This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft File: gxtyb8yYIAzzkDTflY6P6LPHnDc.mft (raw, json) Hash identifier: bNHNz24AK67wC5IZKHuH2BnhWXHZ14J4TwXaL/uoyms= Subject key identifier: F4:D0:9B:BC:86:C5:68:44:B8:54:0B:60:F7:0F:D9:0C:5E:98:C9:8E Authority key identifier: 83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37 Certificate issuer: /CN=831b726fcc98200cf39034df958e8fe8b3c79c37 Certificate serial: 019AF1D19DE39BB65FAF3492239A928A1D03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft Manifest number: 0678 Signing time: Sat 06 Dec 2025 04:00:37 +0000 Manifest this update: Sat 06 Dec 2025 04:00:37 +0000 Manifest next update: Sun 07 Dec 2025 04:00:37 +0000 Files and hashes: 1: gxtyb8yYIAzzkDTflY6P6LPHnDc.crl (hash: bKLmDhNdxaCxx6j9SIAvaq1tcsFBy/UVY5bljaz+7OY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9d:e3:9b:b6:5f:af:34:92:23:9a:92:8a:1d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=831b726fcc98200cf39034df958e8fe8b3c79c37 Validity Not Before: Dec 6 04:00:37 2025 GMT Not After : Dec 7 04:00:37 2025 GMT Subject: CN=f4d09bbc86c56844b8540b60f70fd90c5e98c98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d3:44:77:af:73:51:ac:5f:56:71:6b:e6:84: 3a:1a:b2:98:06:df:ba:1e:2e:cd:e9:58:72:5d:cf: e6:b4:6f:20:6b:b3:9c:d7:cb:0b:aa:cc:f1:f6:b9: 00:cd:a0:66:3b:f7:0f:90:a4:7e:9e:00:30:c5:fd: 22:f9:b5:f9:16:da:bd:73:3a:95:ba:6a:fe:89:75: 57:a7:51:0e:4e:23:87:58:0b:3f:7e:85:6e:14:22: 37:57:ee:26:c5:cb:30:7d:6b:0e:37:43:91:33:1c: d0:3b:c7:58:b1:4b:87:db:51:2b:4d:e2:16:92:2e: ea:85:b9:ee:38:c2:19:c7:de:93:dd:9a:05:5f:50: 4a:20:e9:c1:8c:3c:de:8c:bd:d8:0d:2f:90:95:1a: 79:04:c6:65:4b:73:76:cd:ff:70:e3:7c:83:0f:fd: 2c:f8:91:2d:e4:74:61:dc:6c:44:0e:a0:a6:49:a5: 52:96:be:9a:90:86:17:be:29:7f:e2:d2:80:ac:99: 1a:46:27:67:6f:99:04:c2:cf:68:71:d2:b2:00:a7: 55:e3:d7:e3:25:25:16:06:ec:6a:9f:d7:44:61:18: 2a:b2:6b:a0:41:d9:72:8b:db:67:29:cf:b6:1b:be: bb:a4:b4:1b:47:2b:05:df:e9:83:cc:1b:20:5e:a9: 18:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D0:9B:BC:86:C5:68:44:B8:54:0B:60:F7:0F:D9:0C:5E:98:C9:8E X509v3 Authority Key Identifier: keyid:83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:b2:ce:22:79:0b:6d:be:02:74:9f:f4:f2:b1:08:b9:26:f8: e7:b2:05:83:e9:b3:fd:7a:24:c2:84:bd:f5:28:3a:93:d1:7f: 82:e3:19:44:7b:65:cd:20:b5:37:51:d8:28:f3:d4:93:94:f1: c4:e2:5c:57:24:ab:82:49:bb:41:a3:7d:36:74:c3:f2:35:84: 56:a0:fe:8c:d4:cf:91:c7:48:e1:7d:b0:dd:d4:17:31:21:70: 7d:4c:12:39:69:65:de:4d:9c:14:95:4e:b1:0b:ca:25:bc:bd: 4d:50:f7:cc:8f:29:73:b8:79:e3:55:30:28:34:f0:1c:2e:fd: fc:bf:21:19:21:d7:63:10:d0:c2:80:b0:a6:ce:9c:b3:40:d2: 80:d4:e7:cd:77:ad:d1:a2:a6:8a:71:54:81:ea:b2:d3:67:ae: a6:3f:3b:4c:9a:5f:d0:64:90:69:6e:97:86:f7:87:5e:64:02: 93:02:bf:f3:9f:4b:b2:f0:4a:8a:14:3b:bf:cf:da:d5:83:0e: 32:de:2d:2c:a6:c6:f2:01:48:b8:d5:a5:09:da:9d:b5:80:4d: 26:0e:69:ba:05:c0:db:98:e0:ab:98:58:d6:56:7e:f7:e2:bb: ad:6c:43:8f:b4:40:82:0a:cb:ac:46:50:e0:0e:5a:b7:c1:a6: fe:c2:5b:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Z3jm7ZfrzSSI5qSih0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMWI3MjZmY2M5ODIwMGNmMzkwMzRkZjk1OGU4ZmU4YjNj NzljMzcwHhcNMjUxMjA2MDQwMDM3WhcNMjUxMjA3MDQwMDM3WjAzMTEwLwYDVQQD EyhmNGQwOWJiYzg2YzU2ODQ0Yjg1NDBiNjBmNzBmZDkwYzVlOThjOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNNEd69zUaxfVnFr5oQ6GrKYBt+6 Hi7N6VhyXc/mtG8ga7Oc18sLqszx9rkAzaBmO/cPkKR+ngAwxf0i+bX5Ftq9czqV umr+iXVXp1EOTiOHWAs/foVuFCI3V+4mxcswfWsON0ORMxzQO8dYsUuH21ErTeIW ki7qhbnuOMIZx96T3ZoFX1BKIOnBjDzejL3YDS+QlRp5BMZlS3N2zf9w43yDD/0s +JEt5HRh3GxEDqCmSaVSlr6akIYXvil/4tKArJkaRidnb5kEws9ocdKyAKdV49fj JSUWBuxqn9dEYRgqsmugQdlyi9tnKc+2G767pLQbRysF3+mDzBsgXqkY1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTQm7yGxWhEuFQLYPcP2QxemMmOMB8GA1UdIwQY MBaAFIMbcm/MmCAM85A035WOj+izx5w3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3h0eWI4eVlJQXp6a0RUZmxZNlA2TFBIbkRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNTE0M2YtYzNjOS00MzU3LTg0N2Ut M2MzNDM2MzY4NGU2LzEvZ3h0eWI4eVlJQXp6a0RUZmxZNlA2TFBIbkRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8wNTE0M2YtYzNjOS00MzU3LTg0N2UtM2MzNDM2MzY4NGU2 LzEvZ3h0eWI4eVlJQXp6a0RUZmxZNlA2TFBIbkRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuLLOInkL bb4CdJ/08rEIuSb457IFg+mz/XokwoS99Sg6k9F/guMZRHtlzSC1N1HYKPPUk5Tx xOJcVySrgkm7QaN9NnTD8jWEVqD+jNTPkcdI4X2w3dQXMSFwfUwSOWll3k2cFJVO sQvKJby9TVD3zI8pc7h541UwKDTwHC79/L8hGSHXYxDQwoCwps6cs0DSgNTnzXet 0aKminFUgeqy02eupj87TJpf0GSQaW6XhveHXmQCkwK/859LsvBKihQ7v8/a1YMO Mt4tLKbG8gFIuNWlCdqdtYBNJg5pugXA25jgq5hY1lZ+9+K7rWxDj7RAggrLrEZQ 4A5at8Gm/sJblg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:44 2025 by rpki-client