This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft File: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json) Hash identifier: Ecg5CQnIXvzFZSyU2tth7PC+f4IHikic0XrjRqa5mdA= Subject key identifier: 8F:54:31:1A:4F:3B:51:2D:D3:C1:64:60:60:D5:6C:A6:8B:EA:F2:FD Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91 Certificate issuer: /CN=194e32a82e98f22d939ff9984455813be2ba6a91 Certificate serial: 019B5A1AA07837D1AF191B07008ADA59EB93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft Manifest number: 02B5 Signing time: Fri 26 Dec 2025 10:00:52 +0000 Manifest this update: Fri 26 Dec 2025 10:00:52 +0000 Manifest next update: Sat 27 Dec 2025 10:00:52 +0000 Files and hashes: 1: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: GOzV5SBhBP8xOYhCRotcZMDcXZ1t4/kS5jjlarGuHZI=) 2: UfSgUAAlY9L-pxjy9r66ZUMHciI.roa (hash: lfZloxngOlvdGd9PgYcQqf9/LWwVeSvhKaVHeCHu4Rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:a0:78:37:d1:af:19:1b:07:00:8a:da:59:eb:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91 Validity Not Before: Dec 26 10:00:52 2025 GMT Not After : Dec 27 10:00:52 2025 GMT Subject: CN=8f54311a4f3b512dd3c1646060d56ca68beaf2fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:fb:da:6f:52:7c:e2:d6:71:3b:22:f5:39: a6:ef:a0:43:da:f1:25:c8:1c:db:b3:bb:3d:c3:d4: 7b:59:00:42:43:91:19:02:57:30:80:0d:ed:f1:33: e8:00:f3:c1:69:82:e4:f8:67:cb:a5:e2:8c:ed:94: 4e:be:4a:d7:ef:db:e1:2f:1b:e8:e3:b0:dc:af:44: 6b:92:94:01:21:95:24:73:36:90:db:63:da:71:c1: ee:e4:6c:29:3c:9e:a7:1f:dd:91:5e:4b:a3:57:fa: 83:0a:f4:29:54:cb:71:4f:8e:d3:cc:87:77:28:69: 59:2d:fb:6e:4c:03:b3:0c:23:85:88:bc:31:bd:ac: b6:cb:79:54:a2:d0:57:a3:5d:f8:bb:32:98:dd:ca: d6:a0:10:e9:f3:56:2a:b9:9b:16:c8:ce:9d:1e:31: 8f:d6:1a:be:ff:ae:0a:ee:61:64:3d:be:a0:0b:fe: fc:87:c7:16:16:1e:a8:9e:09:b9:59:2f:8e:b4:bd: d8:df:7d:1a:dc:8f:58:e9:25:83:44:b7:4c:5e:a6: 12:bb:44:bc:d6:18:29:31:6f:b3:c0:a7:8b:86:a5: b4:23:bb:48:91:89:25:3e:c4:9a:a4:a9:8a:2f:29: 51:54:4e:4f:64:b5:16:ed:6d:50:e5:f5:2b:82:b8: 8f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:54:31:1A:4F:3B:51:2D:D3:C1:64:60:60:D5:6C:A6:8B:EA:F2:FD X509v3 Authority Key Identifier: keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:9b:87:4f:2f:59:48:cd:1e:f6:6f:50:4c:03:85:fe:70:ff: 16:2a:96:a2:da:6a:5f:d6:cd:cb:49:f9:a4:12:4b:68:f0:74: 3c:80:7d:7e:ed:81:cf:ca:16:dd:41:93:6f:9c:33:e3:92:9d: 3f:d8:df:bb:6e:8d:5c:8e:d7:7a:94:44:27:0a:1d:75:33:aa: 1a:65:45:8c:88:54:e2:6d:ab:04:0e:f1:04:4b:3d:0d:64:a0: 14:b1:ab:24:6a:b7:47:e4:e1:07:e4:bf:b4:3c:5f:79:70:29: 8f:dd:5c:a4:1d:8c:44:18:ce:49:67:78:73:16:37:ba:f1:68: 1e:b1:ec:b0:ec:92:fa:60:59:3c:48:b2:d2:53:19:c0:3f:a8: b2:a0:fd:18:18:81:33:a4:32:bd:cf:ea:2f:11:d3:33:4d:3a: 80:4f:57:10:df:e7:07:90:d2:07:ce:f0:44:e5:34:73:34:c0: 64:b9:1e:f9:d7:42:73:9e:48:1a:19:a1:56:ef:d5:0f:87:6d: 69:09:36:cd:46:03:aa:8f:a2:7f:4f:2c:d6:43:2d:3d:4e:21: f6:41:b3:b5:9a:d7:39:bf:13:eb:6c:9e:e6:f6:04:7e:6c:3b: 95:c9:f6:99:23:de:6f:fa:5b:9d:c1:10:9f:7e:8d:f7:bb:b5: 9c:33:5f:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGqB4N9GvGRsHAIraWeuTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NGUzMmE4MmU5OGYyMmQ5MzlmZjk5ODQ0NTU4MTNiZTJi YTZhOTEwHhcNMjUxMjI2MTAwMDUyWhcNMjUxMjI3MTAwMDUyWjAzMTEwLwYDVQQD Eyg4ZjU0MzExYTRmM2I1MTJkZDNjMTY0NjA2MGQ1NmNhNjhiZWFmMmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2j72m9SfOLWcTsi9Tmm76BD2vEl yBzbs7s9w9R7WQBCQ5EZAlcwgA3t8TPoAPPBaYLk+GfLpeKM7ZROvkrX79vhLxvo 47Dcr0RrkpQBIZUkczaQ22PaccHu5GwpPJ6nH92RXkujV/qDCvQpVMtxT47TzId3 KGlZLftuTAOzDCOFiLwxvay2y3lUotBXo134uzKY3crWoBDp81YquZsWyM6dHjGP 1hq+/64K7mFkPb6gC/78h8cWFh6ongm5WS+OtL3Y330a3I9Y6SWDRLdMXqYSu0S8 1hgpMW+zwKeLhqW0I7tIkYklPsSapKmKLylRVE5PZLUW7W1Q5fUrgriPswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9UMRpPO1Et08FkYGDVbKaL6vL9MB8GA1UdIwQY MBaAFBlOMqgumPItk5/5mERVgTviumqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mMzZiOWMtN2UzNy00ZjE4LTg4NjUt MTNlNzNmNjYzOTdiLzEvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mMzZiOWMtN2UzNy00ZjE4LTg4NjUtMTNlNzNmNjYzOTdi LzEvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZuHTy9Z SM0e9m9QTAOF/nD/FiqWotpqX9bNy0n5pBJLaPB0PIB9fu2Bz8oW3UGTb5wz45Kd P9jfu26NXI7XepREJwoddTOqGmVFjIhU4m2rBA7xBEs9DWSgFLGrJGq3R+ThB+S/ tDxfeXApj91cpB2MRBjOSWd4cxY3uvFoHrHssOyS+mBZPEiy0lMZwD+osqD9GBiB M6Qyvc/qLxHTM006gE9XEN/nB5DSB87wROU0czTAZLke+ddCc55IGhmhVu/VD4dt aQk2zUYDqo+if08s1kMtPU4h9kGztZrXOb8T62ye5vYEfmw7lcn2mSPeb/pbncEQ n36N97u1nDNfnA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:35 2025 by rpki-client