This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json) Hash identifier: /D6RTlGkmRNV6kKTKcsKO0Zo/4lVwoxuO5qx5DRkgGg= Subject key identifier: 2D:CD:7C:96:04:96:EB:9B:26:F7:BA:EB:33:4A:9B:1B:83:33:60:5F Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019AF31C70EC952E2F9FD01567210189CBA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft Manifest number: 02EB Signing time: Sat 06 Dec 2025 10:01:58 +0000 Manifest this update: Sat 06 Dec 2025 10:01:58 +0000 Manifest next update: Sun 07 Dec 2025 10:01:58 +0000 Files and hashes: 1: EYgXdph0ad7x7RpPlZyOENzd-oA.roa (hash: Hrugq5ntPmxP93lV9SDtZJap5r0QftcRWf7OkP/hZyI=) 2: G_e3YSqYAX0sTWP5ZIgUxrclesc.roa (hash: ZO1I857zyVtc1skT7PHPYJ5rAOdh6XGavLJ4e3panbM=) 3: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: 3Z5n+QN1igrI9M6eJwWCekVcCfSm6KH8OXAfkkMoYmw=) 4: KKNtSPFbvF4xC2fg1H7HuDRzkGE.roa (hash: H5EVZdHcI+WVSxnRSQo+6mijz5FGMO2AIbkdKiqbEss=) 5: OzgFbbI0V5S5o1DdJOQqtABdtH0.roa (hash: y+11/IkfsSulnXEQxCkUZyHEuxM7K/mkeaGWZSD0CSE=) 6: ZI7vOrG6oAyS8YfJbBpZewDNGXQ.roa (hash: npYfXMzfry1oEZ/+7tKck9ENcVNUZ6jLLVA2nOAVsn8=) 7: cTjmubyLCN4Cd4JXEeIjGOFI_QI.roa (hash: 5AsKzlWifWFIxtEM5INGb5cckYMMjWeiNCE8Ap83gMM=) 8: lHoepiCpX7g78Ng_Suk_7keCehI.roa (hash: JX1GmHVZEyU6jv7xs+Gm8SluiSfi45q37cjpO1lCp5M=) 9: mjqRtPW_FFHVUc_9UfMFfi25D8E.roa (hash: XJlXFoLhM+Dtcep8s7P/rFzF3KGUlEzdjjknkuerFuY=) 10: qMKOIrCowr-evIF2TKMj48rb5ME.roa (hash: AsnmGDasDlnURHsWZv2Xw6xs4e4snEFqyNhGTwaLi9I=) 11: qnICZYiLbrGPlJAYqEcKvQ2CjqQ.roa (hash: HnPlRq2/eM18ZCRGQnjr87vL3s3tKW/ZrixlOUg/qKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:70:ec:95:2e:2f:9f:d0:15:67:21:01:89:cb:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Dec 6 10:01:58 2025 GMT Not After : Dec 7 10:01:58 2025 GMT Subject: CN=2dcd7c960496eb9b26f7baeb334a9b1b8333605f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:41:81:e0:fe:e2:da:cd:1f:1b:44:8c:8e:46: 8e:a5:2e:f2:43:a7:4a:60:52:19:f3:92:31:db:7c: a7:56:e3:e5:37:d9:b6:9e:f0:76:5c:78:8f:09:f7: 6d:5f:c2:eb:ad:57:f6:74:c0:82:5c:1d:c9:0e:2a: fd:e8:4b:d5:5a:b3:b5:38:4c:94:c4:85:bc:76:7b: c3:e0:ac:1a:f6:9d:33:f9:c3:7b:05:36:79:76:cd: 30:2a:cd:7f:0c:55:d9:6f:86:2a:2c:7b:15:e6:7c: a6:be:16:bb:e8:a1:af:b0:bc:73:59:98:df:3d:be: 26:f1:1e:82:f3:af:83:6d:ab:ff:10:8a:76:69:1a: 9d:a9:d3:fc:71:7c:1a:61:91:fb:57:48:46:43:c4: 30:f5:fd:a6:06:e7:c0:4c:d6:cb:13:86:4c:f7:56: 2f:39:c1:3d:4d:a3:3e:20:d9:4b:4c:86:52:ac:d8: 