This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft File: gXFLKnOMo96ukVr4fDqRxhPhvEk.mft (raw, json) Hash identifier: y3YaqdgW0TSZM5NfA4Yiq8F3EPgoQ6tiBTfaE65LlCA= Subject key identifier: 40:9F:C4:F8:8F:57:F7:FD:F8:1E:28:10:12:EC:77:A4:87:4E:59:46 Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49 Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49 Certificate serial: 019B047E9EA98ECB388445BC1C2E78B63450 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft Manifest number: 07F2 Signing time: Tue 09 Dec 2025 19:02:45 +0000 Manifest this update: Tue 09 Dec 2025 19:02:45 +0000 Manifest next update: Wed 10 Dec 2025 19:02:45 +0000 Files and hashes: 1: 1--9ef5BuonyT90ODHV5G8KHwvGM.roa (hash: 96x1zDsthw+xfBLv+9YvZciWmPNAhtiP7Hkhk8XWewA=) 2: gXFLKnOMo96ukVr4fDqRxhPhvEk.crl (hash: ez1/DpTmbG582YWZuVokf7G/KmuJyeOSKRu85Y0V+bo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:7e:9e:a9:8e:cb:38:84:45:bc:1c:2e:78:b6:34:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49 Validity Not Before: Dec 9 19:02:45 2025 GMT Not After : Dec 10 19:02:45 2025 GMT Subject: CN=409fc4f88f57f7fdf81e281012ec77a4874e5946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c5:1b:b4:01:17:2c:ef:7a:6d:b9:bd:02:be: af:d6:13:17:02:9d:b1:f0:8a:45:dd:79:c2:ac:f0: 3f:0e:ba:01:d4:b8:70:46:4a:42:00:2f:40:ed:2b: 55:07:77:e7:36:82:21:69:33:f3:96:20:cf:67:47: e4:e9:83:e2:e6:40:00:da:aa:5e:0b:78:02:cb:9d: a0:7e:bf:ed:44:5b:58:2e:47:08:5e:63:56:6a:dc: cc:44:03:97:68:87:a2:bd:7c:08:07:94:20:8f:ca: 5f:eb:38:5a:b1:1e:23:f1:ae:0f:0c:18:2f:2d:f9: 8f:bf:3f:a5:85:7b:ca:4a:c8:b1:e7:87:89:46:79: 54:8a:6d:f6:b3:4f:a4:e6:ae:c6:a8:ea:84:a6:3a: 79:5a:52:38:a8:b3:08:d9:08:ef:de:15:78:25:21: d6:c5:a5:82:49:dc:28:75:ac:bc:b4:e8:cb:d5:13: 24:c1:a4:8c:12:bf:17:d3:60:52:9e:46:fd:b1:ae: 67:0e:58:dd:fc:8a:4e:7f:a1:0e:02:31:77:24:f1: 92:84:0f:48:e4:7f:0e:9e:9a:df:1d:d6:62:9e:25: 81:55:7e:2d:12:9d:49:a4:54:6d:aa:b5:7b:63:ed: d3:60:51:2f:84:f8:f8:60:d3:66:22:93:e4:f9:68: 65:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9F:C4:F8:8F:57:F7:FD:F8:1E:28:10:12:EC:77:A4:87:4E:59:46 X509v3 Authority Key Identifier: keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:fb:0a:52:24:3b:48:ab:59:f3:77:06:32:ea:fb:46:c5:4e: 7c:12:e8:ed:a4:e5:71:d1:1c:c8:58:79:22:37:91:3b:82:09: 07:0a:cf:a0:65:1a:67:16:06:08:f3:da:1c:2e:70:80:02:c3: 95:85:4b:a4:60:ca:cf:97:a2:88:4f:04:a2:b0:4a:a9:a4:db: a7:06:58:2d:60:90:bc:80:1f:93:9a:12:62:08:e0:9b:95:e0: b6:fa:47:7f:59:9c:cf:13:c5:a2:21:8c:27:f4:ec:cc:05:40: c8:35:17:02:24:09:78:20:2b:29:be:8a:92:ad:28:db:66:08: 96:5e:10:4d:36:77:28:6f:e9:56:65:7b:3d:99:55:13:85:7d: ef:d3:d5:e2:d7:18:18:b5:cc:f2:06:c1:16:ee:86:89:ac:2b: ec:a0:41:a1:cd:9c:aa:ec:18:f3:bc:f3:35:95:32:e4:9c:37: d5:b2:18:d1:83:0a:bf:03:9b:8c:34:23:df:71:e2:7f:99:f3: fd:f4:16:ef:c5:bb:93:f4:e4:3e:cc:9f:ac:c9:72:2e:d9:b5: 3d:73:c7:4e:b1:d7:67:96:1f:7a:70:10:82:76:ba:0c:45:31: c5:02:f5:6d:93:8e:a2:a3:f3:ff:cb:07:19:f1:a7:50:4a:8f: 2c:2e:ff:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsEfp6pjss4hEW8HC54tjRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNzE0YjJhNzM4Y2EzZGVhZTkxNWFmODdjM2E5MWM2MTNl MWJjNDkwHhcNMjUxMjA5MTkwMjQ1WhcNMjUxMjEwMTkwMjQ1WjAzMTEwLwYDVQQD Eyg0MDlmYzRmODhmNTdmN2ZkZjgxZTI4MTAxMmVjNzdhNDg3NGU1OTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sUbtAEXLO96bbm9Ar6v1hMXAp2x 8IpF3XnCrPA/DroB1LhwRkpCAC9A7StVB3fnNoIhaTPzliDPZ0fk6YPi5kAA2qpe C3gCy52gfr/tRFtYLkcIXmNWatzMRAOXaIeivXwIB5Qgj8pf6zhasR4j8a4PDBgv LfmPvz+lhXvKSsix54eJRnlUim32s0+k5q7GqOqEpjp5WlI4qLMI2Qjv3hV4JSHW xaWCSdwoday8tOjL1RMkwaSMEr8X02BSnkb9sa5nDljd/IpOf6EOAjF3JPGShA9I 5H8OnprfHdZiniWBVX4tEp1JpFRtqrV7Y+3TYFEvhPj4YNNmIpPk+WhliwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECfxPiPV/f9+B4oEBLsd6SHTllGMB8GA1UdIwQY MBaAFIFxSypzjKPerpFa+Hw6kcYT4bxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWIt MTg5NzI0M2M2MmVmLzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWItMTg5NzI0M2M2MmVm LzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyPsKUiQ7 SKtZ83cGMur7RsVOfBLo7aTlcdEcyFh5IjeRO4IJBwrPoGUaZxYGCPPaHC5wgALD lYVLpGDKz5eiiE8EorBKqaTbpwZYLWCQvIAfk5oSYgjgm5XgtvpHf1mczxPFoiGM J/TszAVAyDUXAiQJeCArKb6Kkq0o22YIll4QTTZ3KG/pVmV7PZlVE4V979PV4tcY GLXM8gbBFu6Giawr7KBBoc2cquwY87zzNZUy5Jw31bIY0YMKvwObjDQj33Hif5nz /fQW78W7k/TkPsyfrMlyLtm1PXPHTrHXZ5YfenAQgna6DEUxxQL1bZOOoqPz/8sH GfGnUEqPLC7/vg== -----END CERTIFICATE-----Generated at Wed Dec 10 02:21:22 2025 by rpki-client