This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft File: gxtyb8yYIAzzkDTflY6P6LPHnDc.mft (raw, json) Hash identifier: R6qEirapEUZq1Guy0d+W4yEsn7UQKFDq46Z5cgAfAz8= Subject key identifier: D2:4B:0D:5D:F7:39:A2:3B:F5:9E:50:67:41:CC:0A:4C:4B:20:5D:DA Authority key identifier: 83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37 Certificate issuer: /CN=831b726fcc98200cf39034df958e8fe8b3c79c37 Certificate serial: 019B2219B9139A66355D0B3E0D83EA1A13B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft Manifest number: 0691 Signing time: Mon 15 Dec 2025 13:01:09 +0000 Manifest this update: Mon 15 Dec 2025 13:01:09 +0000 Manifest next update: Tue 16 Dec 2025 13:01:09 +0000 Files and hashes: 1: gxtyb8yYIAzzkDTflY6P6LPHnDc.crl (hash: NgZOi78Dl9bjgOmbkZalmk7p5QHCyLEmPVZZKIl8oJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:b9:13:9a:66:35:5d:0b:3e:0d:83:ea:1a:13:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=831b726fcc98200cf39034df958e8fe8b3c79c37 Validity Not Before: Dec 15 13:01:09 2025 GMT Not After : Dec 16 13:01:09 2025 GMT Subject: CN=d24b0d5df739a23bf59e506741cc0a4c4b205dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:f8:18:dc:01:6e:93:1c:6f:a9:37:29:1c: da:76:3c:3e:fa:c8:28:63:4d:dc:fc:8e:77:04:cc: 45:53:92:e7:2a:89:10:d5:59:04:00:c4:39:78:c0: c5:c7:3d:f3:03:f6:7d:11:c6:ca:23:f9:11:76:5d: a1:15:88:fc:48:44:8c:94:06:b9:c9:11:e4:06:37: 16:20:98:b7:eb:56:27:e7:4f:77:47:6a:99:f4:18: e1:46:ca:f3:12:a6:b8:38:ab:a2:c8:9e:59:51:c0: e5:8b:04:f7:fa:c5:9c:de:de:a8:ea:fa:02:17:af: 86:9d:ec:49:35:19:1a:4d:aa:3a:03:3d:68:37:59: aa:88:b7:f1:59:3e:bf:48:7f:43:f5:8f:a1:c7:c0: f7:d6:e6:d6:c2:4d:2f:66:fd:4e:8f:bf:77:af:2d: 37:59:ec:9e:7e:6a:2f:43:95:90:6e:48:ce:74:45: fd:80:6f:7e:69:b8:b3:73:db:c9:a4:d0:88:ff:da: 75:e4:be:e3:c5:fc:24:a6:cf:0b:75:c2:44:69:9b: e2:c6:88:fd:43:d8:02:3b:75:2f:fc:c4:d8:80:aa: e2:2f:fe:1b:2b:dc:5b:18:3e:67:6c:13:ea:f1:e3: f4:d7:78:08:9b:81:9f:17:49:93:67:cd:17:3e:01: ef:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4B:0D:5D:F7:39:A2:3B:F5:9E:50:67:41:CC:0A:4C:4B:20:5D:DA X509v3 Authority Key Identifier: keyid:83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e1:f5:84:48:f6:13:4b:28:b2:51:a0:60:a1:6a:23:50:75: 10:fa:85:e7:4f:71:e6:ee:67:df:ce:e1:50:b4:44:93:69:80: b5:22:77:24:2c:9f:65:e3:4d:29:d3:02:a8:c8:99:24:1a:6d: