This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft File: gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft (raw, json) Hash identifier: lJ8ZgZjqexX3DrD8retkqHjryte9kZHMi+C2UdD9nXQ= Subject key identifier: 19:03:3E:DD:80:27:82:D2:DD:69:1B:F5:1C:F1:41:E4:8A:71:9B:52 Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56 Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356 Certificate serial: 019AF50BA56E77B0D59E0C85F3B017AE6D26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft Manifest number: 0F1F Signing time: Sat 06 Dec 2025 19:02:52 +0000 Manifest this update: Sat 06 Dec 2025 19:02:52 +0000 Manifest next update: Sun 07 Dec 2025 19:02:52 +0000 Files and hashes: 1: L47fpbavJjM8YwHHhvMkJOYd5vE.roa (hash: IzwhrGUTddMft7RJzZ/2mXaFd/PY/Xp0a/SU/LUo1YY=) 2: dCYxk7-D8dNtxIgEsnMqwJ6THLg.roa (hash: PjGfWgf8wj53bPtlEQkRSwYcsy5G/eLRYAuG9DVnO5o=) 3: dP1XMz72bEIizOJx_8e3gubbo08.roa (hash: 34zsks6roiR3rEQ6SRISFcNl3J9bQeeIWhcKnK78jO8=) 4: gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl (hash: 9kBgRtCYD8KwZ2S+sEBAxPBX1VOfLnTEITngiohT3/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:a5:6e:77:b0:d5:9e:0c:85:f3:b0:17:ae:6d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356 Validity Not Before: Dec 6 19:02:52 2025 GMT Not After : Dec 7 19:02:52 2025 GMT Subject: CN=19033edd802782d2dd691bf51cf141e48a719b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:cf:3f:52:bc:45:a7:c0:c7:7f:c0:3c:d4: 54:09:df:14:7b:64:62:22:45:50:ff:c5:da:c8:9c: 23:0d:fe:61:c4:8b:5c:17:fe:50:1b:22:b8:04:fc: 3a:31:c8:d0:58:74:38:c7:da:a8:9f:6a:35:f8:0a: f9:e7:05:d8:de:c6:8b:14:c1:a6:c7:6a:73:54:ed: e7:50:29:97:4a:93:af:5b:ef:97:f2:ae:20:36:e5: 06:e3:9b:c1:5d:36:c0:01:dc:fc:e7:cd:bb:ce:74: dd:37:7f:2c:b2:08:e3:6f:24:46:85:d4:1b:a3:0e: 2f:e4:b4:18:00:0c:fd:2f:b3:5e:11:9f:24:d9:06: 16:42:78:f4:2f:52:cb:af:29:3d:25:42:63:84:6b: cc:f4:d5:e0:5d:8a:bc:b2:38:f8:0e:43:27:f5:ee: d6:17:bb:7d:d7:e3:07:e6:a6:e7:ee:d3:3e:51:ba: ed:27:94:42:49:0c:46:33:68:34:35:12:63:8b:78: 02:db:ad:41:82:b1:1b:7c:8c:49:d6:1e:f5:e2:b2: 1f:ad:f5:57:e0:19:74:67:e3:b2:98:8c:59:db:88: ba:0d:09:2f:30:52:a5:ad:32:67:63:f8:2c:f3:1d: c4:0f:fa:58:be:bd:cc:9b:aa:49:4e:ff:96:29:b5: 51:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:03:3E:DD:80:27:82:D2:DD:69:1B:F5:1C:F1:41:E4:8A:71:9B:52 X509v3 Authority Key Identifier: keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:82:5a:4c:c2:d2:8e:a4:1d:6a:1f:fb:96:db:33:8c:49:c2: a3:f0:90:87:3c:50:09:0a:e1:2f:50:41:1f:02:46:d4:f4:41: 00:52:bd:37:01:1e:81:b3:a4:3a:d8:5b:9e:9c:36:a6:1a:f4: 31:ba:c4:36:73:51:89:ce:8a:37:ea:10:92:a8:98:9f:1b:19: 5e:f2:3e:e4:b2:d7:95:d3:45:a0:80:3f:d8:38:91:eb:fe:d9: 24:57:75:97:69:38:f2:4c:fa:b6:71:93:40:44:f4:db:56:39: bf:f3:47:78:4d:59:41:14:9f:22:0f:33:4e:8a:1e:08:da:c1: 10:6c:ed:eb:54:8a:33:d8:3f:3d:7b:89:02:9b:a3:be:8c:44: cf:9b:36:ad:71:a0:ce:34:91:90:1b:fe:5b:a5:3b:5f:ea:57: c3:20:77:99:a8:ab:31:c6:2d:64:dd:a5:3d:f5:c5:be:66:16: 33:ea:cf:df:56:07:19:df:4c:1a:46:4a:b9:f9:6f:c1:0f:e0: f9:7a:30:6b:65:5e:13:4e:bb:f9:ad:78:8b:fa:5a:33:78:53: 0b:cc:b5:09:ad:a6:b0:44:40:92:cb:97:c8:11:73:17:5c:93: 48:6c:a9:d1:f6:8f:7b:dd:17:73:c9:6d:10:64:3a:c2:22:40: a5:6c:14:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C6Vud7DVngyF87AXrm0mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZDdmZTczMTJlZmI0MmJkOGQxZWNkODJhYzc2MTkxZWEy NmMzNTYwHhcNMjUxMjA2MTkwMjUyWhcNMjUxMjA3MTkwMjUyWjAzMTEwLwYDVQQD EygxOTAzM2VkZDgwMjc4MmQyZGQ2OTFiZjUxY2YxNDFlNDhhNzE5YjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveLPP1K8RafAx3/APNRUCd8Ue2Ri IkVQ/8XayJwjDf5hxItcF/5QGyK4BPw6McjQWHQ4x9qon2o1+Ar55wXY3saLFMGm x2pzVO3nUCmXSpOvW++X8q4gNuUG45vBXTbAAdz85827znTdN38ssgjjbyRGhdQb ow4v5LQYAAz9L7NeEZ8k2QYWQnj0L1LLryk9JUJjhGvM9NXgXYq8sjj4DkMn9e7W F7t91+MH5qbn7tM+UbrtJ5RCSQxGM2g0NRJji3gC261BgrEbfIxJ1h714rIfrfVX 4Bl0Z+OymIxZ24i6DQkvMFKlrTJnY/gs8x3ED/pYvr3Mm6pJTv+WKbVRowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkDPt2AJ4LS3Wkb9RzxQeSKcZtSMB8GA1UdIwQY MBaAFILX/nMS77Qr2NHs2CrHYZHqJsNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYt MzdiMjFiYWIzYjAwLzEvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYtMzdiMjFiYWIzYjAw LzEvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4JaTMLS jqQdah/7ltszjEnCo/CQhzxQCQrhL1BBHwJG1PRBAFK9NwEegbOkOthbnpw2phr0 MbrENnNRic6KN+oQkqiYnxsZXvI+5LLXldNFoIA/2DiR6/7ZJFd1l2k48kz6tnGT QET021Y5v/NHeE1ZQRSfIg8zTooeCNrBEGzt61SKM9g/PXuJApujvoxEz5s2rXGg zjSRkBv+W6U7X+pXwyB3mairMcYtZN2lPfXFvmYWM+rP31YHGd9MGkZKuflvwQ/g +Xowa2VeE067+a14i/paM3hTC8y1Ca2msERAksuXyBFzF1yTSGyp0faPe90Xc8lt EGQ6wiJApWwUag== -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:33 2025 by rpki-client