This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft File: GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft (raw, json) Hash identifier: vWfUa8JdictwaEAV4wEck/AfGtoZphtZ1KfigS/9lFo= Subject key identifier: F5:C8:2C:FD:8E:A9:9C:37:6D:E8:27:6A:F8:E0:54:7D:1A:71:F5:70 Authority key identifier: 19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E Certificate issuer: /CN=197fc930e4aa59b0303459f755698e8f998f471e Certificate serial: 019B1EAAA122B06D4D899157FEF06894912C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft Manifest number: 170B Signing time: Sun 14 Dec 2025 21:00:57 +0000 Manifest this update: Sun 14 Dec 2025 21:00:57 +0000 Manifest next update: Mon 15 Dec 2025 21:00:57 +0000 Files and hashes: 1: GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl (hash: xYfHgrhRZNmORjTH5qLrr7LNLB+4sD4RL5WBU+Ougv0=) 2: dPTbW5NvAJKveanwf9xsMOGfn5Y.roa (hash: DpFROJeoc1UpOy7/3HzFb7ViY51RvdrZHobQAff/jls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:a1:22:b0:6d:4d:89:91:57:fe:f0:68:94:91:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=197fc930e4aa59b0303459f755698e8f998f471e Validity Not Before: Dec 14 21:00:57 2025 GMT Not After : Dec 15 21:00:57 2025 GMT Subject: CN=f5c82cfd8ea99c376de8276af8e0547d1a71f570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8d:a2:3c:a3:27:84:de:8d:ab:2d:d9:04:3f: 0d:a3:db:99:c6:7b:37:2f:0e:63:de:73:0a:e3:6c: ce:d6:3c:24:af:28:80:0f:14:36:48:a4:20:8e:0f: 20:02:96:e6:ef:67:c4:b9:f1:24:48:28:e1:39:fa: 90:fe:b6:27:33:2e:f0:bc:ab:75:ec:03:d0:bf:e0: ae:b0:07:3c:bf:49:e9:aa:93:dd:51:38:09:0c:ad: 5a:6c:23:4b:a5:53:f1:3b:58:ab:31:5f:e3:aa:0b: 02:30:78:bf:90:e4:46:32:5b:86:c1:c3:56:ef:aa: e3:2e:79:45:59:ee:29:48:ac:78:c5:ed:ad:47:9d: c3:28:0a:b6:5a:b0:4d:df:fd:28:00:02:26:6e:37: 18:1e:07:25:c8:76:c0:7f:23:25:69:0a:47:4c:46: dd:a6:05:26:c3:99:c0:1a:30:c6:c7:2d:f9:4b:42: c7:0c:2d:07:11:69:74:33:aa:00:d6:ed:30:61:29: dc:5b:03:08:c0:d0:c0:25:68:64:5e:67:91:e4:bc: 94:d8:6b:57:ad:c1:3d:8c:c3:44:12:f3:b0:0c:67: 98:f4:55:85:b1:b9:dc:71:98:b7:0c:d2:68:bc:01: 1f:18:bd:4d:71:7f:af:a9:1c:24:f1:59:b4:3c:9d: b6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C8:2C:FD:8E:A9:9C:37:6D:E8:27:6A:F8:E0:54:7D:1A:71:F5:70 X509v3 Authority Key Identifier: keyid:19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:65:70:40:df:fd:be:cb:4b:30:13:ce:81:74:5c:ae:9c:54: