This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.mft File: GT0ubIC0mJEN4dla7G5x0ldGJWc.mft (raw, json) Hash identifier: 8C/s11QvFEHDc2dMyPOGLXbm1IPekkvGcU+WzkRUu4c= Subject key identifier: B1:78:8B:D4:94:E9:89:5A:C5:34:B1:AE:05:B2:41:63:23:00:A9:44 Authority key identifier: 19:3D:2E:6C:80:B4:98:91:0D:E1:D9:5A:EC:6E:71:D2:57:46:25:67 Certificate issuer: /CN=193d2e6c80b498910de1d95aec6e71d257462567 Certificate serial: 019B593EE77FAC9CBC3127CA8BFC500E93CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GT0ubIC0mJEN4dla7G5x0ldGJWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.mft Manifest number: 29 Signing time: Fri 26 Dec 2025 06:00:53 +0000 Manifest this update: Fri 26 Dec 2025 06:00:53 +0000 Manifest next update: Sat 27 Dec 2025 06:00:53 +0000 Files and hashes: 1: GT0ubIC0mJEN4dla7G5x0ldGJWc.crl (hash: WO0aoPRfGS6bUZX06bYsEKGvjsUUf0hGJoHLrFeYVnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.mft rsync://rpki.ripe.net/repository/DEFAULT/GT0ubIC0mJEN4dla7G5x0ldGJWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:e7:7f:ac:9c:bc:31:27:ca:8b:fc:50:0e:93:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=193d2e6c80b498910de1d95aec6e71d257462567 Validity Not Before: Dec 26 06:00:53 2025 GMT Not After : Dec 27 06:00:53 2025 GMT Subject: CN=b1788bd494e9895ac534b1ae05b241632300a944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fd:f5:b6:fd:ce:c6:41:e1:be:49:ba:bb:11: b3:0b:72:27:80:80:f2:c4:7a:9b:1a:d2:4d:92:2d: bd:bc:14:c1:b4:59:e1:94:57:00:8a:d1:4c:11:f2: 7b:b2:ba:d7:9d:52:4b:00:bb:92:83:94:a5:ea:8a: 53:c8:f6:bc:8b:39:59:89:73:55:c4:55:ca:37:2e: 56:98:42:99:e1:4d:f5:33:ae:2b:5a:16:ce:5d:ca: 12:df:56:af:3c:b5:f5:45:f1:92:4f:ed:84:d6:0b: 1f:c9:c2:10:ef:27:fb:ed:15:96:28:8b:64:6a:7b: 07:bf:f8:9a:eb:b4:1e:79:f6:cc:f8:48:a3:dc:42: 45:f4:73:7b:1c:4a:85:a6:96:e5:64:ad:ab:96:d7: 9f:b3:de:2e:66:9f:af:e2:aa:a8:e5:10:09:38:77: 6c:26:ee:b8:b4:93:3d:bb:68:76:76:da:0f:26:5d: 46:ed:99:94:ba:3c:9f:61:98:0a:25:9a:52:08:88: d8:5a:86:ee:c8:af:23:47:58:e9:41:c0:d0:48:74: 2c:7f:d2:cb:e2:b4:ad:6c:7c:d9:62:e5:27:47:fa: ee:3d:28:32:a0:89:07:df:e6:40:df:70:4a:19:58: 02:73:cd:08:4d:5b:c0:40:9b:c5:72:8a:a9:7e:14: d5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:78:8B:D4:94:E9:89:5A:C5:34:B1:AE:05:B2:41:63:23:00:A9:44 X509v3 Authority Key Identifier: keyid:19:3D:2E:6C:80:B4:98:91:0D:E1:D9:5A:EC:6E:71:D2:57:46:25:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GT0ubIC0mJEN4dla7G5x0ldGJWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:fb:38:a7:c7:fd:60:fd:b8:a2:64:6a:1a:d0:23:65:5b:a9: