This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft File: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json) Hash identifier: Mxes6/cnFffKZXHLmukcnP2+lkDL82a+Q3aDyQBvXHg= Subject key identifier: F1:C0:41:4A:13:EB:3C:A6:FB:8A:0F:7B:74:9C:E0:04:17:9E:AE:CA Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91 Certificate issuer: /CN=194e32a82e98f22d939ff9984455813be2ba6a91 Certificate serial: 019AF1D211424281BEFF5CC6DC335D42A875 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft Manifest number: 027F Signing time: Sat 06 Dec 2025 04:01:07 +0000 Manifest this update: Sat 06 Dec 2025 04:01:07 +0000 Manifest next update: Sun 07 Dec 2025 04:01:07 +0000 Files and hashes: 1: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: yluy2KI0R8sK6KS+UPIDrpFrfi6Ay7PMmUsdKHqN0Eo=) 2: UfSgUAAlY9L-pxjy9r66ZUMHciI.roa (hash: lfZloxngOlvdGd9PgYcQqf9/LWwVeSvhKaVHeCHu4Rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:11:42:42:81:be:ff:5c:c6:dc:33:5d:42:a8:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91 Validity Not Before: Dec 6 04:01:07 2025 GMT Not After : Dec 7 04:01:07 2025 GMT Subject: CN=f1c0414a13eb3ca6fb8a0f7b749ce004179eaeca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:2d:5e:51:0c:b7:60:5f:fa:fa:52:75:3d: d6:a7:bf:d0:38:f0:d0:45:ac:c3:03:fb:d6:25:e1: fd:94:a4:60:1f:78:2e:c7:5c:7e:97:d5:e2:e6:2a: 9e:fa:77:b8:66:92:4b:bb:73:ca:1e:73:ba:9c:e7: 9d:1c:a6:0d:2f:f2:e3:c9:fa:fa:5f:19:7c:a1:c3: c0:3d:a2:92:63:26:3a:ae:e1:e8:09:6e:69:fe:16: 1c:28:cc:57:81:e3:6a:51:35:18:92:93:20:fc:74: f8:db:a8:24:04:f0:f8:ba:77:c3:f7:d6:d8:81:4b: 0d:38:de:af:96:76:d9:46:6c:85:1c:7a:ae:2e:91: 60:9a:61:0a:53:b1:9e:d2:3d:9d:5f:dc:03:12:51: 51:27:9b:79:f2:80:a3:16:d7:8a:d2:a1:f5:67:39: 6e:c2:39:7a:e2:d8:5c:5f:83:d3:3b:86:d7:59:fc: ac:84:be:b3:6d:34:dd:a3:a2:4f:a2:cd:fe:bd:ca: 9d:6a:c2:f7:e1:98:ec:8d:c7:7b:4f:47:11:77:b8: 4d:92:f0:a5:39:85:e1:f6:63:e0:de:0f:72:4b:d8: 98:f2:13:a6:e0:b5:1b:9f:00:da:f2:7b:db:83:de: b7:9e:16:80:10:cc:6c:f2:d6:91:81:c4:fe:b4:7c: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C0:41:4A:13:EB:3C:A6:FB:8A:0F:7B:74:9C:E0:04:17:9E:AE:CA X509v3 Authority Key Identifier: keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:38:12:ad:39:d5:f7:9b:98:b0:47:3c:4b:df:49:b4:a6:94: 39:fa:d0:a2:d9:35:01:f8:11:bd:86:16:b8:12:89:fb:a0:67: d0:a3:f3:cc:31:2d:9a:00:c4:66:b2:df:d8:0e:78:39:43:57: 0d:65:9d:4e:9e:de:cc:68:69:4d:d0:43:fe:f4:d4:01:33:3e: dd:ac:20:12:22:01:0b:b2:60:97:ab:02:a6:d2:62:a5:3c:74: 8c:ad:f3:23:bf:47:0d:8e:8c:dc:9f:c5:3a:e4:32:db:e9:75: 01:a0:55:07:32:37:17:c6:01:7e:a7:ae:fd:96:d9:5a:1c:69: 62:f9:fb:70:57:22:ce:c4:ac:5f:17:2e:1b:b8:95:62:e3:30: 67:75:a6:65:bc:1d:ba:0f:c3:c4:84:d2:aa:63:4a:11:30:9b: e9:6f:1e:1d:8c:3d:ea:00:94:17:57:2c:c1:e4:32:11:c9:ff: 70:5e:2c:2a:61:ae:da:3b:a6:d0:28:b4:8d:b0:4c:d3:ce:49: c1:48:99:3e:93:6c:b5:1d:ed:6f:d7:d6:39:90:4a:54:cc:80: 69:02:19:a4:44:22:9b:73:68:56:81:87:9d:b5:5c:25:00:56: 4a:3d:f0:7b:97:ff:8b:5f:a6:3b:23:c3:5b:95:9d:59:28:42: 1a:b9:8f:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hFCQoG+/1zG3DNdQqh1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NGUzMmE4MmU5OGYyMmQ5MzlmZjk5ODQ0NTU4MTNiZTJi YTZhOTEwHhcNMjUxMjA2MDQwMTA3WhcNMjUxMjA3MDQwMTA3WjAzMTEwLwYDVQQD EyhmMWMwNDE0YTEzZWIzY2E2ZmI4YTBmN2I3NDljZTAwNDE3OWVhZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF4tXlEMt2Bf+vpSdT3Wp7/QOPDQ RazDA/vWJeH9lKRgH3gux1x+l9Xi5iqe+ne4ZpJLu3PKHnO6nOedHKYNL/Ljyfr6 Xxl8ocPAPaKSYyY6ruHoCW5p/hYcKMxXgeNqUTUYkpMg/HT426gkBPD4unfD99bY gUsNON6vlnbZRmyFHHquLpFgmmEKU7Ge0j2dX9wDElFRJ5t58oCjFteK0qH1Zzlu wjl64thcX4PTO4bXWfyshL6zbTTdo6JPos3+vcqdasL34Zjsjcd7T0cRd7hNkvCl OYXh9mPg3g9yS9iY8hOm4LUbnwDa8nvbg963nhaAEMxs8taRgcT+tHyarwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHAQUoT6zym+4oPe3Sc4AQXnq7KMB8GA1UdIwQY MBaAFBlOMqgumPItk5/5mERVgTviumqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mMzZiOWMtN2UzNy00ZjE4LTg4NjUt MTNlNzNmNjYzOTdiLzEvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mMzZiOWMtN2UzNy00ZjE4LTg4NjUtMTNlNzNmNjYzOTdi LzEvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtzgSrTnV 95uYsEc8S99JtKaUOfrQotk1AfgRvYYWuBKJ+6Bn0KPzzDEtmgDEZrLf2A54OUNX DWWdTp7ezGhpTdBD/vTUATM+3awgEiIBC7Jgl6sCptJipTx0jK3zI79HDY6M3J/F OuQy2+l1AaBVBzI3F8YBfqeu/ZbZWhxpYvn7cFcizsSsXxcuG7iVYuMwZ3WmZbwd ug/DxITSqmNKETCb6W8eHYw96gCUF1csweQyEcn/cF4sKmGu2jum0Ci0jbBM085J wUiZPpNstR3tb9fWOZBKVMyAaQIZpEQim3NoVoGHnbVcJQBWSj3we5f/i1+mOyPD W5WdWShCGrmPhg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:09:40 2025 by rpki-client