This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft File: GXYcuDMg_8ugH9gHoG6InMMdhec.mft (raw, json) Hash identifier: R79v+AxKpMvT5zQ+c69B5PB0A2an0dZ/o/Qct0657E0= Subject key identifier: 16:C0:5F:F0:67:D5:F2:5D:60:F9:33:EA:F7:2D:6A:25:0B:43:CF:36 Authority key identifier: 19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7 Certificate issuer: /CN=19761cb83320ffcba01fd807a06e889cc31d85e7 Certificate serial: 019AF2766390D8AD11FEB3E6B78FAA01849B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft Manifest number: 03B2 Signing time: Sat 06 Dec 2025 07:00:36 +0000 Manifest this update: Sat 06 Dec 2025 07:00:36 +0000 Manifest next update: Sun 07 Dec 2025 07:00:36 +0000 Files and hashes: 1: GXYcuDMg_8ugH9gHoG6InMMdhec.crl (hash: HHUF7FP2BQvBuPc1LGogJAZiavCZv/5EvjzkHcLObB0=) 2: Ty2odF6IC8z1MlXMbYRSCNZm2f8.roa (hash: x0KKkB+0aY8vDOyJs8CL2l2Pu3KalqTjZiy3MLgQKrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:63:90:d8:ad:11:fe:b3:e6:b7:8f:aa:01:84:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19761cb83320ffcba01fd807a06e889cc31d85e7 Validity Not Before: Dec 6 07:00:36 2025 GMT Not After : Dec 7 07:00:36 2025 GMT Subject: CN=16c05ff067d5f25d60f933eaf72d6a250b43cf36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c9:5b:e0:9e:dd:e5:87:75:d8:fd:54:9a:f6: 00:7d:b5:b5:b8:9f:a1:36:72:ac:5f:43:ea:8f:84: 27:29:b4:11:77:c3:df:d4:f3:21:8b:9d:72:a6:2d: 2e:04:f7:02:28:00:9e:15:f1:a2:e5:a6:e3:96:a5: 94:0f:7b:ce:66:40:df:00:1d:b8:49:38:96:c2:b4: 19:2b:42:33:a8:2d:c2:e5:78:f1:c4:0d:4c:ec:f7: 4d:82:f5:b9:c7:59:19:be:bb:15:12:a0:e8:51:61: 5b:08:67:d1:93:da:e7:db:be:1a:13:23:b7:ce:7c: 11:de:2a:c1:fa:dc:55:9a:8a:b9:d2:45:80:6e:04: 72:5d:2b:92:dc:15:73:b6:c1:a9:ae:e2:cc:3b:31: 2f:84:41:06:c4:76:0f:eb:31:50:df:83:a7:22:4d: d8:59:9b:46:35:cc:93:60:a7:53:d3:ef:4d:cb:26: 81:9e:70:18:c7:7b:ad:9d:23:8d:ea:85:85:df:1a: 42:55:bd:9e:d1:43:d2:8b:30:09:7c:c0:93:44:ac: f3:27:4b:80:bf:b5:06:f7:ce:f8:a9:5e:be:e3:e1: d7:13:ed:6f:07:a4:f0:3a:f1:2f:54:aa:19:be:6c: b6:bb:aa:26:36:2b:60:ea:98:b2:68:ce:a2:b4:db: 49:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C0:5F:F0:67:D5:F2:5D:60:F9:33:EA:F7:2D:6A:25:0B:43:CF:36 X509v3 Authority Key Identifier: keyid:19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ae:17:41:31:3e:a4:59:76:9a:3c:dd:4a:a8:53:b0:0c:3e: 97:af:e9:3e:e4:ff:c6:de:22:30:a9:70:08:a1:21:69:60:af: