This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft File: gvGLgDOdiuY39KAvM1u-x8jCa94.mft (raw, json) Hash identifier: aZXQLL2biEXLV1Z6WqvmMT0WxjrjDaRYJkQe2MkIBIY= Subject key identifier: 6C:27:D8:9D:C8:32:FE:DB:35:52:7E:00:7A:BD:81:BA:38:7A:F1:B5 Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE Certificate issuer: /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde Certificate serial: 019B5A1A480E4D0BEF3E5933D9DE7D4EC8F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 10:00:30 +0000 Manifest this update: Fri 26 Dec 2025 10:00:30 +0000 Manifest next update: Sat 27 Dec 2025 10:00:30 +0000 Files and hashes: 1: 1-q3Sc_aFuf3HEfZnJlmO5IobYdI.roa (hash: 1ZydJMw0C7UeG9c7OwbN/uc3B58dbwLgrfGBkI/dEhg=) 2: gvGLgDOdiuY39KAvM1u-x8jCa94.crl (hash: r4CitecclsBvvbvatKh6QOt+aP8WsFmajUnB+DiJkgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:48:0e:4d:0b:ef:3e:59:33:d9:de:7d:4e:c8:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde Validity Not Before: Dec 26 10:00:30 2025 GMT Not After : Dec 27 10:00:30 2025 GMT Subject: CN=6c27d89dc832fedb35527e007abd81ba387af1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:6d:b7:7d:2d:34:1b:d7:9b:96:d7:b2:56: 90:84:4b:bf:94:b6:26:6f:21:ab:3e:e6:fb:60:b7: 0a:8d:a6:87:42:73:d5:66:b2:22:de:ac:ce:22:10: a5:f3:88:e1:f2:a8:65:54:df:5c:7c:0f:bb:75:ef: ec:be:8f:32:9d:37:49:7b:ba:86:c6:b6:95:92:95: 2d:d3:8a:6a:cb:a4:a9:7b:68:27:2c:78:cf:82:34: eb:56:69:67:f5:bc:59:96:30:d2:0a:65:43:e8:6e: 18:43:a4:4b:fd:c9:e7:dd:90:32:5e:10:65:fa:55: a1:ce:34:1c:85:c4:00:75:7d:68:5a:91:ec:c0:16: 66:f6:7d:ed:68:b0:13:19:51:77:77:e2:98:3c:44: 5a:e5:db:21:2c:2e:f2:b7:46:de:54:fb:f3:5c:5d: ff:75:f1:a5:cc:e0:ce:ff:31:dd:6d:aa:b1:e8:d5: c3:01:a1:e7:d0:15:38:d6:2a:ee:c3:d1:b6:c0:78: 4d:c5:19:39:40:3d:3d:e3:a9:a7:60:3f:05:8c:94: b9:74:6f:20:e2:ba:40:8a:08:dc:71:af:10:3b:2f: 22:51:38:40:f6:46:1f:96:e0:ed:8d:b2:41:da:3e: 3d:33:e2:a1:7c:9f:eb:de:f8:ed:6b:23:b2:c4:01: bd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:27:D8:9D:C8:32:FE:DB:35:52:7E:00:7A:BD:81:BA:38:7A:F1:B5 X509v3 Authority Key Identifier: keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c6:90:3c:91:9b:6a:8b:0a:20:11:5f:6f:12:5a:c7:26:bf: a7:e9:66:86:f0:92:68:e0:ed:bc:4e:f3:7c:86:3c:6a:8b:48: dc:aa:d5:bd:0f:9e:a7:ca:35:7f:82:18:c3:96:00:d4:35:4c: be:82:9d:74:d8:c0:a4:85:2d:da:b0:86:64:02:5c:df:ce:18: 9e:dc:6b:12:64:b7:4c:54:1a:71:38:f9:a0:61:68:50:77:e3: f8:da:96:c7:89:85:8c:df:51:63:54:fd:0e:86:ce:2a:35:78: 14:a7:72:cd:f4:5a:4a:d2:dd:7d:5d:b8:f5:09:0b:0e:c6:14: e4:af:f5:dd:0e:50:e1:97:41:fa:40:c2:e4:ad:95:aa:d6:aa: 82:fd:ca:c2:c7:3e:e3:c2:74:5a:c5:61:2f:67:e9:5c:e1:cd: b8:00:a7:84:84:88:1d:ed:80:88:7c:86:54:9e:01:c2:e7:5b: 4c:4b:d9:dc:b9:a8:15:ed:85:4e:43:8a:fc:84:d1:39:1f:d4: a1:b5:0d:38:2b:33:d2:53:ae:cc:5d:f7:ad:fe:e4:ec:56:14: 5f:75:b4:37:bc:75:80:03:06:11:f3:de:74:f3:19:ca:14:6b: 8e:8d:13:5b:b5:2f:9a:16:e1:17:e1:79:63:1c:4b:32:a8:79: b5:9f:08:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGkgOTQvvPlkz2d59Tsj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZjE4YjgwMzM5ZDhhZTYzN2Y0YTAyZjMzNWJiZWM3Yzhj MjZiZGUwHhcNMjUxMjI2MTAwMDMwWhcNMjUxMjI3MTAwMDMwWjAzMTEwLwYDVQQD Eyg2YzI3ZDg5ZGM4MzJmZWRiMzU1MjdlMDA3YWJkODFiYTM4N2FmMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1ptt30tNBvXm5bXslaQhEu/lLYm byGrPub7YLcKjaaHQnPVZrIi3qzOIhCl84jh8qhlVN9cfA+7de/svo8ynTdJe7qG xraVkpUt04pqy6Spe2gnLHjPgjTrVmln9bxZljDSCmVD6G4YQ6RL/cnn3ZAyXhBl +lWhzjQchcQAdX1oWpHswBZm9n3taLATGVF3d+KYPERa5dshLC7yt0beVPvzXF3/ dfGlzODO/zHdbaqx6NXDAaHn0BU41iruw9G2wHhNxRk5QD0946mnYD8FjJS5dG8g 4rpAigjcca8QOy8iUThA9kYfluDtjbJB2j49M+KhfJ/r3vjtayOyxAG9pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwn2J3IMv7bNVJ+AHq9gbo4evG1MB8GA1UdIwQY MBaAFILxi4AznYrmN/SgLzNbvsfIwmveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3ZHTGdET2RpdVkzOUtBdk0xdS14OGpDYTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82NWMyZDktODBkNC00NTlmLWFlNjEt YjViZDQyOGYxOTBjLzEvZ3ZHTGdET2RpdVkzOUtBdk0xdS14OGpDYTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS82NWMyZDktODBkNC00NTlmLWFlNjEtYjViZDQyOGYxOTBj LzEvZ3ZHTGdET2RpdVkzOUtBdk0xdS14OGpDYTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8aQPJGb aosKIBFfbxJaxya/p+lmhvCSaODtvE7zfIY8aotI3KrVvQ+ep8o1f4IYw5YA1DVM voKddNjApIUt2rCGZAJc384YntxrEmS3TFQacTj5oGFoUHfj+NqWx4mFjN9RY1T9 DobOKjV4FKdyzfRaStLdfV249QkLDsYU5K/13Q5Q4ZdB+kDC5K2Vqtaqgv3Kwsc+ 48J0WsVhL2fpXOHNuACnhISIHe2AiHyGVJ4BwudbTEvZ3LmoFe2FTkOK/ITROR/U obUNOCsz0lOuzF33rf7k7FYUX3W0N7x1gAMGEfPedPMZyhRrjo0TW7UvmhbhF+F5 YxxLMqh5tZ8I8g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:59 2025 by rpki-client