This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft File: GXSZvpe8wyf2Tp64xCOUUIygbWU.mft (raw, json) Hash identifier: RqJ9wNfxZxOiheJ4LA1IQFxSQqrPhJXXgvcDS5xxQ7Y= Subject key identifier: EA:80:86:FF:52:3F:27:03:6F:0B:44:4C:60:BA:0E:BA:A7:DD:9C:DB Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65 Certificate issuer: /CN=197499be97bcc327f64e9eb8c42394508ca06d65 Certificate serial: 019B38D820DDCF20FA2459890230D22308B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft Manifest number: 0DDC Signing time: Fri 19 Dec 2025 23:00:46 +0000 Manifest this update: Fri 19 Dec 2025 23:00:46 +0000 Manifest next update: Sat 20 Dec 2025 23:00:46 +0000 Files and hashes: 1: GXSZvpe8wyf2Tp64xCOUUIygbWU.crl (hash: h7LaWS35iZyt84EAFkeLCu0jCoWFioQHg718SaGQUck=) 2: sotFwW0dd18jhlgGMEoNrnqopP4.roa (hash: gVSt/FfSJjyB1+rQ4tB9A+DWP4ec6C61j3+zsQZbog8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:20:dd:cf:20:fa:24:59:89:02:30:d2:23:08:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65 Validity Not Before: Dec 19 23:00:46 2025 GMT Not After : Dec 20 23:00:46 2025 GMT Subject: CN=ea8086ff523f27036f0b444c60ba0ebaa7dd9cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:89:f5:fd:c1:d9:80:47:6a:7c:74:49:7b:1b: 94:8d:71:57:7b:e4:dd:96:60:d4:3b:ea:aa:08:06: 82:b5:4d:6a:42:a9:97:1b:01:f8:1b:50:5b:28:3e: 30:3b:04:f7:a8:69:19:ab:6a:a3:45:6f:36:97:33: 11:d8:24:93:9b:f2:a4:a0:8c:c6:e8:da:d8:b7:27: 69:5e:35:09:85:2b:e1:7e:e1:82:6c:0a:31:97:52: 2f:f9:b7:f4:ac:a4:05:28:26:5c:bb:c0:51:81:20: f6:c9:f7:e1:ce:03:7b:3f:00:69:d6:cc:14:7f:17: 6c:14:89:69:9d:72:c0:3b:74:a7:f4:ac:4e:f7:fa: e0:e6:9b:4e:0f:ad:d5:f3:51:f4:d6:6a:83:0b:bf: 73:6f:90:bf:39:ab:34:03:bb:46:f1:94:c0:30:00: 30:d2:3f:64:41:ad:9f:88:c6:fc:47:2a:a6:02:c8: 83:48:ca:08:b6:09:35:cd:ee:7e:21:ec:0a:3c:f1: 0e:b2:93:9a:74:ec:70:8d:c2:24:76:db:b0:74:af: 53:5e:c3:3d:52:3e:bf:dd:fb:a1:70:f5:a3:4b:9e: 8f:22:0c:9f:9c:e4:46:1c:f8:5e:a7:bd:9f:c8:54: 77:e8:6a:1d:cb:cf:1e:23:fc:90:49:07:15:0f:f7: d3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:80:86:FF:52:3F:27:03:6F:0B:44:4C:60:BA:0E:BA:A7:DD:9C:DB X509v3 Authority Key Identifier: keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:df:55:f0:54:e4:c6:50:41:bc:33:9c:5e:4e:ae:22:92:32: 1c:fc:53:1e:f6:5e:ef:da:5e:6f:a4:5b:a4:74:cd:6c:67:4f: e0:54:b8:ae:a0:5f:87:e1:82:34:42:d5:dc:b4:42:31:e1:20: 5b:5b:92:54:5e:4a:bd:3a:02:5f:40:10:6e:27:e4:f8:34:64: 54:17:70:6c:c1:f2:9a:0c:6c:bd:17:97:78:68:f5:80:73:4b: 3c:8b:c0:8c:c7:2a:fb:39:6e:41:a9:d6:76:36:2f:5e:9d:64: ce:c2:14:44:0a:fd:a5:78:cb:25:ff:4b:1a:30:18:89:18:55: 6f:39:0f:29:53:fc:57:23:ac:5b:52:5f:90:71:00:e8:cc:16: 29:39:b8:c1:4a:78:80:1a:d6:3f:94:53:5c:c4:d5:5b:07:97: 4b:be:61:53:0f:34:47:5b:57:1c:02:38:fa:84:89:c0:a7:60: d5:fd:8f:da:66:94:84:9b:0d:61:bf:c5:1a:ec:f8:6f:05:69: e3:e4:80:e0:4b:a5:a4:39:9b:b4:3a:ac:92:30:f6:98:dd:1d: e9:0f:e9:22:cd:df:7f:ec:a8:70:4b:38:b5:b2:fb:94:1f:98: 0c:45:d0:28:22:1a:da:17:71:1b:d2:29:8f:1a:48:88:a6:56: 85:84:3f:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42CDdzyD6JFmJAjDSIwiyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NzQ5OWJlOTdiY2MzMjdmNjRlOWViOGM0MjM5NDUwOGNh MDZkNjUwHhcNMjUxMjE5MjMwMDQ2WhcNMjUxMjIwMjMwMDQ2WjAzMTEwLwYDVQQD EyhlYTgwODZmZjUyM2YyNzAzNmYwYjQ0NGM2MGJhMGViYWE3ZGQ5Y2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7on1/cHZgEdqfHRJexuUjXFXe+Td lmDUO+qqCAaCtU1qQqmXGwH4G1BbKD4wOwT3qGkZq2qjRW82lzMR2CSTm/KkoIzG 6NrYtydpXjUJhSvhfuGCbAoxl1Iv+bf0rKQFKCZcu8BRgSD2yffhzgN7PwBp1swU fxdsFIlpnXLAO3Sn9KxO9/rg5ptOD63V81H01mqDC79zb5C/Oas0A7tG8ZTAMAAw 0j9kQa2fiMb8RyqmAsiDSMoItgk1ze5+IewKPPEOspOadOxwjcIkdtuwdK9TXsM9 Uj6/3fuhcPWjS56PIgyfnORGHPhep72fyFR36Gody88eI/yQSQcVD/fT/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqAhv9SPycDbwtETGC6Drqn3ZzbMB8GA1UdIwQY MBaAFBl0mb6XvMMn9k6euMQjlFCMoG1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82YTkwMGEtOGI1Yy00MDdiLWEwOTQt ODk4MDM2NzM0ODc4LzEvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82YTkwMGEtOGI1Yy00MDdiLWEwOTQtODk4MDM2NzM0ODc4 LzEvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP99V8FTk xlBBvDOcXk6uIpIyHPxTHvZe79peb6RbpHTNbGdP4FS4rqBfh+GCNELV3LRCMeEg W1uSVF5KvToCX0AQbifk+DRkVBdwbMHymgxsvReXeGj1gHNLPIvAjMcq+zluQanW djYvXp1kzsIURAr9pXjLJf9LGjAYiRhVbzkPKVP8VyOsW1JfkHEA6MwWKTm4wUp4 gBrWP5RTXMTVWweXS75hUw80R1tXHAI4+oSJwKdg1f2P2maUhJsNYb/FGuz4bwVp 4+SA4EulpDmbtDqskjD2mN0d6Q/pIs3ff+yocEs4tbL7lB+YDEXQKCIa2hdxG9Ip jxpIiKZWhYQ/qw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:12:03 2025 by rpki-client