This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft File: GPkZTU3X1Le3d8kgB55AHTolM7Y.mft (raw, json) Hash identifier: IypS+PPVp/ggwy+zWrdfd4r2/w81ifPGRYh3K0jYkDA= Subject key identifier: 50:04:1E:13:03:67:5C:5A:AC:C8:1E:D7:89:E1:37:B9:31:B4:1E:73 Authority key identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6 Certificate issuer: /CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6 Certificate serial: 019B3344920369F01BC1144B1243ACAA876A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft Manifest number: 03E9 Signing time: Thu 18 Dec 2025 21:01:30 +0000 Manifest this update: Thu 18 Dec 2025 21:01:30 +0000 Manifest next update: Fri 19 Dec 2025 21:01:30 +0000 Files and hashes: 1: GPkZTU3X1Le3d8kgB55AHTolM7Y.crl (hash: puOH/DCA7n4Mxk+noCr8DinF7k3IZvL97xiF5J3lRcc=) 2: tGnfBpcM9WdZcGTV2u32zJOiBt8.roa (hash: gFwI+sP0Z829K3A/AxDldH8I51IlzJyC6UwEbaoL6wI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:92:03:69:f0:1b:c1:14:4b:12:43:ac:aa:87:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6 Validity Not Before: Dec 18 21:01:30 2025 GMT Not After : Dec 19 21:01:30 2025 GMT Subject: CN=50041e1303675c5aacc81ed789e137b931b41e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b8:1e:50:d6:7c:35:ba:52:0b:73:10:33:10: e1:11:d7:21:2c:74:b4:19:1d:c7:e4:b4:ca:ca:d8: 92:8f:a4:7e:ce:bf:8b:d6:15:b3:40:09:cf:9d:6e: 1d:ab:ed:32:e4:d5:09:65:e5:cf:24:b8:73:c7:7b: ef:81:5a:e0:44:ef:e7:06:39:b8:8e:96:9f:5f:3f: a8:d5:cc:94:c7:7b:99:70:75:b5:a5:60:da:3d:8b: 68:f0:7c:40:34:1b:91:9b:71:a8:5f:e8:27:ca:08: 72:3a:3b:07:88:ae:69:0f:1e:be:66:7f:9a:23:88: ee:f8:59:53:fc:02:d1:77:4a:0a:4b:92:02:9a:10: 6e:65:31:29:25:78:ae:c3:ab:9e:6b:d0:26:e2:45: 16:42:1d:dd:9e:00:27:22:69:82:da:b6:6b:fa:2a: 40:33:16:ad:3a:c6:ba:55:20:a9:77:fa:2b:3b:90: d3:d7:04:14:63:15:56:49:b0:be:dc:85:c0:a6:b5: 57:11:20:49:3d:d6:58:4b:a2:24:67:b8:59:d7:93: ed:74:f4:83:7d:6a:4b:45:5c:d6:0b:ce:9c:10:f8: 3d:37:b8:85:2b:46:41:33:67:86:36:84:5c:f3:45: 28:5c:f1:df:9f:b7:34:99:43:89:4b:b0:5a:81:48: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:04:1E:13:03:67:5C:5A:AC:C8:1E:D7:89:E1:37:B9:31:B4:1E:73 X509v3 Authority Key Identifier: keyid:18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:58:38:c4:63:98:56:5c:18:db:6a:23:1b:47:f8:67:8e:a0: 04:ec:c3:88:48:55:cf:34:70:b9:99:73:65:6c:99:df:41:2c: 