This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: gGXTXgVtXeMO+w4hoJXxMwRKeahY2Q6ymG80EmQFJfs= Subject key identifier: F9:D1:70:60:B1:B8:C9:81:01:D5:DB:6A:AB:94:5E:DD:16:52:6F:BB Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019B13EFE64815B53D7B12203BFE2AB33C43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 02FC Signing time: Fri 12 Dec 2025 19:00:47 +0000 Manifest this update: Fri 12 Dec 2025 19:00:47 +0000 Manifest next update: Sat 13 Dec 2025 19:00:47 +0000 Files and hashes: 1: EYgXdph0ad7x7RpPlZyOENzd-oA.roa (hash: Hrugq5ntPmxP93lV9SDtZJap5r0QftcRWf7OkP/hZyI=) 2: G_e3YSqYAX0sTWP5ZIgUxrclesc.roa (hash: ZO1I857zyVtc1skT7PHPYJ5rAOdh6XGavLJ4e3panbM=) 3: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: P/WRag598gHhriYIKgwfj3NeDgrxJqSL300rqyxD7M0=) 4: KKNtSPFbvF4xC2fg1H7HuDRzkGE.roa (hash: H5EVZdHcI+WVSxnRSQo+6mijz5FGMO2AIbkdKiqbEss=) 5: OzgFbbI0V5S5o1DdJOQqtABdtH0.roa (hash: y+11/IkfsSulnXEQxCkUZyHEuxM7K/mkeaGWZSD0CSE=) 6: ZI7vOrG6oAyS8YfJbBpZewDNGXQ.roa (hash: npYfXMzfry1oEZ/+7tKck9ENcVNUZ6jLLVA2nOAVsn8=) 7: cTjmubyLCN4Cd4JXEeIjGOFI_QI.roa (hash: 5AsKzlWifWFIxtEM5INGb5cckYMMjWeiNCE8Ap83gMM=) 8: lHoepiCpX7g78Ng_Suk_7keCehI.roa (hash: JX1GmHVZEyU6jv7xs+Gm8SluiSfi45q37cjpO1lCp5M=) 9: mjqRtPW_FFHVUc_9UfMFfi25D8E.roa (hash: XJlXFoLhM+Dtcep8s7P/rFzF3KGUlEzdjjknkuerFuY=) 10: qMKOIrCowr-evIF2TKMj48rb5ME.roa (hash: AsnmGDasDlnURHsWZv2Xw6xs4e4snEFqyNhGTwaLi9I=) 11: qnICZYiLbrGPlJAYqEcKvQ2CjqQ.roa (hash: HnPlRq2/eM18ZCRGQnjr87vL3s3tKW/ZrixlOUg/qKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:ef:e6:48:15:b5:3d:7b:12:20:3b:fe:2a:b3:3c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Dec 12 19:00:47 2025 GMT Not After : Dec 13 19:00:47 2025 GMT Subject: CN=f9d17060b1b8c98101d5db6aab945edd16526fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:3b:aa:58:a8:0a:6f:4a:d3:fd:d4:c4:e7: f8:13:cd:28:65:6e:f8:54:3a:43:e9:42:a5:d1:57: 67:07:45:84:c4:52:a0:ca:15:31:85:72:95:33:ac: 68:a0:57:0f:36:70:45:6d:19:0b:44:c3:f6:21:30: 0d:c2:04:25:e9:90:e4:9c:0f:f6:f4:3b:6a:0f:ae: 16:a9:13:3e:29:2a:dd:c2:91:19:37:84:43:16:b2: e4:c1:cd:1d:bf:b6:01:dc:f5:d5:b2:be:1d:54:3a: bc:b7:df:f1:d7:0c:05:01:91:7d:85:2e:af:d2:1a: af:0f:5f:61:74:5e:8e:c1:f6:4d:bb:33:ae:48:84: 9d:d5:24:05:41:70:30:34:30:5e:41:f1:59:dd:e3: 84:cd:57:3e:f1:57:a1:b5:d1:4a:2c:08:10:12:5a: 49:93:87:58:7b:99:fc:74:24:66:b0:1d:15:3b:e6: 