This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json) Hash identifier: sVADBTLphE7890K5m+od+dOfNSW+pc3vxSt+sBSseC4= Subject key identifier: 93:A4:3D:CB:3A:2A:39:B3:3F:DD:D0:D3:C8:11:C6:77:E0:D4:6B:DB Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee Certificate serial: 019B5B64EB9EA6BC5A1F9835F35961ACF8D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 16:01:39 +0000 Manifest this update: Fri 26 Dec 2025 16:01:39 +0000 Manifest next update: Sat 27 Dec 2025 16:01:39 +0000 Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: AWCXsNv3CMegHunr9iiwlRi53ZRoyrz4eKVZL1xoaWw=) 2: y4Dr14LmLQXVPFrGXXshyx64j84.roa (hash: 1bzHGlABR0e65obFVowAu77APqKznVv88s6eHNbebiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:eb:9e:a6:bc:5a:1f:98:35:f3:59:61:ac:f8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee Validity Not Before: Dec 26 16:01:39 2025 GMT Not After : Dec 27 16:01:39 2025 GMT Subject: CN=93a43dcb3a2a39b33fddd0d3c811c677e0d46bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:f1:9a:42:65:24:ef:aa:be:65:67:43:4d: b6:07:05:20:14:9b:df:4d:bb:b4:83:52:7b:0f:b8: 0d:9e:f5:ae:83:84:c8:56:ab:86:67:aa:af:fa:49: bf:10:0b:37:a4:97:c8:12:5d:d7:11:d6:23:1d:6f: a4:96:dd:48:c5:51:0e:a5:5d:b7:f2:d8:af:9e:b2: 5c:8d:4f:3a:83:0c:42:b8:f7:4e:89:51:5b:c5:80: 48:5b:00:93:4a:d8:e4:6f:49:0d:68:17:95:1a:ec: 14:c4:86:21:56:5b:e8:b8:6b:c5:bf:7b:bb:ba:ef: dc:af:ad:fe:46:13:b5:bf:83:c4:9b:ed:b8:e0:35: ce:02:8f:99:d2:53:e6:c5:c2:fc:15:7c:b2:75:da: 27:6d:6e:e0:dd:76:93:94:e9:3f:5d:53:b2:00:32: b6:c9:50:8d:8d:a8:e9:5a:73:aa:00:26:61:40:70: b4:04:56:1b:84:c9:53:a1:97:83:ad:77:da:90:43: d4:d1:33:96:57:b7:10:eb:4b:ef:75:33:86:90:d6: 14:01:98:63:97:88:d3:eb:73:d6:3d:14:0b:c6:03: 58:7e:df:a0:41:4d:13:08:6d:ef:41:2b:de:8c:fa: b6:f7:06:82:a8:74:59:62:9d:23:56:b0:5a:67:66: 91:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A4:3D:CB:3A:2A:39:B3:3F:DD:D0:D3:C8:11:C6:77:E0:D4:6B:DB X509v3 Authority Key Identifier: keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:83:3c:86:29:27:13:54:15:eb:49:bf:90:b0:43:34:50:cc: 9f:57:34:02:36:82:54:93:f2:a5:fa:01:e5:e4:c0:41:b0:ae: e8:ab:fb:37:a0:72:43:9b:18:41:47:e3:63:ee:2a:ec:84:4e: 9d:d7:36:54:98:50:f9:64:40:84:a2:7b:60:8b:ef:25:69:9e: 25:47:76:97:03:ef:31:ad:95:da:12:65:e4:aa:0f:e6:a8:dd: da:e4:3e:08:97:4a:71:89:01:17:67:7b:10:01:16:cf:da:8a: 0a:c9:0f:2f:31:e0:29:a2:78:1a:fd:98:8c:19:92:b6:25:1d: 47:31:b5:b3:d3:a9:f1:cc:96:ed:ea:c8:42:30:79:de:b0:18: f3:87:02:d6:31:ba:88:51:d0:b7:8a:aa:ea:23:37:98:ea:3c: 8b:95:2d:9b:65:c0:af:97:8a:b1:e9:45:46:20:15:00:27:ba: dd:47:c4:4d:ec:5d:bd:b3:03:86:13:2f:c5:dc:7b:e6:17:c4: 73:a0:78:3b:75:63:15:01:11:f7:ac:a1:c5:07:18:57:88:80: 52:25:5d:be:07:b9:66:f5:36:65:56:dd:ee:23:1c:20:fc:dd: 97:54:7d:7f:6d:4f:7a:b4:02:9a:b5:be:c2:75:c7:d4:d5:5a: c7:e6:2b:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZOueprxaH5g181lhrPjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNDE4YmNmMzE5NDMxN2I5YzI4ODExOTMxOTZmZWI1OThm ZDllZWUwHhcNMjUxMjI2MTYwMTM5WhcNMjUxMjI3MTYwMTM5WjAzMTEwLwYDVQQD Eyg5M2E0M2RjYjNhMmEzOWIzM2ZkZGQwZDNjODExYzY3N2UwZDQ2YmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWPxmkJlJO+qvmVnQ022BwUgFJvf Tbu0g1J7D7gNnvWug4TIVquGZ6qv+km/EAs3pJfIEl3XEdYjHW+klt1IxVEOpV23 8tivnrJcjU86gwxCuPdOiVFbxYBIWwCTStjkb0kNaBeVGuwUxIYhVlvouGvFv3u7 uu/cr63+RhO1v4PEm+244DXOAo+Z0lPmxcL8FXyyddonbW7g3XaTlOk/XVOyADK2 yVCNjajpWnOqACZhQHC0BFYbhMlToZeDrXfakEPU0TOWV7cQ60vvdTOGkNYUAZhj l4jT63PWPRQLxgNYft+gQU0TCG3vQSvejPq29waCqHRZYp0jVrBaZ2aRbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOkPcs6KjmzP93Q08gRxnfg1GvbMB8GA1UdIwQY MBaAFNtBi88xlDF7nCiBGTGW/rWY/Z7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iODk3YWQtNWQ0MS00MGEyLTkwYzMt ZTI5ZWUzZDkxMzk1LzEvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iODk3YWQtNWQ0MS00MGEyLTkwYzMtZTI5ZWUzZDkxMzk1 LzEvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoM8hikn E1QV60m/kLBDNFDMn1c0AjaCVJPypfoB5eTAQbCu6Kv7N6ByQ5sYQUfjY+4q7IRO ndc2VJhQ+WRAhKJ7YIvvJWmeJUd2lwPvMa2V2hJl5KoP5qjd2uQ+CJdKcYkBF2d7 EAEWz9qKCskPLzHgKaJ4Gv2YjBmStiUdRzG1s9Op8cyW7erIQjB53rAY84cC1jG6 iFHQt4qq6iM3mOo8i5Utm2XAr5eKselFRiAVACe63UfETexdvbMDhhMvxdx75hfE c6B4O3VjFQER96yhxQcYV4iAUiVdvge5ZvU2ZVbd7iMcIPzdl1R9f21PerQCmrW+ wnXH1NVax+Yrmg== -----END CERTIFICATE-----Generated at Fri Dec 26 17:40:24 2025 by rpki-client