This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft File: gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft (raw, json) Hash identifier: 0hm8+DwNuxbiCVz2Acs/8hJOm/+50J0ETzBKKq0hOoY= Subject key identifier: 25:98:3E:CC:1B:9A:86:E3:2B:45:29:C7:E8:F7:4A:2F:D1:77:AE:51 Authority key identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53 Certificate issuer: /CN=813e051cb831d1989607bb76c0bc5693ff947b53 Certificate serial: 019AF2AD6FC9FEE97E15F9B6C32118A91611 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft Manifest number: 176E Signing time: Sat 06 Dec 2025 08:00:43 +0000 Manifest this update: Sat 06 Dec 2025 08:00:43 +0000 Manifest next update: Sun 07 Dec 2025 08:00:43 +0000 Files and hashes: 1: gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl (hash: ZaPXHqnwnSJD3yfaWrv2muZ4PUdRTkt3ZxRAYBSzXZU=) 2: x_N3hpJtRSPWEjO0n6o6sQry1Jg.roa (hash: L4PUkpr3w+Sn4bU/wKaWhl8LERzOZYhflR9066iKXwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6f:c9:fe:e9:7e:15:f9:b6:c3:21:18:a9:16:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=813e051cb831d1989607bb76c0bc5693ff947b53 Validity Not Before: Dec 6 08:00:43 2025 GMT Not After : Dec 7 08:00:43 2025 GMT Subject: CN=25983ecc1b9a86e32b4529c7e8f74a2fd177ae51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e0:eb:e6:6d:f2:b3:f7:ba:69:b9:bd:a8:f9: ad:40:aa:a7:64:8e:ec:a5:4e:81:41:45:7b:af:32: c1:45:0b:38:01:9c:91:45:96:9d:4a:8d:f2:06:7f: 5d:b8:11:4b:17:19:41:00:bf:c0:29:4e:e0:7a:d9: bc:e8:bb:b1:66:8e:cd:21:ec:9c:07:02:17:b9:63: e0:27:ac:48:cb:21:ae:f8:ce:8e:ca:67:12:ef:b1: 50:2a:b2:97:04:d1:af:39:c8:ec:37:9f:7e:9b:b5: 53:e2:3d:fe:fc:83:f0:46:6c:a8:3b:b4:b2:61:97: d2:e1:74:1f:ca:fd:77:98:02:04:91:b2:7e:34:73: 36:9c:58:77:9d:ed:27:c4:13:29:da:e5:91:5c:9c: 90:33:79:f2:cd:e1:f9:8f:55:b4:f1:d4:37:ad:3c: bb:65:d9:ad:4a:b6:07:9c:cf:bb:0f:2b:ba:19:0e: 4d:6d:46:38:9c:eb:b2:a2:b8:85:cf:27:42:b1:8c: 95:ba:55:3a:cb:4f:8f:c4:4a:54:24:19:ad:c3:b3: 00:fb:b4:0a:b5:98:7b:ba:0c:91:84:67:c1:80:a1: 20:0d:c5:98:94:7b:1f:bf:26:80:18:16:c6:75:65: 11:2a:81:83:df:08:c2:87:60:20:6a:d2:8d:93:f3: a7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:98:3E:CC:1B:9A:86:E3:2B:45:29:C7:E8:F7:4A:2F:D1:77:AE:51 X509v3 Authority Key Identifier: keyid:81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a5:48:dc:82:98:8f:38:be:68:d0:3c:3c:23:c5:5f:05:15: cc:8d:26:38:93:a5:1c:e8:d1:64:a2:6c:b5:bf:ac:1b:f4:ae: 4b:5a:2a:67:2d:26:15:5d:91:65:72:88:e2:db:a4:fe:da:cd: d2:3c:bb:cc:c6:15:41:c4:07:5a:fa:17:0a:96:8c:e0:91:df: 1d:f7:1b:7c:50:0a:19:d6:27:f1:d7:bb:59:0a:75:6f:7c:a9: 1e:32:89:7e:d9:7d:2c:8a:dd:dd:b2:f4:e8:26:09:25:26:34: bb:0c:a0:9c:5f:2f:e7:4a:ae:b8:9d:a6:71:bd:cb:e2:d8:d1: 74:f2:48:e1:ca:d4:b6:25:0e:7e:97:78:dd:ea:f2:21:90:ff: 34:2c:ac:5c:66:30:7d:0d:0f:a2:c5:1d:e9:85:2b:62:72:6d: d5:d7:a5:46:33:b5:70:42:63:1d:2e:b0:70:15:e5:07:0f:28: 23:e4:61:e2:28:f3:9d:69:c5:04:44:a8:a2:59:9e:e3:a3:93: ba:94:61:85:5f:06:27:07:51:95:6d:bc:03:15:66:af:0a:b0: 95:32:70:7d:53:7b:78:0e:ba:71:d0:9f:88:62:c4:fa:fb:10: 0b:ae:04:6e:e2:e6:5e:ba:a6:ce:ff:63:87:da:4f:cb:80:3f: 3d:e6:8e:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrW/J/ul+Ffm2wyEYqRYRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxM2UwNTFjYjgzMWQxOTg5NjA3YmI3NmMwYmM1NjkzZmY5 NDdiNTMwHhcNMjUxMjA2MDgwMDQzWhcNMjUxMjA3MDgwMDQzWjAzMTEwLwYDVQQD EygyNTk4M2VjYzFiOWE4NmUzMmI0NTI5YzdlOGY3NGEyZmQxNzdhZTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseDr5m3ys/e6abm9qPmtQKqnZI7s pU6BQUV7rzLBRQs4AZyRRZadSo3yBn9duBFLFxlBAL/AKU7getm86LuxZo7NIeyc BwIXuWPgJ6xIyyGu+M6OymcS77FQKrKXBNGvOcjsN59+m7VT4j3+/IPwRmyoO7Sy YZfS4XQfyv13mAIEkbJ+NHM2nFh3ne0nxBMp2uWRXJyQM3nyzeH5j1W08dQ3rTy7 ZdmtSrYHnM+7Dyu6GQ5NbUY4nOuyoriFzydCsYyVulU6y0+PxEpUJBmtw7MA+7QK tZh7ugyRhGfBgKEgDcWYlHsfvyaAGBbGdWURKoGD3wjCh2AgatKNk/OnpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWYPswbmobjK0Upx+j3Si/Rd65RMB8GA1UdIwQY MBaAFIE+BRy4MdGYlge7dsC8VpP/lHtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1Q0RkhMZ3gwWmlXQjd0MndMeFdrXy1VZTFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lNDVhZDYtZTVhZS00ODE5LTlmMjQt ZjU3N2FhNDZkZTgzLzEvZ1Q0RkhMZ3gwWmlXQjd0MndMeFdrXy1VZTFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9lNDVhZDYtZTVhZS00ODE5LTlmMjQtZjU3N2FhNDZkZTgz LzEvZ1Q0RkhMZ3gwWmlXQjd0MndMeFdrXy1VZTFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6VI3IKY jzi+aNA8PCPFXwUVzI0mOJOlHOjRZKJstb+sG/SuS1oqZy0mFV2RZXKI4tuk/trN 0jy7zMYVQcQHWvoXCpaM4JHfHfcbfFAKGdYn8de7WQp1b3ypHjKJftl9LIrd3bL0 6CYJJSY0uwygnF8v50quuJ2mcb3L4tjRdPJI4crUtiUOfpd43eryIZD/NCysXGYw fQ0PosUd6YUrYnJt1delRjO1cEJjHS6wcBXlBw8oI+Rh4ijznWnFBESoolme46OT upRhhV8GJwdRlW28AxVmrwqwlTJwfVN7eA66cdCfiGLE+vsQC64EbuLmXrqmzv9j h9pPy4A/PeaORQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:28:59 2025 by rpki-client