This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft File: GXXTHyIv7CWL1HYY_flMURzl4G4.mft (raw, json) Hash identifier: So8PaOz+TcfRoEg54498j8Sgw78cyvX5FbECP1O/R8Y= Subject key identifier: E3:37:4C:28:24:3E:2C:A9:3B:66:54:E4:7E:EB:39:E8:3B:E1:A9:0E Authority key identifier: 19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E Certificate issuer: /CN=1975d31f222fec258bd47618fdf94c511ce5e06e Certificate serial: 019AF12D87A3F0BB4412AD48AD4F61142AAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft Manifest number: 0EA4 Signing time: Sat 06 Dec 2025 01:01:24 +0000 Manifest this update: Sat 06 Dec 2025 01:01:24 +0000 Manifest next update: Sun 07 Dec 2025 01:01:24 +0000 Files and hashes: 1: GXXTHyIv7CWL1HYY_flMURzl4G4.crl (hash: ec4SCXXBGkt5fEpCrzjXfRM1vcw4xJ3f/LH8qHgnNeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:87:a3:f0:bb:44:12:ad:48:ad:4f:61:14:2a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1975d31f222fec258bd47618fdf94c511ce5e06e Validity Not Before: Dec 6 01:01:24 2025 GMT Not After : Dec 7 01:01:24 2025 GMT Subject: CN=e3374c28243e2ca93b6654e47eeb39e83be1a90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:69:e0:eb:01:48:0c:a3:23:89:f0:99:b4:ed: 2c:b2:e8:87:b6:87:ff:af:fe:dc:74:8d:7a:0c:36: 57:12:d6:10:72:19:7c:c1:16:23:84:92:d8:7a:38: 71:56:3f:1a:27:42:50:87:61:16:36:a7:c7:bd:80: b0:cb:53:1d:97:88:48:16:6b:64:18:f2:0d:a1:8b: f3:32:d2:e7:e9:09:64:92:e9:ec:c6:15:e7:ae:88: a3:28:e9:c7:7b:c7:8f:9d:20:e1:45:fa:8a:4d:e5: fc:a6:b6:0a:60:d9:c9:50:e4:71:02:42:3f:fe:3b: c4:67:3c:3e:d0:fc:19:70:71:fb:f7:52:e7:fd:0d: 38:b8:43:ce:bf:63:44:0c:ce:a0:59:d9:04:b4:8f: 01:ee:6c:21:0b:da:2c:ea:65:82:42:b2:1c:a7:de: 26:1c:bd:ba:1f:a5:e4:e7:4a:e9:ca:0a:2b:fe:d3: 40:e6:8a:25:4a:62:fd:b8:49:5b:5e:42:df:6a:1b: 00:13:dc:92:45:46:62:1e:dd:8d:59:c7:57:07:26: a8:85:ce:0d:45:09:6f:45:f9:e3:5d:b2:ac:9b:64: 8f:3f:c1:96:a2:7e:cf:f2:df:60:0e:6b:9c:a2:9c: 9b:f7:59:71:d4:3c:4b:01:9d:b2:3a:1a:79:9c:e1: 76:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:37:4C:28:24:3E:2C:A9:3B:66:54:E4:7E:EB:39:E8:3B:E1:A9:0E X509v3 Authority Key Identifier: keyid:19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:54:02:c3:21:08:b6:a9:c7:1e:ed:be:02:8b:fa:2d:18:a6: a0:88:a4:2f:b9:80:1c:9e:73:75:9d:7a:56:c3:dd:71:35:f1: ae:f0:29:2e:9d:45:78:96:39:9f:78:4b:50:b4:1e:91:ec:fe: 