This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft File: guX7w-pSWnjGMMTahkuppg4Zm_8.mft (raw, json) Hash identifier: 0Bnni5XIlCY3WGiQ/Mc2kTtCf1cy43Nvjc/HIfw6SLs= Subject key identifier: C6:37:2D:DD:DD:30:80:B0:D2:E4:E4:18:9A:7C:DB:2F:48:3D:6C:FD Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF Certificate issuer: /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff Certificate serial: 019AF1D1E452F913F1751DB2796ED6137F8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:55 +0000 Manifest this update: Sat 06 Dec 2025 04:00:55 +0000 Manifest next update: Sun 07 Dec 2025 04:00:55 +0000 Files and hashes: 1: 1-QG4tCncv0FTtCHqg5B2GIvzr7Y.roa (hash: Y2rS+2UdPK85e7sE5yCklBS//u+UrJBVKAmv+QqSGio=) 2: guX7w-pSWnjGMMTahkuppg4Zm_8.crl (hash: Zqsd68h7QbMotW8fgn2mZpwcIDThrvHcXkAsLiNdhZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e4:52:f9:13:f1:75:1d:b2:79:6e:d6:13:7f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff Validity Not Before: Dec 6 04:00:55 2025 GMT Not After : Dec 7 04:00:55 2025 GMT Subject: CN=c6372ddddd3080b0d2e4e4189a7cdb2f483d6cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:68:eb:df:57:50:95:bf:3e:a2:17:f5:01:42: b5:76:22:25:50:3b:c0:80:67:79:44:e7:77:9d:e2: 78:4c:5f:35:4c:ba:77:46:33:65:7f:12:a3:ca:7b: 6e:89:8d:ea:16:56:80:f9:04:8d:cb:7f:de:e1:cd: fc:b5:62:37:78:2a:83:56:b5:b6:ce:c3:bc:7b:fe: 53:23:19:99:8d:39:ed:64:ef:e8:97:69:7d:c7:32: 49:15:04:a0:80:9d:62:36:74:45:d2:e2:7b:65:91: e6:ba:46:74:ff:aa:0d:fa:59:b5:a4:7d:7d:c3:53: c4:70:ce:1f:92:28:0e:b1:b9:c0:bd:60:ac:84:5c: 10:87:3e:d4:54:27:ed:7f:18:6d:b0:32:b2:67:33: 74:20:77:a8:66:4c:47:56:5c:f2:2b:4c:d9:d1:49: 7f:d5:4f:4a:3e:87:b5:79:f0:67:ee:5a:0f:de:c1: d6:43:7c:51:2d:dd:ef:ac:dc:94:fa:98:04:9a:87: cc:f0:85:1a:07:a7:9c:c1:97:97:ec:06:c9:9f:e6: 9e:1e:23:e3:7d:ad:52:ad:c9:3c:e0:5a:aa:0c:35: 24:24:20:dc:bb:7f:a2:e8:a4:15:7d:78:4a:7d:66: 9c:c7:6f:20:c4:d8:97:1f:bf:fc:86:f5:6f:cb:b5: 41:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:37:2D:DD:DD:30:80:B0:D2:E4:E4:18:9A:7C:DB:2F:48:3D:6C:FD X509v3 Authority Key Identifier: keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:45:fb:cf:9e:2a:d4:88:90:ca:5c:54:47:c7:00:4e:5a:3c: 42:6a:02:3c:0c:6b:fa:09:cf:9f:c0:7b:a7:76:7f:e5:f7:da: 46:98:18:ec:e6:cf:ed:36:42:87:19:cd:0e:0f:0d:01:ae:6c: e2:a8:23:e2:8a:3b:c2:27:af:c6:e7:d3:ab:6b:96:28:81:8a: 34:cc:5f:ff:0d:6d:00:e0:eb:23:cb:c3:ed:68:c0:e6:46:09: 76:cb:c7:51:a1:06:e4:73:ae:c5:7c:5e:42:f0:6d:88:12:9e: 48:b8:c1:88:53:a3:d5:a1:54:78:68:6f:ee:31:b4:e4:69:7f: 92:99:e5:73:c0:33:cd:10:06:5d:03:cf:9b:b6:1e:2d:58:c4: be:6a:25:77:1e:6d:9c:4a:51:59:66:aa:cf:9a:b5:73:99:b8: 74:52:c7:73:a7:84:5b:ec:69:a0:5c:09:a6:71:cb:b8:87:28: a6:f2:b9:34:9b:fe:e9:8f:72:bc:07:b8:7c:39:ca:85:ca:dd: ea:3e:80:28:0a:6f:ca:d2:af:69:61:dc:96:aa:1a:72:36:7d: d6:64:38:a4:ec:2d:6e:b6:99:be:b2:73:0f:6c:3d:88:a4:25: 2f:21:a0:da:c9:05:38:71:2b:41:3d:c8:d7:de:df:48:f9:f5: 5d:43:a4:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eRS+RPxdR2yeW7WE3+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZTVmYmMzZWE1MjVhNzhjNjMwYzRkYTg2NGJhOWE2MGUx OTliZmYwHhcNMjUxMjA2MDQwMDU1WhcNMjUxMjA3MDQwMDU1WjAzMTEwLwYDVQQD EyhjNjM3MmRkZGRkMzA4MGIwZDJlNGU0MTg5YTdjZGIyZjQ4M2Q2Y2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmjr31dQlb8+ohf1AUK1diIlUDvA gGd5ROd3neJ4TF81TLp3RjNlfxKjyntuiY3qFlaA+QSNy3/e4c38tWI3eCqDVrW2 zsO8e/5TIxmZjTntZO/ol2l9xzJJFQSggJ1iNnRF0uJ7ZZHmukZ0/6oN+lm1pH19 w1PEcM4fkigOsbnAvWCshFwQhz7UVCftfxhtsDKyZzN0IHeoZkxHVlzyK0zZ0Ul/ 1U9KPoe1efBn7loP3sHWQ3xRLd3vrNyU+pgEmofM8IUaB6ecwZeX7AbJn+aeHiPj fa1Srck84FqqDDUkJCDcu3+i6KQVfXhKfWacx28gxNiXH7/8hvVvy7VBYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMY3Ld3dMICw0uTkGJp82y9IPWz9MB8GA1UdIwQY MBaAFILl+8PqUlp4xjDE2oZLqaYOGZv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yZWNlMjYtMTc4MS00NTVlLTgwYjMt OTNkZDY1MDc0ODhlLzEvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8yZWNlMjYtMTc4MS00NTVlLTgwYjMtOTNkZDY1MDc0ODhl LzEvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUX7z54q 1IiQylxUR8cATlo8QmoCPAxr+gnPn8B7p3Z/5ffaRpgY7ObP7TZChxnNDg8NAa5s 4qgj4oo7wievxufTq2uWKIGKNMxf/w1tAODrI8vD7WjA5kYJdsvHUaEG5HOuxXxe QvBtiBKeSLjBiFOj1aFUeGhv7jG05Gl/kpnlc8AzzRAGXQPPm7YeLVjEvmoldx5t nEpRWWaqz5q1c5m4dFLHc6eEW+xpoFwJpnHLuIcopvK5NJv+6Y9yvAe4fDnKhcrd 6j6AKApvytKvaWHclqoacjZ91mQ4pOwtbraZvrJzD2w9iKQlLyGg2skFOHErQT3I 197fSPn1XUOksQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:30 2025 by rpki-client