This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft File: GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft (raw, json) Hash identifier: 0mRSGV0s1kzp55PSD4/A7dbOsfWgn0TbGcFvgsPW8dQ= Subject key identifier: 05:FD:00:03:95:CB:D2:FF:AA:CE:47:02:53:B3:EF:93:A4:AF:61:F6 Authority key identifier: 19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2 Certificate issuer: /CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2 Certificate serial: 019AF1D22A72D4D66BA34FBAFB08B71885F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft Manifest number: 1601 Signing time: Sat 06 Dec 2025 04:01:13 +0000 Manifest this update: Sat 06 Dec 2025 04:01:13 +0000 Manifest next update: Sun 07 Dec 2025 04:01:13 +0000 Files and hashes: 1: GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl (hash: irEKaEUL9cHPbA1XnU/W5MGfeRRlBDAenvErxgYrpxI=) 2: T6BmY5F3A76c40Avg5lTJbK0mkw.roa (hash: v+5wW5iBlMaLk7U/wCyygoAJ3jQnHxe9Wti6cfnchrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2a:72:d4:d6:6b:a3:4f:ba:fb:08:b7:18:85:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2 Validity Not Before: Dec 6 04:01:13 2025 GMT Not After : Dec 7 04:01:13 2025 GMT Subject: CN=05fd000395cbd2ffaace470253b3ef93a4af61f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:12:f2:1f:7f:9b:e8:04:54:d4:42:f2:2b:cf: 4b:46:b5:7e:53:58:2e:92:e8:ac:9f:42:35:48:af: 3c:28:f8:66:4c:8a:0b:1f:40:3b:c4:d5:5d:14:0c: bf:e5:37:94:24:dc:ce:73:e5:c8:1f:78:64:fe:9a: 1b:75:0e:29:f0:00:ae:3a:5b:00:e9:cd:6a:f9:51: e7:5e:d9:51:04:2b:ec:0d:8e:70:68:36:c4:5b:fd: cf:b8:58:b6:fa:0f:3b:6e:b3:24:a5:12:d5:6b:ce: 23:75:f8:ac:64:dd:ee:ed:01:fd:6c:fe:76:12:d0: 80:8c:ba:f8:9b:1e:c7:2f:c7:9a:94:8c:95:1d:94: 61:80:3c:b0:a3:4e:03:55:88:0d:c8:a8:63:72:ef: 90:11:13:cd:b1:7e:20:62:f0:78:ab:30:64:b4:05: b3:6c:dd:ce:06:9f:58:b3:cf:62:56:71:23:f7:94: eb:3a:9e:8c:5e:79:dd:84:6d:64:e0:c8:f2:74:e5: 20:2d:e6:e1:f6:a8:a1:5e:f9:2f:5a:8f:0b:49:97: 40:eb:8d:1a:9a:f7:e0:f7:c2:91:b0:c0:eb:98:30: 45:3c:b1:1c:62:50:52:d9:d8:9e:2f:b1:5e:c2:9a: 3d:b0:04:af:40:7d:da:c9:ef:27:a7:43:81:ad:97: 6e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FD:00:03:95:CB:D2:FF:AA:CE:47:02:53:B3:EF:93:A4:AF:61:F6 X509v3 Authority Key Identifier: keyid:19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:83:4c:c6:6f:89:49:b2:d3:cb:fb:da:8c:15:3d:02:39:ec: 09:c4:e1:2a:b7:ef:26:a6:93:7b:06:ea:73:5d:84:be:05:95: ae:d8:55:65:54:da:b7:9e:d4:54:0c:4a:0f:6e:30:08:86:43: 1a:dc:65:ee:9d:5d:3c:d5:ba:bc:e4:19:0d:48:0b:e5:ef:a9: e4:3f:bb:ef:03:58:9b:2a:6f:f7:8c:d5:02:6f:f3:f7:d9:46: 38:28:e1:2d:3c:e1:7a:a9:56:b6:1f:db:d3:62:fd:d5:e2:1c: 3f:a9:13:05:b0:b8:57:a7:3f:42:9a:ae:41:9f:dd:e3:2c:b2: 32:86:c8:b5:1f:fe:41:c5:72:1f:2d:4c:4e:4a:2a:7a:70:9c: 33:c2:c6:a4:cf:90:43:a4:6a:c9:4e:f5:55:19:47:24:e1:f2: 97:34:77:73:4e:c8:5b:03:9f:0a:d3:c8:c1:74:0a:0e:88:e1: 8d:5c:99:f6:9f:89:43:3f:59:5d:20:09:47:6a:70:22:28:4b: 25:58:51:82:f4:05:7a:22:86:d0:36:52:98:a5:18:db:c5:4f: 04:34:96:c6:6e:1f:17:92:3b:c5:62:12:21:ea:f0:85:4a:f1: 00:14:c2:5c:e5:e0:e6:fd:3e:53:7d:72:8f:9f:03:df:b7:cf: 2d:11:38:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ipy1NZro0+6+wi3GIX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZjVlMDRiNjU1NWYxZTJjOTJkN2E0MWFjMTA2YTc1ZGVh OTI4YTIwHhcNMjUxMjA2MDQwMTEzWhcNMjUxMjA3MDQwMTEzWjAzMTEwLwYDVQQD EygwNWZkMDAwMzk1Y2JkMmZmYWFjZTQ3MDI1M2IzZWY5M2E0YWY2MWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxLyH3+b6ARU1ELyK89LRrV+U1gu kuisn0I1SK88KPhmTIoLH0A7xNVdFAy/5TeUJNzOc+XIH3hk/pobdQ4p8ACuOlsA 6c1q+VHnXtlRBCvsDY5waDbEW/3PuFi2+g87brMkpRLVa84jdfisZN3u7QH9bP52 EtCAjLr4mx7HL8ealIyVHZRhgDywo04DVYgNyKhjcu+QERPNsX4gYvB4qzBktAWz bN3OBp9Ys89iVnEj95TrOp6MXnndhG1k4MjydOUgLebh9qihXvkvWo8LSZdA640a mvfg98KRsMDrmDBFPLEcYlBS2dieL7Fewpo9sASvQH3aye8np0OBrZduqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAX9AAOVy9L/qs5HAlOz75Okr2H2MB8GA1UdIwQY MBaAFBn14EtlVfHiyS16QawQanXeqSiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMmU5MjUtNmZlNi00YjI2LWE0OTgt NzUzMDRmOWY1YzI0LzEvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zMmU5MjUtNmZlNi00YjI2LWE0OTgtNzUzMDRmOWY1YzI0 LzEvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4NMxm+J SbLTy/vajBU9AjnsCcThKrfvJqaTewbqc12EvgWVrthVZVTat57UVAxKD24wCIZD Gtxl7p1dPNW6vOQZDUgL5e+p5D+77wNYmypv94zVAm/z99lGOCjhLTzheqlWth/b 02L91eIcP6kTBbC4V6c/QpquQZ/d4yyyMobItR/+QcVyHy1MTkoqenCcM8LGpM+Q Q6RqyU71VRlHJOHylzR3c07IWwOfCtPIwXQKDojhjVyZ9p+JQz9ZXSAJR2pwIihL JVhRgvQFeiKG0DZSmKUY28VPBDSWxm4fF5I7xWISIerwhUrxABTCXOXg5v0+U31y j58D37fPLRE4rQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:57 2025 by rpki-client