2e:7a:f5:c7:cc:0a:a8:8f:7f:20:9c:2e:40:26:29: 39:1e:d4:65:71:a6:e5:f8:ba:6f:35:ac:49:2f:8a: 94:98:78:f7:f0:bc:5e:eb:01:24:42:13:da:75:4e: b7:62:61:50:63:11:09:43:d7:cd:e3:e7:c5:93:0d: 4d:20:09:8d:f0:67:56:6d:29:cb:79:75:5c:6b:48: 3c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CD:7C:96:04:96:EB:9B:26:F7:BA:EB:33:4A:9B:1B:83:33:60:5F X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:2c:fa:44:97:f1:dc:3f:51:ba:14:37:56:3c:1c:0f:8b:42: 53:74:98:7f:e1:4a:8a:49:c4:83:99:2d:1c:bd:3a:2f:3a:28: ac:e1:4c:43:94:88:d3:b9:34:1d:29:e3:68:58:42:ac:ea:21: 0b:6f:1a:dc:13:ee:a4:30:a1:ee:c5:c2:4b:23:ad:e3:d9:f6: 99:b6:67:aa:52:9f:34:11:c9:82:fb:2c:11:dd:a4:37:6f:47: f7:26:1b:53:20:c7:c9:d6:b0:a6:19:4c:83:fe:0f:a0:30:a5: 2e:53:86:cf:6e:ef:f5:89:0a:be:d1:e6:d5:e1:79:be:19:e6: 6c:49:33:ff:f6:96:4b:54:b5:57:ae:52:f7:96:18:33:1e:0a: 19:a5:3a:12:ed:6b:80:7a:e1:e0:df:bd:a7:fd:d7:d4:bf:c4: 31:4d:12:a5:8f:18:1b:27:0e:b5:b1:28:b3:b1:5a:20:7c:1f: a9:79:9a:5f:90:39:67:4e:10:2f:4a:42:95:91:5c:37:99:8e: c8:92:fb:1c:c7:e2:72:4d:50:8a:88:88:15:ce:d2:72:6a:bd: a6:3f:a7:f5:0a:ed:51:2a:b6:f9:e5:92:8a:27:f6:d2:03:6f: 24:3b:97:f1:7f:70:5e:c3:1c:a1:3b:d2:4f:bc:4a:11:50:3c: 86:c1:24:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHHDslS4vn9AVZyEBicuoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjUxMjA2MTAwMTU4WhcNMjUxMjA3MTAwMTU4WjAzMTEwLwYDVQQD EygyZGNkN2M5NjA0OTZlYjliMjZmN2JhZWIzMzRhOWIxYjgzMzM2MDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUGB4P7i2s0fG0SMjkaOpS7yQ6dK YFIZ85Ix23ynVuPlN9m2nvB2XHiPCfdtX8LrrVf2dMCCXB3JDir96EvVWrO1OEyU xIW8dnvD4Kwa9p0z+cN7BTZ5ds0wKs1/DFXZb4YqLHsV5nymvha76KGvsLxzWZjf Pb4m8R6C86+Dbav/EIp2aRqdqdP8cXwaYZH7V0hGQ8Qw9f2mBufATNbLE4ZM91Yv OcE9TaM+INlLTIZSrNguevXHzAqoj38gnC5AJik5HtRlcabl+LpvNaxJL4qUmHj3 8Lxe6wEkQhPadU63YmFQYxEJQ9fN4+fFkw1NIAmN8GdWbSnLeXVca0g80wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3NfJYEluubJve66zNKmxuDM2BfMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyz6RJfx 3D9RuhQ3VjwcD4tCU3SYf+FKiknEg5ktHL06LzoorOFMQ5SI07k0HSnjaFhCrOoh C28a3BPupDCh7sXCSyOt49n2mbZnqlKfNBHJgvssEd2kN29H9yYbUyDHydawphlM g/4PoDClLlOGz27v9YkKvtHm1eF5vhnmbEkz//aWS1S1V65S95YYMx4KGaU6Eu1r gHrh4N+9p/3X1L/EMU0SpY8YGycOtbEos7FaIHwfqXmaX5A5Z04QL0pClZFcN5mO yJL7HMfick1QioiIFc7Scmq9pj+n9QrtUSq2+eWSiif20gNvJDuX8X9wXsMcoTvS T7xKEVA8hsEkPg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:56:34 2025 by rpki-client