This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft File: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json) Hash identifier: +j/zyEWF9YbPqAFKN20HYN2yi8PrmmdPRx+Ehv9FyCg= Subject key identifier: 10:34:17:79:AF:E0:9F:91:16:DD:ED:2E:78:E9:44:74:B3:A9:33:13 Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F Certificate issuer: /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f Certificate serial: 019AF208CD797856FFBFEF3401B502FAAAB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft Manifest number: 122F Signing time: Sat 06 Dec 2025 05:00:54 +0000 Manifest this update: Sat 06 Dec 2025 05:00:54 +0000 Manifest next update: Sun 07 Dec 2025 05:00:54 +0000 Files and hashes: 1: 91a4AyjiQ11AE-ejkjHD7dP2jCw.roa (hash: mqMxschgmHfJobGTtzuGdiipq4NqJDFBcrZK6ygd+ok=) 2: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: LBL3iMFhRumYx/7KIBAES3A1xXfWhFUideHxxqRvuvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:cd:79:78:56:ff:bf:ef:34:01:b5:02:fa:aa:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f Validity Not Before: Dec 6 05:00:54 2025 GMT Not After : Dec 7 05:00:54 2025 GMT Subject: CN=10341779afe09f9116dded2e78e94474b3a93313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:63:17:75:0c:75:84:cb:5c:42:f8:44:4d:a9: 66:74:6c:1b:4c:6d:5d:80:3c:88:3e:0e:46:2d:c1: 99:31:c0:e3:75:70:a1:0d:15:5c:4b:41:eb:3a:25: a5:13:d6:05:3e:fc:55:4a:fd:eb:d8:2f:b4:6f:12: 3f:23:96:a8:a2:45:bb:d9:b9:23:14:c2:0c:3a:ff: 84:12:ea:37:24:07:6c:7d:04:2f:3a:cf:d0:be:d6: f8:33:66:ba:c2:77:9b:17:5d:3e:db:ef:ac:d8:38: f1:33:71:40:20:c0:8d:1f:73:86:26:fd:e0:f4:e8: f4:ec:70:37:f5:43:36:b7:4c:ec:f8:fd:43:05:71: c1:58:4c:15:b4:8e:68:e7:d9:0c:32:63:45:3a:63: b4:cc:3f:53:80:a5:89:bb:03:07:7d:0f:55:cf:10: 83:2f:07:e2:de:83:d3:98:de:44:e2:fb:d1:38:cd: 02:0e:2c:b3:4c:b2:aa:21:18:05:a0:ef:e8:59:9d: 5b:c3:7a:e4:a9:ec:5c:58:98:b9:b1:e7:40:57:1f: 1f:1a:cb:0d:16:1d:99:fd:1f:f6:0b:c1:80:30:16: f6:56:ad:23:cc:b2:bd:2d:e3:d8:7c:62:be:2b:be: 1d:9c:33:c8:2e:08:f2:24:39:70:95:d5:de:a4:74: 5c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:34:17:79:AF:E0:9F:91:16:DD:ED:2E:78:E9:44:74:B3:A9:33:13 X509v3 Authority Key Identifier: keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:82:01:88:17:4b:d6:d1:39:3f:41:f4:c6:a0:86:71:a1:47: c8:ac:2c:a0:a7:ea:39:df:a0:fc:56:b9:63:57:8f:e2:d5:51: 57:34:d7:ac:d0:f0:84:89:f9:65:33:f7:5d:a8:bd:08:d3:09: b4:8d:4d:f4:8a:8b:ef:67:7c:79:a2:c3:5d:b3:8b:fd:81:a1: 0b:2f:21:ff:6b:8f:65:a0:5b:9c:90:a9:97:28:a0:46:a4:90: 62:50:57:5a:7d:c3:a3:d0:09:25:ff:8c:28:ab:09:f2:23:e6: fd:16:49:a4:46:f2:23:00:e3:de:d4:82:db:23:08:7c:b3:5c: 3d:10:2a:65:50:45:c4:5b:e6:fc:3c:85:ad:5d:72:65:ae:21: f2:34:f3:00:38:f3:36:67:f4:96:a3:b6:78:33:2f:15:48:ef: fb:29:2e:69:44:a1:80:a0:c8:4b:c1:e5:db:6b:3b:c4:42:d0: ad:70:89:b6:99:26:e2:0f:79:cc:78:a4:76:f2:82:10:cf:0b: 04:e7:13:f8:ab:ec:ae:82:ca:9e:0a:ff:12:1b:79:9f:ee:53: 84:aa:f6:98:da:cc:4d:c4:81:d4:42:bc:8e:de:82:bf:ad:e8: d5:15:8c:c9:a1:b4:31:54:45:db:05:89:77:cb:2e:47:df:11: 1c:4a:2c:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCM15eFb/v+80AbUC+qqxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMThlMGExOWFlNzkwZmE1MDM5NTE1NTlmNDdkNDFiNDdl N2ZkMGYwHhcNMjUxMjA2MDUwMDU0WhcNMjUxMjA3MDUwMDU0WjAzMTEwLwYDVQQD EygxMDM0MTc3OWFmZTA5ZjkxMTZkZGVkMmU3OGU5NDQ3NGIzYTkzMzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmMXdQx1hMtcQvhETalmdGwbTG1d gDyIPg5GLcGZMcDjdXChDRVcS0HrOiWlE9YFPvxVSv3r2C+0bxI/I5aookW72bkj FMIMOv+EEuo3JAdsfQQvOs/Qvtb4M2a6wnebF10+2++s2DjxM3FAIMCNH3OGJv3g 9Oj07HA39UM2t0zs+P1DBXHBWEwVtI5o59kMMmNFOmO0zD9TgKWJuwMHfQ9VzxCD Lwfi3oPTmN5E4vvROM0CDiyzTLKqIRgFoO/oWZ1bw3rkqexcWJi5sedAVx8fGssN Fh2Z/R/2C8GAMBb2Vq0jzLK9LePYfGK+K74dnDPILgjyJDlwldXepHRcjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBA0F3mv4J+RFt3tLnjpRHSzqTMTMB8GA1UdIwQY MBaAFBsY4KGa55D6UDlRVZ9H1BtH5/0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hqZ29acm5rUHBRT1ZGVm4wZlVHMGZuX1E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mMmUyYzktY2VhYi00ZDdiLWE5ZDgt YTEwNTc3NmMzMzQ3LzEvR3hqZ29acm5rUHBRT1ZGVm4wZlVHMGZuX1E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mMmUyYzktY2VhYi00ZDdiLWE5ZDgtYTEwNTc3NmMzMzQ3 LzEvR3hqZ29acm5rUHBRT1ZGVm4wZlVHMGZuX1E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3oIBiBdL 1tE5P0H0xqCGcaFHyKwsoKfqOd+g/Fa5Y1eP4tVRVzTXrNDwhIn5ZTP3Xai9CNMJ tI1N9IqL72d8eaLDXbOL/YGhCy8h/2uPZaBbnJCplyigRqSQYlBXWn3Do9AJJf+M KKsJ8iPm/RZJpEbyIwDj3tSC2yMIfLNcPRAqZVBFxFvm/DyFrV1yZa4h8jTzADjz Nmf0lqO2eDMvFUjv+ykuaUShgKDIS8Hl22s7xELQrXCJtpkm4g95zHikdvKCEM8L BOcT+KvsroLKngr/Eht5n+5ThKr2mNrMTcSB1EK8jt6Cv63o1RWMyaG0MVRF2wWJ d8suR98RHEosXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:41:21 2025 by rpki-client