bb:15:6c:b4:05:d0:df:d2:0c:0c:1f:d3:12:fa:3f:56:89:79: 2c:d4:2e:eb:e5:cb:9d:17:1b:ed:19:9f:8d:1d:7b:d1:6c:13: 73:70:3e:bb:3f:0f:f4:f6:ed:30:68:1b:e5:c7:de:91:d3:93: a0:92:09:fc:aa:8f:8a:6a:a8:0e:11:75:6e:d0:cb:57:78:04: 5b:94:09:09:e3:48:16:a2:3f:b4:d8:20:11:ce:d4:b1:e8:85: 42:3b:d3:1c:38:3e:c0:f8:aa:fd:0c:a3:14:e4:fa:67:a8:a1: 5d:d3:f5:16:1d:42:b6:30:3d:bf:e0:91:3c:b8:e8:97:7d:24: 18:80:2d:e1:c4:de:e7:eb:e7:56:57:39:0a:0b:ae:c2:ce:6a: 5a:25:7c:8a:45:98:57:27:07:f2:0d:f7:d8:75:e4:97:a7:d4: 90:be:aa:f7:5e:8c:ce:f2:73:30:fe:d0:52:06:80:d4:be:ea: 52:90:de:bf:2a:3a:18:32:e0:6c:1b:ff:d2:a6:97:fa:bb:6b: 94:3b:66:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGbkTmmY1XQs+DYPqGhO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMWI3MjZmY2M5ODIwMGNmMzkwMzRkZjk1OGU4ZmU4YjNj NzljMzcwHhcNMjUxMjE1MTMwMTA5WhcNMjUxMjE2MTMwMTA5WjAzMTEwLwYDVQQD EyhkMjRiMGQ1ZGY3MzlhMjNiZjU5ZTUwNjc0MWNjMGE0YzRiMjA1ZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPT4GNwBbpMcb6k3KRzadjw++sgo Y03c/I53BMxFU5LnKokQ1VkEAMQ5eMDFxz3zA/Z9EcbKI/kRdl2hFYj8SESMlAa5 yRHkBjcWIJi361Yn5093R2qZ9BjhRsrzEqa4OKuiyJ5ZUcDliwT3+sWc3t6o6voC F6+GnexJNRkaTao6Az1oN1mqiLfxWT6/SH9D9Y+hx8D31ubWwk0vZv1Oj793ry03 WeyefmovQ5WQbkjOdEX9gG9+abizc9vJpNCI/9p15L7jxfwkps8LdcJEaZvixoj9 Q9gCO3Uv/MTYgKriL/4bK9xbGD5nbBPq8eP013gIm4GfF0mTZ80XPgHvEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJLDV33OaI79Z5QZ0HMCkxLIF3aMB8GA1UdIwQY MBaAFIMbcm/MmCAM85A035WOj+izx5w3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3h0eWI4eVlJQXp6a0RUZmxZNlA2TFBIbkRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNTE0M2YtYzNjOS00MzU3LTg0N2Ut M2MzNDM2MzY4NGU2LzEvZ3h0eWI4eVlJQXp6a0RUZmxZNlA2TFBIbkRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8wNTE0M2YtYzNjOS00MzU3LTg0N2UtM2MzNDM2MzY4NGU2 LzEvZ3h0eWI4eVlJQXp6a0RUZmxZNlA2TFBIbkRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+H1hEj2 E0soslGgYKFqI1B1EPqF509x5u5n387hULREk2mAtSJ3JCyfZeNNKdMCqMiZJBpt uxVstAXQ39IMDB/TEvo/Vol5LNQu6+XLnRcb7RmfjR170WwTc3A+uz8P9PbtMGgb 5cfekdOToJIJ/KqPimqoDhF1btDLV3gEW5QJCeNIFqI/tNggEc7UseiFQjvTHDg+ wPiq/QyjFOT6Z6ihXdP1Fh1CtjA9v+CRPLjol30kGIAt4cTe5+vnVlc5Cguuws5q WiV8ikWYVycH8g332HXkl6fUkL6q916MzvJzMP7QUgaA1L7qUpDevyo6GDLgbBv/ 0qaX+rtrlDtmIg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:54:53 2025 by rpki-client