This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft File: GXCiYyB54Yue9nKBkqOTaqvisiQ.mft (raw, json) Hash identifier: JWtAfoaNQw/bWND65fHU8y7DJpOtpxT4MLv1QP++mNA= Subject key identifier: 3F:D8:C1:EA:2C:3E:88:A6:09:38:4B:7F:C5:58:61:FA:0F:81:DD:23 Authority key identifier: 19:70:A2:63:20:79:E1:8B:9E:F6:72:81:92:A3:93:6A:AB:E2:B2:24 Certificate issuer: /CN=1970a2632079e18b9ef6728192a3936aabe2b224 Certificate serial: 019B5ABF299E13F6741462D8285882965EE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXCiYyB54Yue9nKBkqOTaqvisiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft Manifest number: 0100 Signing time: Fri 26 Dec 2025 13:00:36 +0000 Manifest this update: Fri 26 Dec 2025 13:00:36 +0000 Manifest next update: Sat 27 Dec 2025 13:00:36 +0000 Files and hashes: 1: GXCiYyB54Yue9nKBkqOTaqvisiQ.crl (hash: VdZlJoA5kGmoPm2r8+Y+uaA9m4sD7MLHgkjykQUhRMc=) 2: JeJQO9s80gfCiYe1r0cc8EhoCxk.roa (hash: fgQotiiZ/kaXHnFm2dA5yCVTFpxgcGtAQyQ5Cm5SG64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GXCiYyB54Yue9nKBkqOTaqvisiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:29:9e:13:f6:74:14:62:d8:28:58:82:96:5e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1970a2632079e18b9ef6728192a3936aabe2b224 Validity Not Before: Dec 26 13:00:36 2025 GMT Not After : Dec 27 13:00:36 2025 GMT Subject: CN=3fd8c1ea2c3e88a609384b7fc55861fa0f81dd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fc:1f:7d:d7:ac:db:8a:46:97:55:54:24:ce: f8:ca:94:3c:2b:16:f7:86:71:ee:f1:88:50:3b:0d: 21:89:e9:2f:0d:84:91:0b:76:12:a5:b5:b8:bf:ab: d6:d4:33:21:6f:52:62:73:2e:19:27:73:c6:06:78: 4f:ad:0e:50:2d:b7:62:3c:b1:09:a8:96:61:11:85: 56:37:21:b6:50:39:be:39:f9:48:a4:05:6c:59:41: 68:91:fa:a0:51:e0:6a:8f:de:d9:b4:1b:f4:35:2b: e1:1d:8f:a2:b5:1b:87:77:bc:aa:f3:f7:2f:ec:aa: 22:f3:4e:e1:69:67:ee:90:29:56:38:9b:c2:d8:fb: c2:7c:c3:86:7e:f5:5c:cb:01:58:d1:58:95:12:d7: 17:e4:b3:c2:39:4a:d4:8e:8d:c2:c7:68:24:88:0b: a5:dc:c3:6c:45:1a:2a:06:97:11:4f:e9:73:c5:c3: 88:e8:8d:d0:12:60:4a:89:66:4f:75:d9:d1:52:c4: 4c:70:0c:7a:ff:76:77:a6:89:5c:d6:4c:f9:71:a4: d7:fa:a4:6d:16:45:a0:c2:c5:b7:6c:4b:1f:98:19: 46:41:89:66:65:fc:d0:4f:83:93:a5:93:ba:c2:64: b8:3a:09:20:52:65:51:04:b4:15:56:24:85:c8:f4: 9d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D8:C1:EA:2C:3E:88:A6:09:38:4B:7F:C5:58:61:FA:0F:81:DD:23 X509v3 Authority Key Identifier: keyid:19:70:A2:63:20:79:E1:8B:9E:F6:72:81:92:A3:93:6A:AB:E2:B2:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXCiYyB54Yue9nKBkqOTaqvisiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:dd:23:f2:ce:ed:0e:2e:38:34:59:b0:cc:95:ca:3e:58:6e: 