This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json) Hash identifier: 9xDtpw+SnkDyhkW6FLTCojvmlabk4cZlKTDGxuoydI0= Subject key identifier: B2:2C:E5:8C:BE:54:8B:AE:8F:85:02:6F:4E:4A:C7:A1:1A:C3:68:B2 Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1 Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1 Certificate serial: 019B0FA5AF9CC7714583DE14530527174237 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft Manifest number: 084F Signing time: Thu 11 Dec 2025 23:01:15 +0000 Manifest this update: Thu 11 Dec 2025 23:01:15 +0000 Manifest next update: Fri 12 Dec 2025 23:01:15 +0000 Files and hashes: 1: 8sYphYrrmRM_ErwAJ8gqIzEpDGo.roa (hash: rt/OwZDBbcaVJA7rLlh63ti0IkxjXIhkThQceeCTgkI=) 2: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: owyWAZD104BgfJwKOozwAp4TiBWg0kjujidzf7xFe64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:af:9c:c7:71:45:83:de:14:53:05:27:17:42:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1 Validity Not Before: Dec 11 23:01:15 2025 GMT Not After : Dec 12 23:01:15 2025 GMT Subject: CN=b22ce58cbe548bae8f85026f4e4ac7a11ac368b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:81:e1:de:68:ad:cf:1e:30:41:5f:fe:32: 39:34:3e:08:b5:40:af:d7:43:63:74:ff:92:db:7c: 94:10:f0:07:51:9e:f4:2a:16:32:64:79:80:c3:84: 7f:a9:24:5d:0c:74:b0:b0:40:d4:ee:d4:8c:6e:23: 3e:c4:48:a6:86:7b:0d:c4:85:4a:89:68:70:a2:ef: b8:5f:e7:02:f6:11:f8:86:3c:1a:5f:2b:0e:0e:e1: 3c:0d:cd:31:22:4f:43:26:0c:8f:74:f6:bc:f2:4e: de:68:c3:07:f6:99:40:3d:cf:6a:b0:b0:0a:2b:7e: b6:e6:fe:04:08:2d:ef:b9:f6:94:6c:d8:03:91:0a: 02:43:a3:e2:72:c7:a9:11:1d:78:cb:78:8b:69:21: e0:02:52:a8:ea:03:bd:2d:f0:02:4a:bd:54:ee:34: e1:ad:06:7d:b4:29:6f:ac:a7:a1:69:cc:ba:90:ff: bd:cc:14:91:8b:04:ec:45:7a:a1:75:56:1a:c7:df: 7e:51:91:7d:86:33:ea:1e:03:82:4c:ea:b8:2d:ee: a9:fd:44:0d:b5:cb:13:58:52:e2:c8:f4:c3:c4:a4: 89:02:ce:dc:89:32:fb:35:11:9e:ea:e8:7f:50:e3: e5:ee:30:d4:5d:2d:a0:3a:68:17:fa:5e:12:9a:57: cb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2C:E5:8C:BE:54:8B:AE:8F:85:02:6F:4E:4A:C7:A1:1A:C3:68:B2 X509v3 Authority Key Identifier: keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:2f:02:6d:dd:a6:c5:74:5e:d9:5a:7c:af:cb:64:73:51:8d: 49:7b:e9:2d:58:02:4c:e6:b7:84:f7:e6:c4:98:42:68:7d:9d: 20:60:f9:54:60:45:76:8d:7a:cc:83:d6:45:c0:f2:ab:0b:b8: e7:85:cd:50:48:17:43:e6:a1:4c:62:f6:f4:80:9f:68:12:a1: 85:b6:21:97:f8:c8:b5:5d:77:d1:7c:75:4d:9f:a5:82:7b:75: 65:b4:a9:48:89:b0:51:af:81:fd:bb:86:42:58:2f:56:cd:2f: 31:c3:04:ce:5a:7c:de:8a:08:07:ca:93:57:d4:c4:84:05:02: de:97:58:59:c3:1b:09:2b:63:f5:76:a5:f5:a3:44:eb:0f:dd: e3:25:7a:a0:b8:a2:db:a5:48:6a:7c:e3:3b:03:4a:e1:a0:b4: db:63:a6:ff:cb:d2:c9:9a:89:0b:17:b2:af:af:de:07:a8:1f: 97:e8:5b:7f:d2:e8:56:a1:65:35:da:3f:a1:72:47:4b:f2:ed: 28:43:a8:66:7d:1d:58:cd:23:db:54:6d:96:ac:be:c6:b7:52: 92:82:51:e0:22:0f:e5:44:78:13:44:a8:82:30:c1:ae:d2:ec: 48:fe:ef:a9:91:58:aa:68:87:d5:d8:16:08:cd:7b:d8:fc:24: dd:e0:af:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpa+cx3FFg94UUwUnF0I3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxN2NiMTRjZTQwMTRhYzMyNjlkNzBlZWVhODljODcwNTVi MTc2ZjEwHhcNMjUxMjExMjMwMTE1WhcNMjUxMjEyMjMwMTE1WjAzMTEwLwYDVQQD EyhiMjJjZTU4Y2JlNTQ4YmFlOGY4NTAyNmY0ZTRhYzdhMTFhYzM2OGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMqB4d5orc8eMEFf/jI5ND4ItUCv 10NjdP+S23yUEPAHUZ70KhYyZHmAw4R/qSRdDHSwsEDU7tSMbiM+xEimhnsNxIVK iWhwou+4X+cC9hH4hjwaXysODuE8Dc0xIk9DJgyPdPa88k7eaMMH9plAPc9qsLAK K3625v4ECC3vufaUbNgDkQoCQ6PicsepER14y3iLaSHgAlKo6gO9LfACSr1U7jTh rQZ9tClvrKehacy6kP+9zBSRiwTsRXqhdVYax99+UZF9hjPqHgOCTOq4Le6p/UQN tcsTWFLiyPTDxKSJAs7ciTL7NRGe6uh/UOPl7jDUXS2gOmgX+l4SmlfLHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIs5Yy+VIuuj4UCb05Kx6Eaw2iyMB8GA1UdIwQY MBaAFIF8sUzkAUrDJp1w7uqJyHBVsXbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMt MWEyYWJkYTFhOWU1LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMtMWEyYWJkYTFhOWU1 LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoi8Cbd2m xXRe2Vp8r8tkc1GNSXvpLVgCTOa3hPfmxJhCaH2dIGD5VGBFdo16zIPWRcDyqwu4 54XNUEgXQ+ahTGL29ICfaBKhhbYhl/jItV130Xx1TZ+lgnt1ZbSpSImwUa+B/buG QlgvVs0vMcMEzlp83ooIB8qTV9TEhAUC3pdYWcMbCStj9Xal9aNE6w/d4yV6oLii 26VIanzjOwNK4aC022Om/8vSyZqJCxeyr6/eB6gfl+hbf9LoVqFlNdo/oXJHS/Lt KEOoZn0dWM0j21Rtlqy+xrdSkoJR4CIP5UR4E0SogjDBrtLsSP7vqZFYqmiH1dgW CM172Pwk3eCv/A== -----END CERTIFICATE-----Generated at Fri Dec 12 08:00:41 2025 by rpki-client