This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft File: gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft (raw, json) Hash identifier: nqKD9ng/4H/ozJa5jnIU/H2Fud9sl/+pBCIxm5zyeLQ= Subject key identifier: 88:22:42:AB:B5:D4:02:EF:F3:21:8B:B7:D7:E6:ED:57:F5:13:67:5C Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56 Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356 Certificate serial: 019B34C610139CA307ED7F2D77A71DD087E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft Manifest number: 0F40 Signing time: Fri 19 Dec 2025 04:02:33 +0000 Manifest this update: Fri 19 Dec 2025 04:02:33 +0000 Manifest next update: Sat 20 Dec 2025 04:02:33 +0000 Files and hashes: 1: L47fpbavJjM8YwHHhvMkJOYd5vE.roa (hash: IzwhrGUTddMft7RJzZ/2mXaFd/PY/Xp0a/SU/LUo1YY=) 2: dCYxk7-D8dNtxIgEsnMqwJ6THLg.roa (hash: PjGfWgf8wj53bPtlEQkRSwYcsy5G/eLRYAuG9DVnO5o=) 3: dP1XMz72bEIizOJx_8e3gubbo08.roa (hash: 34zsks6roiR3rEQ6SRISFcNl3J9bQeeIWhcKnK78jO8=) 4: gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl (hash: M8uch05a8Lg01LKuatMyUVg9OLuUF2Ula1mLDkc5i2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:10:13:9c:a3:07:ed:7f:2d:77:a7:1d:d0:87:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356 Validity Not Before: Dec 19 04:02:33 2025 GMT Not After : Dec 20 04:02:33 2025 GMT Subject: CN=882242abb5d402eff3218bb7d7e6ed57f513675c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:15:38:dc:f9:95:07:75:81:46:33:11:a8:a9: 2b:2f:e4:a6:04:fe:79:57:4e:08:1a:ec:27:82:81: 96:e8:ff:3f:b2:c1:51:35:bd:e3:7e:9c:4d:1a:c0: 2a:71:2e:bb:d7:97:90:78:eb:b9:71:68:82:22:41: c3:f5:ba:da:ac:ba:45:8d:a3:97:cf:58:47:e8:83: d4:51:f0:16:cc:d9:1a:0f:fa:34:ed:58:49:54:d0: dc:f6:1d:5e:64:cb:79:62:de:be:78:4c:03:df:da: c9:ad:6c:bc:6b:66:6d:9b:f0:f3:bc:0c:c9:1b:39: da:cb:ef:f4:cb:bf:86:08:27:de:f0:80:18:4d:4d: 97:b5:a6:03:8c:1c:d8:4e:39:59:46:ef:77:bc:3f: a0:f2:e2:44:83:4f:35:45:f9:f2:3e:8a:83:52:92: e3:cc:dd:a8:67:1f:08:a8:e2:46:b7:d4:e5:a9:b9: 79:1c:fa:87:38:d9:43:7a:ca:f2:cc:63:ea:a1:e8: c2:4e:e5:ce:63:c5:34:66:cb:24:7b:30:48:d9:c4: c6:17:af:69:2d:c5:28:d0:7a:3d:06:65:42:e0:40: 51:01:e9:cd:97:e0:2c:7f:99:ae:c9:d9:52:3c:67: ae:d8:ff:04:23:76:a4:1c:21:fc:cd:02:3a:5e:a8: 21:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:22:42:AB:B5:D4:02:EF:F3:21:8B:B7:D7:E6:ED:57:F5:13:67:5C X509v3 Authority Key Identifier: keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d5:2f:38:fc:a0:5d:38:82:9e:79:ca:6e:6e:31:43:02:e6: 43:c5:60:ff:69:9c:5a:62:a5:89:b9:ca:d7:98:27:2d:ad:fb: 99:22:3a:fa:96:87:1c:51:42:8a:12:ca:a9:98:e9:50:aa:9d: 6d:61:19:8d:51:8b:c1:00:92:17:82:f6:b3:03:3e:e8:2e:7a: 79:98:21:f6:83:45:9e:f3:58:c7:7c:63:75:8f:bc:e9:56:64: ef:22:f0:11:40:22:92:dc:af:df:0e:f2:0b:66:5d:5d:f2:e4: d5:da:52:79:42:c3:ed:16:6c:09:33:af:58:7e:78:dc:c2:39: 7d:84:8b:9b:a2:d7:ab:e4:e5:11:fe:47:8b:c3:7d:d1:79:52: fe:40:74:2f:3c:25:ff:15:54:b9:e8:15:16:cf:ca:03:43:1a: 51:87:96:32:1e:d3:57:17:97:6c:8b:e7:ff:9d:4e:af:f1:e2: 2a:b1:df:29:24:a7:39:63:9e:cf:84:34:e1:fb:aa:ce:da:97: 7d:3b:87:9f:1e:4f:a7:dc:12:62:79:7d:c4:2a:1a:46:21:6d: 7d:39:f1:17:07:1f:de:bc:70:a7:c2:1b:f8:a1:39:55:71:8f: 6d:cc:cb:5a:05:71:69:ce:a3:86:5e:f3:2d:df:37:94:c3:80: 6e:ca:1e:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xhATnKMH7X8td6cd0IfjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZDdmZTczMTJlZmI0MmJkOGQxZWNkODJhYzc2MTkxZWEy NmMzNTYwHhcNMjUxMjE5MDQwMjMzWhcNMjUxMjIwMDQwMjMzWjAzMTEwLwYDVQQD Eyg4ODIyNDJhYmI1ZDQwMmVmZjMyMThiYjdkN2U2ZWQ1N2Y1MTM2NzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhU43PmVB3WBRjMRqKkrL+SmBP55 V04IGuwngoGW6P8/ssFRNb3jfpxNGsAqcS6715eQeOu5cWiCIkHD9brarLpFjaOX z1hH6IPUUfAWzNkaD/o07VhJVNDc9h1eZMt5Yt6+eEwD39rJrWy8a2Ztm/DzvAzJ Gznay+/0y7+GCCfe8IAYTU2XtaYDjBzYTjlZRu93vD+g8uJEg081RfnyPoqDUpLj zN2oZx8IqOJGt9Tlqbl5HPqHONlDesryzGPqoejCTuXOY8U0ZsskezBI2cTGF69p LcUo0Ho9BmVC4EBRAenNl+Asf5muydlSPGeu2P8EI3akHCH8zQI6XqghHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgiQqu11ALv8yGLt9fm7Vf1E2dcMB8GA1UdIwQY MBaAFILX/nMS77Qr2NHs2CrHYZHqJsNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYt MzdiMjFiYWIzYjAwLzEvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYtMzdiMjFiYWIzYjAw LzEvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNUvOPyg XTiCnnnKbm4xQwLmQ8Vg/2mcWmKlibnK15gnLa37mSI6+paHHFFCihLKqZjpUKqd bWEZjVGLwQCSF4L2swM+6C56eZgh9oNFnvNYx3xjdY+86VZk7yLwEUAiktyv3w7y C2ZdXfLk1dpSeULD7RZsCTOvWH543MI5fYSLm6LXq+TlEf5Hi8N90XlS/kB0Lzwl /xVUuegVFs/KA0MaUYeWMh7TVxeXbIvn/51Or/HiKrHfKSSnOWOez4Q04fuqztqX fTuHnx5Pp9wSYnl9xCoaRiFtfTnxFwcf3rxwp8Ib+KE5VXGPbczLWgVxac6jhl7z Ld83lMOAbsoeiA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:52:20 2025 by rpki-client