This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft File: GnU2E7QiD2jytUbQkqIwvtbtrLg.mft (raw, json) Hash identifier: KO3gvrw5+8CZWe3DtdqNb8jNV0+htj5jAly1bwV+Oew= Subject key identifier: 24:DE:C2:25:00:16:5D:49:AE:37:52:BE:5A:FF:D1:31:4D:00:E6:70 Authority key identifier: 1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8 Certificate issuer: /CN=1a753613b4220f68f2b546d092a230bed6edacb8 Certificate serial: 019B37206F748040A4CCCB8D443CE37C122D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft Manifest number: 0AD4 Signing time: Fri 19 Dec 2025 15:00:31 +0000 Manifest this update: Fri 19 Dec 2025 15:00:31 +0000 Manifest next update: Sat 20 Dec 2025 15:00:31 +0000 Files and hashes: 1: GnU2E7QiD2jytUbQkqIwvtbtrLg.crl (hash: J9j0bc6TPqkgN8yzM/daE8ZPgUCMRw2/71t58pU/vkI=) 2: dZV8dvdnA_9uSLTQkNXVl8a3FaI.roa (hash: Krx07PHv8S1aDWSKbtOJAHlzZWfSCAV78WJWEmqXiPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.crl rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:6f:74:80:40:a4:cc:cb:8d:44:3c:e3:7c:12:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a753613b4220f68f2b546d092a230bed6edacb8 Validity Not Before: Dec 19 15:00:31 2025 GMT Not After : Dec 20 15:00:31 2025 GMT Subject: CN=24dec22500165d49ae3752be5affd1314d00e670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:64:67:d1:38:fc:14:3a:56:3d:b1:31:36:b5: f7:a7:99:18:5d:c8:b4:e5:53:25:20:2d:8b:6f:37: 9c:a1:4e:0b:63:00:62:7b:5b:db:08:6c:33:88:b9: f9:fa:68:eb:4e:af:f6:99:eb:5c:b1:a5:bc:99:eb: 06:08:2c:33:8a:84:5f:7c:ee:eb:2f:be:b8:90:8a: c5:00:b4:29:ee:5b:a4:a6:dd:03:36:bf:ce:d5:8d: 5d:10:2c:a6:da:1b:f3:64:bb:da:f5:e7:ef:5b:c5: 24:5e:e0:7a:7e:a5:16:55:4b:f5:3d:ad:93:fb:ef: bc:c1:f2:bd:18:67:e5:ae:d5:fa:b2:e1:cd:1b:ba: d6:c2:0c:4a:7a:a4:ec:40:f5:d4:62:ba:2c:37:7f: cf:cb:ae:4b:41:ca:58:33:3a:67:4f:d6:fd:80:78: 5f:6d:31:6d:8d:61:95:64:ec:90:84:5d:8f:c9:ea: 20:f4:7b:70:e8:4f:4d:d2:72:01:16:a4:7c:09:65: 0e:c4:3b:99:ed:71:38:bf:a3:14:ca:3d:a4:82:66: be:15:5f:ac:ef:03:2f:e7:df:f4:a7:6b:61:4e:8b: 9a:0a:ee:17:52:90:6a:b0:cf:be:be:db:1c:bc:06: e0:ea:81:9c:5d:72:12:3f:8c:99:eb:52:0f:82:0a: db:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DE:C2:25:00:16:5D:49:AE:37:52:BE:5A:FF:D1:31:4D:00:E6:70 X509v3 Authority Key Identifier: keyid:1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:9a:d3:9b:41:c7:4d:25:e2:c9:a7:18:4e:a1:5c:33:2e:38: 