This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft File: GNtfz9wY74Qh4mUfGybBZaAdU_E.mft (raw, json) Hash identifier: Rb/zQiUJWbcGgmrVIFHDiMMblEMKa7pqDAD5nlOA2A8= Subject key identifier: 12:6C:E8:17:91:E5:C0:66:6A:70:AA:AD:EC:EE:2B:CF:71:A3:27:74 Authority key identifier: 18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1 Certificate issuer: /CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1 Certificate serial: 019B522A0A8FF6D3602443306665F968D09A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 21:00:45 +0000 Manifest this update: Wed 24 Dec 2025 21:00:45 +0000 Manifest next update: Thu 25 Dec 2025 21:00:45 +0000 Files and hashes: 1: GNtfz9wY74Qh4mUfGybBZaAdU_E.crl (hash: U0pDl81np8IPxHKhdGGmIg8rEcOn4+R3b0zvpYynkAs=) 2: H0c0iaohuwDRjCnDKysbTdg-WUw.roa (hash: Zx3G3ayX4XbzK0AXVUgC4/4zmj6zDADWp3kxeG6+h7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:0a:8f:f6:d3:60:24:43:30:66:65:f9:68:d0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1 Validity Not Before: Dec 24 21:00:45 2025 GMT Not After : Dec 25 21:00:45 2025 GMT Subject: CN=126ce81791e5c0666a70aaadecee2bcf71a32774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:96:65:56:c1:4e:00:e9:74:b5:c2:e8:07:06: 4b:ac:f3:46:11:69:0b:05:be:fd:a3:01:f8:9a:f4: d5:63:f6:34:02:01:49:43:d0:50:2b:5d:3f:17:6d: 73:ed:a6:cc:7b:f3:a3:4a:9d:14:00:26:a4:57:c2: b5:17:06:ed:88:4e:63:cf:67:ba:69:b3:78:ea:ae: 5a:6e:3e:c4:db:41:f2:9f:e3:f3:c5:43:0b:c8:d5: 72:ef:ca:0c:86:3f:92:d2:4c:48:93:e6:45:3e:40: 8c:e5:e6:68:be:f1:7b:25:c2:42:bf:e9:59:77:30: ef:6d:fa:13:40:56:0f:2d:c6:70:80:51:bd:85:44: 45:e7:54:a9:37:42:cf:3b:90:6b:e9:e2:b3:2e:ef: 98:b7:dd:b3:7e:d0:da:2f:a2:8d:18:35:37:99:de: 55:86:16:fd:f7:36:35:93:8f:84:3a:dc:37:29:76: 94:29:b2:de:58:48:a9:ca:57:39:82:1f:6f:8b:5c: 0f:ff:b2:e7:d0:e2:8b:c5:28:7d:c8:6b:8f:91:81: f6:5e:67:f3:4b:0f:0f:5b:bc:29:c1:0d:c3:80:ac: 39:c4:e9:6b:98:bd:07:67:ed:a2:6a:c6:80:ae:ba: 91:43:48:5d:a0:dd:c0:20:4a:39:df:cf:f7:7f:13: b3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6C:E8:17:91:E5:C0:66:6A:70:AA:AD:EC:EE:2B:CF:71:A3:27:74 X509v3 Authority Key Identifier: keyid:18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:6a:9e:df:91:f7:d8:cf:89:3c:7f:40:dd:7c:5f:66:ff:f6: c2:67:91:bd:4d:cd:7b:4b:e8:bf:14:ba:aa:9d:ad:6d:e2:d6: 31:0a:de:e2:34:11:0f:c0:18:19:a0:42:13:fc:dd:74:48:6b: