This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft File: guRyorh_8WgtNi8N3kGOkxGsBGQ.mft (raw, json) Hash identifier: 3hAQ6obFzXfHkkdFzzgYUTCY+iZdbJmIpwldtRbEgno= Subject key identifier: 00:22:B7:22:1F:34:78:98:87:37:64:38:87:26:70:80:FF:08:7B:FE Authority key identifier: 82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64 Certificate issuer: /CN=82e472a2b87ff1682d362f0dde418e9311ac0464 Certificate serial: 019B5907F2C449FCF94B3E3D86841D8D1878 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft Manifest number: 1685 Signing time: Fri 26 Dec 2025 05:00:51 +0000 Manifest this update: Fri 26 Dec 2025 05:00:51 +0000 Manifest next update: Sat 27 Dec 2025 05:00:51 +0000 Files and hashes: 1: guRyorh_8WgtNi8N3kGOkxGsBGQ.crl (hash: 04oF4/Nd2gXNFlrWsJIf8482kxbLIMi4xtEl3OqqRHI=) 2: wM-Q4PYw-g7L6gGW4qe1neIC43c.roa (hash: hm2k81ASEePQ7E1Ry4WD3zVSD28SUrbakN2SZMVNLMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:f2:c4:49:fc:f9:4b:3e:3d:86:84:1d:8d:18:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82e472a2b87ff1682d362f0dde418e9311ac0464 Validity Not Before: Dec 26 05:00:51 2025 GMT Not After : Dec 27 05:00:51 2025 GMT Subject: CN=0022b7221f3478988737643887267080ff087bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d4:fe:89:23:55:86:f7:0f:b2:9b:28:3b:6c: 11:5b:27:91:85:fc:e3:07:c4:9e:1c:56:a9:48:f4: e7:4f:b1:8c:ff:d0:38:30:cb:bc:5f:00:6f:42:49: 9d:b2:62:77:2a:01:80:e7:d7:b6:f9:c8:90:d1:06: 8a:13:2e:2f:46:1e:d7:10:ef:4a:eb:15:1c:46:f6: cb:47:60:04:9c:8d:75:f7:d0:a3:78:b9:57:ca:96: 05:ca:66:93:30:3f:25:35:79:15:26:fe:b5:63:82: e5:d6:6a:23:9e:6a:34:67:fd:37:6b:89:22:c6:8c: f5:15:24:54:a8:e8:9a:84:42:30:4d:7b:73:d8:a0: 19:da:d7:c7:66:50:5f:21:59:a7:23:9a:8b:27:7d: 3d:d4:aa:15:1a:44:7e:a5:f2:0a:ea:09:a1:38:b6: 67:9a:aa:7c:a1:56:16:b4:cd:6d:13:d6:8e:3e:6c: 6b:47:31:67:cf:63:6f:00:9e:79:86:b9:98:86:24: 48:54:a9:f0:5a:d4:42:e8:48:78:cc:72:00:4d:d5: 21:36:df:b4:1c:71:2e:d6:45:db:1c:ba:cc:83:59: ff:a6:17:89:1a:96:48:fa:88:fd:21:44:85:d2:dc: 91:ea:1c:05:1b:5a:80:49:94:6c:ec:a5:6a:66:10: 18:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:22:B7:22:1F:34:78:98:87:37:64:38:87:26:70:80:FF:08:7B:FE X509v3 Authority Key Identifier: keyid:82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:06:1b:b2:d5:8e:85:ea:55:5c:52:d9:73:d3:d9:92:d4:78: 9f:75:e7:05:f9:33:d1:a1:aa:b9:e0:e7:a0:c9:27:2a:04:52: