This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft File: gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json) Hash identifier: UFewgx1l8pCupIrgMlOabnHn2XdwFBOwXTEfphwEh/E= Subject key identifier: A1:FC:36:48:1E:83:41:09:4A:E0:F2:6E:61:72:0D:92:A2:46:F7:5A Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6 Certificate issuer: /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6 Certificate serial: 019B1BAAFA7FB7F261C49C094F2B7791A2B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft Manifest number: 08BD Signing time: Sun 14 Dec 2025 07:02:28 +0000 Manifest this update: Sun 14 Dec 2025 07:02:28 +0000 Manifest next update: Mon 15 Dec 2025 07:02:28 +0000 Files and hashes: 1: 248bDK_2X4s3D78cLTN1zTJo8ls.roa (hash: kLQEr1R8+53FUqqBvs455Xwu5a5on81N6ifpRavsyZA=) 2: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: Y+FPTpdq4DoQmEbtIBRAWv7nHREcOopkPcvBI4gg8Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:fa:7f:b7:f2:61:c4:9c:09:4f:2b:77:91:a2:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6 Validity Not Before: Dec 14 07:02:28 2025 GMT Not After : Dec 15 07:02:28 2025 GMT Subject: CN=a1fc36481e8341094ae0f26e61720d92a246f75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b7:05:d6:4a:ef:c2:d6:2f:29:d5:70:f4:3e: c7:57:a5:47:02:c9:d8:86:72:e9:04:c7:f5:ea:ae: 9f:b4:de:3f:c9:08:71:2a:67:be:35:01:e2:8a:1e: b9:f3:90:85:eb:3d:ce:f0:da:af:12:c7:53:8c:8d: 6d:72:2a:0b:bc:73:71:c2:86:3a:f1:a9:d4:27:73: 0a:4f:a7:87:23:8d:03:d5:81:ec:e8:9b:41:3f:80: 23:4c:b8:5a:4e:17:15:2f:f8:eb:67:91:f7:f4:6f: 54:7e:63:ef:09:07:a6:5c:64:f8:ce:c8:d3:43:b8: 65:85:b6:05:f4:be:7f:d5:6d:18:76:e5:eb:d9:b2: 3b:63:7a:1a:85:42:93:2b:f6:b6:47:25:2a:c3:43: 58:ff:d9:ee:e3:da:b5:c4:bd:4e:d1:32:02:9b:e7: a3:bd:72:97:46:03:9c:5f:fc:ed:da:37:61:0d:6e: 43:bd:a1:25:1a:29:38:a0:9f:3b:63:3b:c4:4e:13: c4:22:ac:95:4f:46:db:4e:63:df:42:cc:24:0d:a9: 5e:55:35:84:65:3b:56:c6:ef:46:28:5c:4c:10:e9: f4:d8:7d:cf:5b:6b:31:b3:1f:7a:84:a5:71:85:36: ab:c9:d9:c8:1e:c1:c7:44:6d:ca:03:76:43:82:04: 07:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FC:36:48:1E:83:41:09:4A:E0:F2:6E:61:72:0D:92:A2:46:F7:5A X509v3 Authority Key Identifier: keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:bb:d2:a1:c6:00:46:de:0a:21:85:bb:16:c0:4c:78:20:3b: f7:74:b2:f5:0d:5e:82:07:e1:4b:de:f3:34:44:fb:4f:d2:8f: 1c:fa:d3:2b:be:0b:d0:2e:fd:f0:f5:89:f5:34:66:a0:2e:8c: 30:a3:14:89:28:4c:da:e5:7f:5c:76:7e:6a:1c:ed:49:fa:92: 50:b5:44:ea:4d:0c:40:d4:d8:99:dd:c3:38:49:db:a7:9b:3f: 32:80:df:ba:d7:68:43:55:0a:3e:f9:07:00:01:8f:5a:17:73: 22:12:cb:a6:25:49:b6:b1:eb:66:84:26:8e:a6:45:29:08:a5: 2d:75:aa:4d:c6:4d:80:36:33:eb:c0:31:42:d8:b4:da:c4:5a: 8c:ee:52:e2:7e:bc:e1:19:ad:98:fc:35:9e:8b:a6:1c:82:ce: 12:70:ce:37:13:6b:e7:8a:5f:63:05:d9:fd:81:58:63:f6:34: f0:37:c2:32:63:ea:1c:57:a4:87:68:58:ba:a2:ab:04:b9:31: ef:42:a2:24:e1:0d:59:a2:81:bd:b3:da:bc:43:3e:21:60:5b: 89:6b:3e:82:f5:55:b5:6e:4e:19:e8:96:6f:a7:cc:60:6c:d6: 8a:d5:86:79:9a:60:6b:39:8f:01:e9:51:1d:2c:38:17:5b:65: 08:62:dd:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqvp/t/JhxJwJTyt3kaK2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZmU3ZDAwZTk0Y2QyYTdjYmY3ZjllODJjZjA5OTI0MTc0 MThkZjYwHhcNMjUxMjE0MDcwMjI4WhcNMjUxMjE1MDcwMjI4WjAzMTEwLwYDVQQD EyhhMWZjMzY0ODFlODM0MTA5NGFlMGYyNmU2MTcyMGQ5MmEyNDZmNzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bcF1krvwtYvKdVw9D7HV6VHAsnY hnLpBMf16q6ftN4/yQhxKme+NQHiih6585CF6z3O8NqvEsdTjI1tcioLvHNxwoY6 8anUJ3MKT6eHI40D1YHs6JtBP4AjTLhaThcVL/jrZ5H39G9UfmPvCQemXGT4zsjT Q7hlhbYF9L5/1W0YduXr2bI7Y3oahUKTK/a2RyUqw0NY/9nu49q1xL1O0TICm+ej vXKXRgOcX/zt2jdhDW5DvaElGik4oJ87YzvEThPEIqyVT0bbTmPfQswkDaleVTWE ZTtWxu9GKFxMEOn02H3PW2sxsx96hKVxhTarydnIHsHHRG3KA3ZDggQHXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKH8Nkgeg0EJSuDybmFyDZKiRvdaMB8GA1UdIwQY MBaAFIL+fQDpTNKny/f56CzwmSQXQY32MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzct NjNkZjYwMzE2MWM5LzEvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzctNjNkZjYwMzE2MWM5 LzEvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7vSocYA Rt4KIYW7FsBMeCA793Sy9Q1eggfhS97zNET7T9KPHPrTK74L0C798PWJ9TRmoC6M MKMUiShM2uV/XHZ+ahztSfqSULVE6k0MQNTYmd3DOEnbp5s/MoDfutdoQ1UKPvkH AAGPWhdzIhLLpiVJtrHrZoQmjqZFKQilLXWqTcZNgDYz68AxQti02sRajO5S4n68 4RmtmPw1noumHILOEnDONxNr54pfYwXZ/YFYY/Y08DfCMmPqHFekh2hYuqKrBLkx 70KiJOENWaKBvbPavEM+IWBbiWs+gvVVtW5OGeiWb6fMYGzWitWGeZpgazmPAelR HSw4F1tlCGLdfA== -----END CERTIFICATE-----Generated at Sun Dec 14 12:24:42 2025 by rpki-client