This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft File: GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft (raw, json) Hash identifier: eaGEfmSMsIk0TrEbEl6nWLle+Wg7M5zs39SxP2SrChs= Subject key identifier: 3C:1D:A6:41:76:7F:8C:F5:AB:F4:3D:4C:92:4D:54:4C:93:48:7C:74 Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4 Certificate issuer: /CN=194f0b272e243acfaf36346094e58395cc1383b4 Certificate serial: 019AF240230ED80FE37451CA21581D781E87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft Manifest number: 12D8 Signing time: Sat 06 Dec 2025 06:01:20 +0000 Manifest this update: Sat 06 Dec 2025 06:01:20 +0000 Manifest next update: Sun 07 Dec 2025 06:01:20 +0000 Files and hashes: 1: GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl (hash: 0cEqydUOnni85PR8KE6LWqMqVYBdZ1b0VVPHABbALYk=) 2: uIeYeZznF-O1grN0M5g3SmcN33U.roa (hash: y5O+zvgRhkPeGKTBn9Qn4EVE0s2vlCMineSuEirJq9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:23:0e:d8:0f:e3:74:51:ca:21:58:1d:78:1e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4 Validity Not Before: Dec 6 06:01:20 2025 GMT Not After : Dec 7 06:01:20 2025 GMT Subject: CN=3c1da641767f8cf5abf43d4c924d544c93487c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d8:4f:d3:88:a6:c8:40:47:90:80:2d:b0:eb: 4b:96:f3:e8:18:fd:2d:aa:b0:9c:66:34:0a:a0:bf: a3:a9:2d:48:02:35:11:1c:11:7d:65:1c:29:55:d4: 8a:fa:40:5c:6c:23:51:b7:dc:10:ad:cd:7f:25:fa: a3:ab:0c:b2:c6:32:d1:4d:14:44:9e:3c:56:be:b1: fb:3b:54:bd:e3:6e:5f:0a:c1:dc:38:aa:60:e4:44: ac:81:54:54:23:26:6a:dd:93:40:e6:5a:30:f5:d9: 26:70:48:91:dc:b9:b0:7d:f9:c2:c3:3a:ab:cd:6a: a2:c8:c1:d1:5d:1e:c0:e2:d9:26:89:fd:88:05:b9: 4f:55:5b:60:57:18:86:5d:2b:5e:46:ae:72:13:bb: 84:97:23:36:31:c5:e6:50:fa:19:28:64:03:71:bf: b7:c3:da:39:25:ae:81:21:c4:e0:b7:e3:42:cc:ad: 46:b3:3f:1c:07:42:cb:bc:1d:a2:41:13:1b:5a:a4: 07:ce:03:fd:ba:2f:9a:cf:74:78:f3:d3:64:78:61: e5:da:e0:1d:e1:bf:44:11:b9:b9:62:58:c0:10:05: 12:fb:b8:ae:e4:44:b8:cc:ce:45:39:34:27:26:94: d2:55:a2:0f:36:95:07:f5:4f:57:e9:7c:ba:80:4d: 5a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1D:A6:41:76:7F:8C:F5:AB:F4:3D:4C:92:4D:54:4C:93:48:7C:74 X509v3 Authority Key Identifier: keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:64:bf:08:e2:c7:14:d1:ad:47:02:6f:69:49:ae:88:72:99: 3c:80:49:76:aa:1c:d1:a5:66:ad:63:a2:d7:8f:3d:31:fa:f7: 33:fa:81:2c:e3:ef:3a:e9:67:09:2b:7f:85:de:e1:f9:75:64: 6a:49:18:c6:3b:f1:89:4d:6b:ed:b7:66:f3:34:3c:53:fd:b8: 75:e0:c2:5b:d7:e8:3f:67:20:77:d2:28:f8:83:a5:d0:bc:a7: 64:1a:b9:f6:a5:3a:7b:7f:0b:21:d8:b4:0b:15:a3:3c:a8:71: 85:a7:9b:73:bd:7f:d7:7e:25:92:7b:52:d9:a9:b6:ad:6d:e5: 96:8c:25:3e:8d:6b:f9:f7:af:c0:8b:45:a0:88:38:57:7e:da: 1e:9a:7e:27:0b:c3:37:b5:d3:8c:c5:18:05:ea:bf:0b:83:f4: 14:3a:d5:b5:f8:c0:00:86:c4:bb:75:9f:53:f5:22:da:2d:5a: 1f:7a:20:2b:ea:70:27:6e:06:1c:8d:a2:5b:fe:05:3b:0b:91: d6:2c:0d:9c:b0:d7:47:5b:4b:b5:74:8e:b9:5f:5e:a3:0f:f9: 09:a2:aa:16:b4:1c:aa:85:12:c0:06:c4:f9:fa:2f:7d:56:76: f4:3f:93:24:a3:45:f8:a7:6b:68:cd:68:44:e3:80:4f:bf:46: a3:1a:da:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCMO2A/jdFHKIVgdeB6HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NGYwYjI3MmUyNDNhY2ZhZjM2MzQ2MDk0ZTU4Mzk1Y2Mx MzgzYjQwHhcNMjUxMjA2MDYwMTIwWhcNMjUxMjA3MDYwMTIwWjAzMTEwLwYDVQQD EygzYzFkYTY0MTc2N2Y4Y2Y1YWJmNDNkNGM5MjRkNTQ0YzkzNDg3Yzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvthP04imyEBHkIAtsOtLlvPoGP0t qrCcZjQKoL+jqS1IAjURHBF9ZRwpVdSK+kBcbCNRt9wQrc1/JfqjqwyyxjLRTRRE njxWvrH7O1S9425fCsHcOKpg5ESsgVRUIyZq3ZNA5low9dkmcEiR3LmwffnCwzqr zWqiyMHRXR7A4tkmif2IBblPVVtgVxiGXSteRq5yE7uElyM2McXmUPoZKGQDcb+3 w9o5Ja6BIcTgt+NCzK1Gsz8cB0LLvB2iQRMbWqQHzgP9ui+az3R489NkeGHl2uAd 4b9EEbm5YljAEAUS+7iu5ES4zM5FOTQnJpTSVaIPNpUH9U9X6Xy6gE1ayQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwdpkF2f4z1q/Q9TJJNVEyTSHx0MB8GA1UdIwQY MBaAFBlPCycuJDrPrzY0YJTlg5XME4O0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNTNkMzQtYzNkNi00OWRiLWFiN2Yt YTljY2U1NmEwNjY4LzEvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hNTNkMzQtYzNkNi00OWRiLWFiN2YtYTljY2U1NmEwNjY4 LzEvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWS/COLH FNGtRwJvaUmuiHKZPIBJdqoc0aVmrWOi1489Mfr3M/qBLOPvOulnCSt/hd7h+XVk akkYxjvxiU1r7bdm8zQ8U/24deDCW9foP2cgd9Io+IOl0LynZBq59qU6e38LIdi0 CxWjPKhxhaebc71/134lkntS2am2rW3llowlPo1r+fevwItFoIg4V37aHpp+JwvD N7XTjMUYBeq/C4P0FDrVtfjAAIbEu3WfU/Ui2i1aH3ogK+pwJ24GHI2iW/4FOwuR 1iwNnLDXR1tLtXSOuV9eow/5CaKqFrQcqoUSwAbE+fovfVZ29D+TJKNF+KdraM1o ROOAT79GoxraOw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:55:15 2025 by rpki-client