This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft File: GXYcuDMg_8ugH9gHoG6InMMdhec.mft (raw, json) Hash identifier: lRs/VeU/yZvK2MHaDUs6/DRzt+qfnfSVGNromKJPuaA= Subject key identifier: A8:F8:CD:39:B6:DA:0A:96:37:CC:58:72:BE:FA:FD:D3:6D:84:3C:A0 Authority key identifier: 19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7 Certificate issuer: /CN=19761cb83320ffcba01fd807a06e889cc31d85e7 Certificate serial: 019AFE0DAA66B5F5BD349AADFCE8075125E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft Manifest number: 03B8 Signing time: Mon 08 Dec 2025 13:01:39 +0000 Manifest this update: Mon 08 Dec 2025 13:01:39 +0000 Manifest next update: Tue 09 Dec 2025 13:01:39 +0000 Files and hashes: 1: GXYcuDMg_8ugH9gHoG6InMMdhec.crl (hash: 4xh4sAe5julmCUrJHFvqoQlRnc7ExD2Bo1/VdDNwTF8=) 2: Ty2odF6IC8z1MlXMbYRSCNZm2f8.roa (hash: x0KKkB+0aY8vDOyJs8CL2l2Pu3KalqTjZiy3MLgQKrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:0d:aa:66:b5:f5:bd:34:9a:ad:fc:e8:07:51:25:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19761cb83320ffcba01fd807a06e889cc31d85e7 Validity Not Before: Dec 8 13:01:39 2025 GMT Not After : Dec 9 13:01:39 2025 GMT Subject: CN=a8f8cd39b6da0a9637cc5872befafdd36d843ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:38:54:4b:45:f6:84:dd:70:17:77:76:86:59: 3c:cd:a5:52:8e:6b:7e:a5:9a:71:2f:e2:be:22:e9: 6d:71:00:10:d0:c4:35:33:d7:54:ef:7e:35:02:73: 3a:fd:1e:30:ae:01:ff:70:40:f4:f3:51:90:3c:fe: 85:96:6f:09:44:bd:dc:d7:a1:82:42:6c:14:6d:6e: 83:61:8d:13:0c:80:f4:5f:f4:b1:43:ed:d5:0a:1d: ab:f1:4d:4c:37:91:a6:75:41:35:92:f2:4e:e5:cd: d8:fd:40:ce:9c:7f:05:92:db:bf:01:33:33:87:c6: 85:2c:dc:13:23:7b:28:c2:d0:60:dc:7d:97:e7:a7: 84:2e:cb:f6:69:ed:9b:00:46:56:1c:a4:ca:d7:03: 22:67:3b:c0:05:35:25:94:bd:71:aa:c8:87:29:48: 71:ff:b8:c5:97:85:6f:21:29:17:04:d3:1b:cd:7f: ae:2e:d2:b4:b9:2d:77:c6:4b:07:e6:16:50:1c:7b: 97:d9:c3:91:7b:ca:30:7c:e2:dd:a2:6e:b8:30:51: c0:33:6a:81:d5:e9:49:9a:fc:e8:76:e9:18:4f:9a: 8e:b4:de:cc:92:50:87:5a:0b:04:3c:e4:ee:9a:e6: 6c:9d:87:9c:b3:c4:48:50:25:3a:41:6b:a8:6e:b9: 91:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F8:CD:39:B6:DA:0A:96:37:CC:58:72:BE:FA:FD:D3:6D:84:3C:A0 X509v3 Authority Key Identifier: keyid:19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:9f:26:36:f6:5c:cb:78:88:68:f9:04:31:54:2e:1e:57:09: 59:bf:7f:dd:e8:45:24:3c:04:eb:43:87:47:70:f3:fb:70:cd: 