d0:fb:c2:d5:24:6c:0b:6f:3d:a3:96:bc:f1:11:2e:13:58:3f: 15:b8:ab:90:2e:d2:41:19:27:08:14:de:3a:0d:9e:54:08:7b: 84:69:4c:51:c1:dc:ee:93:91:a3:01:59:7e:e0:4e:c1:3a:fb: 76:27:0d:d3:e5:2d:d1:d6:b3:99:6c:b8:8f:ea:4e:7e:91:3a: fd:ed:b9:2f:0d:30:4d:b7:7d:2e:46:90:c9:cc:69:ab:11:99: 60:2e:94:db:29:56:97:2b:44:dc:a9:ef:d2:93:bd:00:d9:16: 6d:00:d5:af:8e:f4:b2:51:2c:0f:8b:66:75:f1:54:5d:8c:dd: 23:97:d6:a2:1e:fb:8c:77:53:5d:29:26:35:21:6b:bb:3d:35: 16:c6:ba:6d:c4:01:d0:b5:3c:37:21:86:b1:bf:fb:ac:1b:2e: 6e:0a:d6:60:e0:78:3c:70:c9:00:46:7c:43:da:d9:9f:94:fa: 60:c0:3a:a6:f2:9d:b8:8a:f4:85:6d:c7:74:74:12:6a:d9:31: 09:43:40:0f:a7:48:56:13:54:d1:18:aa:86:c5:06:e3:4d:87: 9a:5e:4a:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmOQ2K0R/rPmt4+qAYSbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NzYxY2I4MzMyMGZmY2JhMDFmZDgwN2EwNmU4ODljYzMx ZDg1ZTcwHhcNMjUxMjA2MDcwMDM2WhcNMjUxMjA3MDcwMDM2WjAzMTEwLwYDVQQD EygxNmMwNWZmMDY3ZDVmMjVkNjBmOTMzZWFmNzJkNmEyNTBiNDNjZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMlb4J7d5Yd12P1UmvYAfbW1uJ+h NnKsX0Pqj4QnKbQRd8Pf1PMhi51ypi0uBPcCKACeFfGi5abjlqWUD3vOZkDfAB24 STiWwrQZK0IzqC3C5XjxxA1M7PdNgvW5x1kZvrsVEqDoUWFbCGfRk9rn274aEyO3 znwR3irB+txVmoq50kWAbgRyXSuS3BVztsGpruLMOzEvhEEGxHYP6zFQ34OnIk3Y WZtGNcyTYKdT0+9NyyaBnnAYx3utnSON6oWF3xpCVb2e0UPSizAJfMCTRKzzJ0uA v7UG9874qV6+4+HXE+1vB6TwOvEvVKoZvmy2u6omNitg6piyaM6itNtJ0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbAX/Bn1fJdYPkz6vctaiULQ882MB8GA1UdIwQY MBaAFBl2HLgzIP/LoB/YB6BuiJzDHYXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1hZY3VETWdfOHVnSDlnSG9HNkluTU1kaGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81ZDBlNDQtMGI4ZS00M2VhLTk4ZDgt Y2Q4YmUxYzU5ZDhkLzEvR1hZY3VETWdfOHVnSDlnSG9HNkluTU1kaGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My81ZDBlNDQtMGI4ZS00M2VhLTk4ZDgtY2Q4YmUxYzU5ZDhk LzEvR1hZY3VETWdfOHVnSDlnSG9HNkluTU1kaGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATa4XQTE+ pFl2mjzdSqhTsAw+l6/pPuT/xt4iMKlwCKEhaWCv0PvC1SRsC289o5a88REuE1g/ FbirkC7SQRknCBTeOg2eVAh7hGlMUcHc7pORowFZfuBOwTr7dicN0+Ut0dazmWy4 j+pOfpE6/e25Lw0wTbd9LkaQycxpqxGZYC6U2ylWlytE3Knv0pO9ANkWbQDVr470 slEsD4tmdfFUXYzdI5fWoh77jHdTXSkmNSFruz01Fsa6bcQB0LU8NyGGsb/7rBsu bgrWYOB4PHDJAEZ8Q9rZn5T6YMA6pvKduIr0hW3HdHQSatkxCUNAD6dIVhNU0Riq hsUG402Hml5KqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:34:57 2025 by rpki-client