This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft File: GxubyMfg_Ee_iwpXLRpXLWppa7c.mft (raw, json) Hash identifier: 3mRTvdxduuj5Syl8Q5OBgUzGmtL6dBmVD4Qw+Jog3l4= Subject key identifier: 63:57:80:D1:D4:2D:B4:C1:DA:82:17:8C:93:BF:FA:FA:F3:1D:0A:E3 Authority key identifier: 1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7 Certificate issuer: /CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7 Certificate serial: 019AF1D1A7E6169E65471E8AEEDDBB325102 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft Manifest number: 0F86 Signing time: Sat 06 Dec 2025 04:00:40 +0000 Manifest this update: Sat 06 Dec 2025 04:00:40 +0000 Manifest next update: Sun 07 Dec 2025 04:00:40 +0000 Files and hashes: 1: GxubyMfg_Ee_iwpXLRpXLWppa7c.crl (hash: M6c4vc+8t4WBD1Di4xHmWieoEPFZIWO0obwSTnDeImk=) 2: xGuOIxMFC1Wn9_vw4MtsHeq3I1E.roa (hash: kcCBBOjP/JTwKy7Io6Y4tXVkBszU8YzDmmO1xZCayZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a7:e6:16:9e:65:47:1e:8a:ee:dd:bb:32:51:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7 Validity Not Before: Dec 6 04:00:40 2025 GMT Not After : Dec 7 04:00:40 2025 GMT Subject: CN=635780d1d42db4c1da82178c93bffafaf31d0ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3a:5d:0e:d6:24:94:4b:9c:8c:56:d8:10:f4: e9:08:e2:6c:ee:a7:1f:e4:b4:27:a9:dc:14:fd:c8: 49:b1:a2:9a:69:87:76:eb:7b:28:d7:08:8b:52:9e: 6e:de:d3:e0:9c:39:09:ee:2f:6a:c2:32:75:94:82: d1:34:1a:13:9a:26:8a:c3:22:b7:2a:76:50:23:a8: c9:50:9a:eb:88:cf:52:79:f5:fa:b4:01:bb:f0:85: fb:55:fc:3a:6d:bd:fe:3b:c0:f1:fb:7b:c9:f1:e9: e3:bf:f1:16:50:4c:89:67:f3:6a:9a:87:cc:a3:4c: c4:bb:e0:55:24:f7:8e:bc:37:09:ed:0e:73:a7:ea: f6:80:9a:69:60:f5:fe:e3:b4:7d:72:eb:f6:7a:d4: 69:31:c9:f0:2f:cf:2c:49:bc:39:e0:35:eb:45:29: cf:75:8f:82:a9:f5:fc:74:f4:2a:b9:62:05:6f:e3: c9:71:f7:a4:26:2c:9d:46:6a:32:82:1a:42:2c:b4: a0:20:b4:95:38:ef:26:05:5e:89:1a:a7:70:09:41: 38:e1:72:f2:00:4d:26:49:b0:ae:a8:d8:cc:0f:e5: 9e:f9:41:34:81:5d:36:dc:17:78:60:af:aa:9c:bb: 7c:2e:41:a7:16:7e:7b:cb:ba:dc:04:26:74:21:9c: 6f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:57:80:D1:D4:2D:B4:C1:DA:82:17:8C:93:BF:FA:FA:F3:1D:0A:E3 X509v3 Authority Key Identifier: keyid:1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0f:dc:9e:d9:aa:39:6f:cf:13:1c:b0:fe:30:9c:5e:9c:32: 32:ee:c2:24:26:4b:cf:3f:65:8d:9c:3c:21:61:5c:15:33:45: 