This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.mft File: GUKkFVlCay9ah3wDnu2he2ueHYk.mft (raw, json) Hash identifier: LCdIJBzwHY5Xn7F1ynOkeBM/n8MLdRc4B2l6gCnULwc= Subject key identifier: 2C:F7:DD:07:64:4A:A7:5C:D1:02:18:F1:A5:AF:BA:58:06:E5:64:C0 Authority key identifier: 19:42:A4:15:59:42:6B:2F:5A:87:7C:03:9E:ED:A1:7B:6B:9E:1D:89 Certificate issuer: /CN=1942a41559426b2f5a877c039eeda17b6b9e1d89 Certificate serial: 019B5ABFDE0E179B9C06B834F2BABD7DA3AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUKkFVlCay9ah3wDnu2he2ueHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.mft Manifest number: 06 Signing time: Fri 26 Dec 2025 13:01:22 +0000 Manifest this update: Fri 26 Dec 2025 13:01:22 +0000 Manifest next update: Sat 27 Dec 2025 13:01:22 +0000 Files and hashes: 1: GUKkFVlCay9ah3wDnu2he2ueHYk.crl (hash: zWDTQDrhFEmUQ92DScvXck58lkgdsgcBYsNaZtAfdmU=) 2: jnkdZMAGt79DVLXoA3hlqjwSOjw.roa (hash: r96KiUvXGuB4ZHTQsqMOJD17aHw87ukowojBfpYCMJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/GUKkFVlCay9ah3wDnu2he2ueHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:de:0e:17:9b:9c:06:b8:34:f2:ba:bd:7d:a3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1942a41559426b2f5a877c039eeda17b6b9e1d89 Validity Not Before: Dec 26 13:01:22 2025 GMT Not After : Dec 27 13:01:22 2025 GMT Subject: CN=2cf7dd07644aa75cd10218f1a5afba5806e564c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c3:82:35:ff:11:25:85:b6:c7:c4:d5:52:a0: b4:36:2b:3c:eb:79:9e:30:f4:87:eb:97:ba:25:6a: f7:c5:de:25:a8:73:de:71:97:33:89:f6:90:01:c5: 07:38:dd:50:ce:89:af:31:ce:4d:d8:87:31:13:a7: 92:60:7c:fb:90:cc:b9:70:cc:e4:40:27:5d:be:4e: c6:e4:02:75:e0:b0:3c:72:02:b5:74:ff:19:c3:81: 29:59:c8:5a:27:8e:01:a1:ac:18:31:ae:b5:fb:8b: ca:58:48:59:f1:1e:f3:ba:e7:0a:37:f7:1e:c9:6f: c1:0c:8d:3d:6d:a2:15:1b:22:b5:01:10:68:17:66: 2c:28:f8:8d:81:06:1b:10:23:fe:aa:2e:10:95:71: 1d:f4:ff:d7:86:0b:da:09:d6:84:6a:31:26:c4:c7: 3e:56:57:ea:49:2a:3c:ef:f9:80:c4:b6:93:b2:0c: b4:08:9c:8c:7c:5e:4c:a3:7f:c3:fc:51:8b:f8:07: 76:8a:c7:e1:57:65:b0:88:44:b3:39:85:75:52:6e: ad:2a:90:44:2d:46:8a:50:3c:47:31:d6:09:94:96: 97:a5:93:4c:19:4c:5c:41:83:18:72:fa:d3:cb:ac: 3a:d3:22:4e:55:58:2a:0d:b2:9b:0f:60:a0:1d:ff: ec:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F7:DD:07:64:4A:A7:5C:D1:02:18:F1:A5:AF:BA:58:06:E5:64:C0 X509v3 Authority Key Identifier: keyid:19:42:A4:15:59:42:6B:2F:5A:87:7C:03:9E:ED:A1:7B:6B:9E:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKkFVlCay9ah3wDnu2he2ueHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d0:53:0b:91:29:09:f4:fa:39:ba:af:71:30:d3:70:b7:43: