This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft File: GxUEuvgu-OsK5QivQLY442YKVIg.mft (raw, json) Hash identifier: KcWeT2KZ5B5OTXmpKUHBV3nBcR4xYP2h3XGF9SGTgHE= Subject key identifier: 94:11:00:D1:98:93:DF:C8:DB:8C:9E:78:EE:52:62:D6:AD:76:84:8E Authority key identifier: 1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88 Certificate issuer: /CN=1b1504baf82ef8eb0ae508af40b638e3660a5488 Certificate serial: 019B5975E9B7FD577381DE68E08DDE3CFA8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft Manifest number: 0FDE Signing time: Fri 26 Dec 2025 07:00:58 +0000 Manifest this update: Fri 26 Dec 2025 07:00:58 +0000 Manifest next update: Sat 27 Dec 2025 07:00:58 +0000 Files and hashes: 1: GxUEuvgu-OsK5QivQLY442YKVIg.crl (hash: k2xhMq7OqRyj9ke4hrptUQDWY3kaJKHcEP1lOLu3oH8=) 2: tXB_xgR37XoLj3SsWw2sjqhqZ9s.roa (hash: he0mpoKaeU1kDKUR39rmBxQcGyL1D1fjhdkpr9BtuYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:e9:b7:fd:57:73:81:de:68:e0:8d:de:3c:fa:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1504baf82ef8eb0ae508af40b638e3660a5488 Validity Not Before: Dec 26 07:00:58 2025 GMT Not After : Dec 27 07:00:58 2025 GMT Subject: CN=941100d19893dfc8db8c9e78ee5262d6ad76848e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:8d:57:50:1d:8d:28:fa:c6:a9:e9:63:42: 11:f9:30:3b:4a:62:6e:9b:aa:c4:2d:0d:5f:68:d9: 22:86:99:1e:38:c5:d5:38:fa:bc:03:d7:85:2b:e8: 79:fb:23:89:32:1b:fc:1d:e7:77:14:e9:8f:d4:a0: 2c:1a:ba:1a:53:c1:d4:83:18:58:6f:3d:0b:67:ef: 49:8b:48:b0:59:3c:e8:9c:bf:cd:06:fc:4c:4e:60: 51:54:c4:5a:f5:52:54:34:37:05:e6:35:15:7d:3b: da:26:1c:7c:5f:1b:14:0c:d5:a9:9a:65:0e:82:69: 04:08:d8:df:30:9b:66:07:a6:da:72:8c:2d:31:52: 5a:fc:96:c4:ec:4f:fa:86:49:08:5d:78:d9:a5:b9: 76:57:ec:aa:ee:1f:fb:eb:d4:c4:85:6f:17:0d:07: c2:28:b4:08:14:a3:2b:29:cd:26:1b:f8:03:48:fc: 1e:51:f8:48:db:c6:5f:ae:89:b6:a0:b5:0b:5e:49: 42:c2:75:fa:07:cc:38:32:50:28:51:69:36:73:25: fd:7f:b0:9c:56:f6:1c:9a:24:2d:7f:18:35:c1:19: 89:2b:84:21:58:d4:a1:1f:19:16:0d:5f:fc:c8:b3: 26:a3:c2:7e:31:dd:0c:3f:b1:75:e1:a7:40:00:d5: 5b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:11:00:D1:98:93:DF:C8:DB:8C:9E:78:EE:52:62:D6:AD:76:84:8E X509v3 Authority Key Identifier: keyid:1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3c:cd:d9:28:20:34:f6:1a:ed:25:fa:22:00:ee:26:3f:ae: bb:3a:0c:cc:b7:33:d0:00:76:75:38:23:ee:9c:6e:4e:54:2d: 