This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft File: guaSFNb9VedQULqBG_fBJDkQn-4.mft (raw, json) Hash identifier: ZrgIKS5+tm2c8Axep7MbhqL0ZZHI7YxP1oeROnUGMSU= Subject key identifier: E5:D7:B3:96:B6:3C:8E:F1:5D:1A:1D:AA:56:CD:8C:B4:CF:BD:F0:F0 Authority key identifier: 82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE Certificate issuer: /CN=82e69214d6fd55e75050ba811bf7c12439109fee Certificate serial: 019B2C2F84AECE77C298FCFAD6882F35383D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft Manifest number: 0E67 Signing time: Wed 17 Dec 2025 12:01:10 +0000 Manifest this update: Wed 17 Dec 2025 12:01:10 +0000 Manifest next update: Thu 18 Dec 2025 12:01:10 +0000 Files and hashes: 1: Yf8xLh6ONOE-LcHsXkQWHpv_Qbs.roa (hash: w0wC5FwQryxr68NY97Vqd4lkkn8kQ9lhz7BZtY1f10I=) 2: guaSFNb9VedQULqBG_fBJDkQn-4.crl (hash: yefOLMcj8jl+F8tA73H1nM6o6toJ7f3uGADEo7R70jA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:84:ae:ce:77:c2:98:fc:fa:d6:88:2f:35:38:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82e69214d6fd55e75050ba811bf7c12439109fee Validity Not Before: Dec 17 12:01:10 2025 GMT Not After : Dec 18 12:01:10 2025 GMT Subject: CN=e5d7b396b63c8ef15d1a1daa56cd8cb4cfbdf0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:1f:b8:b3:48:eb:6a:3d:22:0b:38:3a:e3: 53:d3:d0:61:b5:cf:b4:8e:77:6f:9c:d9:e8:87:6f: 66:be:d3:92:5a:58:52:8e:4f:16:44:76:51:04:87: 0f:ab:df:c2:ed:4d:f9:d7:ac:89:72:f5:13:97:86: 77:92:f3:a9:39:04:48:41:99:39:29:fc:6a:8a:0b: 71:90:47:54:0a:65:16:0d:ed:26:a4:3e:e7:6f:52: ab:39:1a:e0:2f:64:fd:53:3b:28:8a:23:90:c6:d5: d2:71:1c:8b:43:d4:83:d9:02:17:ad:4d:99:78:3c: b7:f8:3d:97:36:cd:c2:90:91:78:ba:da:8b:c1:47: 98:3c:54:97:1d:e0:c1:f0:89:50:f2:15:fc:58:7d: b6:1c:cb:0e:1d:c6:7b:1b:82:39:84:ad:bd:68:54: ae:1f:bf:c4:04:f7:9b:45:2e:7f:a6:ed:32:2c:b7: d0:c2:01:d3:35:78:01:6f:7a:4a:7c:49:ae:f2:4d: cf:24:df:8e:09:7d:d5:5a:78:a0:41:1f:b0:dd:75: 9b:51:a1:36:66:12:28:d5:e2:00:2c:c7:d0:8b:ab: 98:1a:3f:dd:93:f3:e4:ce:54:3e:7e:e7:4e:76:09: 69:a0:cb:27:a6:52:50:52:57:15:b5:a4:72:2c:4b: a9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D7:B3:96:B6:3C:8E:F1:5D:1A:1D:AA:56:CD:8C:B4:CF:BD:F0:F0 X509v3 Authority Key Identifier: keyid:82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:10:dc:c7:64:69:af:ae:1c:ea:ef:8a:6b:3c:29:f5:78:6b: 8e:19:95:4f:28:cd:3b:27:6c:44:22:aa:2c:71:9f:65:38:2f: be:1d:de:d2:d1:e9:c9:45:45:9f:10:9e:09:a2:e2:1f:0a:81: 8f:d3:fc:c7:68:52:34:80:8c:ab:86:dd:dc:21:7c:44:a0:75: d8:50:ea:c8:10:5a:e5:7a:0b:ca:99:fc:a6:0d:be:c2:8f:e0: 4d:17:84:0f:67:3c:ae:dc:1e:29:f2:e0:60:c1:52:74:8f:ee: 60:f5:e8:1c:a3:98:ce:fc:3c:f8:73:b5:db:d8:c8:b9:5a:bc: 4b:7f:22:c9:c7:8f:fb:04:2d:53:6b:ad:81:34:18:5c:e2:03: ad:36:a9:86:cc:f8:03:83:c5:69:09:95:5c:64:b9:98:c9:c9: 43:8e:d1:07:14:79:e1:6b:6c:a3:8d:87:5d:42:a6:0e:13:ee: 47:89:ba:53:09:99:f9:8d:be:ba:0d:be:18:3a:8e:2d:f5:eb: df:6d:24:eb:49:37:92:8f:bd:35:87:7f:8e:1a:b2:c2:52:45: 53:37:8f:bd:a0:b1:62:85:c9:0a:5b:bc:da:34:7f:4c:e6:e1: 4c:c8:a0:20:19:f3:56:8f:9a:ce:22:6a:da:6e:a1:46:1b:48: f1:f1:3a:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL4SuznfCmPz61ogvNTg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZTY5MjE0ZDZmZDU1ZTc1MDUwYmE4MTFiZjdjMTI0Mzkx MDlmZWUwHhcNMjUxMjE3MTIwMTEwWhcNMjUxMjE4MTIwMTEwWjAzMTEwLwYDVQQD EyhlNWQ3YjM5NmI2M2M4ZWYxNWQxYTFkYWE1NmNkOGNiNGNmYmRmMGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZQfuLNI62o9Igs4OuNT09Bhtc+0 jndvnNnoh29mvtOSWlhSjk8WRHZRBIcPq9/C7U3516yJcvUTl4Z3kvOpOQRIQZk5 KfxqigtxkEdUCmUWDe0mpD7nb1KrORrgL2T9UzsoiiOQxtXScRyLQ9SD2QIXrU2Z eDy3+D2XNs3CkJF4utqLwUeYPFSXHeDB8IlQ8hX8WH22HMsOHcZ7G4I5hK29aFSu H7/EBPebRS5/pu0yLLfQwgHTNXgBb3pKfEmu8k3PJN+OCX3VWnigQR+w3XWbUaE2 ZhIo1eIALMfQi6uYGj/dk/PkzlQ+fudOdglpoMsnplJQUlcVtaRyLEupiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXXs5a2PI7xXRodqlbNjLTPvfDwMB8GA1UdIwQY MBaAFILmkhTW/VXnUFC6gRv3wSQ5EJ/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3VhU0ZOYjlWZWRRVUxxQkdfZkJKRGtRbi00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8xNzNmYzUtMzQzYi00OTc2LWIyYTEt OTZiYzZiYWE1NjNiLzEvZ3VhU0ZOYjlWZWRRVUxxQkdfZkJKRGtRbi00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8xNzNmYzUtMzQzYi00OTc2LWIyYTEtOTZiYzZiYWE1NjNi LzEvZ3VhU0ZOYjlWZWRRVUxxQkdfZkJKRGtRbi00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBDcx2Rp r64c6u+Kazwp9XhrjhmVTyjNOydsRCKqLHGfZTgvvh3e0tHpyUVFnxCeCaLiHwqB j9P8x2hSNICMq4bd3CF8RKB12FDqyBBa5XoLypn8pg2+wo/gTReED2c8rtweKfLg YMFSdI/uYPXoHKOYzvw8+HO129jIuVq8S38iyceP+wQtU2utgTQYXOIDrTaphsz4 A4PFaQmVXGS5mMnJQ47RBxR54Wtso42HXUKmDhPuR4m6UwmZ+Y2+ug2+GDqOLfXr 320k60k3ko+9NYd/jhqywlJFUzePvaCxYoXJClu82jR/TObhTMigIBnzVo+aziJq 2m6hRhtI8fE6/Q== -----END CERTIFICATE-----Generated at Wed Dec 17 18:45:50 2025 by rpki-client