This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft File: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json) Hash identifier: /2U/hryFypyqOgP53qikvA6V5343W/S7KX8R29tTprw= Subject key identifier: 75:CF:1E:65:3F:6E:88:FF:87:1E:71:32:B8:4C:41:25:54:BB:AA:42 Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91 Certificate issuer: /CN=194e32a82e98f22d939ff9984455813be2ba6a91 Certificate serial: 019B318CB39DF26CEF4887B36D160841F9A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft Manifest number: 02A0 Signing time: Thu 18 Dec 2025 13:01:03 +0000 Manifest this update: Thu 18 Dec 2025 13:01:03 +0000 Manifest next update: Fri 19 Dec 2025 13:01:03 +0000 Files and hashes: 1: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: zMrtEys304wclB3HOek9eGZDFFR6qH1U1tJyqMSlNzg=) 2: UfSgUAAlY9L-pxjy9r66ZUMHciI.roa (hash: lfZloxngOlvdGd9PgYcQqf9/LWwVeSvhKaVHeCHu4Rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:b3:9d:f2:6c:ef:48:87:b3:6d:16:08:41:f9:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91 Validity Not Before: Dec 18 13:01:03 2025 GMT Not After : Dec 19 13:01:03 2025 GMT Subject: CN=75cf1e653f6e88ff871e7132b84c412554bbaa42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0d:7f:b9:c8:2f:cd:c3:17:63:11:3c:61:97: 92:79:4c:82:e5:97:4b:d9:1e:58:94:64:77:0e:7d: 2e:ea:2e:bd:0b:1a:ed:2b:a0:fd:86:9b:8c:23:f4: 09:06:60:14:9f:cd:3a:f3:74:22:76:b5:3b:cf:1e: 73:5a:09:72:29:10:b4:9e:26:d3:09:dd:0d:f5:c0: 3e:cd:b5:da:40:60:9d:37:8c:3e:90:d5:e5:e4:db: 3c:90:68:af:e4:84:62:3c:8c:2c:a0:71:c7:fa:dc: c0:05:62:7c:44:51:cb:32:8a:21:6c:d7:42:b2:36: 7b:f4:10:91:a1:f4:bd:4f:02:d2:99:b9:f0:86:6b: 09:b7:bd:78:90:f2:18:80:4f:62:68:2d:c0:3d:1c: c9:51:38:67:9d:c5:d9:06:f6:b5:ce:04:1a:e5:9c: 5c:ba:4d:9b:42:9b:7a:6d:56:07:55:d0:5b:34:f3: 73:0b:84:a5:bd:2a:bd:ee:1a:2d:5d:81:4f:bc:ef: e9:97:92:32:81:5e:8d:84:59:eb:51:c3:e9:1a:fc: ca:b1:40:4e:38:69:2a:5d:c9:dd:e7:31:6c:fc:dc: 58:7a:f0:68:e3:0c:63:b6:aa:47:d9:08:3b:6a:ce: fd:76:40:6a:81:c5:ed:5b:a6:f1:c5:ff:5b:1c:7b: 42:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CF:1E:65:3F:6E:88:FF:87:1E:71:32:B8:4C:41:25:54:BB:AA:42 X509v3 Authority Key Identifier: keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:14:96:57:d1:a3:17:9c:a9:86:49:4f:23:aa:b6:42:4d:62: 0c:9b:4b:c8:e4:99:7a:cf:a2:88:b5:2a:22:11:fe:65:5c:ca: 7e:16:cb:96:af:bf:a2:d1:97:ae:fc:cf:33:62:25:f0:8e:3f: c8:ab:a5:32:b6:13:82:87:24:4b:97:9a:08:97:65:85:6d:ff: fa:4e:4c:f1:80:3c:86:c2:8a:b9:30:d5:d8:6a:5d:7d:b2:bc: d3:28:25:52:9d:c2:b1:67:6c:e6:48:9d:fd:84:52:99:39:31: 49:77:b9:ab:8e:ab:f9:3b:b6:57:f0:1f:bb:20:78:95:ef:51: 2f:5c:12:39:cf:27:f9:35:6e:cf:96:09:a1:3d:d0:1c:fb:de: c7:60:b6:07:b9:d5:98:81:ab:87:22:70:2c:17:2c:80:c8:7c: 73:8b:fb:6d:08:af:95:9a:96:94:c6:54:57:76:2c:59:23:4f: e3:70:5a:a4:f4:e5:6b:b8:d1:b0:ba:97:6d:aa:b5:9c:35:7b: 3d:9a:31:89:c2:ce:46:03:90:fa:8b:f9:33:88:e2:cd:cd:a1: de:bf:b6:f0:68:b1:0e:f6:07:37:5d:35:90:49:cc:b8:ad:90: bc:9a:70:8c:e8:43:91:dc:b0:ec:f4:98:a3:9d:0a:e8:27:39: ce:5c:b0:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjLOd8mzvSIezbRYIQfmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NGUzMmE4MmU5OGYyMmQ5MzlmZjk5ODQ0NTU4MTNiZTJi YTZhOTEwHhcNMjUxMjE4MTMwMTAzWhcNMjUxMjE5MTMwMTAzWjAzMTEwLwYDVQQD Eyg3NWNmMWU2NTNmNmU4OGZmODcxZTcxMzJiODRjNDEyNTU0YmJhYTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg1/ucgvzcMXYxE8YZeSeUyC5ZdL 2R5YlGR3Dn0u6i69CxrtK6D9hpuMI/QJBmAUn80683QidrU7zx5zWglyKRC0nibT Cd0N9cA+zbXaQGCdN4w+kNXl5Ns8kGiv5IRiPIwsoHHH+tzABWJ8RFHLMoohbNdC sjZ79BCRofS9TwLSmbnwhmsJt714kPIYgE9iaC3APRzJUThnncXZBva1zgQa5Zxc uk2bQpt6bVYHVdBbNPNzC4SlvSq97hotXYFPvO/pl5IygV6NhFnrUcPpGvzKsUBO OGkqXcnd5zFs/NxYevBo4wxjtqpH2Qg7as79dkBqgcXtW6bxxf9bHHtCrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXPHmU/boj/hx5xMrhMQSVUu6pCMB8GA1UdIwQY MBaAFBlOMqgumPItk5/5mERVgTviumqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mMzZiOWMtN2UzNy00ZjE4LTg4NjUt MTNlNzNmNjYzOTdiLzEvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mMzZiOWMtN2UzNy00ZjE4LTg4NjUtMTNlNzNmNjYzOTdi LzEvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxSWV9Gj F5yphklPI6q2Qk1iDJtLyOSZes+iiLUqIhH+ZVzKfhbLlq+/otGXrvzPM2Il8I4/ yKulMrYTgockS5eaCJdlhW3/+k5M8YA8hsKKuTDV2GpdfbK80yglUp3CsWds5kid /YRSmTkxSXe5q46r+Tu2V/AfuyB4le9RL1wSOc8n+TVuz5YJoT3QHPvex2C2B7nV mIGrhyJwLBcsgMh8c4v7bQivlZqWlMZUV3YsWSNP43BapPTla7jRsLqXbaq1nDV7 PZoxicLORgOQ+ov5M4jizc2h3r+28GixDvYHN101kEnMuK2QvJpwjOhDkdyw7PSY o50K6Cc5zlywCw== -----END CERTIFICATE-----Generated at Thu Dec 18 21:51:36 2025 by rpki-client