This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft File: gXFLKnOMo96ukVr4fDqRxhPhvEk.mft (raw, json) Hash identifier: f/GzwhurjomnYV7DkFdpaMTs6xPoZ03bYjlRkscCKHU= Subject key identifier: 82:2F:0E:26:D5:13:57:0A:48:B9:FB:91:90:3F:08:46:51:0C:71:3D Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49 Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49 Certificate serial: 019AF31D1B5D2F2E56E93F32CE3C4CA96B32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft Manifest number: 07E9 Signing time: Sat 06 Dec 2025 10:02:42 +0000 Manifest this update: Sat 06 Dec 2025 10:02:42 +0000 Manifest next update: Sun 07 Dec 2025 10:02:42 +0000 Files and hashes: 1: 1--9ef5BuonyT90ODHV5G8KHwvGM.roa (hash: 96x1zDsthw+xfBLv+9YvZciWmPNAhtiP7Hkhk8XWewA=) 2: gXFLKnOMo96ukVr4fDqRxhPhvEk.crl (hash: v+enQ9m04JnyrngOiirdH2Qo4nW8y9FDEBlIgSeF2xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:1b:5d:2f:2e:56:e9:3f:32:ce:3c:4c:a9:6b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49 Validity Not Before: Dec 6 10:02:42 2025 GMT Not After : Dec 7 10:02:42 2025 GMT Subject: CN=822f0e26d513570a48b9fb91903f0846510c713d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:21:74:c5:64:8b:57:6c:01:9a:d6:de:97: 02:ea:e8:b6:48:66:9d:11:96:ec:76:00:99:cb:28: 3a:e9:03:28:88:dd:ba:31:fb:5e:a3:7a:7e:51:0d: 4a:34:c0:58:45:b4:a4:e0:dd:c4:51:0b:58:cc:5f: 3c:a7:4e:86:6d:17:15:5b:5f:3c:8d:be:3e:46:b6: 5c:f0:72:4c:ea:46:df:16:ce:d8:4e:b1:b2:f7:ae: 4c:ca:73:bf:78:3b:f5:2c:08:c1:2b:48:a4:57:37: 9b:a6:de:49:53:ce:01:d0:de:0c:87:5d:1e:36:ba: 04:88:b9:86:73:ad:ad:f5:2c:73:25:6a:1f:54:72: 1e:da:d2:24:9c:76:d3:d3:0f:6b:07:cd:43:69:4f: de:81:2c:de:bc:d2:60:23:cd:11:f3:56:04:ae:7f: a3:4b:a1:3f:4f:5b:5e:0f:d6:c1:b9:f8:e8:fb:b2: 3a:e7:4d:c6:f3:f5:05:f8:33:67:68:b2:7c:8c:cf: 7a:24:64:f7:ea:ba:34:00:06:7a:3e:82:f1:da:c1: c0:86:5e:48:20:dc:3d:91:16:ab:d3:57:64:0a:a5: ce:af:fa:30:6e:f2:a7:c1:c5:f6:a7:46:65:34:50: ad:73:86:e7:63:5a:34:8b:38:25:08:07:f1:94:74: f1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2F:0E:26:D5:13:57:0A:48:B9:FB:91:90:3F:08:46:51:0C:71:3D X509v3 Authority Key Identifier: keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:2f:21:d1:b3:19:de:8a:13:bd:4c:2f:08:bf:3b:a6:f0:2f: 32:ce:ce:d9:97:c8:14:09:e4:7e:c5:90:01:99:36:d5:d8:dc: a5:b2:07:38:0e:f7:08:45:b4:6e:af:01:51:13:4a:4a:ee:a2: 2c:56:e3:a0:cf:ad:14:46:97:56:8e:d5:d0:a5:24:40:72:6e: b0:4f:1d:98:05:55:de:2d:6a:ac:54:ed:bc:69:cb:1b:90:3a: 16:7c:f9:eb:a7:d6:3a:d8:3f:af:e6:03:66:46:10:4a:b5:3d: 88:6a:09:6b:02:a9:80:f9:c7:b7:c2:d3:9c:85:1c:e7:28:67: e6:e6:74:f0:a5:15:6f:11:34:1f:a4:55:82:e4:9c:2a:58:97: db:7b:22:17:82:73:aa:9a:2c:e1:48:68:26:d8:74:41:22:99: a8:fe:62:4d:b4:79:25:db:51:ba:66:61:83:68:22:fe:bc:ed: ca:98:ab:8f:b4:59:33:fa:65:5e:09:83:af:b3:3d:63:d4:aa: 23:96:5f:18:21:ba:fd:a2:93:36:3e:38:9f:e8:05:25:ee:72: bd:64:69:0f:07:db:d8:c1:5a:a6:4d:ee:51:16:a6:63:38:f7: 3f:29:c0:da:66:65:fc:72:7b:47:a0:c8:00:03:b6:06:1c:50: d5:09:ab:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHRtdLy5W6T8yzjxMqWsyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNzE0YjJhNzM4Y2EzZGVhZTkxNWFmODdjM2E5MWM2MTNl MWJjNDkwHhcNMjUxMjA2MTAwMjQyWhcNMjUxMjA3MTAwMjQyWjAzMTEwLwYDVQQD Eyg4MjJmMGUyNmQ1MTM1NzBhNDhiOWZiOTE5MDNmMDg0NjUxMGM3MTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLghdMVki1dsAZrW3pcC6ui2SGad EZbsdgCZyyg66QMoiN26Mfteo3p+UQ1KNMBYRbSk4N3EUQtYzF88p06GbRcVW188 jb4+RrZc8HJM6kbfFs7YTrGy965MynO/eDv1LAjBK0ikVzebpt5JU84B0N4Mh10e NroEiLmGc62t9SxzJWofVHIe2tIknHbT0w9rB81DaU/egSzevNJgI80R81YErn+j S6E/T1teD9bBufjo+7I6503G8/UF+DNnaLJ8jM96JGT36ro0AAZ6PoLx2sHAhl5I INw9kRar01dkCqXOr/owbvKnwcX2p0ZlNFCtc4bnY1o0izglCAfxlHTx/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIvDibVE1cKSLn7kZA/CEZRDHE9MB8GA1UdIwQY MBaAFIFxSypzjKPerpFa+Hw6kcYT4bxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWIt MTg5NzI0M2M2MmVmLzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWItMTg5NzI0M2M2MmVm LzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgC8h0bMZ 3ooTvUwvCL87pvAvMs7O2ZfIFAnkfsWQAZk21djcpbIHOA73CEW0bq8BURNKSu6i LFbjoM+tFEaXVo7V0KUkQHJusE8dmAVV3i1qrFTtvGnLG5A6Fnz566fWOtg/r+YD ZkYQSrU9iGoJawKpgPnHt8LTnIUc5yhn5uZ08KUVbxE0H6RVguScKliX23siF4Jz qpos4UhoJth0QSKZqP5iTbR5JdtRumZhg2gi/rztypirj7RZM/plXgmDr7M9Y9Sq I5ZfGCG6/aKTNj44n+gFJe5yvWRpDwfb2MFapk3uURamYzj3PynA2mZl/HJ7R6DI AAO2BhxQ1QmrjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:54:17 2025 by rpki-client