6c:1a:d4:9c:6e:1e:66:a1:8a:d3:aa:7e:b1:d3:9e:6e:52:2b: b0:e7:fc:49:40:a7:65:c7:4d:b2:b9:09:ea:8b:ca:6b:44:57: 98:9c:72:36:f6:29:4c:e3:8a:5f:2b:6e:ee:0c:0b:03:71:12: 3b:8e:2f:da:09:30:b9:fe:84:9a:46:de:be:2c:4e:f7:17:a4: c9:f2:16:94:22:4d:ad:2d:55:f0:6a:e1:33:ed:0a:cf:ad:2c: 0a:60:7b:13:f0:cf:0e:5e:4e:ad:83:94:68:2a:69:10:18:03: 01:4f:d5:41:ad:30:13:3e:f3:71:65:ac:4a:dc:01:07:4c:ee: 1e:21:f9:48:a6:18:d6:ea:b2:aa:b0:90:0c:ee:5a:b5:3a:20: 63:3f:3c:ee:35:b3:a4:e0:7f:33:c7:31:f1:2d:07:a2:68:e0: 63:fa:0a:d6:50:c0:42:28:99:2c:f1:09:ef:e6:b9:01:e6:25: 9c:84:86:b5:47:2b:7e:17:f9:8a:71:66:81:4c:9e:25:8e:24: 67:f2:93:d8:31:f6:a9:22:ce:7c:f9:90:c5:ec:64:0b:9e:a3: 95:01:ee:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr+DapmtfW9NJqt/OgHUSXlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NzYxY2I4MzMyMGZmY2JhMDFmZDgwN2EwNmU4ODljYzMx ZDg1ZTcwHhcNMjUxMjA4MTMwMTM5WhcNMjUxMjA5MTMwMTM5WjAzMTEwLwYDVQQD EyhhOGY4Y2QzOWI2ZGEwYTk2MzdjYzU4NzJiZWZhZmRkMzZkODQzY2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozhUS0X2hN1wF3d2hlk8zaVSjmt+ pZpxL+K+IultcQAQ0MQ1M9dU7341AnM6/R4wrgH/cED081GQPP6Flm8JRL3c16GC QmwUbW6DYY0TDID0X/SxQ+3VCh2r8U1MN5GmdUE1kvJO5c3Y/UDOnH8Fktu/ATMz h8aFLNwTI3sowtBg3H2X56eELsv2ae2bAEZWHKTK1wMiZzvABTUllL1xqsiHKUhx /7jFl4VvISkXBNMbzX+uLtK0uS13xksH5hZQHHuX2cORe8owfOLdom64MFHAM2qB 1elJmvzodukYT5qOtN7MklCHWgsEPOTumuZsnYecs8RIUCU6QWuobrmR4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKj4zTm22gqWN8xYcr76/dNthDygMB8GA1UdIwQY MBaAFBl2HLgzIP/LoB/YB6BuiJzDHYXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1hZY3VETWdfOHVnSDlnSG9HNkluTU1kaGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81ZDBlNDQtMGI4ZS00M2VhLTk4ZDgt Y2Q4YmUxYzU5ZDhkLzEvR1hZY3VETWdfOHVnSDlnSG9HNkluTU1kaGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My81ZDBlNDQtMGI4ZS00M2VhLTk4ZDgtY2Q4YmUxYzU5ZDhk LzEvR1hZY3VETWdfOHVnSDlnSG9HNkluTU1kaGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIp8mNvZc y3iIaPkEMVQuHlcJWb9/3ehFJDwE60OHR3Dz+3DNbBrUnG4eZqGK06p+sdOeblIr sOf8SUCnZcdNsrkJ6ovKa0RXmJxyNvYpTOOKXytu7gwLA3ESO44v2gkwuf6Emkbe vixO9xekyfIWlCJNrS1V8GrhM+0Kz60sCmB7E/DPDl5OrYOUaCppEBgDAU/VQa0w Ez7zcWWsStwBB0zuHiH5SKYY1uqyqrCQDO5atTogYz887jWzpOB/M8cx8S0Homjg Y/oK1lDAQiiZLPEJ7+a5AeYlnISGtUcrfhf5inFmgUyeJY4kZ/KT2DH2qSLOfPmQ xexkC56jlQHuKw== -----END CERTIFICATE-----Generated at Mon Dec 8 15:09:15 2025 by rpki-client