This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft File: gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft (raw, json) Hash identifier: lOuL6tOwpZ8IaTB3SNO6m28gMpZa/YbWIJ4VLdhbDzs= Subject key identifier: FC:83:B8:2A:8D:17:EF:36:AB:5C:22:C0:B1:7F:69:8E:E6:6E:18:2C Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56 Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356 Certificate serial: 019B3C7F07A09FAB9B8AF4756F59D9635A67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft Manifest number: 0F44 Signing time: Sat 20 Dec 2025 16:01:56 +0000 Manifest this update: Sat 20 Dec 2025 16:01:56 +0000 Manifest next update: Sun 21 Dec 2025 16:01:56 +0000 Files and hashes: 1: L47fpbavJjM8YwHHhvMkJOYd5vE.roa (hash: IzwhrGUTddMft7RJzZ/2mXaFd/PY/Xp0a/SU/LUo1YY=) 2: dCYxk7-D8dNtxIgEsnMqwJ6THLg.roa (hash: PjGfWgf8wj53bPtlEQkRSwYcsy5G/eLRYAuG9DVnO5o=) 3: dP1XMz72bEIizOJx_8e3gubbo08.roa (hash: 34zsks6roiR3rEQ6SRISFcNl3J9bQeeIWhcKnK78jO8=) 4: gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl (hash: 8ovAYxYCh61wfwknq54wD2+6SlfAKPN/ZwZFNuQ+pvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:07:a0:9f:ab:9b:8a:f4:75:6f:59:d9:63:5a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356 Validity Not Before: Dec 20 16:01:56 2025 GMT Not After : Dec 21 16:01:56 2025 GMT Subject: CN=fc83b82a8d17ef36ab5c22c0b17f698ee66e182c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:08:32:90:2d:be:95:6e:5b:70:a1:1d:79:d0: 6b:44:f4:b0:61:15:1e:22:a3:2e:29:59:56:70:d7: 8f:8c:88:75:78:db:26:3d:0d:67:20:bd:88:a3:98: 5f:f5:64:6e:a8:f0:c1:32:a8:5d:11:a7:fa:7f:1a: 66:07:50:f3:dc:d0:2d:9a:c7:b5:55:74:e9:60:e3: fe:19:da:81:b2:7e:06:67:21:24:39:9e:c6:dc:20: 13:66:49:9e:e6:a5:af:91:c5:ce:c2:3e:78:7f:c8: f8:c8:80:70:6b:0c:d1:a9:26:82:2a:ec:f6:01:21: 3c:ca:6d:2f:58:44:ba:2c:a5:93:c3:d3:85:38:a7: 04:ba:e6:d9:9c:f4:a9:10:e8:f4:7d:35:e4:d3:4b: e7:12:5c:4f:bc:46:7e:a5:82:56:dd:f5:67:6a:d1: 79:f2:8d:da:eb:a5:93:d6:bc:84:77:8e:a3:fe:a3: 53:79:11:d3:c0:0a:aa:8d:9d:03:ae:20:c5:c7:66: e9:d9:a8:5a:c3:8c:75:09:bd:d1:c6:51:63:92:89: 98:cb:0e:a8:1c:c7:b6:79:02:e9:86:55:9f:c5:aa: 82:53:83:e6:75:8f:d3:26:6a:af:3e:df:cb:03:aa: 1b:44:26:d7:46:50:47:52:9c:e6:fa:4f:34:e6:cf: 79:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:83:B8:2A:8D:17:EF:36:AB:5C:22:C0:B1:7F:69:8E:E6:6E:18:2C X509v3 Authority Key Identifier: keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:a5:5f:ca:2c:5c:7f:ce:dd:54:f4:23:b0:7e:d9:c3:ed:44: c7:83:f6:57:b3:e6:30:21:38:e6:9f:ae:1b:44:c0:e6:a5:2f: e2:f9:27:e7:e3:43:7a:b3:18:b7:b4:7b:d4:37:94:c9:1c:27: 64:c2:7a:f1:5f:cb:93:e5:77:0b:e8:97:98:44:57:95:94:24: 51:1b:b0:53:cc:ff:df:af:0e:e1:e1:9a:ee:f6:fe:c3:23:2f: 38:14:46:8d:a3:a9:ff:46:f7:76:4b:57:e4:60:6e:7b:51:46: e6:0b:1c:90:82:b4:aa:88:d7:30:a2:d6:90:dd:25:2a:1e:b4: da:b2:8b:ec:49:2e:cc:db:2f:ea:ec:30:fc:26:25:6f:e8:7f: 9c:50:2a:e1:66:ac:58:21:44:bc:58:1c:ad:0b:bd:11:af:4a: 0d:e9:23:00:82:d8:1d:9d:ef:12:a6:40:52:fb:cc:0d:ca:64: be:d1:68:53:0a:6b:15:0f:22:81:73:2b:9a:a6:d1:30:c2:9e: 32:81:33:a9:cc:f7:19:6b:fb:a5:c4:ec:f9:73:d3:ff:98:e4: c4:39:e8:31:8f:97:36:74:e3:e8:2d:36:f0:ea:8f:8d:a2:8c: ce:77:c6:b9:c7:3c:50:3f:31:45:bd:ff:bb:a2:11:e5:08:83: 86:34:04:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fwegn6ubivR1b1nZY1pnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZDdmZTczMTJlZmI0MmJkOGQxZWNkODJhYzc2MTkxZWEy NmMzNTYwHhcNMjUxMjIwMTYwMTU2WhcNMjUxMjIxMTYwMTU2WjAzMTEwLwYDVQQD EyhmYzgzYjgyYThkMTdlZjM2YWI1YzIyYzBiMTdmNjk4ZWU2NmUxODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwgykC2+lW5bcKEdedBrRPSwYRUe IqMuKVlWcNePjIh1eNsmPQ1nIL2Io5hf9WRuqPDBMqhdEaf6fxpmB1Dz3NAtmse1 VXTpYOP+GdqBsn4GZyEkOZ7G3CATZkme5qWvkcXOwj54f8j4yIBwawzRqSaCKuz2 ASE8ym0vWES6LKWTw9OFOKcEuubZnPSpEOj0fTXk00vnElxPvEZ+pYJW3fVnatF5 8o3a66WT1ryEd46j/qNTeRHTwAqqjZ0DriDFx2bp2ahaw4x1Cb3RxlFjkomYyw6o HMe2eQLphlWfxaqCU4PmdY/TJmqvPt/LA6obRCbXRlBHUpzm+k805s95IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyDuCqNF+82q1wiwLF/aY7mbhgsMB8GA1UdIwQY MBaAFILX/nMS77Qr2NHs2CrHYZHqJsNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYt MzdiMjFiYWIzYjAwLzEvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYtMzdiMjFiYWIzYjAw LzEvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKVfyixc f87dVPQjsH7Zw+1Ex4P2V7PmMCE45p+uG0TA5qUv4vkn5+NDerMYt7R71DeUyRwn ZMJ68V/Lk+V3C+iXmERXlZQkURuwU8z/368O4eGa7vb+wyMvOBRGjaOp/0b3dktX 5GBue1FG5gsckIK0qojXMKLWkN0lKh602rKL7EkuzNsv6uww/CYlb+h/nFAq4Was WCFEvFgcrQu9Ea9KDekjAILYHZ3vEqZAUvvMDcpkvtFoUwprFQ8igXMrmqbRMMKe MoEzqcz3GWv7pcTs+XPT/5jkxDnoMY+XNnTj6C028OqPjaKMznfGucc8UD8xRb3/ u6IR5QiDhjQEsA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:52:07 2025 by rpki-client