This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft File: GXCiYyB54Yue9nKBkqOTaqvisiQ.mft (raw, json) Hash identifier: CdJd3Cp8tFkE88xg+sAiFtTRdrfnrWktJfiDG2DW2/o= Subject key identifier: F4:38:5B:DC:FE:61:1B:64:F3:7C:BD:B3:2F:1A:F5:B6:D2:12:8C:E9 Authority key identifier: 19:70:A2:63:20:79:E1:8B:9E:F6:72:81:92:A3:93:6A:AB:E2:B2:24 Certificate issuer: /CN=1970a2632079e18b9ef6728192a3936aabe2b224 Certificate serial: 019AF2765F87DB095719517E9EC087FDEA5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXCiYyB54Yue9nKBkqOTaqvisiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft Manifest number: CA Signing time: Sat 06 Dec 2025 07:00:35 +0000 Manifest this update: Sat 06 Dec 2025 07:00:35 +0000 Manifest next update: Sun 07 Dec 2025 07:00:35 +0000 Files and hashes: 1: GXCiYyB54Yue9nKBkqOTaqvisiQ.crl (hash: Io3dRY3UaDpD7ZsU7+WNczNZ/JE6zyGFhegCqHActpU=) 2: JeJQO9s80gfCiYe1r0cc8EhoCxk.roa (hash: fgQotiiZ/kaXHnFm2dA5yCVTFpxgcGtAQyQ5Cm5SG64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GXCiYyB54Yue9nKBkqOTaqvisiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:5f:87:db:09:57:19:51:7e:9e:c0:87:fd:ea:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1970a2632079e18b9ef6728192a3936aabe2b224 Validity Not Before: Dec 6 07:00:35 2025 GMT Not After : Dec 7 07:00:35 2025 GMT Subject: CN=f4385bdcfe611b64f37cbdb32f1af5b6d2128ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:40:11:a5:04:fc:41:f4:0d:72:9f:d7:d3:14: 60:c0:e1:b8:b6:3f:2e:2e:5e:a1:8e:cf:1e:68:83: 17:ae:ea:dc:dc:7c:6d:b8:96:17:bb:8d:e2:77:b2: 49:b9:34:a2:7e:8f:4c:ea:d0:82:20:db:66:90:0d: e1:77:fc:55:c5:0d:0b:23:32:3f:8c:91:d1:ef:0e: 5b:e4:63:bd:19:32:fd:27:8b:40:8a:66:61:a8:05: bd:9f:5c:43:bd:98:e8:21:9c:83:db:1d:48:fd:ef: 60:37:71:d0:64:59:17:18:66:70:db:eb:2a:3c:7d: c2:cf:aa:81:e4:1b:2d:81:95:f4:83:6e:aa:24:f9: 16:f5:03:d7:24:15:5b:53:61:ba:f0:7b:7d:24:48: 21:36:4e:b9:41:01:31:f8:c0:8b:6c:27:37:fa:26: d9:17:a1:1b:e7:b8:56:25:b8:b7:b9:dc:4f:95:4b: d3:5d:f2:07:b2:58:c5:6f:43:f8:0d:5b:c6:e6:0c: ee:99:40:d9:05:72:40:86:41:94:db:32:68:f7:b6: ab:71:4a:f0:05:b4:62:fd:1d:e9:3d:fa:4e:1c:c9: d3:8c:9b:ea:b6:64:18:0b:6a:ca:5d:68:3a:dd:8f: c5:42:5b:72:03:de:7f:79:14:89:17:bd:76:a5:7a: ee:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:38:5B:DC:FE:61:1B:64:F3:7C:BD:B3:2F:1A:F5:B6:D2:12:8C:E9 X509v3 Authority Key Identifier: keyid:19:70:A2:63:20:79:E1:8B:9E:F6:72:81:92:A3:93:6A:AB:E2:B2:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXCiYyB54Yue9nKBkqOTaqvisiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:af:a7:cf:83:23:50:c8:ec:e8:4b:5b:91:3e:1a:8e:88:ab: 