This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft File: GzVUSY88jdU5wlqdhTSPq4F-2iM.mft (raw, json) Hash identifier: eiguFL5LdFO7ISMZtFQ+sJYbkf0y9Y5Kkr8mj+4piNY= Subject key identifier: AA:F1:9B:AA:F8:C4:49:59:24:28:34:7B:59:0C:F1:8E:50:3B:D2:35 Authority key identifier: 1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23 Certificate issuer: /CN=1b3554498f3c8dd539c25a9d85348fab817eda23 Certificate serial: 019B59772D6BEE229CE83CAE216B5F84620E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft Manifest number: 0C8B Signing time: Fri 26 Dec 2025 07:02:21 +0000 Manifest this update: Fri 26 Dec 2025 07:02:21 +0000 Manifest next update: Sat 27 Dec 2025 07:02:21 +0000 Files and hashes: 1: GzVUSY88jdU5wlqdhTSPq4F-2iM.crl (hash: RBJvJtnGCfcArSMpnXthn2/ovpyfXBcrlhZEbbTIU1o=) 2: TJqYJ8PgowX2_0fLvr-J92tN24Y.roa (hash: SyEDMYr3gmhjsEM3DpobXAPSbcOSlzfmvEvbnyrm1xs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:2d:6b:ee:22:9c:e8:3c:ae:21:6b:5f:84:62:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b3554498f3c8dd539c25a9d85348fab817eda23 Validity Not Before: Dec 26 07:02:21 2025 GMT Not After : Dec 27 07:02:21 2025 GMT Subject: CN=aaf19baaf8c449592428347b590cf18e503bd235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:0b:ea:2e:d0:98:40:bd:c5:2a:9e:a3:1e: 42:a1:75:cf:3d:ec:a6:9e:7f:a7:34:ae:4e:df:9b: d4:69:08:32:9f:eb:51:86:17:a0:6c:be:94:bc:d3: 9e:28:c8:53:d8:15:3e:26:10:11:49:35:55:31:51: 53:26:a1:80:a0:8a:dd:6b:cb:2a:51:2e:3f:77:f7: 41:7b:0e:b1:35:f6:f3:40:53:ca:ab:21:05:16:82: c4:96:b6:c3:f9:ae:86:8c:e6:47:2d:3b:5e:ec:2c: 3b:80:ef:fb:26:3c:19:d0:dc:12:d0:f0:20:41:2a: a9:53:b4:ef:30:45:f9:d2:3b:6c:a6:98:90:03:26: 48:78:f2:91:23:04:21:59:1c:93:61:fe:1f:d7:b2: d8:08:e6:f8:64:e1:d7:8d:75:90:36:63:03:56:34: e9:86:35:f1:e2:b9:90:af:71:87:87:30:8e:71:dd: 48:43:62:33:36:d0:cd:4e:03:bd:32:6c:0a:6c:0f: 4d:d0:1b:cb:eb:89:3b:f7:07:1e:f0:b2:c2:7e:8c: 15:9f:de:a7:4a:f9:c8:16:32:c4:b6:51:86:c1:a5: 11:52:3f:5c:e7:fc:3c:64:ba:89:59:29:22:e3:4e: c0:34:73:93:71:22:9e:58:7c:4b:ab:dc:be:91:27: f6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F1:9B:AA:F8:C4:49:59:24:28:34:7B:59:0C:F1:8E:50:3B:D2:35 X509v3 Authority Key Identifier: keyid:1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:13:eb:05:e7:49:6b:6f:91:14:c1:d4:d0:cb:fc:ae:63:b6: 65:1c:59:71:3b:fc:7e:3c:66:db:7c:25:c8:45:a8:0b:7f:df: