This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft File: gXRkmx7wDcg8KFOaOdKQs1MO37A.mft (raw, json) Hash identifier: /kvz/HxBQ7KSIYL3VK2kqNCBH2G7TvFda79xSfOodac= Subject key identifier: DD:72:87:6F:1B:B1:A1:1B:17:FF:AF:E5:9F:F5:1A:C9:AF:64:20:F9 Authority key identifier: 81:74:64:9B:1E:F0:0D:C8:3C:28:53:9A:39:D2:90:B3:53:0E:DF:B0 Certificate issuer: /CN=8174649b1ef00dc83c28539a39d290b3530edfb0 Certificate serial: 019B2F67E5E64AA15052F36AF1C9ED6EB792 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft Manifest number: 028E Signing time: Thu 18 Dec 2025 03:01:36 +0000 Manifest this update: Thu 18 Dec 2025 03:01:36 +0000 Manifest next update: Fri 19 Dec 2025 03:01:36 +0000 Files and hashes: 1: GQ42kTqn472NU0Utg1aKLG7W0bI.roa (hash: oM3P06tzeH7/sG3RLnC5jVN3WHhv6hvEc5nYDWBm418=) 2: gXRkmx7wDcg8KFOaOdKQs1MO37A.crl (hash: epkajPNwbdumR7pXOn0yvBQL0MJJgRNjN2EI1TFfIzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:e5:e6:4a:a1:50:52:f3:6a:f1:c9:ed:6e:b7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8174649b1ef00dc83c28539a39d290b3530edfb0 Validity Not Before: Dec 18 03:01:36 2025 GMT Not After : Dec 19 03:01:36 2025 GMT Subject: CN=dd72876f1bb1a11b17ffafe59ff51ac9af6420f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:ce:92:e1:fc:0b:41:40:5d:0b:5a:2a:9f: 85:eb:4b:a7:a5:a0:32:f7:05:25:f8:b6:a8:dd:34: 67:44:64:e5:da:06:36:b8:78:34:6e:df:2c:a6:ad: e1:6b:54:5d:b4:1f:ad:7d:96:56:07:00:9b:98:9a: 7a:b8:2f:25:16:73:f5:0f:27:9b:b5:de:28:21:95: 37:81:ed:4d:06:73:3e:a7:c5:3c:36:f9:75:5c:dc: 78:1d:95:09:6a:f1:fd:5d:9a:76:73:ae:01:23:d3: 8d:2d:79:c9:f1:2f:5b:63:93:78:9e:8c:94:00:e4: f4:f8:2b:67:fe:b8:a5:28:be:f0:de:bb:e8:78:16: ef:95:a4:ac:27:37:12:8a:d6:96:b1:0c:c2:24:60: 4b:d4:d8:65:de:ea:5b:70:d9:70:77:aa:ce:34:ac: 38:bf:1f:e0:90:ca:c5:4c:16:c8:76:0e:f1:de:32: f0:f2:55:2d:c2:d9:fa:39:36:42:79:58:20:a9:92: d5:3a:e3:32:9c:86:55:ac:e2:5e:19:c1:89:d8:f0: 49:a9:9b:56:62:cb:95:f7:bb:10:ac:2b:fb:08:f4: d9:52:d9:ab:bf:a3:91:a9:98:eb:ce:18:71:6c:66: 21:50:4d:3a:20:8c:8d:c2:04:e6:67:96:a7:89:32: f4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:72:87:6F:1B:B1:A1:1B:17:FF:AF:E5:9F:F5:1A:C9:AF:64:20:F9 X509v3 Authority Key Identifier: keyid:81:74:64:9B:1E:F0:0D:C8:3C:28:53:9A:39:D2:90:B3:53:0E:DF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:03:fd:5d:b8:a6:1a:84:6c:00:43:23:10:fd:a3:5e:43:6a: 