This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft File: GJiU_9B_W6Edxlvzj9lexByK944.mft (raw, json) Hash identifier: 5ewDnfyl5LRdwT2dudU41ZIymsPGzzC9NbYNbmJ0YPc= Subject key identifier: EB:29:E8:79:7B:24:AA:BF:F3:24:A7:F7:23:3F:68:56:AB:E9:BD:BA Authority key identifier: 18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E Certificate issuer: /CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e Certificate serial: 019B378ED6662244C7E99ADF7843B849963C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft Manifest number: 14BE Signing time: Fri 19 Dec 2025 17:01:06 +0000 Manifest this update: Fri 19 Dec 2025 17:01:06 +0000 Manifest next update: Sat 20 Dec 2025 17:01:06 +0000 Files and hashes: 1: GJiU_9B_W6Edxlvzj9lexByK944.crl (hash: O08OxOUwE2hFmeB4NitFzPFzKnhVXc12iftUqQ53oFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:d6:66:22:44:c7:e9:9a:df:78:43:b8:49:96:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e Validity Not Before: Dec 19 17:01:06 2025 GMT Not After : Dec 20 17:01:06 2025 GMT Subject: CN=eb29e8797b24aabff324a7f7233f6856abe9bdba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:59:e4:d7:fa:7b:fc:68:f6:55:ca:3d:48:7d: 54:74:fb:d2:53:42:dd:a1:85:d1:98:9a:cf:63:f6: d3:7b:04:ae:c7:6a:c9:5c:f9:cc:d9:77:eb:3e:1a: 91:1a:68:52:2b:59:79:92:98:64:b9:6f:f9:5a:e0: 50:e8:89:63:0b:f9:bc:3b:b9:4f:cc:d9:31:e8:33: 06:c8:40:f1:ea:de:ba:20:f5:c7:7a:30:d1:32:60: fc:fc:87:ec:0e:00:3a:cb:42:42:30:88:99:68:75: ba:a0:ef:6b:4a:05:d8:0c:2a:bc:b4:59:da:6c:a6: 73:e8:06:19:58:3d:d3:a5:9b:9f:3a:ca:56:69:28: da:7b:29:82:fa:e6:41:c9:b6:32:bd:86:6b:02:c6: b1:42:0f:b5:2e:cd:76:8d:c1:33:67:37:8c:9b:2b: 5d:f6:f7:77:45:05:da:12:56:8d:ba:c2:bf:c4:01: ce:3e:7d:79:1d:ef:1f:d9:9d:8e:8d:25:5a:a3:1e: d6:de:48:e9:59:0e:05:2b:10:9b:24:0f:c0:e1:66: 3c:27:bb:db:63:c7:ec:9e:a9:b7:c5:bb:f8:79:99: e0:24:f7:50:6f:ae:42:bb:92:0d:eb:22:e9:3f:fc: 9c:7f:4a:35:b9:4e:c6:d1:c5:f2:fd:12:d2:05:2e: e5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:29:E8:79:7B:24:AA:BF:F3:24:A7:F7:23:3F:68:56:AB:E9:BD:BA X509v3 Authority Key Identifier: keyid:18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:fe:70:29:ac:4a:56:54:b8:be:3d:3c:06:82:45:0b:20:4c: 2d:8f:33:fd:83:6a:15:73:87:25:61:c2:d3:5f:9e:7b:4c:51: 1a:bb:4d:b5:ea:4a:bc:80:84:6e:34:31:00:53:cb:e6:30:22: 20:27:a4:71:49:9f:bd:4c:43:59:09:0e:2f:73:e9:91:3d:01: b7:10:37:1f:32:17:da:2d:46:ab:bf:b7:18:c6:62:bf:0e:fd: 81:a7:ba:07:25:ee:c3:9d:a8:fd:a3:65:b6:bd:92:44:11:4f: 60:2d:04:30:11:37:be:92:86:bc:08:07:4c:4b:5f:ad:7e:63: e6:4d:30:aa:f1:b6:5b:1c:b3:35:d2:6f:39:98:6f:3e:31:35: 67:e7:c7:dc:d3:2a:8d:f3:a7:93:fb:79:91:73:48:70:30:6e: 87:ca:e9:a3:68:ef:3d:8d:b1:0c:96:d9:37:fb:54:00:ad:d2: eb:38:f5:c7:1f:cf:2a:e7:27:a1:a2:8e:df:c2:21:34:95:d7: 60:5f:3b:50:65:fb:c3:a2:92:6c:93:48:1e:e4:0e:97:56:19: 83:15:3e:ad:74:6a:fc:c7:d2:4b:78:93:71:3e:c3:0c:18:9f: 60:5a:de:d3:02:b5:1d:16:5b:fb:6b:f8:24:f9:f9:f5:c5:73: b4:a6:d0:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jtZmIkTH6ZrfeEO4SZY8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OTg5NGZmZDA3ZjViYTExZGM2NWJmMzhmZDk1ZWM0MWM4 YWY3OGUwHhcNMjUxMjE5MTcwMTA2WhcNMjUxMjIwMTcwMTA2WjAzMTEwLwYDVQQD EyhlYjI5ZTg3OTdiMjRhYWJmZjMyNGE3ZjcyMzNmNjg1NmFiZTliZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlnk1/p7/Gj2Vco9SH1UdPvSU0Ld oYXRmJrPY/bTewSux2rJXPnM2XfrPhqRGmhSK1l5kphkuW/5WuBQ6IljC/m8O7lP zNkx6DMGyEDx6t66IPXHejDRMmD8/IfsDgA6y0JCMIiZaHW6oO9rSgXYDCq8tFna bKZz6AYZWD3TpZufOspWaSjaeymC+uZBybYyvYZrAsaxQg+1Ls12jcEzZzeMmytd 9vd3RQXaElaNusK/xAHOPn15He8f2Z2OjSVaox7W3kjpWQ4FKxCbJA/A4WY8J7vb Y8fsnqm3xbv4eZngJPdQb65Cu5IN6yLpP/ycf0o1uU7G0cXy/RLSBS7lKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsp6Hl7JKq/8ySn9yM/aFar6b26MB8GA1UdIwQY MBaAFBiYlP/Qf1uhHcZb84/ZXsQciveOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0ppVV85Ql9XNkVkeGx2emo5bGV4QnlLOTQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81MjM0NzMtMWZlMC00ZTdlLTk0NTUt Y2NjOWIzMzdjY2EwLzEvR0ppVV85Ql9XNkVkeGx2emo5bGV4QnlLOTQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi81MjM0NzMtMWZlMC00ZTdlLTk0NTUtY2NjOWIzMzdjY2Ew LzEvR0ppVV85Ql9XNkVkeGx2emo5bGV4QnlLOTQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/5wKaxK VlS4vj08BoJFCyBMLY8z/YNqFXOHJWHC01+ee0xRGrtNtepKvICEbjQxAFPL5jAi ICekcUmfvUxDWQkOL3PpkT0BtxA3HzIX2i1Gq7+3GMZivw79gae6ByXuw52o/aNl tr2SRBFPYC0EMBE3vpKGvAgHTEtfrX5j5k0wqvG2WxyzNdJvOZhvPjE1Z+fH3NMq jfOnk/t5kXNIcDBuh8rpo2jvPY2xDJbZN/tUAK3S6zj1xx/PKucnoaKO38IhNJXX YF87UGX7w6KSbJNIHuQOl1YZgxU+rXRq/MfSS3iTcT7DDBifYFre0wK1HRZb+2v4 JPn59cVztKbQWg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:16:10 2025 by rpki-client