This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft File: gvGLgDOdiuY39KAvM1u-x8jCa94.mft (raw, json) Hash identifier: ZvffZ7Y8i09az/rhSG2zYaRHMIQA/JC8yhHlDvH7hyA= Subject key identifier: 52:7D:8E:0C:84:9F:16:C8:EC:C3:A7:90:9E:78:46:32:6F:1A:0E:F6 Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE Certificate issuer: /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde Certificate serial: 019AF3C0542F2E751D9B7F23762DC7758C3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 13:00:59 +0000 Manifest this update: Sat 06 Dec 2025 13:00:59 +0000 Manifest next update: Sun 07 Dec 2025 13:00:59 +0000 Files and hashes: 1: 1-q3Sc_aFuf3HEfZnJlmO5IobYdI.roa (hash: 1ZydJMw0C7UeG9c7OwbN/uc3B58dbwLgrfGBkI/dEhg=) 2: gvGLgDOdiuY39KAvM1u-x8jCa94.crl (hash: yeJFckzfmToor75znb+L6SWhOWUTRcFKG3LC+W632SA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:54:2f:2e:75:1d:9b:7f:23:76:2d:c7:75:8c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde Validity Not Before: Dec 6 13:00:59 2025 GMT Not After : Dec 7 13:00:59 2025 GMT Subject: CN=527d8e0c849f16c8ecc3a7909e7846326f1a0ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:01:65:4d:40:f1:98:5b:0a:70:1e:fc:cf:2d: e1:de:d8:c9:d4:0f:c8:b3:b4:06:5b:26:86:e7:4f: 4d:94:fc:e4:a2:99:31:e5:33:40:39:0f:2c:8d:52: 42:3f:a9:67:c0:08:27:12:9f:13:ac:7a:5c:da:75: 9d:81:5c:13:91:8b:3f:1e:76:81:10:58:32:b6:e8: ea:0d:4c:c4:3f:a1:de:e2:ac:36:a5:3a:4a:70:ce: 97:35:40:92:80:d1:78:56:d1:71:98:1b:af:d6:19: 95:58:87:14:98:32:31:47:8a:e8:94:22:72:d8:90: 22:f5:d8:48:f7:c1:a7:9b:9e:5d:bf:2d:a5:ca:12: ff:b5:64:44:f7:c0:44:52:1c:94:50:b9:85:7a:54: 6c:95:da:d3:7c:06:d7:2b:34:d2:d1:55:a7:b3:c9: 97:bb:a4:89:90:7b:0f:71:88:27:39:fa:18:a1:da: a3:f9:73:1c:be:78:72:84:97:1a:4a:a0:d7:70:54: e8:65:9f:5b:90:63:a9:f8:02:1a:f5:84:0e:0f:f1: 3b:48:af:5e:f1:ad:d9:43:cb:f1:c3:86:66:57:0b: 01:8f:a0:16:d3:17:be:6e:88:c8:b0:f9:f0:53:95: 28:35:69:1b:9d:f5:d7:77:f9:ae:eb:b2:75:1b:85: bb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7D:8E:0C:84:9F:16:C8:EC:C3:A7:90:9E:78:46:32:6F:1A:0E:F6 X509v3 Authority Key Identifier: keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:27:92:77:e1:2f:d9:98:df:e7:43:2c:4a:53:09:55:b3:38: 1e:a0:98:7a:f2:00:3d:d2:f7:0d:8b:e4:6b:3e:c7:90:00:67: ee:48:69:49:0e:31:51:c6:59:80:12:2b:7b:4a:d7:0a:2c:71: