This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft File: GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft (raw, json) Hash identifier: 3Y++xh09BHoiV2FtmoJYQCQt+mptsmUTuKzZA+0ChSk= Subject key identifier: 17:19:4E:E3:A7:3E:88:F4:B9:9E:01:F1:9A:32:FA:68:BD:61:FB:7D Authority key identifier: 19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E Certificate issuer: /CN=197fc930e4aa59b0303459f755698e8f998f471e Certificate serial: 019AF42E8FA498A3559534540B8881BA635C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 15:01:23 +0000 Manifest this update: Sat 06 Dec 2025 15:01:23 +0000 Manifest next update: Sun 07 Dec 2025 15:01:23 +0000 Files and hashes: 1: GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl (hash: 1WKxAZaUz1/+isy/eksmKqQibkjxiebiG7mLKWJKbDM=) 2: dPTbW5NvAJKveanwf9xsMOGfn5Y.roa (hash: DpFROJeoc1UpOy7/3HzFb7ViY51RvdrZHobQAff/jls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:8f:a4:98:a3:55:95:34:54:0b:88:81:ba:63:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=197fc930e4aa59b0303459f755698e8f998f471e Validity Not Before: Dec 6 15:01:23 2025 GMT Not After : Dec 7 15:01:23 2025 GMT Subject: CN=17194ee3a73e88f4b99e01f19a32fa68bd61fb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cb:aa:18:18:bf:e2:65:70:be:09:83:b9:b1: 9d:03:73:70:fc:8e:c3:56:48:fb:b0:c5:57:5a:80: e9:6e:15:df:4f:f1:8b:3b:1a:fd:a4:43:a6:28:52: 17:b8:41:24:6a:c6:85:98:21:bd:f5:5e:d9:33:70: 67:b0:0e:33:9c:3e:0e:99:0e:ae:e0:16:d1:54:69: e1:56:28:18:da:56:87:1f:8f:b5:af:5f:1a:5b:a3: 57:c8:ef:50:92:20:5b:91:aa:b2:98:2d:0b:b1:76: b8:85:50:b5:fb:38:86:f2:13:f1:c4:22:f3:38:cb: ec:a1:3d:68:b9:14:dd:b6:f5:bd:19:0e:f6:6a:3d: 1d:fc:77:e8:53:ab:25:ae:64:0a:81:33:2f:8d:02: a2:dd:01:d5:df:e4:a3:db:dd:99:5d:84:a6:f6:81: a2:d6:fa:eb:3c:f6:55:70:62:77:22:25:91:b5:89: fd:15:b5:40:09:74:99:76:66:ba:b2:32:1d:e9:a7: 46:88:d8:e9:06:b9:72:7a:85:c2:70:f3:42:30:f3: 68:1a:c3:b2:7a:5b:c2:8a:6f:c3:64:50:87:09:a5: cf:97:a6:f7:14:11:8b:42:52:08:9c:d0:24:9d:02: a4:e0:a3:bb:a7:e3:06:14:f5:2b:68:e6:e5:a4:26: 57:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:19:4E:E3:A7:3E:88:F4:B9:9E:01:F1:9A:32:FA:68:BD:61:FB:7D X509v3 Authority Key Identifier: keyid:19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:8c:44:57:aa:83:8a:ed:e5:ce:26:5f:ba:3d:8a:cc:a6:a9: 36:14:6a:79:a8:0a:18:d5:26:ed:d8:af:fa:48:2d:41:c3:fa: b0:57:43:05:a5:41:df:ac:63:07:a1:cf:07:63:f6:91:7d:0f: fa:c4:3b:78:24:88:19:d8:55:d9:fe:9a:8e:52:3a:91:d3:47: 6e:c9:2d:3e:68:94:18:11:11:ea:ad:36:8a:7b:3f:c1:cf:11: 04:8f:d2:12:85:6c:49:91:cf:d9:f2:90:13:63:35:c2:00:9c: a3:c0:92:05:4c:e9:b7:f1:89:f6:5f:37:80:7d:95:af:86:59: 94:67:e0:1c:24:e3:c2:d2:f2:1f:27:0b:1c:ea:e0:10:bf:2f: 63:5d:99:44:b1:b3:87:8a:0d:ca:35:a0:f9:c3:56:fa:1b:e9: fa:82:18:9e:f9:fb:72:b7:a3:6c:6c:ff:a6:fb:98:2c:7c:d4: 41:ec:d8:79:c6:f3:81:bb:0a:09:2e:f9:98:d3:2d:aa:7e:a1: d5:45:92:4e:13:26:c3:1c:31:68:de:e8:e3:d0:65:3f:a4:91: 9b:11:ec:38:63:61:8f:be:79:14:3e:ed:1f:c7:7b:12:51:f1: d3:8e:db:78:a7:90:e4:3d:59:eb:45:39:7e:25:02:61:be:59: 20:46:86:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lo+kmKNVlTRUC4iBumNcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5N2ZjOTMwZTRhYTU5YjAzMDM0NTlmNzU1Njk4ZThmOTk4 ZjQ3MWUwHhcNMjUxMjA2MTUwMTIzWhcNMjUxMjA3MTUwMTIzWjAzMTEwLwYDVQQD EygxNzE5NGVlM2E3M2U4OGY0Yjk5ZTAxZjE5YTMyZmE2OGJkNjFmYjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8uqGBi/4mVwvgmDubGdA3Nw/I7D Vkj7sMVXWoDpbhXfT/GLOxr9pEOmKFIXuEEkasaFmCG99V7ZM3BnsA4znD4OmQ6u 4BbRVGnhVigY2laHH4+1r18aW6NXyO9QkiBbkaqymC0LsXa4hVC1+ziG8hPxxCLz OMvsoT1ouRTdtvW9GQ72aj0d/HfoU6slrmQKgTMvjQKi3QHV3+Sj292ZXYSm9oGi 1vrrPPZVcGJ3IiWRtYn9FbVACXSZdma6sjId6adGiNjpBrlyeoXCcPNCMPNoGsOy elvCim/DZFCHCaXPl6b3FBGLQlIInNAknQKk4KO7p+MGFPUraOblpCZX1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcZTuOnPoj0uZ4B8Zoy+mi9Yft9MB8GA1UdIwQY MBaAFBl/yTDkqlmwMDRZ91Vpjo+Zj0ceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1hfSk1PU3FXYkF3TkZuM1ZXbU9qNW1QUng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yZWEwZTktMjdmNy00ZDcxLWE5MDAt MjdiZTA5MTE4YzYxLzEvR1hfSk1PU3FXYkF3TkZuM1ZXbU9qNW1QUng0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yZWEwZTktMjdmNy00ZDcxLWE5MDAtMjdiZTA5MTE4YzYx LzEvR1hfSk1PU3FXYkF3TkZuM1ZXbU9qNW1QUng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFoxEV6qD iu3lziZfuj2KzKapNhRqeagKGNUm7div+kgtQcP6sFdDBaVB36xjB6HPB2P2kX0P +sQ7eCSIGdhV2f6ajlI6kdNHbsktPmiUGBER6q02ins/wc8RBI/SEoVsSZHP2fKQ E2M1wgCco8CSBUzpt/GJ9l83gH2Vr4ZZlGfgHCTjwtLyHycLHOrgEL8vY12ZRLGz h4oNyjWg+cNW+hvp+oIYnvn7crejbGz/pvuYLHzUQezYecbzgbsKCS75mNMtqn6h 1UWSThMmwxwxaN7o49BlP6SRmxHsOGNhj755FD7tH8d7ElHx047beKeQ5D1Z60U5 fiUCYb5ZIEaGoA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:54:36 2025 by rpki-client