This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json) Hash identifier: Zju88IRTzA3oLf6Psgg4bylBmAYvPCP6Y+gUGdJvxWg= Subject key identifier: 71:AE:9D:A8:EE:ED:1E:82:F3:C7:A1:88:95:52:5F:4C:05:36:76:7E Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1 Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1 Certificate serial: 019B34566BCF6C1692473D641A0C1FCF7939 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft Manifest number: 0862 Signing time: Fri 19 Dec 2025 02:00:37 +0000 Manifest this update: Fri 19 Dec 2025 02:00:37 +0000 Manifest next update: Sat 20 Dec 2025 02:00:37 +0000 Files and hashes: 1: 8sYphYrrmRM_ErwAJ8gqIzEpDGo.roa (hash: rt/OwZDBbcaVJA7rLlh63ti0IkxjXIhkThQceeCTgkI=) 2: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: b6/9ZyATEYhTEJ/57zrwHqSgtCCEZ4c+eg09znFLumI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:6b:cf:6c:16:92:47:3d:64:1a:0c:1f:cf:79:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1 Validity Not Before: Dec 19 02:00:37 2025 GMT Not After : Dec 20 02:00:37 2025 GMT Subject: CN=71ae9da8eeed1e82f3c7a18895525f4c0536767e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:d2:e5:f3:e5:b4:57:a2:f3:15:b8:6f:59: 7d:ed:36:0a:fc:c4:fc:fe:6e:57:57:c0:d8:49:0c: da:f0:bf:40:9d:7b:fe:c1:4a:d3:d1:d9:a0:5b:90: 32:43:d1:07:e5:b6:4d:5d:04:9c:8e:50:0a:b8:07: 2c:a4:fb:c5:8a:4d:1f:fe:3c:81:ff:8f:50:2b:52: 63:f4:62:85:1e:25:f5:f1:3a:5f:28:df:fc:e1:51: e6:bf:7b:ab:5c:c2:1b:05:a7:11:76:c2:05:31:ba: 06:92:50:08:c4:bb:62:09:96:25:fd:d8:f7:c9:11: 85:28:97:c0:22:ad:b3:4d:fa:36:8c:94:17:ec:2d: 52:99:ac:be:9e:9e:ad:5b:31:96:33:76:bb:85:82: f1:c5:03:de:ee:9b:c2:53:2a:d8:a7:0f:15:77:80: f1:7b:85:2f:50:ef:76:c2:13:8b:d5:4f:7d:56:a0: a3:73:a7:97:83:6d:ee:0d:35:8b:52:96:36:13:51: 90:52:56:dc:29:fb:46:f6:c5:e0:0e:ec:ff:09:46: 3b:91:f5:fc:0d:3b:e2:80:57:5f:4c:12:65:c0:fb: 1c:4a:7c:f3:a2:c6:10:04:6f:4d:e1:c8:71:2a:04: b0:08:de:3e:31:70:57:83:30:8c:c8:77:d6:b0:a8: b4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AE:9D:A8:EE:ED:1E:82:F3:C7:A1:88:95:52:5F:4C:05:36:76:7E X509v3 Authority Key Identifier: keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:53:d3:d6:d2:96:94:99:f0:c5:a0:26:72:c0:70:47:6c:e9: 5c:0c:23:a9:be:f7:dc:a0:57:b6:7d:e6:f6:2f:15:df:44:e4: e9:60:51:17:7b:1b:d0:47:a2:30:da:2d:96:65:22:71:eb:7a: 67:8e:15:97:58:a8:b7:c9:29:60:83:4f:ad:33:b5:f4:3a:17: e6:f5:b7:0d:4b:10:31:1b:4e:3a:ab:05:ea:3f:05:1c:60:f1: 25:51:48:39:06:9d:4d:15:6f:11:87:6b:76:4a:56:52:6d:af: e8:76:eb:47:ab:91:b7:22:4f:bd:21:6e:9d:ec:e9:c8:3a:4b: 5c:23:84:b3:94:75:26:89:d2:a9:98:7a:16:7a:b9:1d:3e:d1: 5c:52:65:5b:c4:95:6b:d4:ed:10:4d:12:68:4e:d2:fc:2d:a0: 7d:51:97:6c:b9:29:9a:7e:1a:29:02:52:a5:61:c9:85:4d:cd: 88:e5:96:d3:9f:13:1f:ed:fa:97:cc:5d:c0:6c:f6:ac:a4:3f: a4:f7:b2:0d:f8:4c:2d:c7:43:ad:8a:20:a7:99:6e:76:b8:73: 4a:1f:29:ca:b9:5b:50:97:74:cd:bb:a7:47:77:18:10:a3:89: 76:2b:a5:97:c2:6f:30:ae:67:c3:0d:ae:a6:38:5b:3e:e7:6b: e0:f7:00:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VmvPbBaSRz1kGgwfz3k5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxN2NiMTRjZTQwMTRhYzMyNjlkNzBlZWVhODljODcwNTVi MTc2ZjEwHhcNMjUxMjE5MDIwMDM3WhcNMjUxMjIwMDIwMDM3WjAzMTEwLwYDVQQD Eyg3MWFlOWRhOGVlZWQxZTgyZjNjN2ExODg5NTUyNWY0YzA1MzY3NjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF/S5fPltFei8xW4b1l97TYK/MT8 /m5XV8DYSQza8L9AnXv+wUrT0dmgW5AyQ9EH5bZNXQScjlAKuAcspPvFik0f/jyB /49QK1Jj9GKFHiX18TpfKN/84VHmv3urXMIbBacRdsIFMboGklAIxLtiCZYl/dj3 yRGFKJfAIq2zTfo2jJQX7C1Smay+np6tWzGWM3a7hYLxxQPe7pvCUyrYpw8Vd4Dx e4UvUO92whOL1U99VqCjc6eXg23uDTWLUpY2E1GQUlbcKftG9sXgDuz/CUY7kfX8 DTvigFdfTBJlwPscSnzzosYQBG9N4chxKgSwCN4+MXBXgzCMyHfWsKi0VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGunaju7R6C88ehiJVSX0wFNnZ+MB8GA1UdIwQY MBaAFIF8sUzkAUrDJp1w7uqJyHBVsXbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMt MWEyYWJkYTFhOWU1LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMtMWEyYWJkYTFhOWU1 LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1PT1tKW lJnwxaAmcsBwR2zpXAwjqb733KBXtn3m9i8V30Tk6WBRF3sb0EeiMNotlmUicet6 Z44Vl1iot8kpYINPrTO19DoX5vW3DUsQMRtOOqsF6j8FHGDxJVFIOQadTRVvEYdr dkpWUm2v6HbrR6uRtyJPvSFunezpyDpLXCOEs5R1JonSqZh6Fnq5HT7RXFJlW8SV a9TtEE0SaE7S/C2gfVGXbLkpmn4aKQJSpWHJhU3NiOWW058TH+36l8xdwGz2rKQ/ pPeyDfhMLcdDrYogp5ludrhzSh8pyrlbUJd0zbunR3cYEKOJdiull8JvMK5nww2u pjhbPudr4PcAfw== -----END CERTIFICATE-----Generated at Fri Dec 19 11:58:11 2025 by rpki-client