This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft File: gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json) Hash identifier: P2OZprSlMEQRRLQ0G7oETwFW/vo3CT/bKIiXJ0V4ni4= Subject key identifier: 8F:46:3F:37:0A:4B:E6:BE:4B:0E:21:A6:C3:DA:16:74:58:23:4D:D6 Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab Certificate serial: 019AF3898B28980C85926F323D44C7252BD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 12:01:08 +0000 Manifest this update: Sat 06 Dec 2025 12:01:08 +0000 Manifest next update: Sun 07 Dec 2025 12:01:08 +0000 Files and hashes: 1: LjTHS4WiiLbIvDv29J3ieyKf9N4.roa (hash: 0M1gHDPS8KhOTlzfhUcKPBiuX1DLKJxKwDXRimBbw2c=) 2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: zcwLoVkOCzDFUBoUmFoxoD6f9MKNisn2SrHUjdS21OA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:8b:28:98:0c:85:92:6f:32:3d:44:c7:25:2b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab Validity Not Before: Dec 6 12:01:08 2025 GMT Not After : Dec 7 12:01:08 2025 GMT Subject: CN=8f463f370a4be6be4b0e21a6c3da167458234dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:06:15:c1:0c:ee:ae:81:68:10:6b:d3:8f:34: 8b:02:7b:38:44:8d:2e:40:00:8f:e2:74:6b:a0:0a: 30:79:a5:7c:a3:f3:9e:76:94:05:84:59:d3:d1:77: 65:29:6b:c1:0f:ec:00:20:ea:a2:eb:d5:85:a5:8c: 16:a3:d7:7e:e5:65:1f:fd:ac:ad:ff:f0:46:32:ad: 1c:38:c6:20:6d:96:0a:be:2f:e6:00:a5:24:8a:74: f7:38:b7:4d:52:d3:c5:5b:d2:07:15:68:30:ba:02: f8:64:b8:59:b1:ff:7a:dc:25:59:5b:65:b4:c9:e3: b7:53:6e:04:ce:9b:4f:66:a2:27:00:a0:57:ca:a3: ab:c6:c6:c4:d9:3d:e5:f2:de:ee:02:22:a1:f3:d5: 08:96:35:1c:85:c7:2c:40:13:2c:91:9d:55:ef:a0: 53:c0:5c:0b:51:5d:2d:15:34:f8:74:2f:0f:42:db: b6:b4:a0:c9:53:38:4a:d2:bc:66:dd:91:a9:5d:5a: ff:e5:c0:29:95:45:50:55:39:fb:15:22:93:cb:d1: 5f:7f:f2:51:26:23:7f:4f:38:b5:82:b4:69:f3:f0: 27:37:d5:a7:e3:82:f4:68:33:2f:a7:ea:64:75:49: 35:58:f7:68:a4:d5:84:bd:5a:26:c2:31:6b:fa:b5: bf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:46:3F:37:0A:4B:E6:BE:4B:0E:21:A6:C3:DA:16:74:58:23:4D:D6 X509v3 Authority Key Identifier: keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:20:95:bc:0d:71:9e:ed:f1:f3:40:b2:5d:a2:a0:5c:83:58: f3:bb:be:c6:ac:7f:f4:cb:32:7a:35:0c:c2:71:6a:9f:f2:15: 08:29:04:79:d1:fc:d1:9c:6b:b2:9b:ad:88:7f:1c:6c:e7:c4: 5b:34:19:dc:ed:6e:c8:d3:0b:53:0e:3d:20:14:97:9e:53:64: 02:4c:78:15:cd:00:f3:57:bc:42:a3:33:6e:31:8c:e3:16:21: eb:c5:05:0a:07:aa:f2:b2:53:25:02:0d:e8:98:49:0b:b1:30: 06:05:54:77:9a:57:e1:14:6f:9d:d2:d0:70:d9:d8:52:f6:52: 79:b6:ad:be:70:09:1b:74:a1:12:f8:40:4a:9f:63:90:ee:f2: 34:d6:c4:18:1b:93:0d:20:d7:93:35:d0:65:24:b2:97:32:6b: 32:b6:d3:02:8f:8b:6e:8a:f3:c7:c8:92:4e:dc:50:f8:04:c2: 18:02:3b:3c:59:81:71:22:5b:04:d1:d9:b4:d8:50:82:99:ff: 74:62:b5:57:16:3c:a1:ba:ce:60:11:e2:76:93:ef:b1:fc:e4: e1:55:42:f0:6b:62:af:cf:36:f3:24:90:16:9d:76:96:0f:f6: 1f:78:c7:de:bb:06:d7:da:74:47:e5:29:cb:94:78:dd:6e:e3: 80:8c:35:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYsomAyFkm8yPUTHJSvWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMTI0ZDA0MTFhMjBmZDJiYjU0Njk3MGVhODAxMTZlZjI3 NmRiYWIwHhcNMjUxMjA2MTIwMTA4WhcNMjUxMjA3MTIwMTA4WjAzMTEwLwYDVQQD Eyg4ZjQ2M2YzNzBhNGJlNmJlNGIwZTIxYTZjM2RhMTY3NDU4MjM0ZGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAYVwQzuroFoEGvTjzSLAns4RI0u QACP4nRroAoweaV8o/OedpQFhFnT0XdlKWvBD+wAIOqi69WFpYwWo9d+5WUf/ayt //BGMq0cOMYgbZYKvi/mAKUkinT3OLdNUtPFW9IHFWgwugL4ZLhZsf963CVZW2W0 yeO3U24EzptPZqInAKBXyqOrxsbE2T3l8t7uAiKh89UIljUchccsQBMskZ1V76BT wFwLUV0tFTT4dC8PQtu2tKDJUzhK0rxm3ZGpXVr/5cAplUVQVTn7FSKTy9Fff/JR JiN/Tzi1grRp8/AnN9Wn44L0aDMvp+pkdUk1WPdopNWEvVomwjFr+rW/+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9GPzcKS+a+Sw4hpsPaFnRYI03WMB8GA1UdIwQY MBaAFIMSTQQRog/Su1RpcOqAEW7ydturMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmIt ZmNmMGYxNTk0ZDJmLzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmItZmNmMGYxNTk0ZDJm LzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSCVvA1x nu3x80CyXaKgXINY87u+xqx/9MsyejUMwnFqn/IVCCkEedH80ZxrsputiH8cbOfE WzQZ3O1uyNMLUw49IBSXnlNkAkx4Fc0A81e8QqMzbjGM4xYh68UFCgeq8rJTJQIN 6JhJC7EwBgVUd5pX4RRvndLQcNnYUvZSebatvnAJG3ShEvhASp9jkO7yNNbEGBuT DSDXkzXQZSSylzJrMrbTAo+Lborzx8iSTtxQ+ATCGAI7PFmBcSJbBNHZtNhQgpn/ dGK1VxY8obrOYBHidpPvsfzk4VVC8Gtir8828ySQFp12lg/2H3jH3rsG19p0R+Up y5R43W7jgIw1IA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:52:52 2025 by rpki-client