This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft File: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft (raw, json) Hash identifier: vEEPpapBjZZvqNEhPrNeukKBQIaGTr/su+pdZM5eaSA= Subject key identifier: 12:A5:CC:3F:ED:8F:BD:A5:76:C1:52:08:57:72:E6:8F:FC:83:26:2E Authority key identifier: 82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4 Certificate issuer: /CN=8248c753d46cdc9e98009ee4db8107232c02eaf4 Certificate serial: 019B41A488BCCE0B82177BD980A377A84D3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft Manifest number: 1212 Signing time: Sun 21 Dec 2025 16:01:00 +0000 Manifest this update: Sun 21 Dec 2025 16:01:00 +0000 Manifest next update: Mon 22 Dec 2025 16:01:00 +0000 Files and hashes: 1: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl (hash: BalyErnmpE70/ZRNSXEUzxCPVF5Q2J9j3yQb8ZQEVRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:88:bc:ce:0b:82:17:7b:d9:80:a3:77:a8:4d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8248c753d46cdc9e98009ee4db8107232c02eaf4 Validity Not Before: Dec 21 16:01:00 2025 GMT Not After : Dec 22 16:01:00 2025 GMT Subject: CN=12a5cc3fed8fbda576c152085772e68ffc83262e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8c:19:c1:41:9d:5f:0d:c5:7d:96:f6:93:b9: 0d:0b:41:4f:d5:d1:bd:e2:38:fa:ff:00:ab:7d:34: 5c:21:7d:eb:64:05:7c:b9:a3:e4:93:37:95:9b:c1: 7b:e5:6d:29:30:05:31:73:05:b9:dc:46:fd:18:33: 40:e9:44:7c:60:49:d8:d6:66:91:65:1f:19:d8:df: 0f:63:e3:98:84:df:63:29:41:63:1f:6a:69:85:c8: ce:de:a1:df:24:e1:1b:0d:03:fd:4d:d2:e7:64:7f: a3:87:a1:8f:40:b4:80:39:cf:cf:35:31:a5:66:7b: 9e:75:ef:5f:7b:25:45:d3:4f:b2:75:1f:da:db:6a: 62:90:74:7b:0d:5d:b2:00:e3:63:ff:d0:88:e2:da: fc:69:09:4c:ed:d9:23:e9:55:07:de:d0:da:36:ec: 7c:8b:5c:3f:69:b4:8d:64:4c:e5:59:50:91:be:ac: 01:a7:55:ed:ad:2c:2b:68:c4:2e:25:bc:a8:b8:0b: 94:d3:86:f0:21:89:1b:c2:41:19:b5:e6:ed:50:80: 22:a1:05:2a:8c:eb:97:cc:41:d2:06:fb:e5:6c:d8: 7b:40:09:28:42:64:0a:df:5e:8a:ee:1f:ce:fb:7f: d0:a2:df:42:5c:cb:b0:76:69:65:80:16:16:35:aa: 1a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A5:CC:3F:ED:8F:BD:A5:76:C1:52:08:57:72:E6:8F:FC:83:26:2E X509v3 Authority Key Identifier: keyid:82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e4:33:0a:9f:a2:db:d1:dd:85:3b:76:a6:ee:8f:b8:39:73: df:2b:06:54:ab:21:99:d7:33:3a:36:ab:a2:8b:d0:98:d8:fc: e6:df:58:31:d0:c9:59:de:9f:3d:87:9b:85:2c:dc:1d:7a:a5: d4:d7:71:30:9f:6f:87:3d:c2:03:9f:d3:36:f0:9d:60:dc:44: 50:82:63:1f:d9:7c:67:22:64:ef:24:a0:ca:be:bc:a2:a1:a2: 66:b0:5a:cb:27:e9:bb:d6:78:7f:07:75:21:cd:fe:f7:7a:85: 85:d5:6e:31:93:f0:10:e6:12:13:be:9f:f4:11:86:af:aa:78: 41:99:7f:24:63:d3:ec:43:25:c9:6b:fc:b9:d2:f0:a3:63:6d: a9:1a:6a:6f:34:6d:d6:21:e0:b0:d1:a6:45:9d:a7:11:63:d4: 0c:ef:be:a9:6e:3b:6b:58:8f:b3:14:3e:9c:e1:ad:31:7d:8c: 96:f4:0e:80:3d:f6:de:42:e2:5c:e6:01:04:e1:bc:2d:0f:28: 2f:19:49:62:06:62:50:53:16:90:05:31:e2:69:de:01:90:14: 89:44:49:08:8f:38:31:08:d9:5e:e8:90:b8:f1:13:56:1a:ee: ab:fc:6a:e9:c0:fd:fc:09:15:f3:13:28:30:fa:ed:02:49:13: a0:0a:27:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpIi8zguCF3vZgKN3qE08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNDhjNzUzZDQ2Y2RjOWU5ODAwOWVlNGRiODEwNzIzMmMw MmVhZjQwHhcNMjUxMjIxMTYwMTAwWhcNMjUxMjIyMTYwMTAwWjAzMTEwLwYDVQQD EygxMmE1Y2MzZmVkOGZiZGE1NzZjMTUyMDg1NzcyZTY4ZmZjODMyNjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4owZwUGdXw3FfZb2k7kNC0FP1dG9 4jj6/wCrfTRcIX3rZAV8uaPkkzeVm8F75W0pMAUxcwW53Eb9GDNA6UR8YEnY1maR ZR8Z2N8PY+OYhN9jKUFjH2pphcjO3qHfJOEbDQP9TdLnZH+jh6GPQLSAOc/PNTGl Znuede9feyVF00+ydR/a22pikHR7DV2yAONj/9CI4tr8aQlM7dkj6VUH3tDaNux8 i1w/abSNZEzlWVCRvqwBp1XtrSwraMQuJbyouAuU04bwIYkbwkEZtebtUIAioQUq jOuXzEHSBvvlbNh7QAkoQmQK316K7h/O+3/Qot9CXMuwdmllgBYWNaoa2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKlzD/tj72ldsFSCFdy5o/8gyYuMB8GA1UdIwQY MBaAFIJIx1PUbNyemACe5NuBByMsAur0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2tqSFU5UnMzSjZZQUo3azI0RUhJeXdDNnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xZmE0MjYtNDBkNi00ZWVhLWJiYWMt OTEzMzIyNWM5NDI1LzEvZ2tqSFU5UnMzSjZZQUo3azI0RUhJeXdDNnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8xZmE0MjYtNDBkNi00ZWVhLWJiYWMtOTEzMzIyNWM5NDI1 LzEvZ2tqSFU5UnMzSjZZQUo3azI0RUhJeXdDNnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+QzCp+i 29HdhTt2pu6PuDlz3ysGVKshmdczOjaroovQmNj85t9YMdDJWd6fPYebhSzcHXql 1NdxMJ9vhz3CA5/TNvCdYNxEUIJjH9l8ZyJk7ySgyr68oqGiZrBayyfpu9Z4fwd1 Ic3+93qFhdVuMZPwEOYSE76f9BGGr6p4QZl/JGPT7EMlyWv8udLwo2NtqRpqbzRt 1iHgsNGmRZ2nEWPUDO++qW47a1iPsxQ+nOGtMX2MlvQOgD323kLiXOYBBOG8LQ8o LxlJYgZiUFMWkAUx4mneAZAUiURJCI84MQjZXuiQuPETVhruq/xq6cD9/AkV8xMo MPrtAkkToAonFg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:31:01 2025 by rpki-client