67:7e:c8:82:de:1d:81:f3:96:eb:37:0b:ae:cc:ff:9d:96:9f: 8d:c3:d8:48:92:ad:c2:31:76:b2:5e:63:72:27:76:20:cb:9f: c2:f0:79:99:35:66:50:1b:0b:51:26:e3:76:e9:bd:24:8b:69: b4:89:23:b1:2a:69:24:7c:f0:b9:87:be:f7:51:0c:60:33:86: 09:ec:58:fb:a5:68:d0:39:ef:53:57:8b:79:b0:04:6c:12:4e: 4c:b9:11:9c:18:12:47:f3:7b:d3:f8:71:9f:a5:98:d1:21:9e: 97:42:9a:65:58:05:23:7e:6e:a1:60:1b:ad:cf:63:38:a5:ca: 97:a0:39:b2:a3:8f:61:ff:20:b5:ba:81:15:15:44:d0:bb:f2: 82:9b:ec:62:95:45:23:d7:0e:4c:a1:59:01:33:ea:43:75:b8: e4:80:7e:f1:df:1b:2d:c5:a5:38:d8:0d:12:25:98:97:f6:91: 63:91:6d:f5:3a:d9:cb:a0:13:85:d0:e5:b9:13:ba:12:54:00: da:12:28:b2:5a:17:b7:4c:c6:90:29:69:88:ac:5f:15:b9:4c: cb:bb:69:20:bd:9c:dc:9e:0b:ca:df:25:31:8e:38:08:c0:53: a6:78:99:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavymeE/Z0FGLYKFiCll7kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NzBhMjYzMjA3OWUxOGI5ZWY2NzI4MTkyYTM5MzZhYWJl MmIyMjQwHhcNMjUxMjI2MTMwMDM2WhcNMjUxMjI3MTMwMDM2WjAzMTEwLwYDVQQD EygzZmQ4YzFlYTJjM2U4OGE2MDkzODRiN2ZjNTU4NjFmYTBmODFkZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofwffdes24pGl1VUJM74ypQ8Kxb3 hnHu8YhQOw0hiekvDYSRC3YSpbW4v6vW1DMhb1Jicy4ZJ3PGBnhPrQ5QLbdiPLEJ qJZhEYVWNyG2UDm+OflIpAVsWUFokfqgUeBqj97ZtBv0NSvhHY+itRuHd7yq8/cv 7Koi807haWfukClWOJvC2PvCfMOGfvVcywFY0ViVEtcX5LPCOUrUjo3Cx2gkiAul 3MNsRRoqBpcRT+lzxcOI6I3QEmBKiWZPddnRUsRMcAx6/3Z3polc1kz5caTX+qRt FkWgwsW3bEsfmBlGQYlmZfzQT4OTpZO6wmS4OgkgUmVRBLQVViSFyPSdGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/YweosPoimCThLf8VYYfoPgd0jMB8GA1UdIwQY MBaAFBlwomMgeeGLnvZygZKjk2qr4rIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1hDaVl5QjU0WXVlOW5LQmtxT1RhcXZpc2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNmM4MmYtOWQyMi00MWNiLWJiYjYt ZTc4ZWFmMTU4NGJmLzEvR1hDaVl5QjU0WXVlOW5LQmtxT1RhcXZpc2lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xNmM4MmYtOWQyMi00MWNiLWJiYjYtZTc4ZWFmMTU4NGJm LzEvR1hDaVl5QjU0WXVlOW5LQmtxT1RhcXZpc2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmd0j8s7t Di44NFmwzJXKPlhuZ37Igt4dgfOW6zcLrsz/nZafjcPYSJKtwjF2sl5jcid2IMuf wvB5mTVmUBsLUSbjdum9JItptIkjsSppJHzwuYe+91EMYDOGCexY+6Vo0DnvU1eL ebAEbBJOTLkRnBgSR/N70/hxn6WY0SGel0KaZVgFI35uoWAbrc9jOKXKl6A5sqOP Yf8gtbqBFRVE0LvygpvsYpVFI9cOTKFZATPqQ3W45IB+8d8bLcWlONgNEiWYl/aR Y5Ft9TrZy6AThdDluRO6ElQA2hIosloXt0zGkClpiKxfFblMy7tpIL2c3J4Lyt8l MY44CMBTpniZXg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:58 2025 by rpki-client