This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json) Hash identifier: 1j8hMUNkiXOsJWHpSQiTUeQET9mWKVSnycoYF7YE+8Y= Subject key identifier: 52:E1:BC:04:37:DB:61:DE:42:F2:BA:2C:17:38:46:FB:29:97:6E:0D Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1 Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1 Certificate serial: 019B1D29F3342B674978233D32D528A2C4AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft Manifest number: 0CE2 Signing time: Sun 14 Dec 2025 14:00:47 +0000 Manifest this update: Sun 14 Dec 2025 14:00:47 +0000 Manifest next update: Mon 15 Dec 2025 14:00:47 +0000 Files and hashes: 1: 6BQqkGrM3gw54Pj0HSmQY8wMCck.roa (hash: Ar7D9TbLcSVMAE2S4iadlofqY6yoHjuB0ZjyXAJSQDg=) 2: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: 0BGmDz2ZVFWCDY3v3LCAvB+Q80vwk9WQgLYUXTsWlCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:29:f3:34:2b:67:49:78:23:3d:32:d5:28:a2:c4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1 Validity Not Before: Dec 14 14:00:47 2025 GMT Not After : Dec 15 14:00:47 2025 GMT Subject: CN=52e1bc0437db61de42f2ba2c173846fb29976e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:d5:5a:94:db:2c:c6:a2:29:43:e8:42:14: 4b:b6:cb:3b:b6:35:5d:bb:36:f4:1d:3c:79:7d:e9: 44:6e:51:94:f0:a9:3e:c4:41:91:f0:9e:ea:0c:b3: 62:b6:f6:65:3a:85:1a:e3:f8:90:f9:01:7e:c0:e7: 2a:dc:a5:84:93:cf:75:c6:18:06:38:cc:a3:59:c8: b4:a4:2a:1d:3f:7a:2c:72:37:ad:3f:0a:c1:c5:9b: 27:9a:bb:f3:b6:fc:62:43:ed:24:d9:06:69:c2:e0: 12:b9:dc:2a:57:d8:4f:9b:4b:a6:08:01:c6:86:d1: 20:bd:d8:05:6f:6e:78:1a:0a:84:d3:93:0d:e5:ce: 6d:0a:95:23:f4:c5:32:9f:1d:04:17:d6:13:05:55: 0e:99:e9:2e:00:16:15:0d:a8:33:41:72:b1:df:a1: 13:08:e9:79:d1:85:17:d0:25:b9:de:e8:62:44:2c: 68:b0:49:81:48:1d:9b:07:b1:31:b6:93:bb:c6:a7: 99:a2:ad:20:7b:f4:03:b6:ff:8d:32:c7:e4:04:d3: 41:dc:7c:05:86:1e:d0:69:14:80:ac:23:e9:39:85: 8a:a1:a8:fa:22:4a:87:c2:61:23:16:c3:ee:53:dc: db:93:77:37:af:a0:55:12:d0:73:ed:e1:4a:2e:85: 11:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E1:BC:04:37:DB:61:DE:42:F2:BA:2C:17:38:46:FB:29:97:6E:0D X509v3 Authority Key Identifier: keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f3:ae:df:6a:0e:76:a2:3c:b7:5a:bb:b9:f1:a7:05:ce:fe: b5:cf:c3:29:36:ec:b5:37:aa:89:2a:30:dc:9a:b9:e5:ec:35: c8:8c:e9:64:5b:99:5f:04:fc:cd:d6:52:a1:24:d3:f5:73:47: 3b:44:b4:34:b2:44:12:de:4e:58:2c:12:08:01:f6:21:58:c1: 0f:9f:2a:f6:ee:31:f8:60:98:9e:f0:9d:22:35:1b:b3:4c:97: c8:16:df:28:fb:87:d6:b5:04:bc:32:5f:8e:05:1f:15:e7:62: 8b:41:1f:94:05:c9:3d:d0:16:2e:b1:d1:4d:8b:a6:96:68:f2: ad:39:59:e8:f7:56:1e:21:10:ef:2f:d4:ee:7e:1c:c2:b1:ed: d6:38:b5:6c:56:a9:dc:d4:35:8c:0c:a5:3d:d2:6e:36:83:9c: e5:95:48:69:5e:d2:07:6c:1e:f0:d1:86:db:63:4f:d4:17:88: 37:eb:ec:b2:41:1d:e8:32:9f:c5:85:51:7a:2e:34:6a:4d:2b: c1:b7:b1:d0:54:22:a5:f8:b1:61:cf:84:69:67:66:6f:5e:28: 35:a5:66:b5:07:db:7a:1d:d3:9e:d2:d9:c5:02:ed:3d:c7:08: 20:e7:ec:7f:01:e6:af:af:cd:1b:6f:8a:30:93:5a:5f:71:bb: 2e:68:59:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdKfM0K2dJeCM9MtUoosSuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMzEyNDBiZGFhN2MxMmU4MTBhMTczOGJjZGY3NWE3NDY1 MzBiYzEwHhcNMjUxMjE0MTQwMDQ3WhcNMjUxMjE1MTQwMDQ3WjAzMTEwLwYDVQQD Eyg1MmUxYmMwNDM3ZGI2MWRlNDJmMmJhMmMxNzM4NDZmYjI5OTc2ZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApObVWpTbLMaiKUPoQhRLtss7tjVd uzb0HTx5felEblGU8Kk+xEGR8J7qDLNitvZlOoUa4/iQ+QF+wOcq3KWEk891xhgG OMyjWci0pCodP3oscjetPwrBxZsnmrvztvxiQ+0k2QZpwuASudwqV9hPm0umCAHG htEgvdgFb254GgqE05MN5c5tCpUj9MUynx0EF9YTBVUOmekuABYVDagzQXKx36ET COl50YUX0CW53uhiRCxosEmBSB2bB7ExtpO7xqeZoq0ge/QDtv+NMsfkBNNB3HwF hh7QaRSArCPpOYWKoaj6IkqHwmEjFsPuU9zbk3c3r6BVEtBz7eFKLoURtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLhvAQ322HeQvK6LBc4Rvspl24NMB8GA1UdIwQY MBaAFIExJAvap8EugQoXOLzfdadGUwvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUt ZTllMDIzNjA5YzdmLzEvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUtZTllMDIzNjA5Yzdm LzEvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvOu32oO dqI8t1q7ufGnBc7+tc/DKTbstTeqiSow3Jq55ew1yIzpZFuZXwT8zdZSoSTT9XNH O0S0NLJEEt5OWCwSCAH2IVjBD58q9u4x+GCYnvCdIjUbs0yXyBbfKPuH1rUEvDJf jgUfFedii0EflAXJPdAWLrHRTYumlmjyrTlZ6PdWHiEQ7y/U7n4cwrHt1ji1bFap 3NQ1jAylPdJuNoOc5ZVIaV7SB2we8NGG22NP1BeIN+vsskEd6DKfxYVRei40ak0r wbex0FQipfixYc+EaWdmb14oNaVmtQfbeh3TntLZxQLtPccIIOfsfwHmr6/NG2+K MJNaX3G7LmhZ5Q== -----END CERTIFICATE-----Generated at Sun Dec 14 19:03:36 2025 by rpki-client