This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft File: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft (raw, json) Hash identifier: 18G6JiNWWpD9vgLbIF6fuCrUi8NMSiiDuVh+L9Fvpjg= Subject key identifier: C7:48:B9:56:91:22:98:04:14:92:B6:9A:62:01:61:4D:D2:A9:6A:60 Authority key identifier: 1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA Certificate issuer: /CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da Certificate serial: 019AF1D238D5D7AD691EF765CBD54B2498AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft Manifest number: 101E Signing time: Sat 06 Dec 2025 04:01:17 +0000 Manifest this update: Sat 06 Dec 2025 04:01:17 +0000 Manifest next update: Sun 07 Dec 2025 04:01:17 +0000 Files and hashes: 1: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl (hash: BRtX7SiHD+kPken1UlIZVPLWoxburcwXgY8ku9e3wxs=) 2: dhbqsDMCYbdJQ5KWes-T7R0t68c.roa (hash: A26S4K/y1MLobATqv2Mkxdn527XJqQ0E6NlZCnsWU/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:38:d5:d7:ad:69:1e:f7:65:cb:d5:4b:24:98:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da Validity Not Before: Dec 6 04:01:17 2025 GMT Not After : Dec 7 04:01:17 2025 GMT Subject: CN=c748b956912298041492b69a6201614dd2a96a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cf:62:1b:e3:c4:ec:78:13:99:37:92:4e:08: cb:18:85:b3:5f:ec:f2:76:0c:86:57:d3:f7:b7:8e: 5e:54:b2:96:f1:61:49:95:70:e5:95:88:25:c4:42: 0d:e3:31:77:4d:ca:d9:6e:d2:46:ba:09:6a:40:60: 1c:c7:f9:7b:3e:a6:f8:17:44:26:ee:ac:c6:04:61: ae:86:e3:78:ed:df:96:33:4e:73:2b:df:ff:2f:56: 4b:61:79:08:81:4a:e8:bd:f9:a5:c1:b3:56:1b:b4: 70:30:53:db:2b:90:c6:65:d6:1a:44:68:75:43:0e: 9c:41:72:32:73:58:45:0b:bf:a1:5f:d4:8e:8a:ff: 85:51:0f:72:22:36:b8:dd:32:4b:5c:4f:2b:5d:aa: b6:d1:46:bd:ef:86:c5:1b:1d:f6:80:29:e8:f7:ac: 49:e9:05:c1:7d:de:7e:30:4e:43:a5:02:b7:db:4f: 76:f5:05:a3:c5:9f:22:6b:90:e4:0a:d6:08:9f:90: f6:1d:18:56:44:cd:23:70:86:67:9d:f1:43:c8:d2: f4:1e:83:61:62:82:0c:d1:f5:86:02:25:4d:88:66: 11:41:a3:43:02:4a:69:43:5d:a8:31:9d:e9:29:9d: a4:67:22:10:f8:46:64:35:d8:6e:75:3f:da:40:4c: 95:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:48:B9:56:91:22:98:04:14:92:B6:9A:62:01:61:4D:D2:A9:6A:60 X509v3 Authority Key Identifier: keyid:1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0f:b5:9c:e2:3e:f7:b2:d0:71:f2:dc:8f:0f:a1:dd:e2:5a: 65:f4:c9:00:97:54:68:2e:42:e8:7e:f7:d2:17:8f:fb:05:7a: 5a:56:e5:fe:3b:ed:c1:36:31:f8:df:64:88:44:e3:97:2e:58: fa:b0:67:58:17:7d:51:4d:de:e1:6c:d4:29:f6:0d:d5:aa:c0: fd:80:b5:88:f0:eb:5b:f6:ab:ed:be:0c:e6:54:a7:57:98:54: e0:fa:d3:73:36:e0:2f:9a:bf:1c:03:b5:29:53:94:8e:cf:2f: de:ec:66:de:83:2c:bc:e0:2d:56:48:7e:f2:57:04:5c:2f:5d: 4e:13:23:be:54:88:bf:a5:16:7d:06:68:bd:d3:43:6c:64:0f: 0f:35:86:a2:a1:0b:ee:df:67:a6:0f:73:1c:46:9d:19:54:80: 9b:ca:91:91:c9:a6:33:be:55:1d:37:4e:43:d4:6d:4e:2d:54: e4:02:3e:04:38:5f:60:b8:70:f4:ae:07:4f:ef:b8:fe:b2:9f: df:ae:54:f8:01:81:0d:e5:06:07:5c:f8:68:4b:24:b1:8f:b6: 60:f1:4e:75:b0:6a:6c:d0:48:ae:bc:93:c0:09:25:0c:db:79: 8e:49:95:d2:cb:1d:b4:1b:c4:35:47:5e:26:c8:5e:e3:f1:d9: 6c:46:a6:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jjV161pHvdly9VLJJisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMWI0YjVjMmRhYWE2ZmMzNTA3MWY0MzhmOTY4YWY2ZmY2 Y2E0ZGEwHhcNMjUxMjA2MDQwMTE3WhcNMjUxMjA3MDQwMTE3WjAzMTEwLwYDVQQD EyhjNzQ4Yjk1NjkxMjI5ODA0MTQ5MmI2OWE2MjAxNjE0ZGQyYTk2YTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM9iG+PE7HgTmTeSTgjLGIWzX+zy dgyGV9P3t45eVLKW8WFJlXDllYglxEIN4zF3TcrZbtJGuglqQGAcx/l7Pqb4F0Qm 7qzGBGGuhuN47d+WM05zK9//L1ZLYXkIgUrovfmlwbNWG7RwMFPbK5DGZdYaRGh1 Qw6cQXIyc1hFC7+hX9SOiv+FUQ9yIja43TJLXE8rXaq20Ua974bFGx32gCno96xJ 6QXBfd5+ME5DpQK320929QWjxZ8ia5DkCtYIn5D2HRhWRM0jcIZnnfFDyNL0HoNh YoIM0fWGAiVNiGYRQaNDAkppQ12oMZ3pKZ2kZyIQ+EZkNdhudT/aQEyVDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdIuVaRIpgEFJK2mmIBYU3SqWpgMB8GA1UdIwQY MBaAFBsbS1wtqqb8NQcfQ4+Wivb/bKTaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kZGFjMGQtMzc0My00Y2QyLWE2YTMt YTEyNDZjNjdkOWRlLzEvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9kZGFjMGQtMzc0My00Y2QyLWE2YTMtYTEyNDZjNjdkOWRl LzEvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKg+1nOI+ 97LQcfLcjw+h3eJaZfTJAJdUaC5C6H730heP+wV6Wlbl/jvtwTYx+N9kiETjly5Y +rBnWBd9UU3e4WzUKfYN1arA/YC1iPDrW/ar7b4M5lSnV5hU4PrTczbgL5q/HAO1 KVOUjs8v3uxm3oMsvOAtVkh+8lcEXC9dThMjvlSIv6UWfQZovdNDbGQPDzWGoqEL 7t9npg9zHEadGVSAm8qRkcmmM75VHTdOQ9RtTi1U5AI+BDhfYLhw9K4HT++4/rKf 365U+AGBDeUGB1z4aEsksY+2YPFOdbBqbNBIrryTwAklDNt5jkmV0ssdtBvENUde Jshe4/HZbEam9w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:31 2025 by rpki-client