This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft File: GXSZvpe8wyf2Tp64xCOUUIygbWU.mft (raw, json) Hash identifier: ABQKwKU0iD1xeZ9fFKsjmP1hXCs21fmTLvH+bHtEp6g= Subject key identifier: 51:4F:7A:42:7A:33:B2:A0:0C:4F:B7:58:11:98:71:B5:0B:61:E2:40 Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65 Certificate issuer: /CN=197499be97bcc327f64e9eb8c42394508ca06d65 Certificate serial: 019AF3529C5C7888FD48D6148DE4FD08ED05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft Manifest number: 0DB8 Signing time: Sat 06 Dec 2025 11:01:08 +0000 Manifest this update: Sat 06 Dec 2025 11:01:08 +0000 Manifest next update: Sun 07 Dec 2025 11:01:08 +0000 Files and hashes: 1: GXSZvpe8wyf2Tp64xCOUUIygbWU.crl (hash: dQfTUTauhNf9xE+NbOljPl/1gdlhY5Bx2Q1LnYUOreo=) 2: sotFwW0dd18jhlgGMEoNrnqopP4.roa (hash: gVSt/FfSJjyB1+rQ4tB9A+DWP4ec6C61j3+zsQZbog8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:9c:5c:78:88:fd:48:d6:14:8d:e4:fd:08:ed:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65 Validity Not Before: Dec 6 11:01:08 2025 GMT Not After : Dec 7 11:01:08 2025 GMT Subject: CN=514f7a427a33b2a00c4fb758119871b50b61e240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6f:87:df:f6:64:fd:38:b7:f9:aa:b5:ce:51: f8:b3:98:b2:60:02:81:df:68:a1:e6:db:f5:4f:e8: 0c:ab:16:00:25:f8:cf:6d:7e:5d:8b:b5:2e:86:84: fc:3f:ea:d2:2d:85:0f:a3:18:29:e7:00:f8:33:06: 24:a7:ad:1f:ca:4b:8e:a5:da:ed:4c:5b:1d:89:d9: 0b:1d:b4:55:a2:39:60:2d:84:d7:4b:b6:46:44:3d: cf:2c:0c:48:08:97:ca:e0:8e:cc:6d:6f:ca:ee:ba: 8a:b1:94:0f:14:3a:f6:24:2b:89:15:40:fa:d5:0c: f8:de:32:6e:e6:6e:35:e0:91:47:2a:46:e7:ce:32: f0:d8:0d:c7:1b:27:d4:54:b7:03:10:b2:7f:f9:c0: 6c:e1:31:c9:da:80:8b:ce:14:ac:1e:8f:92:bb:a5: 0f:d5:9d:e5:a2:49:d8:60:79:4c:22:c0:66:3b:34: 37:99:ba:eb:9e:bd:c4:ea:33:0d:c0:b0:0a:7c:b8: 1b:d0:f0:f4:41:8e:37:4c:f1:b4:fa:56:6d:e8:8f: 04:21:63:5f:0e:54:b4:9a:b8:7a:67:61:27:de:30: 36:56:44:1b:94:60:eb:0c:a2:b6:ab:97:67:76:cd: ae:44:3e:05:de:3c:ce:fc:1c:89:14:8c:a0:1e:b9: 48:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4F:7A:42:7A:33:B2:A0:0C:4F:B7:58:11:98:71:B5:0B:61:E2:40 X509v3 Authority Key Identifier: keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b2:f9:bf:56:c3:79:96:6e:a1:7f:0c:44:1f:91:ad:1f:bb: 80:c3:da:6b:51:6c:d3:d9:3d:b7:2f:e2:e1:d2:29:e6:4d:a8: 6d:d4:a9:13:da:ae:2b:43:66:a8:60:98:29:e2:32:30:4f:a4: 76:a5:01:01:b0:1b:05:48:c9:88:1e:30:e5:eb:fc:31:a1:da: 81:c1:cc:b7:74:23:29:01:34:64:af:4d:7b:37:b6:d8:1e:e0: 80:f5:5f:1e:19:c1:31:62:91:1d:2b:74:d2:70:1b:63:fd:ca: 50:7d:db:99:5a:9e:1b:d6:23:3c:b6:80:e2:12:eb:88:c2:ab: a4:dc:c2:09:b9:69:24:f3:d1:86:f9:09:f3:3e:9c:ee:7c:4b: 9e:21:21:86:46:40:0b:33:52:3c:56:4b:fb:ab:94:32:cb:da: 9f:c6:a0:a5:41:c9:d9:1f:02:d3:8e:17:66:89:c7:e0:0d:b0: e8:37:69:c4:d4:ed:0b:28:4b:08:8c:c3:dc:19:c3:56:aa:0e: 30:1f:91:c3:b2:a6:63:e5:85:3c:da:81:63:75:e4:ac:68:dd: af:fa:05:ef:d1:19:38:76:53:ef:3c:eb:5d:97:ba:ad:4e:7e: bd:6d:dd:25:a1:02:dc:28:77:48:f5:51:ee:6a:d6:9b:a7:01: 66:07:3e:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpxceIj9SNYUjeT9CO0FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NzQ5OWJlOTdiY2MzMjdmNjRlOWViOGM0MjM5NDUwOGNh MDZkNjUwHhcNMjUxMjA2MTEwMTA4WhcNMjUxMjA3MTEwMTA4WjAzMTEwLwYDVQQD Eyg1MTRmN2E0MjdhMzNiMmEwMGM0ZmI3NTgxMTk4NzFiNTBiNjFlMjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG+H3/Zk/Ti3+aq1zlH4s5iyYAKB 32ih5tv1T+gMqxYAJfjPbX5di7UuhoT8P+rSLYUPoxgp5wD4MwYkp60fykuOpdrt TFsdidkLHbRVojlgLYTXS7ZGRD3PLAxICJfK4I7MbW/K7rqKsZQPFDr2JCuJFUD6 1Qz43jJu5m414JFHKkbnzjLw2A3HGyfUVLcDELJ/+cBs4THJ2oCLzhSsHo+Su6UP 1Z3loknYYHlMIsBmOzQ3mbrrnr3E6jMNwLAKfLgb0PD0QY43TPG0+lZt6I8EIWNf DlS0mrh6Z2En3jA2VkQblGDrDKK2q5dnds2uRD4F3jzO/ByJFIygHrlI5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFPekJ6M7KgDE+3WBGYcbULYeJAMB8GA1UdIwQY MBaAFBl0mb6XvMMn9k6euMQjlFCMoG1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82YTkwMGEtOGI1Yy00MDdiLWEwOTQt ODk4MDM2NzM0ODc4LzEvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82YTkwMGEtOGI1Yy00MDdiLWEwOTQtODk4MDM2NzM0ODc4 LzEvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7L5v1bD eZZuoX8MRB+RrR+7gMPaa1Fs09k9ty/i4dIp5k2obdSpE9quK0NmqGCYKeIyME+k dqUBAbAbBUjJiB4w5ev8MaHagcHMt3QjKQE0ZK9Neze22B7ggPVfHhnBMWKRHSt0 0nAbY/3KUH3bmVqeG9YjPLaA4hLriMKrpNzCCblpJPPRhvkJ8z6c7nxLniEhhkZA CzNSPFZL+6uUMsvan8agpUHJ2R8C044XZonH4A2w6DdpxNTtCyhLCIzD3BnDVqoO MB+Rw7KmY+WFPNqBY3XkrGjdr/oF79EZOHZT7zzrXZe6rU5+vW3dJaEC3Ch3SPVR 7mrWm6cBZgc+0A== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:16 2025 by rpki-client