This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft File: guRyorh_8WgtNi8N3kGOkxGsBGQ.mft (raw, json) Hash identifier: hxCNUY97Eb4oMxa1gZc1LSrpAbvGBrsO+DrHF0B3dXQ= Subject key identifier: A7:E4:97:1B:23:4F:A0:8C:46:D3:61:F6:83:E7:65:BD:57:F8:38:25 Authority key identifier: 82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64 Certificate issuer: /CN=82e472a2b87ff1682d362f0dde418e9311ac0464 Certificate serial: 019AF49BE2B6B069060CDCDE2ABF0EF8FC36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft Manifest number: 1651 Signing time: Sat 06 Dec 2025 17:00:48 +0000 Manifest this update: Sat 06 Dec 2025 17:00:48 +0000 Manifest next update: Sun 07 Dec 2025 17:00:48 +0000 Files and hashes: 1: guRyorh_8WgtNi8N3kGOkxGsBGQ.crl (hash: 1dkweRqsX6BOF3btpIFA2ZdMNouXEXHZuU8GgLH9QEs=) 2: wM-Q4PYw-g7L6gGW4qe1neIC43c.roa (hash: hm2k81ASEePQ7E1Ry4WD3zVSD28SUrbakN2SZMVNLMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:e2:b6:b0:69:06:0c:dc:de:2a:bf:0e:f8:fc:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82e472a2b87ff1682d362f0dde418e9311ac0464 Validity Not Before: Dec 6 17:00:48 2025 GMT Not After : Dec 7 17:00:48 2025 GMT Subject: CN=a7e4971b234fa08c46d361f683e765bd57f83825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9b:2f:37:1e:00:42:2d:6f:3a:1b:48:4e:3d: 28:3a:6d:f6:b2:95:25:2a:8e:c6:f4:f6:7f:67:30: 90:42:be:b5:3b:19:bc:a3:2e:0d:95:ee:f8:2b:9e: 6c:67:d4:c1:8e:33:cc:fe:93:c7:ee:3c:89:28:e2: 22:c4:8f:f7:96:89:26:46:83:e3:ce:1c:c3:9d:f8: 8a:f1:39:25:79:07:e2:aa:ee:92:c8:b7:93:f8:f7: 7c:35:59:f4:7b:17:bd:fb:25:e3:e7:54:ec:4a:ca: ab:b5:de:c8:1f:ba:3e:3f:4f:dc:db:47:71:f7:31: 50:da:ac:d6:ad:78:b0:8b:44:23:5b:9c:31:2f:3a: a2:33:f9:f5:a8:10:e8:bc:65:c3:00:94:69:01:a7: bc:25:db:12:75:2e:d0:bc:f8:98:a5:83:c3:13:a4: 00:3e:1b:05:d3:94:fa:51:6b:f1:ea:dd:a5:47:48: cc:8c:64:0c:8d:f9:d2:3c:27:0b:15:60:15:30:00: b7:40:5b:8a:5f:65:24:a6:2d:4c:a5:10:36:bd:8b: f1:4a:59:d2:f0:d2:01:8a:28:7a:22:6a:4c:f6:f7: d0:3e:ee:af:b7:7e:bf:73:d1:c6:09:73:83:d3:84: ec:8b:ee:c6:e8:c4:7a:08:67:b1:2b:b6:ba:07:6e: 7c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E4:97:1B:23:4F:A0:8C:46:D3:61:F6:83:E7:65:BD:57:F8:38:25 X509v3 Authority Key Identifier: keyid:82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:62:2b:2f:65:dd:da:55:66:75:49:96:3c:8e:cb:3c:50:2e: 1d:d3:05:d0:5a:50:b2:62:53:d7:a3:e2:53:f4:81:ef:8d:57: df:f6:20:d7:48:53:bb:e2:d8:fe:49:fd:28:95:3b:46:b8:46: 1d:c1:ae:cc:40:9e:b1:aa:84:cd:d8:0e:ea:28:a0:1f:73:3a: 0c:10:18:e2:bb:de:79:24:19:2d:e0:e1:59:98:fc:69:48:1f: 4b:ef:b4:41:da:4e:f4:06:be:1b:8f:83:eb:c6:a2:02:0e:a3: a9:35:60:33:94:9e:8e:10:24:76:2b:7a:0b:ff:78:3b:9e:b0: 3f:6f:a1:f8:bb:a6:0f:88:d3:f2:08:85:37:79:0c:fe:1b:00: 88:ee:64:fb:ac:58:35:38:4b:a7:78:8d:40:3e:db:9a:18:0d: 1d:20:ea:44:3d:06:c8:e4:49:10:ec:0b:30:10:da:1e:b3:a3: 7e:ff:32:8f:6d:ae:be:2d:68:39:fe:9d:2e:38:28:b7:20:b6: 32:46:a8:e9:51:f4:33:bc:bf:a4:83:ce:fc:e4:00:10:47:bc: b2:c3:4a:1e:4b:9a:b1:f7:eb:31:46:15:43:e3:a5:18:0f:cc: 05:47:17:e9:20:b8:27:43:c2:d4:40:97:02:e9:dc:36:f5:79: 86:9d:25:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+K2sGkGDNzeKr8O+Pw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZTQ3MmEyYjg3ZmYxNjgyZDM2MmYwZGRlNDE4ZTkzMTFh YzA0NjQwHhcNMjUxMjA2MTcwMDQ4WhcNMjUxMjA3MTcwMDQ4WjAzMTEwLwYDVQQD EyhhN2U0OTcxYjIzNGZhMDhjNDZkMzYxZjY4M2U3NjViZDU3ZjgzODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JsvNx4AQi1vOhtITj0oOm32spUl Ko7G9PZ/ZzCQQr61Oxm8oy4Nle74K55sZ9TBjjPM/pPH7jyJKOIixI/3lokmRoPj zhzDnfiK8TkleQfiqu6SyLeT+Pd8NVn0exe9+yXj51TsSsqrtd7IH7o+P0/c20dx 9zFQ2qzWrXiwi0QjW5wxLzqiM/n1qBDovGXDAJRpAae8JdsSdS7QvPiYpYPDE6QA PhsF05T6UWvx6t2lR0jMjGQMjfnSPCcLFWAVMAC3QFuKX2Ukpi1MpRA2vYvxSlnS 8NIBiih6ImpM9vfQPu6vt36/c9HGCXOD04Tsi+7G6MR6CGexK7a6B258fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfklxsjT6CMRtNh9oPnZb1X+DglMB8GA1UdIwQY MBaAFILkcqK4f/FoLTYvDd5BjpMRrARkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3VSeW9yaF84V2d0Tmk4TjNrR09reEdzQkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85MmI0ZDYtYjkyNC00YjMxLTk0ZDct MjM2MTZjNzlhZTAyLzEvZ3VSeW9yaF84V2d0Tmk4TjNrR09reEdzQkdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi85MmI0ZDYtYjkyNC00YjMxLTk0ZDctMjM2MTZjNzlhZTAy LzEvZ3VSeW9yaF84V2d0Tmk4TjNrR09reEdzQkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2IrL2Xd 2lVmdUmWPI7LPFAuHdMF0FpQsmJT16PiU/SB741X3/Yg10hTu+LY/kn9KJU7RrhG HcGuzECesaqEzdgO6iigH3M6DBAY4rveeSQZLeDhWZj8aUgfS++0QdpO9Aa+G4+D 68aiAg6jqTVgM5SejhAkdit6C/94O56wP2+h+LumD4jT8giFN3kM/hsAiO5k+6xY NThLp3iNQD7bmhgNHSDqRD0GyORJEOwLMBDaHrOjfv8yj22uvi1oOf6dLjgotyC2 Mkao6VH0M7y/pIPO/OQAEEe8ssNKHkuasffrMUYVQ+OlGA/MBUcX6SC4J0PC1ECX AuncNvV5hp0ljA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:33 2025 by rpki-client