aa:9a:9f:0f:c9:a8:d6:08:f6:66:6d:13:a0:38:b3:db:9d:ed: d6:ce:99:6b:34:ff:95:74:cd:13:26:8a:6c:c1:28:18:0e:4f: e2:12:28:8d:3c:41:22:a5:86:ff:6a:f2:91:26:6e:25:c1:a6: d8:60:0b:e3:f0:10:d1:49:34:c8:0c:74:4f:16:4c:0c:ce:e6: 50:54:e5:28:1a:bc:2d:33:57:69:9b:ed:14:6f:06:04:e4:50: 95:fd:17:61:a1:3a:de:a8:7e:9d:18:e4:54:55:4b:65:30:65: fe:a2:00:f7:7d:79:f9:11:f5:92:56:86:a9:db:ad:81:3a:86: 19:0e:59:67:8a:9a:98:a6:f4:a3:6b:3c:54:c6:12:10:d8:3f: 3f:1d:b7:be:d8:29:4e:c0:a7:ba:da:23:5d:0e:34:d7:74:0c: 07:96:f7:e8:56:52:13:35:4d:e3:b7:62:da:0c:19:9b:4f:4b: cd:7e:bd:00:84:fc:6c:6f:b8:37:1f:79:ee:2f:24:6b:36:e8: 16:0f:51:0b:e3:92:a0:d9:05:8b:04:ff:27:cc:4e:51:a2:cf: 50:06:7c:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdy1r7iKc6DyuIWtfhGIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMzU1NDQ5OGYzYzhkZDUzOWMyNWE5ZDg1MzQ4ZmFiODE3 ZWRhMjMwHhcNMjUxMjI2MDcwMjIxWhcNMjUxMjI3MDcwMjIxWjAzMTEwLwYDVQQD EyhhYWYxOWJhYWY4YzQ0OTU5MjQyODM0N2I1OTBjZjE4ZTUwM2JkMjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJAL6i7QmEC9xSqeox5CoXXPPeym nn+nNK5O35vUaQgyn+tRhhegbL6UvNOeKMhT2BU+JhARSTVVMVFTJqGAoIrda8sq US4/d/dBew6xNfbzQFPKqyEFFoLElrbD+a6GjOZHLTte7Cw7gO/7JjwZ0NwS0PAg QSqpU7TvMEX50jtsppiQAyZIePKRIwQhWRyTYf4f17LYCOb4ZOHXjXWQNmMDVjTp hjXx4rmQr3GHhzCOcd1IQ2IzNtDNTgO9MmwKbA9N0BvL64k79wce8LLCfowVn96n SvnIFjLEtlGGwaURUj9c5/w8ZLqJWSki407ANHOTcSKeWHxLq9y+kSf2CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrxm6r4xElZJCg0e1kM8Y5QO9I1MB8GA1UdIwQY MBaAFBs1VEmPPI3VOcJanYU0j6uBftojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3pWVVNZODhqZFU1d2xxZGhUU1BxNEYtMmlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy83YjAzZDEtMGU2OC00NDRmLTkxODgt NzZlNWNlYjAzZmQ5LzEvR3pWVVNZODhqZFU1d2xxZGhUU1BxNEYtMmlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy83YjAzZDEtMGU2OC00NDRmLTkxODgtNzZlNWNlYjAzZmQ5 LzEvR3pWVVNZODhqZFU1d2xxZGhUU1BxNEYtMmlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhPrBedJ a2+RFMHU0Mv8rmO2ZRxZcTv8fjxm23wlyEWoC3/fqpqfD8mo1gj2Zm0ToDiz253t 1s6ZazT/lXTNEyaKbMEoGA5P4hIojTxBIqWG/2rykSZuJcGm2GAL4/AQ0Uk0yAx0 TxZMDM7mUFTlKBq8LTNXaZvtFG8GBORQlf0XYaE63qh+nRjkVFVLZTBl/qIA9315 +RH1klaGqdutgTqGGQ5ZZ4qamKb0o2s8VMYSENg/Px23vtgpTsCnutojXQ4013QM B5b36FZSEzVN47di2gwZm09LzX69AIT8bG+4Nx957i8kazboFg9RC+OSoNkFiwT/ J8xOUaLPUAZ8mg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:31 2025 by rpki-client