55:38:18:3b:c4:77:ab:48:42:5f:4d:27:21:b7:c2: 67:7f:d0:d9:6f:86:0e:68:f0:e8:b2:c5:f0:ed:3b: 00:c7:6f:a8:19:5c:fe:e1:9f:51:59:fe:da:a9:6e: 7b:c9:a0:d5:af:29:fe:a9:23:be:c1:9b:85:0f:49: cb:e5:e3:76:21:f7:c3:ba:18:4f:e7:2d:bf:9a:5e: 5c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D1:70:60:B1:B8:C9:81:01:D5:DB:6A:AB:94:5E:DD:16:52:6F:BB X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:bf:fb:a9:07:83:3f:dd:a4:60:3d:11:3b:98:7b:c1:02:96: 05:19:8f:80:5b:51:87:1c:65:6e:9d:d0:7e:cb:6d:d5:51:ca: 4d:e2:b6:a6:5c:e1:b0:2b:85:19:45:de:77:e1:6c:09:6c:22: 2a:3c:4d:5c:c6:37:4e:ea:33:42:17:c6:15:d0:b6:8d:4b:19: ee:16:43:24:66:3d:60:bf:8c:23:bb:6d:67:87:47:6d:a2:b1: aa:f7:da:3a:7d:62:63:11:98:53:ee:eb:15:c3:50:8d:7b:c8: 8d:d9:7d:8e:25:d6:4d:33:c5:05:85:c3:99:16:21:fd:7b:cc: b5:f1:b7:7a:5a:4d:1b:a3:ad:51:66:2b:44:c7:5e:4e:3a:50: 76:36:71:58:26:aa:42:16:a1:5c:d6:59:5a:78:21:8b:83:0c: b7:1e:b7:3a:88:d8:d7:16:60:b6:3f:1a:cc:6c:ef:41:eb:64: a1:db:55:4d:6f:30:60:67:4e:16:29:19:3c:44:73:7b:85:b4: 4f:94:94:67:17:8e:8f:da:f9:c0:8d:c6:df:70:0d:4c:c2:21: ca:de:4d:86:7e:66:fb:32:6a:36:0c:2f:7d:94:02:51:22:bf: 48:a1:97:38:22:74:00:b6:56:e2:d7:ae:b9:2c:c9:f9:d7:85: 4f:fc:7e:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsT7+ZIFbU9exIgO/4qszxDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjUxMjEyMTkwMDQ3WhcNMjUxMjEzMTkwMDQ3WjAzMTEwLwYDVQQD EyhmOWQxNzA2MGIxYjhjOTgxMDFkNWRiNmFhYjk0NWVkZDE2NTI2ZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPo7qlioCm9K0/3UxOf4E80oZW74 VDpD6UKl0VdnB0WExFKgyhUxhXKVM6xooFcPNnBFbRkLRMP2ITANwgQl6ZDknA/2 9DtqD64WqRM+KSrdwpEZN4RDFrLkwc0dv7YB3PXVsr4dVDq8t9/x1wwFAZF9hS6v 0hqvD19hdF6OwfZNuzOuSISd1SQFQXAwNDBeQfFZ3eOEzVc+8VehtdFKLAgQElpJ k4dYe5n8dCRmsB0VO+ZVOBg7xHerSEJfTScht8Jnf9DZb4YOaPDossXw7TsAx2+o GVz+4Z9RWf7aqW57yaDVryn+qSO+wZuFD0nL5eN2IffDuhhP5y2/ml5csQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnRcGCxuMmBAdXbaquUXt0WUm+7MB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuL/7qQeD P92kYD0RO5h7wQKWBRmPgFtRhxxlbp3Qfstt1VHKTeK2plzhsCuFGUXed+FsCWwi KjxNXMY3TuozQhfGFdC2jUsZ7hZDJGY9YL+MI7ttZ4dHbaKxqvfaOn1iYxGYU+7r FcNQjXvIjdl9jiXWTTPFBYXDmRYh/XvMtfG3elpNG6OtUWYrRMdeTjpQdjZxWCaq QhahXNZZWnghi4MMtx63OojY1xZgtj8azGzvQetkodtVTW8wYGdOFikZPERze4W0 T5SUZxeOj9r5wI3G33ANTMIhyt5Nhn5m+zJqNgwvfZQCUSK/SKGXOCJ0ALZW4teu uSzJ+deFT/x+Hw== -----END CERTIFICATE-----Generated at Fri Dec 12 21:53:22 2025 by rpki-client