a0:c7:f5:82:10:41:8c:12:69:ad:b1:4f:80:29:71:7a:0f:5b: c0:8e:09:f9:db:d8:7d:57:4e:1c:20:b9:41:ab:97:78:0a:cd: 53:4c:7c:a2:9f:cc:90:7c:78:92:c1:d0:36:3d:4b:19:7b:3a: fd:f4:cf:2d:09:cf:69:6a:b2:3c:86:3a:d3:51:0a:9c:70:95: f1:1a:fa:e1:1b:f7:4d:06:3b:58:76:5d:86:dc:b3:89:dd:42: 65:46:fe:8a:6f:04:85:32:66:28:05:cc:cf:7f:d2:b8:da:b1: d4:b3:09:57:fc:a9:f2:d7:67:eb:3c:e7:d6:a9:3e:f0:34:e4: cf:4f:14:26:74:f1:93:20:ec:b0:86:3a:1a:4e:77:d4:1d:1c: 81:13:92:f4:ab:3d:ce:e8:cb:a6:90:02:3d:72:2b:a4:8d:6c: 47:65:5b:fe:d2:df:58:0e:a5:a2:e7:7d:67:c5:fa:5e:13:21: a1:9a:3b:d7:f9:db:49:dd:a7:73:71:ab:0a:44:6a:ac:d2:d9: b9:3f:76:73:1b:f3:55:cb:50:53:97:06:bc:1c:53:fc:a1:21: 58:c9:eb:f5:4e:8a:47:4c:d8:f0:51:3f:08:4a:9b:03:0e:b9: 6c:9b:25:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqqEisG1NiZFX/vBolJEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5N2ZjOTMwZTRhYTU5YjAzMDM0NTlmNzU1Njk4ZThmOTk4 ZjQ3MWUwHhcNMjUxMjE0MjEwMDU3WhcNMjUxMjE1MjEwMDU3WjAzMTEwLwYDVQQD EyhmNWM4MmNmZDhlYTk5YzM3NmRlODI3NmFmOGUwNTQ3ZDFhNzFmNTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo2iPKMnhN6Nqy3ZBD8No9uZxns3 Lw5j3nMK42zO1jwkryiADxQ2SKQgjg8gApbm72fEufEkSCjhOfqQ/rYnMy7wvKt1 7APQv+CusAc8v0npqpPdUTgJDK1abCNLpVPxO1irMV/jqgsCMHi/kORGMluGwcNW 76rjLnlFWe4pSKx4xe2tR53DKAq2WrBN3/0oAAImbjcYHgclyHbAfyMlaQpHTEbd pgUmw5nAGjDGxy35S0LHDC0HEWl0M6oA1u0wYSncWwMIwNDAJWhkXmeR5LyU2GtX rcE9jMNEEvOwDGeY9FWFsbnccZi3DNJovAEfGL1NcX+vqRwk8Vm0PJ22vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXILP2OqZw3begnavjgVH0acfVwMB8GA1UdIwQY MBaAFBl/yTDkqlmwMDRZ91Vpjo+Zj0ceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1hfSk1PU3FXYkF3TkZuM1ZXbU9qNW1QUng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yZWEwZTktMjdmNy00ZDcxLWE5MDAt MjdiZTA5MTE4YzYxLzEvR1hfSk1PU3FXYkF3TkZuM1ZXbU9qNW1QUng0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yZWEwZTktMjdmNy00ZDcxLWE5MDAtMjdiZTA5MTE4YzYx LzEvR1hfSk1PU3FXYkF3TkZuM1ZXbU9qNW1QUng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2VwQN/9 vstLMBPOgXRcrpxUoMf1ghBBjBJprbFPgClxeg9bwI4J+dvYfVdOHCC5QauXeArN U0x8op/MkHx4ksHQNj1LGXs6/fTPLQnPaWqyPIY601EKnHCV8Rr64Rv3TQY7WHZd htyzid1CZUb+im8EhTJmKAXMz3/SuNqx1LMJV/yp8tdn6zzn1qk+8DTkz08UJnTx kyDssIY6Gk531B0cgROS9Ks9zujLppACPXIrpI1sR2Vb/tLfWA6loud9Z8X6XhMh oZo71/nbSd2nc3GrCkRqrNLZuT92cxvzVctQU5cGvBxT/KEhWMnr9U6KR0zY8FE/ CEqbAw65bJslfw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:57:56 2025 by rpki-client