39:c0:e9:f1:36:cf:b9:c3:7b:53:ab:ce:d6:52:00:6d:30:05: c8:a9:08:5f:21:f5:8c:8e:76:66:0f:4b:4b:45:95:f8:a3:5f: 62:0c:58:40:b5:42:22:ea:2b:d3:a9:86:1a:af:31:20:a9:40: f0:49:cd:bb:d5:89:c3:6e:6b:37:eb:d8:22:10:e9:e4:75:60: a5:4b:b6:02:85:79:b4:63:2c:2b:64:2c:1e:9c:af:e0:26:cc: d8:0d:39:a2:08:25:7c:c1:5b:8d:46:79:38:e5:17:b0:12:e2: dc:8e:4e:e1:db:e9:37:aa:11:ad:52:a7:f5:bb:86:77:17:ee: 8f:6e:9a:b7:83:7f:4a:96:67:b6:f8:af:ed:1d:3d:0d:ff:9c: bf:f0:74:d0:a7:3a:c8:20:15:2c:a2:70:f3:9d:88:c6:50:21: c1:02:76:bf:ea:eb:41:39:d6:37:60:77:fe:e6:01:b6:a3:86: 5c:95:e7:56:7a:cd:bb:79:76:53:6e:74:11:39:13:48:86:d6: 83:f0:da:31:4b:f6:f0:55:96:4b:36:d7:5d:e3:30:8a:21:a6: 11:ef:ac:e5:37:82:59:25:1f:ce:f6:d1:9d:94:ac:a7:dd:72: 45:1e:b5:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ+XmSqFQUvNq8cntbreSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNzQ2NDliMWVmMDBkYzgzYzI4NTM5YTM5ZDI5MGIzNTMw ZWRmYjAwHhcNMjUxMjE4MDMwMTM2WhcNMjUxMjE5MDMwMTM2WjAzMTEwLwYDVQQD EyhkZDcyODc2ZjFiYjFhMTFiMTdmZmFmZTU5ZmY1MWFjOWFmNjQyMGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZjOkuH8C0FAXQtaKp+F60unpaAy 9wUl+Lao3TRnRGTl2gY2uHg0bt8spq3ha1RdtB+tfZZWBwCbmJp6uC8lFnP1Dyeb td4oIZU3ge1NBnM+p8U8Nvl1XNx4HZUJavH9XZp2c64BI9ONLXnJ8S9bY5N4noyU AOT0+Ctn/rilKL7w3rvoeBbvlaSsJzcSitaWsQzCJGBL1Nhl3upbcNlwd6rONKw4 vx/gkMrFTBbIdg7x3jLw8lUtwtn6OTZCeVggqZLVOuMynIZVrOJeGcGJ2PBJqZtW YsuV97sQrCv7CPTZUtmrv6ORqZjrzhhxbGYhUE06IIyNwgTmZ5aniTL0xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1yh28bsaEbF/+v5Z/1GsmvZCD5MB8GA1UdIwQY MBaAFIF0ZJse8A3IPChTmjnSkLNTDt+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1hSa214N3dEY2c4S0ZPYU9kS1FzMU1PMzdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xY2VjMDItMjZlNi00MDBlLThkOWEt MzI5MjRlZjQ3YTFhLzEvZ1hSa214N3dEY2c4S0ZPYU9kS1FzMU1PMzdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8xY2VjMDItMjZlNi00MDBlLThkOWEtMzI5MjRlZjQ3YTFh LzEvZ1hSa214N3dEY2c4S0ZPYU9kS1FzMU1PMzdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwP9Xbim GoRsAEMjEP2jXkNqOcDp8TbPucN7U6vO1lIAbTAFyKkIXyH1jI52Zg9LS0WV+KNf YgxYQLVCIuor06mGGq8xIKlA8EnNu9WJw25rN+vYIhDp5HVgpUu2AoV5tGMsK2Qs Hpyv4CbM2A05ogglfMFbjUZ5OOUXsBLi3I5O4dvpN6oRrVKn9buGdxfuj26at4N/ SpZntviv7R09Df+cv/B00Kc6yCAVLKJw852IxlAhwQJ2v+rrQTnWN2B3/uYBtqOG XJXnVnrNu3l2U250ETkTSIbWg/DaMUv28FWWSzbXXeMwiiGmEe+s5TeCWSUfzvbR nZSsp91yRR61Vw== -----END CERTIFICATE-----Generated at Thu Dec 18 08:01:54 2025 by rpki-client