This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft File: guX7w-pSWnjGMMTahkuppg4Zm_8.mft (raw, json) Hash identifier: AmBM1TE8a45PMJQX2Z9QEIDtowDkSJrNIgkzS6PFwdk= Subject key identifier: 4F:A9:68:71:3D:23:84:0E:46:DA:98:91:33:31:D4:7D:BE:3D:16:AB Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF Certificate issuer: /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff Certificate serial: 019B5A1AFEDF72D6B6DEEFA0B8A37A22C5D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 10:01:17 +0000 Manifest this update: Fri 26 Dec 2025 10:01:17 +0000 Manifest next update: Sat 27 Dec 2025 10:01:17 +0000 Files and hashes: 1: 1-QG4tCncv0FTtCHqg5B2GIvzr7Y.roa (hash: Y2rS+2UdPK85e7sE5yCklBS//u+UrJBVKAmv+QqSGio=) 2: guX7w-pSWnjGMMTahkuppg4Zm_8.crl (hash: jRd9+KRlylzEbiuah+R4VLQZLWbKMveg7twnuvp+LuY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:fe:df:72:d6:b6:de:ef:a0:b8:a3:7a:22:c5:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff Validity Not Before: Dec 26 10:01:17 2025 GMT Not After : Dec 27 10:01:17 2025 GMT Subject: CN=4fa968713d23840e46da98913331d47dbe3d16ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:9b:23:7e:f2:c6:c1:3e:27:f5:1d:58:a2: a1:31:6e:ea:2a:a8:25:fe:da:c3:62:70:d2:77:9b: de:48:7e:4e:2a:b6:65:40:39:a4:6b:09:85:5a:39: 79:24:05:b7:37:de:74:d4:b4:cd:ec:54:63:f0:72: 8b:d2:a5:da:4e:ae:a1:1e:8f:b6:82:8a:8a:0b:1f: ee:36:51:eb:7b:da:6b:0f:e6:d5:f4:f5:63:6e:3b: 55:a1:df:cd:7b:97:92:bc:b6:91:2d:af:0b:b2:99: 48:39:0e:72:68:24:56:d7:fe:df:95:44:3c:87:69: c4:e8:7a:8e:e2:8c:38:36:5c:a5:42:b4:5b:5d:ac: f2:87:5d:fe:b5:d2:d1:83:f9:39:ea:fb:1a:5b:92: ae:1f:0b:81:f4:72:37:b1:f1:db:57:1d:aa:13:33: 11:39:59:1e:66:bd:71:e7:24:09:c2:6a:f2:06:86: f9:ee:82:26:aa:15:56:2c:c2:0e:76:62:2e:7d:82: da:20:a8:b5:cd:2a:7c:00:72:38:c2:47:cf:94:bc: 41:09:69:4d:27:18:73:af:be:6d:76:d5:5f:1e:65: 94:b4:31:89:d7:26:79:53:fe:0a:63:9b:89:5b:4f: 11:03:c1:02:17:05:b3:56:c3:15:a9:06:6e:67:52: 4c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A9:68:71:3D:23:84:0E:46:DA:98:91:33:31:D4:7D:BE:3D:16:AB X509v3 Authority Key Identifier: keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c7:2a:d5:08:e9:f0:b0:fb:fa:59:a5:ef:50:25:2f:7a:3d: 6b:89:79:b9:2f:06:1a:5c:a1:ad:f5:58:78:c0:9a:53:80:b8: fb:2d:0a:d7:9d:3a:5e:31:c2:11:d8:40:bb:b1:55:e2:90:75: 44:76:a7:be:0a:61:d0:19:53:dc:09:74:eb:3d:d3:5d:84:3b: 1a:3e:89:13:89:ae:d0:55:c2:34:f1:9f:a4:ad:94:5d:48:6d: 6e:2f:0e:ea:de:f2:20:07:52:47:ec:65:d9:52:ec:a8:61:a5: 01:09:a8:c4:09:ab:2a:be:b8:5c:80:0a:9d:a0:6f:93:ce:d6: e5:3e:55:9c:75:c5:95:5a:7f:66:76:98:e7:b0:df:62:d7:d4: 09:ba:68:de:60:71:3f:7f:48:9b:f5:32:f6:52:b4:0a:f4:fd: 93:5b:74:33:d9:e4:2b:a9:7b:07:8a:40:2e:76:a6:56:3f:ae: 0f:90:a9:bb:8b:60:c8:11:be:13:f9:6a:66:c6:a1:f1:a5:e0: 82:19:bc:16:38:73:76:7e:bc:96:b8:9e:34:3c:b6:d7:5a:b1: a6:b3:b8:2c:50:62:e7:bb:8e:09:bd:3d:22:c9:58:c9:89:cd: cf:dc:a2:0b:90:95:96:28:70:dd:30:de:ea:25:f7:77:2e:db: 05:59:10:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGv7fcta23u+guKN6IsXRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZTVmYmMzZWE1MjVhNzhjNjMwYzRkYTg2NGJhOWE2MGUx OTliZmYwHhcNMjUxMjI2MTAwMTE3WhcNMjUxMjI3MTAwMTE3WjAzMTEwLwYDVQQD Eyg0ZmE5Njg3MTNkMjM4NDBlNDZkYTk4OTEzMzMxZDQ3ZGJlM2QxNmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulqbI37yxsE+J/UdWKKhMW7qKqgl /trDYnDSd5veSH5OKrZlQDmkawmFWjl5JAW3N9501LTN7FRj8HKL0qXaTq6hHo+2 goqKCx/uNlHre9prD+bV9PVjbjtVod/Ne5eSvLaRLa8LsplIOQ5yaCRW1/7flUQ8 h2nE6HqO4ow4NlylQrRbXazyh13+tdLRg/k56vsaW5KuHwuB9HI3sfHbVx2qEzMR OVkeZr1x5yQJwmryBob57oImqhVWLMIOdmIufYLaIKi1zSp8AHI4wkfPlLxBCWlN Jxhzr75tdtVfHmWUtDGJ1yZ5U/4KY5uJW08RA8ECFwWzVsMVqQZuZ1JMKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+paHE9I4QORtqYkTMx1H2+PRarMB8GA1UdIwQY MBaAFILl+8PqUlp4xjDE2oZLqaYOGZv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yZWNlMjYtMTc4MS00NTVlLTgwYjMt OTNkZDY1MDc0ODhlLzEvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8yZWNlMjYtMTc4MS00NTVlLTgwYjMtOTNkZDY1MDc0ODhl LzEvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMcq1Qjp 8LD7+lml71AlL3o9a4l5uS8GGlyhrfVYeMCaU4C4+y0K1506XjHCEdhAu7FV4pB1 RHanvgph0BlT3Al06z3TXYQ7Gj6JE4mu0FXCNPGfpK2UXUhtbi8O6t7yIAdSR+xl 2VLsqGGlAQmoxAmrKr64XIAKnaBvk87W5T5VnHXFlVp/ZnaY57DfYtfUCbpo3mBx P39Im/Uy9lK0CvT9k1t0M9nkK6l7B4pALnamVj+uD5Cpu4tgyBG+E/lqZsah8aXg ghm8Fjhzdn68lrieNDy211qxprO4LFBi57uOCb09IslYyYnNz9yiC5CVlihw3TDe 6iX3dy7bBVkQJg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:16 2025 by rpki-client