This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft File: Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft (raw, json) Hash identifier: youMeevLoabomdSI+IAWjOfg6HqTa0KTNYrdwM4I0oA= Subject key identifier: BA:6D:6A:87:A1:2B:BB:5F:34:4A:97:B3:31:40:AE:70:9C:71:1A:5B Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23 Certificate issuer: /CN=1a9b70ef99760a0659deaefa660345a0e6115423 Certificate serial: 019B5A1AA6C5CFB318F116BD86D65D79DC9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft Manifest number: 1729 Signing time: Fri 26 Dec 2025 10:00:54 +0000 Manifest this update: Fri 26 Dec 2025 10:00:54 +0000 Manifest next update: Sat 27 Dec 2025 10:00:54 +0000 Files and hashes: 1: AI-SjUNk27UlWzeJbfub1LMpR_c.roa (hash: n1P92aXpjrqVVtgYbgV1MuvoAPU8jvz1Hn4J2/+sFwE=) 2: Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl (hash: 61JE7yZCljLBqPD7yKcLX9/9cTMR7pfO+aen7uxvXtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:a6:c5:cf:b3:18:f1:16:bd:86:d6:5d:79:dc:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423 Validity Not Before: Dec 26 10:00:54 2025 GMT Not After : Dec 27 10:00:54 2025 GMT Subject: CN=ba6d6a87a12bbb5f344a97b33140ae709c711a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:0b:81:0a:27:18:2d:ff:58:81:2b:22:23: 67:d2:f1:1f:e8:72:77:6c:21:ac:61:2c:67:f3:12: 83:3f:7e:9d:04:62:7d:37:59:25:6e:3f:26:69:ef: 9b:1d:6c:c4:66:8a:5b:80:d7:74:4d:e3:69:b7:69: 23:b4:45:f5:c0:37:9a:6a:88:d4:78:0a:3d:3a:bd: b5:19:64:20:34:15:45:ff:3f:cf:92:3a:41:dc:14: 8d:a1:a8:ce:70:78:e1:f7:4a:5c:9a:7b:23:8d:f6: 50:a5:41:ef:fe:69:bf:40:b1:32:33:bb:16:fc:e2: 9c:a2:62:08:17:6c:58:02:a4:29:d4:2a:9d:ba:7f: 2a:b5:d8:d5:2a:7d:22:c1:b1:be:79:a5:74:15:fd: c1:5d:85:dd:10:17:f9:51:41:9c:87:9b:2f:f4:f3: 50:37:0c:5c:d4:32:4e:cb:4b:72:18:fb:a2:ff:a2: 24:a7:2e:d9:8d:48:0d:a7:3c:5a:6e:c6:a9:4b:7f: af:78:63:35:a4:b7:4b:e5:60:a1:d9:38:18:0b:cd: 4d:f4:0a:02:8b:e7:9d:96:dc:7f:c0:93:32:1a:59: 4f:f1:2a:8c:7c:59:25:86:68:2d:4a:98:ee:e0:f0: c4:29:57:2b:e4:4a:a5:2a:8b:e4:0d:16:83:ad:c3: bf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6D:6A:87:A1:2B:BB:5F:34:4A:97:B3:31:40:AE:70:9C:71:1A:5B X509v3 Authority Key Identifier: keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:41:1e:28:70:03:a7:8c:b2:9d:a3:e0:84:36:ad:58:dd:d4: b8:be:18:b6:c6:33:4e:ac:16:e8:37:39:6b:98:00:c3:1e:da: 2f:d2:32:0f:40:2d:43:a8:0f:ce:52:39:6b:d3:f5:f6:61:44: 8a:12:40:b1:f4:90:8a:a4:a3:de:00:21:2a:28:d6:77:44:8c: ca:6d:72:0f:f2:85:bd:9b:91:51:e4:c4:48:61:0a:4a:ff:a1: ae:98:45:85:48:aa:a6:15:08:f7:5c:38:73:b7:24:c5:2b:eb: 22:ba:27:e6:18:fb:2f:74:58:08:8f:a5:af:c6:ff:4b:23:9c: 89:c0:77:36:27:6c:71:81:2f:77:68:67:44:24:d3:c3:70:eb: 25:e6:d3:58:e7:dc:2d:25:6e:02:db:af:d2:c6:d6:d9:8f:f8: ed:07:b0:52:40:e2:b0:19:82:a8:bc:b3:d8:28:c4:e3:43:d2: 2b:d0:a6:d1:70:59:46:9e:47:ef:7d:67:34:81:91:ba:46:c3: 45:8d:8c:41:66:eb:a7:68:d3:1f:1d:01:5d:df:6f:aa:8f:c6: 5f:8e:37:73:35:c5:21:2a:6f:f9:b6:ef:f1:f9:52:27:82:fc: 6a:29:29:ae:f7:0d:df:f0:a8:a9:62:62:90:39:69:ae:39:86: 25:f2:74:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGqbFz7MY8Ra9htZdedybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhOWI3MGVmOTk3NjBhMDY1OWRlYWVmYTY2MDM0NWEwZTYx MTU0MjMwHhcNMjUxMjI2MTAwMDU0WhcNMjUxMjI3MTAwMDU0WjAzMTEwLwYDVQQD EyhiYTZkNmE4N2ExMmJiYjVmMzQ0YTk3YjMzMTQwYWU3MDljNzExYTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOELgQonGC3/WIErIiNn0vEf6HJ3 bCGsYSxn8xKDP36dBGJ9N1klbj8mae+bHWzEZopbgNd0TeNpt2kjtEX1wDeaaojU eAo9Or21GWQgNBVF/z/PkjpB3BSNoajOcHjh90pcmnsjjfZQpUHv/mm/QLEyM7sW /OKcomIIF2xYAqQp1Cqdun8qtdjVKn0iwbG+eaV0Ff3BXYXdEBf5UUGch5sv9PNQ Nwxc1DJOy0tyGPui/6Ikpy7ZjUgNpzxabsapS3+veGM1pLdL5WCh2TgYC81N9AoC i+edltx/wJMyGllP8SqMfFklhmgtSpju4PDEKVcr5EqlKovkDRaDrcO/kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLptaoehK7tfNEqXszFArnCccRpbMB8GA1UdIwQY MBaAFBqbcO+ZdgoGWd6u+mYDRaDmEVQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3B0dzc1bDJDZ1paM3E3NlpnTkZvT1lSVkNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jODlhNDYtNzkxMS00ZmRiLWE5M2It Mjk5MjJiMmQyOTFiLzEvR3B0dzc1bDJDZ1paM3E3NlpnTkZvT1lSVkNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jODlhNDYtNzkxMS00ZmRiLWE5M2ItMjk5MjJiMmQyOTFi LzEvR3B0dzc1bDJDZ1paM3E3NlpnTkZvT1lSVkNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkEeKHAD p4yynaPghDatWN3UuL4YtsYzTqwW6Dc5a5gAwx7aL9IyD0AtQ6gPzlI5a9P19mFE ihJAsfSQiqSj3gAhKijWd0SMym1yD/KFvZuRUeTESGEKSv+hrphFhUiqphUI91w4 c7ckxSvrIron5hj7L3RYCI+lr8b/SyOcicB3NidscYEvd2hnRCTTw3DrJebTWOfc LSVuAtuv0sbW2Y/47QewUkDisBmCqLyz2CjE40PSK9Cm0XBZRp5H731nNIGRukbD RY2MQWbrp2jTHx0BXd9vqo/GX443czXFISpv+bbv8flSJ4L8aikprvcN3/CoqWJi kDlprjmGJfJ0tA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:21 2025 by rpki-client