This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft File: GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json) Hash identifier: QFSvHs1okNv4z2gSEFMIxIvr1Q776hxE/PlrjwrnGws= Subject key identifier: 11:6B:13:2F:55:AC:8F:54:A0:65:8D:86:0D:CA:9C:DF:F2:3D:79:7E Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b Certificate serial: 019B1D9895746370B670366660F65C9AE33A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft Manifest number: 08F6 Signing time: Sun 14 Dec 2025 16:01:37 +0000 Manifest this update: Sun 14 Dec 2025 16:01:37 +0000 Manifest next update: Mon 15 Dec 2025 16:01:37 +0000 Files and hashes: 1: 57MdEJb-nBShQLLCWdO0TGMwrmU.roa (hash: AI0OebgvFdQLqYYDJFtpVuV594/Dy/OB9klpHE+tsqU=) 2: B7Qapo5g1oDmbBkmOp4VI6hXM-Q.roa (hash: QPX22bu8lrGVz4DhZjKtOs7g7eex/hilxfsr4fUW4YM=) 3: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: VIpi1kHocKzJaqpxSAo3qM/PvfHz34g5DGsbio7Nfz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:98:95:74:63:70:b6:70:36:66:60:f6:5c:9a:e3:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b Validity Not Before: Dec 14 16:01:37 2025 GMT Not After : Dec 15 16:01:37 2025 GMT Subject: CN=116b132f55ac8f54a0658d860dca9cdff23d797e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:05:18:39:44:4a:19:b9:d2:82:e8:06:b5: 1d:6d:a8:9b:95:ce:e2:8d:7e:43:bf:fc:46:3a:54: 51:1c:49:b8:60:bb:48:08:e1:3d:99:94:bb:3a:14: 2e:07:34:9f:0f:a6:93:87:5e:65:e1:b8:86:0d:b0: a7:84:fb:2d:28:6f:12:63:d3:49:fe:db:7b:97:29: 63:b9:0b:2b:d0:17:3d:f9:4b:d9:21:ec:e8:c2:c8: 54:1e:f4:50:c4:f9:0c:1f:0b:78:9d:8a:f5:f9:0e: 4e:27:4a:b7:5f:03:78:08:55:2e:e5:e6:3a:13:6f: 5a:c4:f5:84:58:1f:0c:0c:70:02:b2:5a:45:39:5f: d7:73:73:10:e1:7c:35:8e:a6:21:d2:4c:0d:d7:66: 70:f3:1a:31:70:69:c3:ed:9e:d4:57:aa:5b:ef:8f: 48:1c:93:77:2f:ba:9a:26:4c:37:63:79:fd:39:87: 47:94:4a:e6:d1:3e:9f:4c:54:91:e9:0b:94:15:00: f3:f2:3b:7f:f1:a5:37:5c:ca:b3:a0:2f:58:33:94: 88:60:8b:50:c9:96:97:56:ca:c8:01:d5:dc:be:02: 71:25:87:dd:6d:83:b3:8b:df:d4:54:39:bc:2e:66: 3d:e5:01:2c:4f:c1:1e:3d:09:be:55:c5:d3:38:41: 18:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6B:13:2F:55:AC:8F:54:A0:65:8D:86:0D:CA:9C:DF:F2:3D:79:7E X509v3 Authority Key Identifier: keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c8:30:79:3b:78:99:20:ca:7d:1a:9c:26:5c:48:6c:f2:85: 00:1d:49:10:30:7d:f6:5b:e1:82:a9:69:57:e4:b8:27:f2:d2: 34:16:b3:88:0d:93:66:d3:e9:38:b9:82:9f:91:2b:46:dd:64: 56:9c:8c:0d:26:52:c0:11:e4:76:4f:24:f8:46:65:ff:b0:8f: 2e:b7:b0:93:56:b3:7f:a5:d9:30:f5:ef:ad:34:c5:b0:36:07: b2:2a:44:cc:3d:a6:bc:36:07:b5:d0:8c:f9:31:ea:b6:59:e9: 8a:3a:4d:63:c7:81:3d:33:c7:16:fe:04:c4:7e:2d:d9:f4:84: 5a:a8:90:f5:5c:4d:fc:fa:ac:4e:06:32:34:c5:04:1e:ad:4b: db:cb:f5:0e:43:3a:b0:1d:e4:ae:23:0f:94:72:ce:eb:a5:57: d3:bb:72:66:a7:c5:47:04:02:a9:67:43:72:89:51:f2:d1:11: 50:d2:1e:de:45:61:6a:96:f5:cb:31:af:fb:b5:af:4a:37:e7: 9e:06:25:0d:45:ec:bc:28:74:40:3c:3e:d3:29:20:c6:73:b2: 8f:1b:7b:fa:16:55:83:3d:95:d5:f4:c3:95:fd:7d:9b:dc:bf: 2c:ea:d2:1d:98:f7:c7:5b:6d:ca:ff:e6:50:cc:1a:b8:fc:fe: 2b:e8:61:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmJV0Y3C2cDZmYPZcmuM6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZWFjMGY2MzI1N2IyMjRlYzE3MTA2ZTFiY2RlZmQzMmMy NDc3OGIwHhcNMjUxMjE0MTYwMTM3WhcNMjUxMjE1MTYwMTM3WjAzMTEwLwYDVQQD EygxMTZiMTMyZjU1YWM4ZjU0YTA2NThkODYwZGNhOWNkZmYyM2Q3OTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqYFGDlEShm50oLoBrUdbaiblc7i jX5Dv/xGOlRRHEm4YLtICOE9mZS7OhQuBzSfD6aTh15l4biGDbCnhPstKG8SY9NJ /tt7lyljuQsr0Bc9+UvZIezowshUHvRQxPkMHwt4nYr1+Q5OJ0q3XwN4CFUu5eY6 E29axPWEWB8MDHACslpFOV/Xc3MQ4Xw1jqYh0kwN12Zw8xoxcGnD7Z7UV6pb749I HJN3L7qaJkw3Y3n9OYdHlErm0T6fTFSR6QuUFQDz8jt/8aU3XMqzoC9YM5SIYItQ yZaXVsrIAdXcvgJxJYfdbYOzi9/UVDm8LmY95QEsT8EePQm+VcXTOEEYdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFrEy9VrI9UoGWNhg3KnN/yPXl+MB8GA1UdIwQY MBaAFBrqwPYyV7Ik7BcQbhvN79MsJHeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82YzA2ODAtN2M4ZC00ZGVjLWIyYTgt Mjk4YjU1OTY5NzZhLzEvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni82YzA2ODAtN2M4ZC00ZGVjLWIyYTgtMjk4YjU1OTY5NzZh LzEvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcgweTt4 mSDKfRqcJlxIbPKFAB1JEDB99lvhgqlpV+S4J/LSNBaziA2TZtPpOLmCn5ErRt1k VpyMDSZSwBHkdk8k+EZl/7CPLrewk1azf6XZMPXvrTTFsDYHsipEzD2mvDYHtdCM +THqtlnpijpNY8eBPTPHFv4ExH4t2fSEWqiQ9VxN/PqsTgYyNMUEHq1L28v1DkM6 sB3kriMPlHLO66VX07tyZqfFRwQCqWdDcolR8tERUNIe3kVhapb1yzGv+7WvSjfn ngYlDUXsvCh0QDw+0ykgxnOyjxt7+hZVgz2V1fTDlf19m9y/LOrSHZj3x1ttyv/m UMwauPz+K+hhsg== -----END CERTIFICATE-----Generated at Sun Dec 14 22:53:23 2025 by rpki-client