This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft File: gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json) Hash identifier: V9QZNJNZ2YbVKEHML0CzQEEQIkjoYmsWxk6sNd0tVSQ= Subject key identifier: 1A:3F:8E:3B:35:A0:D6:5B:B9:2C:D3:A5:49:BD:CD:8F:49:F1:DA:B3 Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6 Certificate issuer: /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6 Certificate serial: 019B34C5C80A123C6CA6E56741EECE3D402B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft Manifest number: 08CA Signing time: Fri 19 Dec 2025 04:02:15 +0000 Manifest this update: Fri 19 Dec 2025 04:02:15 +0000 Manifest next update: Sat 20 Dec 2025 04:02:15 +0000 Files and hashes: 1: 248bDK_2X4s3D78cLTN1zTJo8ls.roa (hash: kLQEr1R8+53FUqqBvs455Xwu5a5on81N6ifpRavsyZA=) 2: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: TdTwhqpBtuo6sdK+XKaS8ZXrZ6OADWGSwWC9WmkGZuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:c8:0a:12:3c:6c:a6:e5:67:41:ee:ce:3d:40:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6 Validity Not Before: Dec 19 04:02:15 2025 GMT Not After : Dec 20 04:02:15 2025 GMT Subject: CN=1a3f8e3b35a0d65bb92cd3a549bdcd8f49f1dab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1f:d7:16:02:cb:87:57:11:42:93:39:e9:ed: d9:09:19:75:c0:e7:22:f0:9b:5c:43:84:27:85:5e: c5:8d:9c:69:63:fd:1a:c2:53:8e:a3:b9:19:e4:f5: 72:bb:98:93:6f:41:81:ec:74:c6:d9:04:a9:ab:6c: db:b7:36:c4:fe:45:68:75:cb:c9:8d:a2:c8:40:bd: 25:5d:3e:1b:53:d5:6a:9a:2f:e2:0b:3e:cd:86:1a: e9:2e:e3:f9:e6:d4:a6:42:ec:e5:71:0d:82:a9:ab: 84:4e:89:4e:a0:b8:81:40:61:ba:a9:27:1e:d9:af: 9d:f0:f4:46:f0:e2:e5:f7:a9:79:c1:be:a3:3c:02: 41:9d:d2:45:bc:2e:1b:76:98:b4:45:9f:c9:8f:6c: f8:8a:43:e1:39:f8:b2:79:fa:e0:de:ae:14:99:08: f5:e2:f2:4e:e2:89:1b:ad:4b:36:8e:1b:80:28:8b: bf:b3:7b:2b:73:f7:20:3d:23:b3:cb:4a:80:ae:3b: d6:9d:f6:be:3f:70:c5:4c:4b:5e:62:07:f0:98:56: d7:06:84:3e:b1:3d:98:2f:21:ad:db:9d:e9:87:07: 55:71:dc:04:c7:28:4b:37:d9:98:af:b7:ca:3b:5b: 92:ba:13:52:52:89:4c:93:ff:bf:42:50:87:74:d2: a4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3F:8E:3B:35:A0:D6:5B:B9:2C:D3:A5:49:BD:CD:8F:49:F1:DA:B3 X509v3 Authority Key Identifier: keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:66:cb:0c:0d:47:cd:83:ab:0b:d6:25:de:8f:a6:4c:e4:60: 67:41:60:0f:7d:ff:b8:4e:ab:19:4f:5c:a1:45:5d:60:03:17: 66:a6:e0:3a:14:31:0f:bc:c1:2b:fe:fe:1d:e2:70:6d:14:02: 6f:67:8f:fe:c5:c1:28:34:2c:87:ee:29:83:f0:27:2d:fa:08: 14:c7:f3:c0:5f:23:d0:8e:e3:cf:44:b7:06:1b:a5:5d:4e:a4: d5:68:dc:27:65:99:c1:dd:23:08:b3:2c:8d:60:d7:3a:6e:3b: 54:69:25:7e:ec:ef:01:c3:93:25:db:83:43:a2:8a:c3:df:fe: 73:c5:db:ae:b3:1d:1c:c2:5d:aa:25:57:4d:6c:36:0e:e0:da: 0c:a5:d6:06:c7:1c:bd:98:b7:db:30:21:bf:43:15:4f:d0:86: 11:f4:ec:b6:ef:21:f5:f9:e6:7e:a5:41:ca:42:57:4b:75:66: 90:a7:f6:18:97:ff:e6:54:ca:0a:47:f0:8c:02:99:c9:86:9c: bd:e6:bc:62:55:5e:bc:33:50:cd:b3:b7:9b:e3:a9:87:f8:40: 0c:51:81:69:bf:d4:68:24:7f:dd:f1:80:3f:f5:98:bb:a6:1c: cd:23:d8:75:03:29:0b:87:34:4d:1d:37:ae:8d:64:09:ed:10: 86:ec:a8:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xcgKEjxspuVnQe7OPUArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZmU3ZDAwZTk0Y2QyYTdjYmY3ZjllODJjZjA5OTI0MTc0 MThkZjYwHhcNMjUxMjE5MDQwMjE1WhcNMjUxMjIwMDQwMjE1WjAzMTEwLwYDVQQD EygxYTNmOGUzYjM1YTBkNjViYjkyY2QzYTU0OWJkY2Q4ZjQ5ZjFkYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph/XFgLLh1cRQpM56e3ZCRl1wOci 8JtcQ4QnhV7FjZxpY/0awlOOo7kZ5PVyu5iTb0GB7HTG2QSpq2zbtzbE/kVodcvJ jaLIQL0lXT4bU9Vqmi/iCz7NhhrpLuP55tSmQuzlcQ2CqauETolOoLiBQGG6qSce 2a+d8PRG8OLl96l5wb6jPAJBndJFvC4bdpi0RZ/Jj2z4ikPhOfiyefrg3q4UmQj1 4vJO4okbrUs2jhuAKIu/s3src/cgPSOzy0qArjvWnfa+P3DFTEteYgfwmFbXBoQ+ sT2YLyGt253phwdVcdwExyhLN9mYr7fKO1uSuhNSUolMk/+/QlCHdNKkBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBo/jjs1oNZbuSzTpUm9zY9J8dqzMB8GA1UdIwQY MBaAFIL+fQDpTNKny/f56CzwmSQXQY32MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzct NjNkZjYwMzE2MWM5LzEvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8yMGM3ZTctYTQ5Zi00MDMxLWJhNzctNjNkZjYwMzE2MWM5 LzEvZ3Y1OUFPbE0wcWZMOV9ub0xQQ1pKQmRCamZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmbLDA1H zYOrC9Yl3o+mTORgZ0FgD33/uE6rGU9coUVdYAMXZqbgOhQxD7zBK/7+HeJwbRQC b2eP/sXBKDQsh+4pg/AnLfoIFMfzwF8j0I7jz0S3BhulXU6k1WjcJ2WZwd0jCLMs jWDXOm47VGklfuzvAcOTJduDQ6KKw9/+c8XbrrMdHMJdqiVXTWw2DuDaDKXWBscc vZi32zAhv0MVT9CGEfTstu8h9fnmfqVBykJXS3VmkKf2GJf/5lTKCkfwjAKZyYac vea8YlVevDNQzbO3m+Oph/hADFGBab/UaCR/3fGAP/WYu6YczSPYdQMpC4c0TR03 ro1kCe0Qhuyoog== -----END CERTIFICATE-----Generated at Fri Dec 19 10:36:53 2025 by rpki-client