This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft File: gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json) Hash identifier: mAIyplYRdHdIojQSZBHlM+VPG4lEozUKeXdMql6FjlE= Subject key identifier: C8:2B:C0:F6:D6:CF:97:BC:A1:05:5B:5D:F3:21:A7:E6:EB:E0:99:1A Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab Certificate serial: 019B126F5F316D87457A84B38F54C96DBFED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 12:00:47 +0000 Manifest this update: Fri 12 Dec 2025 12:00:47 +0000 Manifest next update: Sat 13 Dec 2025 12:00:47 +0000 Files and hashes: 1: LjTHS4WiiLbIvDv29J3ieyKf9N4.roa (hash: 0M1gHDPS8KhOTlzfhUcKPBiuX1DLKJxKwDXRimBbw2c=) 2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: vVTmMw+E5kmrO560H9bQ0w5FWZAOn210LRABWOLHNws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:6f:5f:31:6d:87:45:7a:84:b3:8f:54:c9:6d:bf:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab Validity Not Before: Dec 12 12:00:47 2025 GMT Not After : Dec 13 12:00:47 2025 GMT Subject: CN=c82bc0f6d6cf97bca1055b5df321a7e6ebe0991a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ef:fb:e3:f9:06:ff:84:a8:0d:a2:f5:b9:ae: d6:24:e9:8b:8e:85:1d:aa:6d:b3:5d:49:23:87:53: 0f:6b:e7:f3:4f:7d:5f:ae:4d:3a:7b:f6:83:89:66: cd:a1:86:71:63:fc:5d:5d:a5:bc:45:32:16:26:31: bf:32:db:a2:e4:13:2a:70:00:23:1c:84:ad:6a:c7: 37:f1:5d:67:4d:3b:25:0f:06:71:0d:7a:58:d8:82: 4a:bf:fd:74:53:02:56:2a:8f:d8:4f:47:5e:b0:67: f3:a4:f4:7f:91:46:b8:e5:d6:cd:8c:4e:ac:8c:2a: 58:05:c3:0e:90:20:6c:81:85:b5:2d:e0:b1:dd:11: 44:61:95:9d:a8:df:fa:84:f3:87:bc:ab:90:d7:05: 0f:cc:0c:80:57:74:2c:5f:8d:1a:87:77:4f:d1:99: 78:ca:cc:8b:02:8d:c3:6c:bc:40:fd:96:34:d1:27: 59:98:e5:0f:3f:48:23:4c:b6:89:85:1e:6a:d6:61: 20:58:31:74:81:0d:29:0d:4f:0d:ef:e2:11:53:00: 68:a0:00:d8:8e:fd:17:ae:44:c6:66:7c:08:b4:54: ce:5e:4f:9d:0f:29:e4:ac:e8:90:51:4a:b8:2e:45: e8:cb:b3:d2:b8:b5:a4:f6:c3:40:74:b6:e0:78:c1: 4b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2B:C0:F6:D6:CF:97:BC:A1:05:5B:5D:F3:21:A7:E6:EB:E0:99:1A X509v3 Authority Key Identifier: keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:b0:6a:d6:ad:31:f0:01:aa:ad:7e:36:be:39:3b:e6:5e:8f: e9:ef:97:06:06:1c:30:f9:ba:1f:21:21:b6:b1:85:8d:5c:15: fb:d5:c2:86:ca:4b:d7:23:eb:47:da:e3:7c:7c:db:7a:bb:f9: 7e:b2:11:0a:47:96:1b:fc:70:ec:b6:ed:82:3a:85:18:b2:4c: 10:8a:7e:a2:00:f2:a3:f3:44:09:04:ba:23:4a:0c:9c:1d:de: b0:7d:19:17:23:ed:b1:05:0b:d9:43:6c:90:39:bb:de:90:f1: 9c:b5:cb:65:d4:6b:3c:e2:51:37:51:4c:aa:bc:01:5e:14:ad: 87:fe:1d:f8:76:5c:97:1d:15:eb:da:bd:d8:4c:d1:7c:3f:2c: 19:3d:c8:f9:17:59:79:74:4a:62:ef:d6:67:a9:8a:bd:07:fa: 89:61:e6:c4:52:21:19:67:d3:b1:26:9d:40:66:84:36:a7:89: f0:97:af:a2:7f:b1:41:00:ed:10:74:b3:78:c2:a0:60:af:8d: 3e:de:c3:f0:ef:1e:dd:1b:15:af:2d:9d:6b:32:c6:91:a7:83: 57:a8:fe:44:e1:49:55:23:db:f4:1b:2f:aa:cb:70:f7:85:40: fd:5d:7f:de:b9:46:c8:11:24:fb:c7:54:17:22:1e:22:68:85: 2a:c7:8e:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSb18xbYdFeoSzj1TJbb/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMTI0ZDA0MTFhMjBmZDJiYjU0Njk3MGVhODAxMTZlZjI3 NmRiYWIwHhcNMjUxMjEyMTIwMDQ3WhcNMjUxMjEzMTIwMDQ3WjAzMTEwLwYDVQQD EyhjODJiYzBmNmQ2Y2Y5N2JjYTEwNTViNWRmMzIxYTdlNmViZTA5OTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u/74/kG/4SoDaL1ua7WJOmLjoUd qm2zXUkjh1MPa+fzT31frk06e/aDiWbNoYZxY/xdXaW8RTIWJjG/Mtui5BMqcAAj HIStasc38V1nTTslDwZxDXpY2IJKv/10UwJWKo/YT0desGfzpPR/kUa45dbNjE6s jCpYBcMOkCBsgYW1LeCx3RFEYZWdqN/6hPOHvKuQ1wUPzAyAV3QsX40ah3dP0Zl4 ysyLAo3DbLxA/ZY00SdZmOUPP0gjTLaJhR5q1mEgWDF0gQ0pDU8N7+IRUwBooADY jv0XrkTGZnwItFTOXk+dDynkrOiQUUq4LkXoy7PSuLWk9sNAdLbgeMFLQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgrwPbWz5e8oQVbXfMhp+br4JkaMB8GA1UdIwQY MBaAFIMSTQQRog/Su1RpcOqAEW7ydturMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmIt ZmNmMGYxNTk0ZDJmLzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmItZmNmMGYxNTk0ZDJm LzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbBq1q0x 8AGqrX42vjk75l6P6e+XBgYcMPm6HyEhtrGFjVwV+9XChspL1yPrR9rjfHzberv5 frIRCkeWG/xw7LbtgjqFGLJMEIp+ogDyo/NECQS6I0oMnB3esH0ZFyPtsQUL2UNs kDm73pDxnLXLZdRrPOJRN1FMqrwBXhSth/4d+HZclx0V69q92EzRfD8sGT3I+RdZ eXRKYu/WZ6mKvQf6iWHmxFIhGWfTsSadQGaENqeJ8Jevon+xQQDtEHSzeMKgYK+N Pt7D8O8e3RsVry2dazLGkaeDV6j+ROFJVSPb9Bsvqstw94VA/V1/3rlGyBEk+8dU FyIeImiFKseO0Q== -----END CERTIFICATE-----Generated at Fri Dec 12 16:58:19 2025 by rpki-client