4e:ac:c6:9d:52:0f:d7:9b:a0:eb:a2:6b:3d:f7:42:47:db:eb: 96:bb:7c:9e:9a:15:45:aa:49:78:32:65:e7:d0:c6:10:15:c4: 55:99:be:91:2e:58:aa:c4:b6:34:23:65:d6:54:a9:32:9a:63: 26:98:94:e2:ca:b5:d1:d4:3e:07:61:9b:e5:20:40:cb:da:0b: b5:f2:22:43:da:b3:fa:5e:22:e0:be:90:7b:5f:26:67:ef:e6: ab:8a:91:83:17:32:51:ff:94:58:e4:f4:b2:b7:53:14:0f:65: fb:e3:64:5c:a3:6e:b5:27:1d:63:9d:15:5e:f2:ce:17:89:1a: c0:ee:a3:8c:3a:06:18:dc:ad:3c:e9:98:6a:15:ef:98:03:64: 05:ca:b6:51:73:2b:c5:76:ce:c3:2c:be:fb:06:e1:6f:24:fa: 8a:82:9a:26:45:6f:2e:35:7e:1a:cb:70:d9:3d:e7:6a:a7:4b: 72:53:b0:00:cf:3c:44:ac:0d:a2:82:cb:40:f7:0b:6f:04:49: 2f:6f:38:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYej8LtEEq1IrU9hFCqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NzVkMzFmMjIyZmVjMjU4YmQ0NzYxOGZkZjk0YzUxMWNl NWUwNmUwHhcNMjUxMjA2MDEwMTI0WhcNMjUxMjA3MDEwMTI0WjAzMTEwLwYDVQQD EyhlMzM3NGMyODI0M2UyY2E5M2I2NjU0ZTQ3ZWViMzllODNiZTFhOTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmng6wFIDKMjifCZtO0ssuiHtof/ r/7cdI16DDZXEtYQchl8wRYjhJLYejhxVj8aJ0JQh2EWNqfHvYCwy1Mdl4hIFmtk GPINoYvzMtLn6QlkkunsxhXnroijKOnHe8ePnSDhRfqKTeX8prYKYNnJUORxAkI/ /jvEZzw+0PwZcHH791Ln/Q04uEPOv2NEDM6gWdkEtI8B7mwhC9os6mWCQrIcp94m HL26H6Xk50rpygor/tNA5oolSmL9uElbXkLfahsAE9ySRUZiHt2NWcdXByaohc4N RQlvRfnjXbKsm2SPP8GWon7P8t9gDmucopyb91lx1DxLAZ2yOhp5nOF2gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOM3TCgkPiypO2ZU5H7rOeg74akOMB8GA1UdIwQY MBaAFBl10x8iL+wli9R2GP35TFEc5eBuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1hYVEh5SXY3Q1dMMUhZWV9mbE1VUnpsNEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82Y2NhYTktOWJmNi00NWMxLWI5YWMt NjE1ZjY2ZmRlZGVjLzEvR1hYVEh5SXY3Q1dMMUhZWV9mbE1VUnpsNEc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82Y2NhYTktOWJmNi00NWMxLWI5YWMtNjE1ZjY2ZmRlZGVj LzEvR1hYVEh5SXY3Q1dMMUhZWV9mbE1VUnpsNEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1QCwyEI tqnHHu2+Aov6LRimoIikL7mAHJ5zdZ16VsPdcTXxrvApLp1FeJY5n3hLULQekez+ TqzGnVIP15ug66JrPfdCR9vrlrt8npoVRapJeDJl59DGEBXEVZm+kS5YqsS2NCNl 1lSpMppjJpiU4sq10dQ+B2Gb5SBAy9oLtfIiQ9qz+l4i4L6Qe18mZ+/mq4qRgxcy Uf+UWOT0srdTFA9l++NkXKNutScdY50VXvLOF4kawO6jjDoGGNytPOmYahXvmANk Bcq2UXMrxXbOwyy++wbhbyT6ioKaJkVvLjV+Gstw2T3naqdLclOwAM88RKwNooLL QPcLbwRJL284ww== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:11 2025 by rpki-client