This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json) Hash identifier: tUcK0TyhCb0L8S+RCQPzjH4roxBBcegojm+l0AHWQA4= Subject key identifier: 77:53:B0:3F:6B:AA:F1:BD:49:BF:69:98:E5:1D:AB:AE:8B:1E:B9:0F Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5 Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5 Certificate serial: 019B3CEB9F9A200BB0110DFB42D5D364E3AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft Manifest number: 1469 Signing time: Sat 20 Dec 2025 18:00:33 +0000 Manifest this update: Sat 20 Dec 2025 18:00:33 +0000 Manifest next update: Sun 21 Dec 2025 18:00:33 +0000 Files and hashes: 1: 7lJrTTIO2zooVSl7zZp_UO3NA2A.roa (hash: ob9QTWC/tQoW4XviSigFRT+IWVM+wZzBVH2/SY3oV7I=) 2: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: IF/fVy/c4IbkSneFZ4rXx10HMDBlnbS+qi7nccH6Ahc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:9f:9a:20:0b:b0:11:0d:fb:42:d5:d3:64:e3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5 Validity Not Before: Dec 20 18:00:33 2025 GMT Not After : Dec 21 18:00:33 2025 GMT Subject: CN=7753b03f6baaf1bd49bf6998e51dabae8b1eb90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e8:2c:f3:aa:b2:22:88:3c:c5:52:14:03:a3: 5e:bc:c7:dd:a2:dd:9a:b1:1e:e9:7a:25:07:72:cc: c0:80:03:ac:38:26:b0:5b:12:11:b4:62:a0:f8:23: a7:73:d9:3e:b8:aa:86:4a:72:dc:6a:12:ec:b3:75: cd:8c:e0:5e:48:51:f9:08:ce:6a:88:83:a8:b5:de: 05:e0:9a:6c:f2:d1:74:5c:2e:1b:06:2a:ac:b0:f9: ba:a8:e6:25:55:a4:2c:0f:d4:8f:c8:5f:0d:a0:12: df:0e:a5:0c:8c:96:67:20:1d:da:72:14:af:e8:de: 79:b3:2f:bb:0e:e6:ea:64:5d:ff:c6:93:9b:3b:b6: 55:47:38:64:eb:e0:ab:1f:f9:c3:52:dd:e7:35:30: 3f:da:70:5e:f6:91:02:cf:3d:22:e1:fd:ed:ea:0a: 9f:29:3b:ff:2d:8f:96:e3:dd:4b:b0:10:84:b4:2a: 1c:ac:0a:85:d0:bd:6c:ed:58:7d:cc:3a:34:8e:2f: fc:1d:b9:81:79:c4:8e:16:5b:d4:8d:f7:a5:97:e3: 5f:0f:01:50:e3:b7:e3:57:c5:a0:d5:1e:f5:ba:9a: 07:85:0b:4e:3e:78:df:9e:78:1e:05:90:90:ee:a4: 72:0d:e9:01:37:5a:a5:ef:33:04:16:9c:41:0e:cb: b2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:53:B0:3F:6B:AA:F1:BD:49:BF:69:98:E5:1D:AB:AE:8B:1E:B9:0F X509v3 Authority Key Identifier: keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a0:c6:1e:b9:52:6e:75:7f:31:da:8e:a4:92:a9:45:6d:ee: 0f:39:64:5f:36:65:de:5b:ee:6d:80:b4:db:d7:8c:f0:99:ab: 29:11:81:0f:e4:4d:cd:d8:e2:8b:5d:f8:1e:9b:9a:3a:72:cb: 8c:b3:60:1c:b0:8c:af:26:2b:70:bd:85:fb:9d:e9:79:7e:30: 91:f2:c3:ad:66:e3:1d:b0:4c:0e:ef:99:75:23:05:e0:d4:c3: 1b:df:48:26:86:b4:cf:fa:1a:7c:1e:3c:64:68:40:d8:3e:47: 3a:0c:e1:10:9a:0d:c5:b5:0f:1e:9b:63:6d:73:36:22:e2:16: 05:ae:d3:d9:ff:ef:55:bd:3c:4a:43:75:f7:79:9e:be:49:08: 84:d5:c0:9a:42:c2:91:11:a9:b8:b1:5c:60:8e:34:3a:9e:84: 76:17:99:bc:4c:0e:b4:bf:f8:fc:4f:7d:18:c7:26:e8:70:ea: 54:4c:d1:de:ac:1e:65:18:a4:f0:45:a3:05:9c:7d:1c:da:be: 29:26:00:6e:e1:6f:72:56:6d:dd:a6:84:3c:ca:2a:c8:c8:8c: 1a:9b:47:ca:4e:8f:28:a6:e7:da:66:00:e1:b1:24:c0:9d:e8: 7c:62:be:de:6d:30:14:24:4b:8d:ef:70:e0:69:a1:d0:d0:38: cc:b9:5a:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs865+aIAuwEQ37QtXTZOOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZDRjY2NlZmU1NWM1ZTIyM2E5YjMyMDViOTM4YTNkMWM5 ZTg2ZDUwHhcNMjUxMjIwMTgwMDMzWhcNMjUxMjIxMTgwMDMzWjAzMTEwLwYDVQQD Eyg3NzUzYjAzZjZiYWFmMWJkNDliZjY5OThlNTFkYWJhZThiMWViOTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ugs86qyIog8xVIUA6NevMfdot2a sR7peiUHcszAgAOsOCawWxIRtGKg+COnc9k+uKqGSnLcahLss3XNjOBeSFH5CM5q iIOotd4F4Jps8tF0XC4bBiqssPm6qOYlVaQsD9SPyF8NoBLfDqUMjJZnIB3achSv 6N55sy+7DubqZF3/xpObO7ZVRzhk6+CrH/nDUt3nNTA/2nBe9pECzz0i4f3t6gqf KTv/LY+W491LsBCEtCocrAqF0L1s7Vh9zDo0ji/8HbmBecSOFlvUjfell+NfDwFQ 47fjV8Wg1R71upoHhQtOPnjfnngeBZCQ7qRyDekBN1ql7zMEFpxBDsuyEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdTsD9rqvG9Sb9pmOUdq66LHrkPMB8GA1UdIwQY MBaAFBrUzM7+VcXiI6mzIFuTij0cnobVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kMjM4NzAtNzRjNy00YTg0LTkwZWMt YzMyMDM2NzUwZTM2LzEvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9kMjM4NzAtNzRjNy00YTg0LTkwZWMtYzMyMDM2NzUwZTM2 LzEvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqDGHrlS bnV/MdqOpJKpRW3uDzlkXzZl3lvubYC029eM8JmrKRGBD+RNzdjii134HpuaOnLL jLNgHLCMryYrcL2F+53peX4wkfLDrWbjHbBMDu+ZdSMF4NTDG99IJoa0z/oafB48 ZGhA2D5HOgzhEJoNxbUPHptjbXM2IuIWBa7T2f/vVb08SkN193mevkkIhNXAmkLC kRGpuLFcYI40Op6EdheZvEwOtL/4/E99GMcm6HDqVEzR3qweZRik8EWjBZx9HNq+ KSYAbuFvclZt3aaEPMoqyMiMGptHyk6PKKbn2mYA4bEkwJ3ofGK+3m0wFCRLje9w 4Gmh0NA4zLla+w== -----END CERTIFICATE-----Generated at Sat Dec 20 20:50:21 2025 by rpki-client