This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft File: GxUEuvgu-OsK5QivQLY442YKVIg.mft (raw, json) Hash identifier: M8CeR9TdzQBGQuIjKRpgMMwSxvn9R5/P4D20d3xpNEU= Subject key identifier: BF:FA:2A:23:F3:D8:B0:52:BF:88:D5:1D:79:19:C0:08:26:4A:26:C6 Authority key identifier: 1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88 Certificate issuer: /CN=1b1504baf82ef8eb0ae508af40b638e3660a5488 Certificate serial: 019AF12E10AD5FCE214E306AD2F90430BD6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft Manifest number: 0FA8 Signing time: Sat 06 Dec 2025 01:01:59 +0000 Manifest this update: Sat 06 Dec 2025 01:01:59 +0000 Manifest next update: Sun 07 Dec 2025 01:01:59 +0000 Files and hashes: 1: GxUEuvgu-OsK5QivQLY442YKVIg.crl (hash: UxmUuAmZ4D/Kwu5n1kM8WkH8hbB4dTlWDR//m+1ax9M=) 2: tXB_xgR37XoLj3SsWw2sjqhqZ9s.roa (hash: he0mpoKaeU1kDKUR39rmBxQcGyL1D1fjhdkpr9BtuYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:10:ad:5f:ce:21:4e:30:6a:d2:f9:04:30:bd:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1504baf82ef8eb0ae508af40b638e3660a5488 Validity Not Before: Dec 6 01:01:59 2025 GMT Not After : Dec 7 01:01:59 2025 GMT Subject: CN=bffa2a23f3d8b052bf88d51d7919c008264a26c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bf:7b:fe:6e:30:61:e2:30:ee:a1:8d:75:b9: 08:b4:d7:d2:97:69:a1:9c:61:1a:f7:95:58:70:bc: 76:5b:04:c8:16:6f:23:3f:d3:0a:85:68:dd:30:5d: e8:b8:8c:62:50:0e:dc:27:a8:0c:f1:4b:7f:8f:96: 68:55:05:89:92:78:97:84:4a:ee:7a:ed:9a:1c:39: 20:c9:5b:69:97:f3:48:93:77:5f:70:6d:f7:1f:ff: bd:cf:da:35:f6:c5:8c:54:4f:7a:c5:c5:2c:0c:1a: ff:39:68:68:23:e6:a9:fd:0d:f8:63:46:4a:ff:24: 9f:99:55:cd:cb:b2:f5:bf:b1:c7:c5:d9:8b:93:8f: ae:a9:50:77:7d:86:94:43:44:77:c2:fe:5f:da:4b: 28:79:11:71:6c:90:a7:44:d4:d0:9b:e4:ca:3f:e0: 8f:c6:e1:00:46:52:6d:91:71:b2:3b:f7:0c:a3:e2: f3:cc:04:7f:3c:5b:71:9f:00:e4:0e:59:0a:b6:fb: b4:e7:87:72:d3:94:3b:d0:d8:69:16:21:5d:a7:15: ae:84:50:e9:41:0e:1b:ef:46:04:69:dd:4e:fc:9c: 14:2e:32:35:09:bd:a1:b4:f5:87:42:88:87:16:6e: 28:ba:cd:75:7c:18:ea:be:46:c6:95:c5:30:54:61: 4f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FA:2A:23:F3:D8:B0:52:BF:88:D5:1D:79:19:C0:08:26:4A:26:C6 X509v3 Authority Key Identifier: keyid:1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:06:10:38:74:c8:ca:f3:16:3d:16:ee:78:86:31:4d:b8:b8: 80:5a:87:66:7c:c5:ce:08:d7:4e:e5:03:40:87:84:6c:9f:2f: