDMy YzdiMmUwHhcNMjUxMjIxMjMwMTAwWhcNMjUxMjIyMjMwMTAwWjAzMTEwLwYDVQQD EygwYTVlNzk0YzBmY2U5ZmQ4NzliNmYyNDU4MzgxNmI1MGVkZDU0MDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH3KnZJHDJoeSQleSwi5UNn3z0ij St+Zivs8aBuQlxqE3ytDzcwhVUqdGtDNc+q2xjgwo71ZkHxoacf4EWM9vrtHv4NG OTiMOyHz86PZJYZ4AiPWOeLMPr5MKvfU6pX84vLtw+qA3P+tWzhjKP3AT5kff091 5uvi2wNEo9bCspqN6xqOe6F09ppmiY9RQDfMrnwUyTvO1NB1jppUxhJ3bY5kEcK4 wA3PGdBlm+FyA4WyFiJ0DSF3R0acHQ6UoVdDyyWNNTxl+5pyDZveGmKA735LdreS o7ANUCtvR/BXmytGEgIsz6JMTdee9RkNZkE3zjGfcBXs690GQoXj4r6BfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApeeUwPzp/YebbyRYOBa1Dt1UCHMB8GA1UdIwQY MBaAFBr82H5h+RdlwsEAIEFBtZTTLHsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81NDI3NGItNjFjYi00Njg2LWFiOGEt NGNmOGNmNGZmNmNkLzEvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS81NDI3NGItNjFjYi00Njg2LWFiOGEtNGNmOGNmNGZmNmNk LzEvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJYggoXe s39IvC2jVT03WlSj79DpvMR53Bd1jlvqtya05J0IY5/g7EKdlzW+MhYAoKhfeOXV xjmcm1GyvG+IVDguyMOZ9R1NjXIRlwhE/EnAFPwQOkefabKJS2iZ0xl8JbeaU4D1 Ti+Lv69Na5ziajke5fANSmECtRbeepCIchR1Lq6wg8mul3+c0k6wnd3xpeAHvQo+ sAvPk2tR0B2qnbsZCPREOJBfNAza7i+Xl82skdEwSP3Wd50u7hCjx9eDMQrnj7QG FUc9zrYxa/MQ7/09tJ9ng1O3ysuRkgSTkrRKw6OyuGSW8jy96fF7C18C+EZKDClZ vk62W/H5SK0cHA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:27:00 2025 by rpki-client