a1:cf:51:cf:79:15:95:46:ad:e4:35:73:15:07:34:ff:b0:07: c5:d0:5f:76:57:f8:c6:2e:e1:7d:65:43:fc:b4:12:13:5d:48: 04:5b:7c:a6:70:4d:67:91:6e:d6:d7:c8:b0:52:45:80:d5:4f: f6:c0:38:e9:b8:8c:fa:82:b0:37:14:2e:b6:f3:f8:44:95:e4: 01:bc:d5:9b:81:e9:9f:06:d5:7f:4e:b2:4d:90:7b:89:8c:21: b5:d5:a2:45:96:41:f0:a2:72:15:3f:0f:8d:c9:c1:4e:fb:ae: 28:7b:e1:18:ab:a2:2d:f4:83:6f:27:fc:38:dd:4c:1a:78:e6: 00:d6:27:a8:40:af:3e:e7:9b:4a:69:0d:0f:76:64:4f:ae:85: 7e:2d:42:5f:53:16:d2:82:e3:fd:df:0a:43:f8:c5:fc:69:63: 70:f2:06:f0:58:3f:47:f4:23:a3:e8:d3:29:77:fc:9f:1c:f2: 17:cf:2b:8e:13:1d:a3:8b:3f:07:fb:27:e3:04:24:1b:18:ca: e8:a5:ef:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwFQvLnUdm38jdi3HdYw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZjE4YjgwMzM5ZDhhZTYzN2Y0YTAyZjMzNWJiZWM3Yzhj MjZiZGUwHhcNMjUxMjA2MTMwMDU5WhcNMjUxMjA3MTMwMDU5WjAzMTEwLwYDVQQD Eyg1MjdkOGUwYzg0OWYxNmM4ZWNjM2E3OTA5ZTc4NDYzMjZmMWEwZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwFlTUDxmFsKcB78zy3h3tjJ1A/I s7QGWyaG509NlPzkopkx5TNAOQ8sjVJCP6lnwAgnEp8TrHpc2nWdgVwTkYs/HnaB EFgytujqDUzEP6He4qw2pTpKcM6XNUCSgNF4VtFxmBuv1hmVWIcUmDIxR4rolCJy 2JAi9dhI98Gnm55dvy2lyhL/tWRE98BEUhyUULmFelRsldrTfAbXKzTS0VWns8mX u6SJkHsPcYgnOfoYodqj+XMcvnhyhJcaSqDXcFToZZ9bkGOp+AIa9YQOD/E7SK9e 8a3ZQ8vxw4ZmVwsBj6AW0xe+bojIsPnwU5UoNWkbnfXXd/mu67J1G4W79wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJ9jgyEnxbI7MOnkJ54RjJvGg72MB8GA1UdIwQY MBaAFILxi4AznYrmN/SgLzNbvsfIwmveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3ZHTGdET2RpdVkzOUtBdk0xdS14OGpDYTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82NWMyZDktODBkNC00NTlmLWFlNjEt YjViZDQyOGYxOTBjLzEvZ3ZHTGdET2RpdVkzOUtBdk0xdS14OGpDYTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS82NWMyZDktODBkNC00NTlmLWFlNjEtYjViZDQyOGYxOTBj LzEvZ3ZHTGdET2RpdVkzOUtBdk0xdS14OGpDYTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkieSd+Ev 2Zjf50MsSlMJVbM4HqCYevIAPdL3DYvkaz7HkABn7khpSQ4xUcZZgBIre0rXCixx oc9Rz3kVlUat5DVzFQc0/7AHxdBfdlf4xi7hfWVD/LQSE11IBFt8pnBNZ5Fu1tfI sFJFgNVP9sA46biM+oKwNxQutvP4RJXkAbzVm4HpnwbVf06yTZB7iYwhtdWiRZZB 8KJyFT8PjcnBTvuuKHvhGKuiLfSDbyf8ON1MGnjmANYnqECvPuebSmkND3ZkT66F fi1CX1MW0oLj/d8KQ/jF/GljcPIG8Fg/R/Qjo+jTKXf8nxzyF88rjhMdo4s/B/sn 4wQkGxjK6KXvrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:57:14 2025 by rpki-client