08:10:6f:06:13:d4:c2:92:25:3b:0e:62:71:28:72:2a:01:56: b8:f2:ca:f3:65:c2:89:a2:8a:36:04:e6:59:83:0a:9a:32:b1: 34:37:1f:d2:64:35:0a:67:f2:95:3a:2a:53:48:34:03:d7:bb: ea:7a:62:b2:a6:28:0c:77:6b:bb:1e:fe:16:a3:08:bc:f6:f5: 1a:c4:2c:4a:84:3a:34:a2:41:1b:7f:cb:45:52:c2:38:21:ad: 2e:ac:f5:c2:d2:52:8a:98:2d:fc:de:31:70:4b:71:32:0f:62: f4:7d:9c:72:f9:9d:68:3f:11:43:4e:da:c4:53:de:02:43:c3: 5c:ad:bf:63:84:e3:6e:95:e2:43:16:d9:1a:70:72:0e:3f:4e: 66:4d:6f:fd:ef:a5:75:6e:4f:c9:ec:40:37:16:e3:b1:ac:74: e9:bb:1f:f7:ae:06:fc:25:e5:9d:14:0a:37:b9:3b:a5:ae:86: a0:6c:19:65:a6:c5:ce:79:5d:43:c1:92:ca:f5:1d:85:d9:f9: 43:1b:de:69:66:c4:83:a6:14:20:80:45:f7:fc:c5:f1:9f:fd: 81:3a:76:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdem3/Vdzgd5o4I3ePPqMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTUwNGJhZjgyZWY4ZWIwYWU1MDhhZjQwYjYzOGUzNjYw YTU0ODgwHhcNMjUxMjI2MDcwMDU4WhcNMjUxMjI3MDcwMDU4WjAzMTEwLwYDVQQD Eyg5NDExMDBkMTk4OTNkZmM4ZGI4YzllNzhlZTUyNjJkNmFkNzY4NDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsKNV1AdjSj6xqnpY0IR+TA7SmJu m6rELQ1faNkihpkeOMXVOPq8A9eFK+h5+yOJMhv8Hed3FOmP1KAsGroaU8HUgxhY bz0LZ+9Ji0iwWTzonL/NBvxMTmBRVMRa9VJUNDcF5jUVfTvaJhx8XxsUDNWpmmUO gmkECNjfMJtmB6bacowtMVJa/JbE7E/6hkkIXXjZpbl2V+yq7h/769TEhW8XDQfC KLQIFKMrKc0mG/gDSPweUfhI28Zfrom2oLULXklCwnX6B8w4MlAoUWk2cyX9f7Cc VvYcmiQtfxg1wRmJK4QhWNShHxkWDV/8yLMmo8J+Md0MP7F14adAANVbCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQRANGYk9/I24yeeO5SYtatdoSOMB8GA1UdIwQY MBaAFBsVBLr4LvjrCuUIr0C2OONmClSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hVRXV2Z3UtT3NLNVFpdlFMWTQ0MllLVklnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yYjdmNzAtZmFkMS00MDNjLWIwOGUt MmMzZWE0Yjg2ZTIwLzEvR3hVRXV2Z3UtT3NLNVFpdlFMWTQ0MllLVklnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8yYjdmNzAtZmFkMS00MDNjLWIwOGUtMmMzZWE0Yjg2ZTIw LzEvR3hVRXV2Z3UtT3NLNVFpdlFMWTQ0MllLVklnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjzN2Sgg NPYa7SX6IgDuJj+uuzoMzLcz0AB2dTgj7pxuTlQtCBBvBhPUwpIlOw5icShyKgFW uPLK82XCiaKKNgTmWYMKmjKxNDcf0mQ1CmfylToqU0g0A9e76npisqYoDHdrux7+ FqMIvPb1GsQsSoQ6NKJBG3/LRVLCOCGtLqz1wtJSipgt/N4xcEtxMg9i9H2ccvmd aD8RQ07axFPeAkPDXK2/Y4TjbpXiQxbZGnByDj9OZk1v/e+ldW5PyexANxbjsax0 6bsf964G/CXlnRQKN7k7pa6GoGwZZabFznldQ8GSyvUdhdn5QxveaWbEg6YUIIBF 9/zF8Z/9gTp2tQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:42 2025 by rpki-client