This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft File: gXFLKnOMo96ukVr4fDqRxhPhvEk.mft (raw, json) Hash identifier: jbKGp5ccN8I+6PnXJBPYbZmpOCLxsnuuQwTjafVE/6U= Subject key identifier: 0E:71:00:42:15:DB:A4:1A:EC:22:4A:AE:B4:D5:F5:A4:C9:13:F3:7A Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49 Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49 Certificate serial: 019B2EF99987B53F4A833E3F5FFA4A66EED4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft Manifest number: 0808 Signing time: Thu 18 Dec 2025 01:01:08 +0000 Manifest this update: Thu 18 Dec 2025 01:01:08 +0000 Manifest next update: Fri 19 Dec 2025 01:01:08 +0000 Files and hashes: 1: 1--9ef5BuonyT90ODHV5G8KHwvGM.roa (hash: 96x1zDsthw+xfBLv+9YvZciWmPNAhtiP7Hkhk8XWewA=) 2: gXFLKnOMo96ukVr4fDqRxhPhvEk.crl (hash: ASiU+2Kcp/S9hZ9VOzQeOnU08B4s7JJV0G6U3xOruKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:99:87:b5:3f:4a:83:3e:3f:5f:fa:4a:66:ee:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49 Validity Not Before: Dec 18 01:01:08 2025 GMT Not After : Dec 19 01:01:08 2025 GMT Subject: CN=0e71004215dba41aec224aaeb4d5f5a4c913f37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1f:a6:56:d7:17:e3:59:a0:13:45:95:44:b6: ad:07:b4:1a:92:04:ca:81:f9:c9:b0:13:ac:6e:fb: 35:b5:95:ab:1e:8d:4c:34:91:a3:28:36:23:f8:92: 45:45:0b:ac:93:c7:1c:88:e6:bc:0c:cb:f9:7a:96: 30:98:70:22:49:72:81:8e:64:32:1c:62:2e:28:46: d5:a5:25:11:19:02:0b:5c:a9:e8:92:87:bb:06:01: 85:e9:96:af:9d:57:e9:6c:b2:ab:5f:26:7c:f3:62: 6b:c7:e7:2b:63:6d:3e:7d:bf:2c:48:7c:c3:8d:f5: a1:f8:5b:e7:6d:c7:c6:5a:8d:59:53:98:72:fc:a1: 39:6c:68:0b:a6:da:fa:58:ad:36:0a:16:bf:6c:5e: f7:f4:a3:5b:c5:3e:a9:a5:e0:a2:b6:5e:e6:7f:29: 18:99:42:72:d7:5d:16:b6:8a:80:ec:02:d2:23:80: d4:ae:91:14:e7:27:4d:56:ca:99:c5:78:31:3a:f1: fa:c0:35:a8:ae:7a:c9:dd:54:88:f5:2b:35:16:b3: 6a:24:f6:11:a8:bf:2e:8c:4b:71:05:98:8f:b6:63: fb:61:1d:e9:ca:e1:49:36:c1:a8:07:38:8e:82:9c: da:72:cf:ad:a6:b3:21:29:af:1b:c6:5d:d4:39:e1: 29:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:71:00:42:15:DB:A4:1A:EC:22:4A:AE:B4:D5:F5:A4:C9:13:F3:7A X509v3 Authority Key Identifier: keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e7:e7:db:d9:95:f8:93:ac:88:fd:97:23:61:13:b0:aa:48: 72:9c:65:b7:5d:a1:e4:9b:14:ee:7c:a1:b5:99:ef:88:68:50: b5:7e:e4:63:7b:4d:7d:2d:fa:da:2f:56:40:5a:7d:6a:d2:4e: 10:bd:29:26:f6:99:e9:4c:3b:91:60:03:2c:00:91:85:0d:0a: 8f:46:6c:b6:0f:79:da:b3:1b:cc:3c:57:15:2c:58:3e:a2:a6: ac:ad:63:b7:62:bc:38:54:ba:ad:55:55:1d:56:03:41:41:86: 59:bf:62:34:48:6b:02:08:d5:c6:04:15:3d:9f:a0:2d:0f:ca: 34:b9:ed:c5:b5:41:9f:c6:12:d2:41:f3:5c:67:9d:d7:6e:de: 3e:cf:b0:f7:37:a9:1d:e7:03:dd:4e:0a:fe:22:d3:93:90:cf: 5c:e1:ce:43:55:4a:ce:2e:09:66:4e:a2:fe:5d:97:6d:54:64: 42:1f:aa:65:36:4e:16:8f:ba:4d:63:93:87:cd:75:db:0b:62: df:8a:dd:a0:f8:c6:79:39:14:aa:0c:5f:2a:06:d8:c3:c5:84: ad:94:ce:25:fb:90:fc:31:93:db:44:71:90:98:1d:f1:95:8c: 0d:8c:93:1c:0c:d0:8f:c1:17:e5:0e:e9:5f:ae:19:a0:54:f1: ee:82:db:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+ZmHtT9Kgz4/X/pKZu7UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNzE0YjJhNzM4Y2EzZGVhZTkxNWFmODdjM2E5MWM2MTNl MWJjNDkwHhcNMjUxMjE4MDEwMTA4WhcNMjUxMjE5MDEwMTA4WjAzMTEwLwYDVQQD EygwZTcxMDA0MjE1ZGJhNDFhZWMyMjRhYWViNGQ1ZjVhNGM5MTNmMzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B+mVtcX41mgE0WVRLatB7QakgTK gfnJsBOsbvs1tZWrHo1MNJGjKDYj+JJFRQusk8cciOa8DMv5epYwmHAiSXKBjmQy HGIuKEbVpSURGQILXKnokoe7BgGF6ZavnVfpbLKrXyZ882Jrx+crY20+fb8sSHzD jfWh+FvnbcfGWo1ZU5hy/KE5bGgLptr6WK02Cha/bF739KNbxT6ppeCitl7mfykY mUJy110WtoqA7ALSI4DUrpEU5ydNVsqZxXgxOvH6wDWornrJ3VSI9Ss1FrNqJPYR qL8ujEtxBZiPtmP7YR3pyuFJNsGoBziOgpzacs+tprMhKa8bxl3UOeEpiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5xAEIV26Qa7CJKrrTV9aTJE/N6MB8GA1UdIwQY MBaAFIFxSypzjKPerpFa+Hw6kcYT4bxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWIt MTg5NzI0M2M2MmVmLzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWItMTg5NzI0M2M2MmVm LzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfufn29mV +JOsiP2XI2ETsKpIcpxlt12h5JsU7nyhtZnviGhQtX7kY3tNfS362i9WQFp9atJO EL0pJvaZ6Uw7kWADLACRhQ0Kj0Zstg952rMbzDxXFSxYPqKmrK1jt2K8OFS6rVVV HVYDQUGGWb9iNEhrAgjVxgQVPZ+gLQ/KNLntxbVBn8YS0kHzXGed127ePs+w9zep HecD3U4K/iLTk5DPXOHOQ1VKzi4JZk6i/l2XbVRkQh+qZTZOFo+6TWOTh8112wti 34rdoPjGeTkUqgxfKgbYw8WErZTOJfuQ/DGT20RxkJgd8ZWMDYyTHAzQj8EX5Q7p X64ZoFTx7oLbdg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:56:04 2025 by rpki-client