a2:33:bd:ec:1a:b0:7e:ce:ad:e4:5b:1d:92:fd:a9:79:2b:23: 20:bb:37:66:6a:b8:48:88:dd:f5:f6:fa:b2:c0:a4:13:1f:fc: ec:41:d3:1d:d4:60:f9:ad:62:c5:7f:c9:ae:56:be:48:5c:f5: 15:95:b5:94:7c:d1:01:9d:63:47:2e:4e:ee:63:28:01:51:8f: 57:c5:fa:7e:2a:09:a5:8c:d0:b7:8e:b6:b5:98:df:67:08:b5: 7a:33:9e:1c:5f:f0:fa:97:ec:2a:36:47:e6:3d:e3:c0:dc:f4: 18:84:26:a2:79:a7:95:ad:61:bc:92:27:01:17:06:83:a9:3a: 6d:30:7a:2f:4a:00:f4:17:bc:b1:50:d0:ca:51:41:89:ff:54: 7d:06:59:5e:51:c0:3b:9d:62:e9:a9:16:93:92:31:fe:98:94: 53:e4:15:52:87:8f:6f:e2:a8:67:0d:78:b9:ef:0a:99:bc:6c: ad:69:01:61:83:41:8a:82:1a:a3:ca:6a:b0:58:3f:40:d1:d8: dc:86:4f:20:8a:de:9f:57:6f:3b:30:dd:3b:ba:41:4c:c5:11: c1:d9:a9:14:9a:08:7f:2d:d9:47:5e:7d:0c:28:86:68:35:9f: ca:86:20:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPud/rJy8MSfKi/xQDpPLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5M2QyZTZjODBiNDk4OTEwZGUxZDk1YWVjNmU3MWQyNTc0 NjI1NjcwHhcNMjUxMjI2MDYwMDUzWhcNMjUxMjI3MDYwMDUzWjAzMTEwLwYDVQQD EyhiMTc4OGJkNDk0ZTk4OTVhYzUzNGIxYWUwNWIyNDE2MzIzMDBhOTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v31tv3OxkHhvkm6uxGzC3IngIDy xHqbGtJNki29vBTBtFnhlFcAitFMEfJ7srrXnVJLALuSg5Sl6opTyPa8izlZiXNV xFXKNy5WmEKZ4U31M64rWhbOXcoS31avPLX1RfGST+2E1gsfycIQ7yf77RWWKItk ansHv/ia67QeefbM+Eij3EJF9HN7HEqFppblZK2rltefs94uZp+v4qqo5RAJOHds Ju64tJM9u2h2dtoPJl1G7ZmUujyfYZgKJZpSCIjYWobuyK8jR1jpQcDQSHQsf9LL 4rStbHzZYuUnR/ruPSgyoIkH3+ZA33BKGVgCc80ITVvAQJvFcoqpfhTVjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLF4i9SU6YlaxTSxrgWyQWMjAKlEMB8GA1UdIwQY MBaAFBk9LmyAtJiRDeHZWuxucdJXRiVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1QwdWJJQzBtSkVONGRsYTdHNXgwbGRHSldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS84NmZmZjQtZTNhZS00NDdlLWI0NjUt MzFkNDA3ZDJiOTUyLzEvR1QwdWJJQzBtSkVONGRsYTdHNXgwbGRHSldjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS84NmZmZjQtZTNhZS00NDdlLWI0NjUtMzFkNDA3ZDJiOTUy LzEvR1QwdWJJQzBtSkVONGRsYTdHNXgwbGRHSldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPs4p8f9 YP24omRqGtAjZVupojO97Bqwfs6t5Fsdkv2peSsjILs3Zmq4SIjd9fb6ssCkEx/8 7EHTHdRg+a1ixX/Jrla+SFz1FZW1lHzRAZ1jRy5O7mMoAVGPV8X6fioJpYzQt462 tZjfZwi1ejOeHF/w+pfsKjZH5j3jwNz0GIQmonmnla1hvJInARcGg6k6bTB6L0oA 9Be8sVDQylFBif9UfQZZXlHAO51i6akWk5Ix/piUU+QVUoePb+KoZw14ue8Kmbxs rWkBYYNBioIao8pqsFg/QNHY3IZPIIren1dvOzDdO7pBTMURwdmpFJoIfy3ZR159 DCiGaDWfyoYgFQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:17 2025 by rpki-client