fd:74:7d:63:e7:3e:2a:99:b6:f2:e4:81:95:09:94:84:a6:f5: fb:3a:17:de:d8:34:76:e8:46:39:9d:07:ba:33:e8:f7:96:66: 42:91:4e:5a:11:e7:b7:61:02:d9:a7:1a:8c:58:ac:cf:89:6e: 4a:4d:78:68:b7:8f:55:9f:38:ac:45:f4:58:b5:07:27:fa:79: 8c:67:ef:64:0d:96:71:82:5d:7b:6c:e2:ec:c6:21:00:31:da: fa:70:e2:66:36:93:44:e9:6d:e9:ca:49:1b:14:9f:fa:73:66: ae:5a:c2:27:4e:99:61:df:10:15:6b:2b:60:c4:3f:34:c1:f4: dd:38:0e:a0:8e:64:11:0b:f1:19:ea:80:ae:5b:92:e2:10:30: 09:7c:2e:5c:9b:c6:e5:e4:3e:e6:06:34:ac:57:4a:73:1c:34: ff:87:26:6e:d7:0f:fe:5e:54:10:20:3a:f3:16:57:4e:44:bd: 04:53:70:31:22:84:ac:d4:fa:9a:00:da:ba:5c:7a:4c:bf:7d: 03:45:d3:cb:78:89:72:f2:c1:73:6e:d2:b5:1e:55:f2:d7:3f: 21:21:6e:09:b3:0c:23:9f:3b:1b:5b:cc:96:9c:e0:15:76:fe: 3f:61:06:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav94OF5ucBrg08rq9faOuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDJhNDE1NTk0MjZiMmY1YTg3N2MwMzllZWRhMTdiNmI5 ZTFkODkwHhcNMjUxMjI2MTMwMTIyWhcNMjUxMjI3MTMwMTIyWjAzMTEwLwYDVQQD EygyY2Y3ZGQwNzY0NGFhNzVjZDEwMjE4ZjFhNWFmYmE1ODA2ZTU2NGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcOCNf8RJYW2x8TVUqC0Nis863me MPSH65e6JWr3xd4lqHPecZczifaQAcUHON1QzomvMc5N2IcxE6eSYHz7kMy5cMzk QCddvk7G5AJ14LA8cgK1dP8Zw4EpWchaJ44BoawYMa61+4vKWEhZ8R7zuucKN/ce yW/BDI09baIVGyK1ARBoF2YsKPiNgQYbECP+qi4QlXEd9P/XhgvaCdaEajEmxMc+ VlfqSSo87/mAxLaTsgy0CJyMfF5Mo3/D/FGL+Ad2isfhV2WwiESzOYV1Um6tKpBE LUaKUDxHMdYJlJaXpZNMGUxcQYMYcvrTy6w60yJOVVgqDbKbD2CgHf/sewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCz33QdkSqdc0QIY8aWvulgG5WTAMB8GA1UdIwQY MBaAFBlCpBVZQmsvWod8A57toXtrnh2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VLa0ZWbENheTlhaDN3RG51MmhlMnVlSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jOTEzZGMtNzcwZi00YmQwLTk3OGYt NDYxNjI3ODZmOGUxLzEvR1VLa0ZWbENheTlhaDN3RG51MmhlMnVlSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jOTEzZGMtNzcwZi00YmQwLTk3OGYtNDYxNjI3ODZmOGUx LzEvR1VLa0ZWbENheTlhaDN3RG51MmhlMnVlSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNBTC5Ep CfT6ObqvcTDTcLdD/XR9Y+c+Kpm28uSBlQmUhKb1+zoX3tg0duhGOZ0HujPo95Zm QpFOWhHnt2EC2acajFisz4luSk14aLePVZ84rEX0WLUHJ/p5jGfvZA2WcYJde2zi 7MYhADHa+nDiZjaTROlt6cpJGxSf+nNmrlrCJ06ZYd8QFWsrYMQ/NMH03TgOoI5k EQvxGeqArluS4hAwCXwuXJvG5eQ+5gY0rFdKcxw0/4cmbtcP/l5UECA68xZXTkS9 BFNwMSKErNT6mgDaulx6TL99A0XTy3iJcvLBc27StR5V8tc/ISFuCbMMI587G1vM lpzgFXb+P2EGKA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:36 2025 by rpki-client