This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json) Hash identifier: xENWvN9APRgBa7gAq4bi67j1+K4nmmbUOzawL0NCvNM= Subject key identifier: 39:78:86:04:22:CE:BB:2B:BA:3D:19:28:6B:2B:77:8E:D9:AA:D2:0C Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1 Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1 Certificate serial: 019B326838A9434D93A8DCB05443B86842C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft Manifest number: 0CED Signing time: Thu 18 Dec 2025 17:00:49 +0000 Manifest this update: Thu 18 Dec 2025 17:00:49 +0000 Manifest next update: Fri 19 Dec 2025 17:00:49 +0000 Files and hashes: 1: 6BQqkGrM3gw54Pj0HSmQY8wMCck.roa (hash: Ar7D9TbLcSVMAE2S4iadlofqY6yoHjuB0ZjyXAJSQDg=) 2: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: yXRYdDtAyEuZs17sMwSl8+wy3+pxGgPEziNZur905kY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:38:a9:43:4d:93:a8:dc:b0:54:43:b8:68:42:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1 Validity Not Before: Dec 18 17:00:49 2025 GMT Not After : Dec 19 17:00:49 2025 GMT Subject: CN=3978860422cebb2bba3d19286b2b778ed9aad20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c3:4f:04:b3:f2:2d:ba:ae:25:ef:71:14:dc: f7:7c:1a:4a:13:7c:ed:12:43:28:e7:95:15:f4:36: 14:4d:64:d8:2b:a8:8b:4d:3c:c7:15:ca:98:b9:54: 8e:72:4b:16:8c:4e:dc:80:5f:cc:45:23:7c:72:d9: 5b:67:85:11:46:6d:b5:de:69:2d:57:60:1a:81:6b: 69:5c:b4:f8:2e:f8:9e:7a:c4:79:fc:6d:00:39:06: 44:f3:7f:e0:7b:dd:3f:7f:51:ab:e9:94:d6:bb:34: 8a:8e:e8:a4:f6:0d:df:8a:d1:45:df:32:cd:1f:9c: a2:f2:7b:48:e6:c2:3e:ca:f4:6b:f9:c5:48:bd:e8: a9:14:38:e3:cf:02:3a:72:a0:84:9f:45:bd:5c:7d: c6:10:6a:a2:f5:aa:e9:c2:28:e6:08:98:91:3e:ed: e6:71:bf:35:76:40:76:e2:e8:44:ab:78:aa:0a:e5: 28:d0:48:15:70:c5:58:e2:3d:9c:86:20:94:c7:de: 40:72:7f:d3:28:95:3a:d3:dd:30:0e:f1:44:5d:52: 18:91:9c:65:87:8a:c3:e4:47:e4:17:5b:56:d6:9d: 8a:5c:4f:4c:32:ce:a6:fb:b1:a4:49:30:97:5c:19: d2:18:93:71:bf:7e:38:ac:d3:4a:fe:02:c9:c3:1a: e9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:78:86:04:22:CE:BB:2B:BA:3D:19:28:6B:2B:77:8E:D9:AA:D2:0C X509v3 Authority Key Identifier: keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3e:eb:64:aa:33:0d:d7:c9:eb:06:c7:af:5a:aa:9e:16:7f: e0:4a:57:ce:86:75:e0:db:84:b9:da:92:9c:08:4f:d3:18:7f: d7:af:43:2a:8d:9e:b1:80:d2:d7:b5:69:d2:42:93:ab:03:d1: ca:a3:e2:0b:21:ba:59:1f:62:cb:ca:3a:a2:66:e7:86:80:78: e4:50:c1:e7:1c:be:b2:99:d9:c1:6a:5d:f3:22:4e:74:fe:67: 9c:94:fa:be:c9:d0:99:b9:62:92:61:a0:21:f9:b2:ec:69:6b: 14:8d:15:f2:20:da:62:f9:18:bd:1a:08:5b:39:70:e9:52:8a: 85:ff:c7:c4:3e:9b:2f:8b:5f:c8:d2:ad:77:25:b5:b6:55:29: e4:61:a5:71:26:81:20:d8:a5:ba:26:51:38:89:c6:34:c8:86: ec:6b:a3:36:7f:ca:10:55:c8:94:dd:7e:55:2c:7c:bf:aa:92: 35:59:89:1f:15:70:a1:67:74:8e:5d:34:b5:ee:2e:b7:9e:6d: 9c:ae:ef:c8:12:e0:11:cc:55:08:82:f7:a9:1d:ed:85:e5:80: 6e:0c:7d:54:90:2f:fd:03:57:4a:a7:bc:bd:ff:48:49:43:ef: b9:1e:16:4c:47:10:ff:e0:0c:2c:84:79:db:70:94:24:f4:05: 16:35:fa:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaDipQ02TqNywVEO4aELGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMzEyNDBiZGFhN2MxMmU4MTBhMTczOGJjZGY3NWE3NDY1 MzBiYzEwHhcNMjUxMjE4MTcwMDQ5WhcNMjUxMjE5MTcwMDQ5WjAzMTEwLwYDVQQD EygzOTc4ODYwNDIyY2ViYjJiYmEzZDE5Mjg2YjJiNzc4ZWQ5YWFkMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cNPBLPyLbquJe9xFNz3fBpKE3zt EkMo55UV9DYUTWTYK6iLTTzHFcqYuVSOcksWjE7cgF/MRSN8ctlbZ4URRm213mkt V2AagWtpXLT4LvieesR5/G0AOQZE83/ge90/f1Gr6ZTWuzSKjuik9g3fitFF3zLN H5yi8ntI5sI+yvRr+cVIveipFDjjzwI6cqCEn0W9XH3GEGqi9arpwijmCJiRPu3m cb81dkB24uhEq3iqCuUo0EgVcMVY4j2chiCUx95Acn/TKJU6090wDvFEXVIYkZxl h4rD5EfkF1tW1p2KXE9MMs6m+7GkSTCXXBnSGJNxv344rNNK/gLJwxrpoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDl4hgQizrsruj0ZKGsrd47ZqtIMMB8GA1UdIwQY MBaAFIExJAvap8EugQoXOLzfdadGUwvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUt ZTllMDIzNjA5YzdmLzEvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUtZTllMDIzNjA5Yzdm LzEvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjT7rZKoz DdfJ6wbHr1qqnhZ/4EpXzoZ14NuEudqSnAhP0xh/169DKo2esYDS17Vp0kKTqwPR yqPiCyG6WR9iy8o6ombnhoB45FDB5xy+spnZwWpd8yJOdP5nnJT6vsnQmblikmGg Ifmy7GlrFI0V8iDaYvkYvRoIWzlw6VKKhf/HxD6bL4tfyNKtdyW1tlUp5GGlcSaB INiluiZROInGNMiG7GujNn/KEFXIlN1+VSx8v6qSNVmJHxVwoWd0jl00te4ut55t nK7vyBLgEcxVCIL3qR3theWAbgx9VJAv/QNXSqe8vf9ISUPvuR4WTEcQ/+AMLIR5 23CUJPQFFjX6pA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:39:45 2025 by rpki-client