ae:2d:f2:a5:85:c4:32:9e:10:76:fd:71:a9:4b:05:0a:5f:d8: af:00:25:06:30:bb:a3:c5:46:4c:d3:c2:b1:17:a5:87:b0:c7: e3:ba:d2:a8:33:55:69:b6:77:d7:94:1b:20:c7:f8:71:9a:7c: 45:7b:19:cd:71:28:95:3c:d2:94:c3:97:f7:12:3a:85:89:e1: 1e:b3:fe:f1:7b:c3:00:5b:a3:27:3f:6f:ae:a9:a1:73:10:d3: 42:b7:cc:08:eb:87:d8:23:04:46:af:38:56:80:b2:e8:62:87: 75:b8:5c:2e:67:28:2c:5a:89:8c:18:ec:f8:02:3e:26:4a:4d: ad:42:6c:68:18:65:59:01:3f:54:b8:ec:c0:2d:f3:73:d6:5e: d7:cc:3e:de:8c:00:2b:60:31:9e:4c:a3:d7:e8:c4:10:5c:93: 61:46:d4:b5:db:2d:f3:4f:3e:0d:e9:c3:d6:c7:ca:e7:b1:20: d4:b1:3d:1a:67:83:9e:32:e1:30:9a:19:cb:23:2b:c8:fe:86: 09:b3:dc:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKgqP9tNgJEMwZmX5aNCaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZGI1ZmNmZGMxOGVmODQyMWUyNjUxZjFiMjZjMTY1YTAx ZDUzZjEwHhcNMjUxMjI0MjEwMDQ1WhcNMjUxMjI1MjEwMDQ1WjAzMTEwLwYDVQQD EygxMjZjZTgxNzkxZTVjMDY2NmE3MGFhYWRlY2VlMmJjZjcxYTMyNzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZZlVsFOAOl0tcLoBwZLrPNGEWkL Bb79owH4mvTVY/Y0AgFJQ9BQK10/F21z7abMe/OjSp0UACakV8K1FwbtiE5jz2e6 abN46q5abj7E20Hyn+PzxUMLyNVy78oMhj+S0kxIk+ZFPkCM5eZovvF7JcJCv+lZ dzDvbfoTQFYPLcZwgFG9hURF51SpN0LPO5Br6eKzLu+Yt92zftDaL6KNGDU3md5V hhb99zY1k4+EOtw3KXaUKbLeWEipylc5gh9vi1wP/7Ln0OKLxSh9yGuPkYH2Xmfz Sw8PW7wpwQ3DgKw5xOlrmL0HZ+2iasaArrqRQ0hdoN3AIEo538/3fxOzNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJs6BeR5cBmanCqrezuK89xoyd0MB8GA1UdIwQY MBaAFBjbX8/cGO+EIeJlHxsmwWWgHVPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR050Zno5d1k3NFFoNG1VZkd5YkJaYUFkVV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82YzNjZDQtNTg5Ni00MjVlLTk1ZGIt ZmZlZDUwYmFhMGRhLzEvR050Zno5d1k3NFFoNG1VZkd5YkJaYUFkVV9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC82YzNjZDQtNTg5Ni00MjVlLTk1ZGItZmZlZDUwYmFhMGRh LzEvR050Zno5d1k3NFFoNG1VZkd5YkJaYUFkVV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmqe35H3 2M+JPH9A3XxfZv/2wmeRvU3Ne0vovxS6qp2tbeLWMQre4jQRD8AYGaBCE/zddEhr ri3ypYXEMp4Qdv1xqUsFCl/YrwAlBjC7o8VGTNPCsRelh7DH47rSqDNVabZ315Qb IMf4cZp8RXsZzXEolTzSlMOX9xI6hYnhHrP+8XvDAFujJz9vrqmhcxDTQrfMCOuH 2CMERq84VoCy6GKHdbhcLmcoLFqJjBjs+AI+JkpNrUJsaBhlWQE/VLjswC3zc9Ze 18w+3owAK2Axnkyj1+jEEFyTYUbUtdst808+DenD1sfK57Eg1LE9GmeDnjLhMJoZ yyMryP6GCbPczA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:29:28 2025 by rpki-client