52:e4:0c:78:8d:c5:20:2e:f0:d9:a3:13:dd:b3:d1:ce:e4:67: 3e:c7:95:0e:c7:1f:87:40:7f:7a:ed:56:af:d9:53:02:5b:41: 3e:6b:92:92:69:3b:8d:55:73:cd:c7:a1:96:7a:03:77:3a:58: 96:2a:62:f5:17:d5:a7:da:d9:6b:5e:a0:09:91:5a:f9:81:e9: 74:e4:7a:3a:c9:5c:f3:a6:35:29:04:ce:89:79:4f:4e:ca:91: 2b:8c:ac:46:23:e8:6d:e1:e1:5d:91:c5:54:7c:77:c7:61:bb: 0b:42:65:96:53:52:8b:bc:7b:be:80:da:39:96:b7:80:fe:c3: 7e:1f:61:d3:f2:00:10:10:82:2a:2a:f2:a6:fe:bd:e2:13:5c: 45:12:fb:1b:fc:cc:97:b7:86:14:da:07:17:4d:e1:dc:96:ff: ee:8b:3d:e3:7b:95:31:46:5d:e2:a4:46:d3:ed:cf:74:cc:e3: 3a:14:56:83:3b:c2:3f:68:09:55:2e:6b:19:b8:78:db:a4:6f: 7a:a4:9d:3e:18:3d:21:31:c0:22:52:eb:c3:21:22:95:bf:fe: 82:61:2c:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRJIDafAbwRRLEkOsqodqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZjkxOTRkNGRkN2Q0YjdiNzc3YzkyMDA3OWU0MDFkM2Ey NTMzYjYwHhcNMjUxMjE4MjEwMTMwWhcNMjUxMjE5MjEwMTMwWjAzMTEwLwYDVQQD Eyg1MDA0MWUxMzAzNjc1YzVhYWNjODFlZDc4OWUxMzdiOTMxYjQxZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLgeUNZ8NbpSC3MQMxDhEdchLHS0 GR3H5LTKytiSj6R+zr+L1hWzQAnPnW4dq+0y5NUJZeXPJLhzx3vvgVrgRO/nBjm4 jpafXz+o1cyUx3uZcHW1pWDaPYto8HxANBuRm3GoX+gnyghyOjsHiK5pDx6+Zn+a I4ju+FlT/ALRd0oKS5ICmhBuZTEpJXiuw6uea9Am4kUWQh3dngAnImmC2rZr+ipA MxatOsa6VSCpd/orO5DT1wQUYxVWSbC+3IXAprVXESBJPdZYS6IkZ7hZ15PtdPSD fWpLRVzWC86cEPg9N7iFK0ZBM2eGNoRc80UoXPHfn7c0mUOJS7BagUitpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAEHhMDZ1xarMge14nhN7kxtB5zMB8GA1UdIwQY MBaAFBj5GU1N19S3t3fJIAeeQB06JTO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1BrWlRVM1gxTGUzZDhrZ0I1NUFIVG9sTTdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMmM2ODktZWMzNi00ZWRmLTk2ZjQt Mzg5OTVmMjRiMWVmLzEvR1BrWlRVM1gxTGUzZDhrZ0I1NUFIVG9sTTdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMmM2ODktZWMzNi00ZWRmLTk2ZjQtMzg5OTVmMjRiMWVm LzEvR1BrWlRVM1gxTGUzZDhrZ0I1NUFIVG9sTTdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1g4xGOY VlwY22ojG0f4Z46gBOzDiEhVzzRwuZlzZWyZ30EsUuQMeI3FIC7w2aMT3bPRzuRn PseVDscfh0B/eu1Wr9lTAltBPmuSkmk7jVVzzcehlnoDdzpYlipi9RfVp9rZa16g CZFa+YHpdOR6Oslc86Y1KQTOiXlPTsqRK4ysRiPobeHhXZHFVHx3x2G7C0JlllNS i7x7voDaOZa3gP7Dfh9h0/IAEBCCKirypv694hNcRRL7G/zMl7eGFNoHF03h3Jb/ 7os943uVMUZd4qRG0+3PdMzjOhRWgzvCP2gJVS5rGbh426RveqSdPhg9ITHAIlLr wyEilb/+gmEsjw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:46:29 2025 by rpki-client