83:13:2f:98:46:d3:a8:d4:79:2d:e8:19:6b:17:8f:b6:cd:25: 8f:c1:12:7e:24:9c:da:89:25:98:a0:2f:61:02:24:e9:5b:7b: 44:09:38:72:8b:33:7f:05:91:2b:40:4d:ec:4d:ae:4e:c1:a8: b4:6f:92:42:90:46:18:4b:bf:1c:36:ea:64:58:35:a2:3d:3f: a5:04:ff:25:29:37:82:67:1c:02:07:48:e6:39:24:7e:60:52: be:9c:03:27:e0:17:2f:2e:0d:66:30:d7:c6:34:6b:77:6b:ee: 70:41:71:6f:39:f8:4e:64:e1:0d:f8:ac:f5:f0:f1:da:54:65: 0b:81:d4:73:b7:a7:93:0b:d2:6c:55:dc:82:04:f9:be:bd:3e: ad:eb:a3:61:48:39:79:74:74:41:e0:b4:e2:c3:2c:62:4f:d8: 47:3f:58:11:f7:81:a6:07:d9:1a:c0:ca:ac:95:14:6d:2f:d2: 6a:e3:51:b4:3d:d3:7b:74:f1:d4:12:24:61:15:5f:26:47:f6: bd:10:a3:0d:c1:fc:bc:a9:f7:00:c0:61:ca:01:d6:4d:dc:da: d8:63:d0:ba:3c:29:a9:31:22:63:f6:e2:62:0c:fd:7c:f9:a9: ab:7d:5f:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IG90gECkzMuNRDzjfBItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNzUzNjEzYjQyMjBmNjhmMmI1NDZkMDkyYTIzMGJlZDZl ZGFjYjgwHhcNMjUxMjE5MTUwMDMxWhcNMjUxMjIwMTUwMDMxWjAzMTEwLwYDVQQD EygyNGRlYzIyNTAwMTY1ZDQ5YWUzNzUyYmU1YWZmZDEzMTRkMDBlNjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mRn0Tj8FDpWPbExNrX3p5kYXci0 5VMlIC2LbzecoU4LYwBie1vbCGwziLn5+mjrTq/2metcsaW8mesGCCwzioRffO7r L764kIrFALQp7lukpt0DNr/O1Y1dECym2hvzZLva9efvW8UkXuB6fqUWVUv1Pa2T +++8wfK9GGflrtX6suHNG7rWwgxKeqTsQPXUYrosN3/Py65LQcpYMzpnT9b9gHhf bTFtjWGVZOyQhF2Pyeog9Htw6E9N0nIBFqR8CWUOxDuZ7XE4v6MUyj2kgma+FV+s 7wMv59/0p2thTouaCu4XUpBqsM++vtscvAbg6oGcXXISP4yZ61IPggrb8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTewiUAFl1JrjdSvlr/0TFNAOZwMB8GA1UdIwQY MBaAFBp1NhO0Ig9o8rVG0JKiML7W7ay4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR25VMkU3UWlEMmp5dFViUWtxSXd2dGJ0ckxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83M2MzZTMtODFlNi00ZWI0LWE5NDYt NjA5ZmE0ZTU0MDY3LzEvR25VMkU3UWlEMmp5dFViUWtxSXd2dGJ0ckxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83M2MzZTMtODFlNi00ZWI0LWE5NDYtNjA5ZmE0ZTU0MDY3 LzEvR25VMkU3UWlEMmp5dFViUWtxSXd2dGJ0ckxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJrTm0HH TSXiyacYTqFcMy44gxMvmEbTqNR5LegZaxePts0lj8ESfiSc2oklmKAvYQIk6Vt7 RAk4coszfwWRK0BN7E2uTsGotG+SQpBGGEu/HDbqZFg1oj0/pQT/JSk3gmccAgdI 5jkkfmBSvpwDJ+AXLy4NZjDXxjRrd2vucEFxbzn4TmThDfis9fDx2lRlC4HUc7en kwvSbFXcggT5vr0+reujYUg5eXR0QeC04sMsYk/YRz9YEfeBpgfZGsDKrJUUbS/S auNRtD3Te3Tx1BIkYRVfJkf2vRCjDcH8vKn3AMBhygHWTdza2GPQujwpqTEiY/bi Ygz9fPmpq31f2Q== -----END CERTIFICATE-----Generated at Fri Dec 19 23:42:12 2025 by rpki-client