9f:04:d2:d0:a9:f0:ce:20:c5:fe:1b:ff:63:2a:cf:ab:39:fe: b6:a4:68:3f:0f:50:a0:52:7a:b4:ff:b8:e3:f5:36:c4:ff:3a: 92:7a:9e:d7:1a:68:3f:e1:09:fd:5e:9d:27:35:b0:1b:99:c7: 7a:47:58:34:ac:ea:c8:42:9e:d3:b5:c5:c0:03:cc:a0:9d:ac: d3:b3:b4:c5:0a:eb:77:fe:ba:75:53:17:e6:33:a2:42:8d:e3: b6:19:57:6e:27:a3:18:ee:5c:4e:74:a9:ea:44:fd:6f:8d:d0: 8f:eb:95:b5:58:fd:71:72:9f:77:06:0a:19:db:69:59:c5:51: 8a:12:1a:b8:e0:da:bd:23:c4:00:46:f0:70:3e:11:2d:31:07: d4:bc:cb:2e:8a:c6:68:e1:bf:01:69:91:66:d2:a7:77:55:81: 03:de:b4:7a:b9:8f:58:d1:92:6a:90:7d:90:ed:51:6a:8e:61: 4a:79:96:db:83:c0:ba:a7:af:9b:94:fc:46:00:9b:5a:74:79: fb:45:2a:ab:9a:c2:20:ac:1b:b8:93:d9:6a:3d:ac:aa:5d:93: f2:ab:55:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0afmFp5lRx6K7t27MlECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMWI5YmM4YzdlMGZjNDdiZjhiMGE1NzJkMWE1NzJkNmE2 OTZiYjcwHhcNMjUxMjA2MDQwMDQwWhcNMjUxMjA3MDQwMDQwWjAzMTEwLwYDVQQD Eyg2MzU3ODBkMWQ0MmRiNGMxZGE4MjE3OGM5M2JmZmFmYWYzMWQwYWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzpdDtYklEucjFbYEPTpCOJs7qcf 5LQnqdwU/chJsaKaaYd263so1wiLUp5u3tPgnDkJ7i9qwjJ1lILRNBoTmiaKwyK3 KnZQI6jJUJrriM9SefX6tAG78IX7Vfw6bb3+O8Dx+3vJ8enjv/EWUEyJZ/NqmofM o0zEu+BVJPeOvDcJ7Q5zp+r2gJppYPX+47R9cuv2etRpMcnwL88sSbw54DXrRSnP dY+CqfX8dPQquWIFb+PJcfekJiydRmoyghpCLLSgILSVOO8mBV6JGqdwCUE44XLy AE0mSbCuqNjMD+We+UE0gV023Bd4YK+qnLt8LkGnFn57y7rcBCZ0IZxvvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNXgNHULbTB2oIXjJO/+vrzHQrjMB8GA1UdIwQY MBaAFBsbm8jH4PxHv4sKVy0aVy1qaWu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3h1YnlNZmdfRWVfaXdwWExScFhMV3BwYTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80ZDJhOWYtNmY3OC00Y2M2LTlhZDYt MGY2Yjg0NjhjNzlkLzEvR3h1YnlNZmdfRWVfaXdwWExScFhMV3BwYTdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80ZDJhOWYtNmY3OC00Y2M2LTlhZDYtMGY2Yjg0NjhjNzlk LzEvR3h1YnlNZmdfRWVfaXdwWExScFhMV3BwYTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOg/cntmq OW/PExyw/jCcXpwyMu7CJCZLzz9ljZw8IWFcFTNFnwTS0KnwziDF/hv/YyrPqzn+ tqRoPw9QoFJ6tP+44/U2xP86knqe1xpoP+EJ/V6dJzWwG5nHekdYNKzqyEKe07XF wAPMoJ2s07O0xQrrd/66dVMX5jOiQo3jthlXbiejGO5cTnSp6kT9b43Qj+uVtVj9 cXKfdwYKGdtpWcVRihIauODavSPEAEbwcD4RLTEH1LzLLorGaOG/AWmRZtKnd1WB A960ermPWNGSapB9kO1Rao5hSnmW24PAuqevm5T8RgCbWnR5+0Uqq5rCIKwbuJPZ aj2sql2T8qtVvg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:31 2025 by rpki-client