This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json) Hash identifier: UIiqTvMVXJCqhKsT5OJYvtB5g8NAVF/r/gc9j9TvvX4= Subject key identifier: 01:64:B1:82:B7:AB:32:13:6B:2D:37:E7:1E:71:CF:72:D3:82:ED:3E Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1 Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1 Certificate serial: 019AF0BEF192038B057FF343CD16F465523F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft Manifest number: 083F Signing time: Fri 05 Dec 2025 23:00:36 +0000 Manifest this update: Fri 05 Dec 2025 23:00:36 +0000 Manifest next update: Sat 06 Dec 2025 23:00:36 +0000 Files and hashes: 1: 8sYphYrrmRM_ErwAJ8gqIzEpDGo.roa (hash: rt/OwZDBbcaVJA7rLlh63ti0IkxjXIhkThQceeCTgkI=) 2: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: vkK8HPFtdeIKecCEGftHKZBe2WujsAT/Vc0OVhjTVpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:f1:92:03:8b:05:7f:f3:43:cd:16:f4:65:52:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1 Validity Not Before: Dec 5 23:00:36 2025 GMT Not After : Dec 6 23:00:36 2025 GMT Subject: CN=0164b182b7ab32136b2d37e71e71cf72d382ed3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:df:d5:53:19:ed:95:39:92:7b:9f:9f:92:df: 3d:fb:98:53:a4:92:0e:af:e7:40:50:85:bf:18:fe: 1d:8a:fd:00:f9:b1:26:b3:96:4f:1c:7b:f4:4d:71: bc:36:ea:14:6f:03:ed:c8:ff:a2:93:16:4e:92:27: e8:12:c2:ce:fd:63:2e:ce:fe:71:df:45:14:49:5f: cc:77:88:cc:66:52:76:66:67:cc:56:c1:17:85:d8: 28:02:16:4a:65:6c:48:cb:0c:d3:7c:78:86:14:dd: d6:10:b7:7f:cb:b9:80:aa:e7:45:51:88:00:ce:de: 39:1c:02:dd:d1:a3:82:57:f6:5e:fa:d5:cd:68:05: d1:82:00:01:06:61:be:69:0b:05:e8:e7:45:a7:f6: 71:c2:38:3c:59:a2:62:52:b4:3b:81:84:70:9f:a7: f5:5f:aa:ec:77:af:a1:39:94:4d:03:ee:8e:4a:da: 99:71:d9:68:e8:61:6c:35:ce:ff:eb:be:80:e6:99: 93:8f:cf:f2:83:17:34:db:9e:ed:e2:a1:57:49:ea: 8c:5e:44:6a:6e:00:a3:df:4c:c8:5d:42:45:63:4b: e0:9d:10:87:f6:05:54:e5:79:41:75:de:2b:7e:92: 43:4e:76:b7:07:88:49:a1:cf:c5:12:37:2a:64:66: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:64:B1:82:B7:AB:32:13:6B:2D:37:E7:1E:71:CF:72:D3:82:ED:3E X509v3 Authority Key Identifier: keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:80:96:8d:72:86:6e:14:6e:14:5f:23:52:3b:bd:fd:83:f3: e7:f8:57:bb:a4:22:fc:b7:71:8e:6e:d3:de:d9:18:4e:f1:d9: 47:5c:44:5c:09:3e:c2:f1:f2:e6:3a:22:c0:02:94:2a:73:9a: 33:28:b9:a7:5c:6a:ad:3f:cf:a5:19:64:55:70:7a:5a:9c:e3: ff:2c:2d:3c:96:27:b6:a1:60:0a:0e:14:20:53:65:91:31:15: da:dc:19:93:86:a6:d6:6c:80:a1:82:9f:d8:6b:75:66:5d:e2: dd:ce:71:de:1b:40:bb:98:dd:1d:61:77:2e:1e:e1:8d:9d:e0: 29:6b:b5:77:39:f3:21:c0:71:be:65:53:49:79:4e:82:ba:bb: 3a:f0:ba:a2:5f:cf:a9:f5:b4:bc:60:60:2a:c7:81:22:da:a2: f0:cc:f8:25:3f:98:92:76:66:6e:73:47:aa:13:2c:da:28:50: ca:09:e5:20:53:33:98:29:92:6a:f7:2f:05:c4:67:b6:eb:5d: 05:67:12:a7:cc:21:39:9f:a8:3c:2b:d0:62:af:0d:85:ca:57: 29:1b:9f:c1:87:b8:78:e8:3a:31:70:f1:6c:ae:7b:f7:9c:e0: 1e:7e:9c:14:ba:0f:06:5f:42:31:14:5b:31:b9:a1:92:27:14: 0a:ca:71:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvvGSA4sFf/NDzRb0ZVI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxN2NiMTRjZTQwMTRhYzMyNjlkNzBlZWVhODljODcwNTVi MTc2ZjEwHhcNMjUxMjA1MjMwMDM2WhcNMjUxMjA2MjMwMDM2WjAzMTEwLwYDVQQD EygwMTY0YjE4MmI3YWIzMjEzNmIyZDM3ZTcxZTcxY2Y3MmQzODJlZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9/VUxntlTmSe5+fkt89+5hTpJIO r+dAUIW/GP4div0A+bEms5ZPHHv0TXG8NuoUbwPtyP+ikxZOkifoEsLO/WMuzv5x 30UUSV/Md4jMZlJ2ZmfMVsEXhdgoAhZKZWxIywzTfHiGFN3WELd/y7mAqudFUYgA zt45HALd0aOCV/Ze+tXNaAXRggABBmG+aQsF6OdFp/Zxwjg8WaJiUrQ7gYRwn6f1 X6rsd6+hOZRNA+6OStqZcdlo6GFsNc7/676A5pmTj8/ygxc0257t4qFXSeqMXkRq bgCj30zIXUJFY0vgnRCH9gVU5XlBdd4rfpJDTna3B4hJoc/FEjcqZGZBcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFksYK3qzITay035x5xz3LTgu0+MB8GA1UdIwQY MBaAFIF8sUzkAUrDJp1w7uqJyHBVsXbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMt MWEyYWJkYTFhOWU1LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMtMWEyYWJkYTFhOWU1 LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4CWjXKG bhRuFF8jUju9/YPz5/hXu6Qi/Ldxjm7T3tkYTvHZR1xEXAk+wvHy5joiwAKUKnOa Myi5p1xqrT/PpRlkVXB6Wpzj/ywtPJYntqFgCg4UIFNlkTEV2twZk4am1myAoYKf 2Gt1Zl3i3c5x3htAu5jdHWF3Lh7hjZ3gKWu1dznzIcBxvmVTSXlOgrq7OvC6ol/P qfW0vGBgKseBItqi8Mz4JT+YknZmbnNHqhMs2ihQygnlIFMzmCmSavcvBcRntutd BWcSp8whOZ+oPCvQYq8NhcpXKRufwYe4eOg6MXDxbK5795zgHn6cFLoPBl9CMRRb MbmhkicUCspxzg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:03 2025 by rpki-client