This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft File: gXS2uiCeYit5ihT86qlEdi-nYpo.mft (raw, json) Hash identifier: YU+001ZI7dDjU5BHjessrHCOFrlYA++t0CDsa9rJ1yc= Subject key identifier: 83:82:CD:E6:6A:BB:25:58:EF:CA:4A:80:CF:C0:08:A7:3D:12:F4:B4 Authority key identifier: 81:74:B6:BA:20:9E:62:2B:79:8A:14:FC:EA:A9:44:76:2F:A7:62:9A Certificate issuer: /CN=8174b6ba209e622b798a14fceaa944762fa7629a Certificate serial: 019B5A1ABDF8A3795F5C0EB614514711CD5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXS2uiCeYit5ihT86qlEdi-nYpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft Manifest number: 0256 Signing time: Fri 26 Dec 2025 10:01:00 +0000 Manifest this update: Fri 26 Dec 2025 10:01:00 +0000 Manifest next update: Sat 27 Dec 2025 10:01:00 +0000 Files and hashes: 1: gXS2uiCeYit5ihT86qlEdi-nYpo.crl (hash: GWDM7ITirmuBDzQz39FeItbR+T8U5P4cW5tOKGl2O4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft rsync://rpki.ripe.net/repository/DEFAULT/gXS2uiCeYit5ihT86qlEdi-nYpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:bd:f8:a3:79:5f:5c:0e:b6:14:51:47:11:cd:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8174b6ba209e622b798a14fceaa944762fa7629a Validity Not Before: Dec 26 10:01:00 2025 GMT Not After : Dec 27 10:01:00 2025 GMT Subject: CN=8382cde66abb2558efca4a80cfc008a73d12f4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2e:1a:a0:60:b1:26:9d:d8:a6:82:89:5d:5a: 32:cb:0a:ad:b6:67:bc:d5:ef:01:d9:37:6c:82:c5: 80:c4:ad:b9:bc:d3:fe:ff:59:10:18:9b:61:97:b9: 4d:a9:26:65:cc:04:3a:a3:2c:fb:df:bb:c5:fa:70: 81:11:da:eb:22:dd:dd:c9:be:31:e3:82:42:51:bd: 19:d3:36:92:83:4c:14:3b:cf:3e:28:f2:f8:13:84: 89:39:c7:1f:fa:7a:1d:22:5b:09:e7:22:7c:11:34: ed:4a:60:70:c7:3d:91:05:3b:48:5f:f3:c5:47:4e: 31:a4:a6:99:54:0e:bd:33:69:4b:63:bb:e4:e3:7a: 4b:3a:c8:ed:79:b0:56:f4:e2:20:0c:00:c5:57:b5: 5d:88:ca:62:0c:35:a8:df:1e:19:52:aa:ac:2b:2b: ad:58:5c:6c:27:8e:61:b3:69:82:1c:e6:c7:29:16: 72:2d:02:17:a2:dc:14:4b:38:89:36:05:c9:d9:ab: f1:31:46:c4:a5:97:42:77:f1:da:65:8c:64:6c:3f: d8:70:ef:0a:30:85:00:fa:1a:a9:78:79:b6:b7:c1: f5:c5:d4:9a:54:84:0e:b7:80:1c:cf:61:16:c1:4c: d2:3e:e9:0e:27:81:c7:c1:fe:cc:e6:84:a1:7a:85: 07:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:82:CD:E6:6A:BB:25:58:EF:CA:4A:80:CF:C0:08:A7:3D:12:F4:B4 X509v3 Authority Key Identifier: keyid:81:74:B6:BA:20:9E:62:2B:79:8A:14:FC:EA:A9:44:76:2F:A7:62:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXS2uiCeYit5ihT86qlEdi-nYpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:85:bc:4d:ea:13:e5:21:4c:36:89:c4:1f:1c:70:9d:49:54: