This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft File: gXFLKnOMo96ukVr4fDqRxhPhvEk.mft (raw, json) Hash identifier: QuwGscGbeWa+W/B/cSv9oHaMrn+gcNFvPYDR40CSJfI= Subject key identifier: AA:B6:B3:C8:69:35:C4:B1:41:A4:76:A0:39:82:DA:0E:FE:5F:A1:D1 Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49 Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49 Certificate serial: 019B2D0C4992A2E1FD3D99DFC5E80DF780E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft Manifest number: 0807 Signing time: Wed 17 Dec 2025 16:02:18 +0000 Manifest this update: Wed 17 Dec 2025 16:02:18 +0000 Manifest next update: Thu 18 Dec 2025 16:02:18 +0000 Files and hashes: 1: 1--9ef5BuonyT90ODHV5G8KHwvGM.roa (hash: 96x1zDsthw+xfBLv+9YvZciWmPNAhtiP7Hkhk8XWewA=) 2: gXFLKnOMo96ukVr4fDqRxhPhvEk.crl (hash: kN6REKz8RnXZVVVyLUPifRMx8kO7mjQi2nL24OntzEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:49:92:a2:e1:fd:3d:99:df:c5:e8:0d:f7:80:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49 Validity Not Before: Dec 17 16:02:18 2025 GMT Not After : Dec 18 16:02:18 2025 GMT Subject: CN=aab6b3c86935c4b141a476a03982da0efe5fa1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:2e:bb:a4:b9:c0:83:f3:c8:cc:8e:4a:a9: a9:3a:04:54:64:b8:9e:ef:86:43:8f:02:5a:a0:7c: b2:75:aa:8d:c9:a5:44:34:c8:5c:6d:54:c4:11:2e: 3a:9d:d2:c2:03:1d:76:12:7f:9c:93:e8:80:2a:b4: b0:fd:7b:13:d6:38:d3:df:20:a0:8b:84:af:31:c5: 5f:2f:f9:f6:2d:2b:8f:00:2d:2f:5b:fb:c0:86:f3: 14:9a:18:bb:aa:f1:b9:b5:03:15:4c:67:ea:9b:bd: c2:a2:06:90:13:db:3f:4b:44:1e:8b:26:70:78:4c: 35:51:38:e9:b8:cb:97:c9:f3:78:f9:9f:5a:b7:2a: 5f:b8:a2:37:f0:1b:ac:6f:02:77:aa:82:f0:fe:23: 01:96:b3:37:54:c0:5e:d8:25:fe:94:7c:a1:67:01: 92:73:39:97:cd:12:d5:6e:27:3c:49:46:97:f2:c7: b0:65:80:d0:27:0f:04:a6:53:35:3a:cf:60:71:ec: 26:5e:91:3f:72:d4:ba:86:28:1b:a3:87:0d:54:fc: 24:49:66:29:21:2c:d2:df:1a:06:cb:d1:0b:40:3a: 42:95:2c:ac:66:06:5f:da:28:96:e9:08:32:d3:3c: 54:ba:41:ec:3d:d9:a8:4a:03:45:3b:cb:c6:90:d4: 3a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B6:B3:C8:69:35:C4:B1:41:A4:76:A0:39:82:DA:0E:FE:5F:A1:D1 X509v3 Authority Key Identifier: keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:dd:2f:15:f6:e6:ca:66:b7:28:2c:50:c3:db:9f:22:4e:03: 50:82:0b:3d:5e:04:8a:82:bd:f4:35:10:8f:39:d5:70:32:86: 78:a6:58:58:75:e0:78:68:27:72:26:7d:c4:a5:30:5c:00:61: d8:71:b1:07:b6:ed:57:19:85:f9:63:79:b5:6a:fe:df:f2:df: 0a:7a:8f:6e:41:cf:72:f7:58:ee:7f:23:25:13:3c:e0:d7:ac: b2:28:d1:eb:85:20:91:f8:f9:dc:44:87:99:90:ba:c0:b8:b9: 29:77:79:38:35:71:bc:0d:d2:ef:53:d3:01:ab:57:c6:05:af: 66:3e:12:43:2d:71:a2:3e:69:76:6b:8f:65:2e:6f:25:90:9a: 66:22:23:ac:c3:a6:f8:01:29:9b:85:b2:e7:cf:8c:a5:50:86: 42:f1:e0:cc:35:bb:3c:c3:94:dd:57:6e:a1:8d:c3:46:fe:66: df:76:c0:a8:b2:eb:90:b7:f2:c8:77:be:27:e0:70:b2:52:53: b4:1f:6c:05:52:2a:d3:19:7f:a5:19:cc:85:5b:3b:d6:1f:42: 1f:59:eb:0d:f9:6c:12:38:e7:bc:e9:be:61:e2:59:67:01:22: fb:b0:3c:4e:ea:f2:29:c7:f7:35:d3:53:33:28:4f:f3:68:c2: e2:96:71:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDEmSouH9PZnfxegN94DnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNzE0YjJhNzM4Y2EzZGVhZTkxNWFmODdjM2E5MWM2MTNl MWJjNDkwHhcNMjUxMjE3MTYwMjE4WhcNMjUxMjE4MTYwMjE4WjAzMTEwLwYDVQQD EyhhYWI2YjNjODY5MzVjNGIxNDFhNDc2YTAzOTgyZGEwZWZlNWZhMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBcuu6S5wIPzyMyOSqmpOgRUZLie 74ZDjwJaoHyydaqNyaVENMhcbVTEES46ndLCAx12En+ck+iAKrSw/XsT1jjT3yCg i4SvMcVfL/n2LSuPAC0vW/vAhvMUmhi7qvG5tQMVTGfqm73CogaQE9s/S0QeiyZw eEw1UTjpuMuXyfN4+Z9atypfuKI38BusbwJ3qoLw/iMBlrM3VMBe2CX+lHyhZwGS czmXzRLVbic8SUaX8sewZYDQJw8EplM1Os9gcewmXpE/ctS6higbo4cNVPwkSWYp ISzS3xoGy9ELQDpClSysZgZf2iiW6Qgy0zxUukHsPdmoSgNFO8vGkNQ6BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKq2s8hpNcSxQaR2oDmC2g7+X6HRMB8GA1UdIwQY MBaAFIFxSypzjKPerpFa+Hw6kcYT4bxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWIt MTg5NzI0M2M2MmVmLzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWItMTg5NzI0M2M2MmVm LzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbt0vFfbm yma3KCxQw9ufIk4DUIILPV4EioK99DUQjznVcDKGeKZYWHXgeGgnciZ9xKUwXABh 2HGxB7btVxmF+WN5tWr+3/LfCnqPbkHPcvdY7n8jJRM84NessijR64Ugkfj53ESH mZC6wLi5KXd5ODVxvA3S71PTAatXxgWvZj4SQy1xoj5pdmuPZS5vJZCaZiIjrMOm +AEpm4Wy58+MpVCGQvHgzDW7PMOU3VduoY3DRv5m33bAqLLrkLfyyHe+J+BwslJT tB9sBVIq0xl/pRnMhVs71h9CH1nrDflsEjjnvOm+YeJZZwEi+7A8TuryKcf3NdNT MyhP82jC4pZxEg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:02:40 2025 by rpki-client