c5:29:17:da:6c:0d:06:89:49:28:3e:75:ee:79:75:53:2a:2b: 33:22:a7:69:c7:4a:0e:d5:1e:4b:59:bd:c1:6e:17:ff:ab:bf: 0a:cb:fe:3f:e4:dc:b3:0d:ca:19:28:26:66:c3:2e:14:be:72: 6a:53:70:d7:be:8e:86:36:54:e4:cd:3a:2f:92:3d:81:d8:37: 37:b1:72:05:5d:7c:05:6c:53:14:38:bb:4d:64:f8:be:e6:c6: 5a:12:81:1f:c6:23:a8:3e:dc:26:a7:18:7f:b0:0c:64:c1:8a: 88:3f:48:11:6a:c2:9a:d0:35:c2:8d:f5:64:87:97:10:2f:7e: 0d:d3:c2:c3:e8:23:95:e3:49:c3:25:d0:7e:1a:a6:47:9b:64: 59:fa:ec:0d:a5:47:d1:75:d1:19:0a:c4:e3:d9:25:ab:ab:02: 53:19:a1:f6:fb:28:c0:b8:70:d8:4d:8e:62:4a:45:3b:15:27: a3:d5:60:3a:15:27:1b:c1:93:a1:14:d5:82:33:63:b7:bb:5f: 27:27:7e:ac:f7:07:e1:ed:ff:55:a9:dc:fe:ca:81:76:6f:42: 96:e7:7c:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhCtX84hTjBq0vkEML1uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTUwNGJhZjgyZWY4ZWIwYWU1MDhhZjQwYjYzOGUzNjYw YTU0ODgwHhcNMjUxMjA2MDEwMTU5WhcNMjUxMjA3MDEwMTU5WjAzMTEwLwYDVQQD EyhiZmZhMmEyM2YzZDhiMDUyYmY4OGQ1MWQ3OTE5YzAwODI2NGEyNmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb97/m4wYeIw7qGNdbkItNfSl2mh nGEa95VYcLx2WwTIFm8jP9MKhWjdMF3ouIxiUA7cJ6gM8Ut/j5ZoVQWJkniXhEru eu2aHDkgyVtpl/NIk3dfcG33H/+9z9o19sWMVE96xcUsDBr/OWhoI+ap/Q34Y0ZK /ySfmVXNy7L1v7HHxdmLk4+uqVB3fYaUQ0R3wv5f2ksoeRFxbJCnRNTQm+TKP+CP xuEARlJtkXGyO/cMo+LzzAR/PFtxnwDkDlkKtvu054dy05Q70NhpFiFdpxWuhFDp QQ4b70YEad1O/JwULjI1Cb2htPWHQoiHFm4ous11fBjqvkbGlcUwVGFPSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/6KiPz2LBSv4jVHXkZwAgmSibGMB8GA1UdIwQY MBaAFBsVBLr4LvjrCuUIr0C2OONmClSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hVRXV2Z3UtT3NLNVFpdlFMWTQ0MllLVklnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yYjdmNzAtZmFkMS00MDNjLWIwOGUt MmMzZWE0Yjg2ZTIwLzEvR3hVRXV2Z3UtT3NLNVFpdlFMWTQ0MllLVklnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8yYjdmNzAtZmFkMS00MDNjLWIwOGUtMmMzZWE0Yjg2ZTIw LzEvR3hVRXV2Z3UtT3NLNVFpdlFMWTQ0MllLVklnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigYQOHTI yvMWPRbueIYxTbi4gFqHZnzFzgjXTuUDQIeEbJ8vxSkX2mwNBolJKD517nl1Uyor MyKnacdKDtUeS1m9wW4X/6u/Csv+P+Tcsw3KGSgmZsMuFL5yalNw176OhjZU5M06 L5I9gdg3N7FyBV18BWxTFDi7TWT4vubGWhKBH8YjqD7cJqcYf7AMZMGKiD9IEWrC mtA1wo31ZIeXEC9+DdPCw+gjleNJwyXQfhqmR5tkWfrsDaVH0XXRGQrE49klq6sC Uxmh9vsowLhw2E2OYkpFOxUno9VgOhUnG8GToRTVgjNjt7tfJyd+rPcH4e3/Vanc /sqBdm9Clud82A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:25 2025 by rpki-client