f4:b5:d9:17:a4:d7:d7:19:09:89:bf:04:1d:18:b1:8c:2b:d7: f6:01:af:b1:a9:71:18:f0:67:75:90:bf:54:c7:87:55:ba:67: 80:77:2c:8a:7c:a4:05:eb:1e:4a:e5:6f:d0:5d:c6:fb:37:4e: 83:77:eb:5a:c2:c3:2a:0e:a3:b7:e5:03:39:69:89:ef:78:ac: 78:71:98:3c:d4:b2:6f:b2:be:8a:37:1c:db:e8:cc:6c:cc:cf: 4f:7b:13:1a:ae:91:e3:61:4c:81:c7:65:e5:f5:11:b6:81:5c: 6d:2d:f8:06:32:35:b5:ad:a2:92:fd:cb:c6:1c:e2:5e:52:16: fc:6f:59:37:e4:1f:69:37:b1:b8:9d:b9:29:f3:1d:53:4c:4a: 2f:a9:b1:83:b8:bd:3f:32:72:89:19:cd:d4:92:49:14:c2:af: 6c:e4:f8:8c:8f:8f:b1:29:3c:22:56:4d:e5:10:2f:54:fa:06: 88:38:33:bd:24:36:1b:9e:60:57:ec:34:56:ae:54:dc:eb:4f: 03:d4:4a:04:13:50:09:9b:09:f7:51:e8:a1:6c:d3:27:8a:1a: 0d:8d:01:66:6c:89:0a:6d:a9:1a:31:fa:c1:c4:8f:aa:58:21: f1:9c:00:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGr34o3lfXA62FFFHEc1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNzRiNmJhMjA5ZTYyMmI3OThhMTRmY2VhYTk0NDc2MmZh NzYyOWEwHhcNMjUxMjI2MTAwMTAwWhcNMjUxMjI3MTAwMTAwWjAzMTEwLwYDVQQD Eyg4MzgyY2RlNjZhYmIyNTU4ZWZjYTRhODBjZmMwMDhhNzNkMTJmNGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi4aoGCxJp3YpoKJXVoyywqttme8 1e8B2TdsgsWAxK25vNP+/1kQGJthl7lNqSZlzAQ6oyz737vF+nCBEdrrIt3dyb4x 44JCUb0Z0zaSg0wUO88+KPL4E4SJOccf+nodIlsJ5yJ8ETTtSmBwxz2RBTtIX/PF R04xpKaZVA69M2lLY7vk43pLOsjtebBW9OIgDADFV7VdiMpiDDWo3x4ZUqqsKyut WFxsJ45hs2mCHObHKRZyLQIXotwUSziJNgXJ2avxMUbEpZdCd/HaZYxkbD/YcO8K MIUA+hqpeHm2t8H1xdSaVIQOt4Acz2EWwUzSPukOJ4HHwf7M5oSheoUHLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOCzeZquyVY78pKgM/ACKc9EvS0MB8GA1UdIwQY MBaAFIF0trognmIreYoU/OqpRHYvp2KaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1hTMnVpQ2VZaXQ1aWhUODZxbEVkaS1uWXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kYzkwODItNWE5Zi00MWVlLThkNDQt NjE4Y2QwNjgyYjEwLzEvZ1hTMnVpQ2VZaXQ1aWhUODZxbEVkaS1uWXBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9kYzkwODItNWE5Zi00MWVlLThkNDQtNjE4Y2QwNjgyYjEw LzEvZ1hTMnVpQ2VZaXQ1aWhUODZxbEVkaS1uWXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIW8TeoT 5SFMNonEHxxwnUlU9LXZF6TX1xkJib8EHRixjCvX9gGvsalxGPBndZC/VMeHVbpn gHcsinykBeseSuVv0F3G+zdOg3frWsLDKg6jt+UDOWmJ73iseHGYPNSyb7K+ijcc 2+jMbMzPT3sTGq6R42FMgcdl5fURtoFcbS34BjI1ta2ikv3LxhziXlIW/G9ZN+Qf aTexuJ25KfMdU0xKL6mxg7i9PzJyiRnN1JJJFMKvbOT4jI+PsSk8IlZN5RAvVPoG iDgzvSQ2G55gV+w0Vq5U3OtPA9RKBBNQCZsJ91HooWzTJ4oaDY0BZmyJCm2pGjH6 wcSPqlgh8ZwA1Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:22 2025 by rpki-client