03:d7:f6:61:1b:b6:06:af:62:5f:d0:30:20:17:06:54:05:5e: 7e:b2:b9:ed:6c:e3:20:73:5f:ac:b6:0a:d3:98:30:0e:f2:9f: 9b:70:7f:3f:cb:b5:54:6e:5b:16:7d:e0:c7:d1:d1:d3:65:77: c5:47:7a:72:5d:70:84:37:1a:9e:e2:df:c8:c9:bc:9d:e0:93: 74:c0:db:cb:c0:95:24:a3:2d:25:4a:29:e3:0d:bd:2a:97:f2: 79:42:90:a9:9b:b9:eb:1a:24:c1:ec:9f:64:01:65:b6:48:7a: db:a5:4d:95:68:4a:e8:c4:d8:20:50:e6:64:5f:39:4e:21:8d: 14:2a:e5:5a:ce:ad:de:b9:9f:80:64:25:8d:e9:c0:b0:e4:24: 02:f5:c4:ea:88:e6:94:be:cd:c2:5a:9d:15:c2:17:98:5b:86: 5f:31:07:bb:36:9a:f6:cd:4c:0b:33:18:10:9c:a9:6b:34:f2: 09:b4:7d:b0:2f:23:3c:ef:1e:73:2b:23:1f:00:ad:f1:3d:2b: 0a:0d:d1:67:a9:79:72:de:34:5e:73:79:fe:04:4b:78:16:b0: ae:3d:43:ff:c6:f7:77:c9:b3:ff:46:60:17:5d:8d:f7:c8:11: b0:41:26:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydl+H2wlXGVF+nsCH/epdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NzBhMjYzMjA3OWUxOGI5ZWY2NzI4MTkyYTM5MzZhYWJl MmIyMjQwHhcNMjUxMjA2MDcwMDM1WhcNMjUxMjA3MDcwMDM1WjAzMTEwLwYDVQQD EyhmNDM4NWJkY2ZlNjExYjY0ZjM3Y2JkYjMyZjFhZjViNmQyMTI4Y2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0ARpQT8QfQNcp/X0xRgwOG4tj8u Ll6hjs8eaIMXrurc3HxtuJYXu43id7JJuTSifo9M6tCCINtmkA3hd/xVxQ0LIzI/ jJHR7w5b5GO9GTL9J4tAimZhqAW9n1xDvZjoIZyD2x1I/e9gN3HQZFkXGGZw2+sq PH3Cz6qB5BstgZX0g26qJPkW9QPXJBVbU2G68Ht9JEghNk65QQEx+MCLbCc3+ibZ F6Eb57hWJbi3udxPlUvTXfIHsljFb0P4DVvG5gzumUDZBXJAhkGU2zJo97arcUrw BbRi/R3pPfpOHMnTjJvqtmQYC2rKXWg63Y/FQltyA95/eRSJF712pXru6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQ4W9z+YRtk83y9sy8a9bbSEozpMB8GA1UdIwQY MBaAFBlwomMgeeGLnvZygZKjk2qr4rIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1hDaVl5QjU0WXVlOW5LQmtxT1RhcXZpc2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNmM4MmYtOWQyMi00MWNiLWJiYjYt ZTc4ZWFmMTU4NGJmLzEvR1hDaVl5QjU0WXVlOW5LQmtxT1RhcXZpc2lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xNmM4MmYtOWQyMi00MWNiLWJiYjYtZTc4ZWFmMTU4NGJm LzEvR1hDaVl5QjU0WXVlOW5LQmtxT1RhcXZpc2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIq+nz4Mj UMjs6EtbkT4ajoirA9f2YRu2Bq9iX9AwIBcGVAVefrK57WzjIHNfrLYK05gwDvKf m3B/P8u1VG5bFn3gx9HR02V3xUd6cl1whDcanuLfyMm8neCTdMDby8CVJKMtJUop 4w29KpfyeUKQqZu56xokweyfZAFltkh626VNlWhK6MTYIFDmZF85TiGNFCrlWs6t 3rmfgGQljenAsOQkAvXE6ojmlL7NwlqdFcIXmFuGXzEHuzaa9s1MCzMYEJypazTy CbR9sC8jPO8ecysjHwCt8T0rCg3RZ6l5ct40XnN5/gRLeBawrj1D/8b3d8mz/0Zg F12N98gRsEEm+A== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:12 2025 by rpki-client