ed:54:6e:87:ab:62:ab:e9:f9:40:40:5f:f9:fa:55:2e:2b:ca: 74:38:ef:b8:a6:ed:5c:cf:29:01:8f:ed:ba:86:8e:14:33:57: f3:85:ae:cd:02:76:20:a1:fa:6d:62:15:05:d9:04:d0:21:77: b7:d0:31:ad:d0:7e:cb:73:0f:0a:d4:5d:82:74:51:16:94:5e: c3:7f:c5:ca:0e:d6:8c:ce:0a:f5:bc:73:95:94:db:19:19:2a: 93:ec:12:07:81:89:06:7d:63:6c:ff:26:71:be:b8:21:9a:52: 9f:0f:c0:a3:03:36:3f:9c:45:67:ce:dc:4c:11:00:ce:59:50: a1:89:88:aa:fc:5f:15:ac:fe:e5:6a:8a:0a:04:fc:7c:a6:9c: 88:0c:44:e1:a1:31:86:b1:ad:3c:67:0e:0f:db:1b:2d:b4:c1: 9a:c5:4c:bb:70:5c:3c:c5:63:92:34:7c:93:8d:34:50:d4:50: 70:50:1c:a9:db:06:5a:56:8e:61:c4:bc:91:5f:0c:a2:14:bc: 46:04:31:19:25:ec:1c:f4:3f:c5:19:1f:10:d5:68:e9:de:3c: fb:b8:5e:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB/LESfz5Sz49hoQdjRh4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZTQ3MmEyYjg3ZmYxNjgyZDM2MmYwZGRlNDE4ZTkzMTFh YzA0NjQwHhcNMjUxMjI2MDUwMDUxWhcNMjUxMjI3MDUwMDUxWjAzMTEwLwYDVQQD EygwMDIyYjcyMjFmMzQ3ODk4ODczNzY0Mzg4NzI2NzA4MGZmMDg3YmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitT+iSNVhvcPspsoO2wRWyeRhfzj B8SeHFapSPTnT7GM/9A4MMu8XwBvQkmdsmJ3KgGA59e2+ciQ0QaKEy4vRh7XEO9K 6xUcRvbLR2AEnI1199CjeLlXypYFymaTMD8lNXkVJv61Y4Ll1mojnmo0Z/03a4ki xoz1FSRUqOiahEIwTXtz2KAZ2tfHZlBfIVmnI5qLJ3091KoVGkR+pfIK6gmhOLZn mqp8oVYWtM1tE9aOPmxrRzFnz2NvAJ55hrmYhiRIVKnwWtRC6Eh4zHIATdUhNt+0 HHEu1kXbHLrMg1n/pheJGpZI+oj9IUSF0tyR6hwFG1qASZRs7KVqZhAY4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAityIfNHiYhzdkOIcmcID/CHv+MB8GA1UdIwQY MBaAFILkcqK4f/FoLTYvDd5BjpMRrARkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3VSeW9yaF84V2d0Tmk4TjNrR09reEdzQkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85MmI0ZDYtYjkyNC00YjMxLTk0ZDct MjM2MTZjNzlhZTAyLzEvZ3VSeW9yaF84V2d0Tmk4TjNrR09reEdzQkdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi85MmI0ZDYtYjkyNC00YjMxLTk0ZDctMjM2MTZjNzlhZTAy LzEvZ3VSeW9yaF84V2d0Tmk4TjNrR09reEdzQkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAYbstWO hepVXFLZc9PZktR4n3XnBfkz0aGqueDnoMknKgRS7VRuh6tiq+n5QEBf+fpVLivK dDjvuKbtXM8pAY/tuoaOFDNX84WuzQJ2IKH6bWIVBdkE0CF3t9AxrdB+y3MPCtRd gnRRFpRew3/Fyg7WjM4K9bxzlZTbGRkqk+wSB4GJBn1jbP8mcb64IZpSnw/AowM2 P5xFZ87cTBEAzllQoYmIqvxfFaz+5WqKCgT8fKaciAxE4aExhrGtPGcOD9sbLbTB msVMu3BcPMVjkjR8k400UNRQcFAcqdsGWlaOYcS8kV8MohS8RgQxGSXsHPQ/xRkf ENVo6d48+7he/A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:23 2025 by rpki-client