This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft File: gvJFXc9FrmWm_cz494Ic48UkAR0.mft (raw, json) Hash identifier: csl5oh33gBerKMHVy57DSU3CmVFVBI6YwbFk0/NaxFk= Subject key identifier: ED:A1:2D:72:0B:2C:B8:7A:99:6F:27:1A:80:BF:66:94:3F:3F:CC:87 Authority key identifier: 82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D Certificate issuer: /CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d Certificate serial: 019B2C2F24D1D65749AD7F6F695787927F73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft Manifest number: 1765 Signing time: Wed 17 Dec 2025 12:00:45 +0000 Manifest this update: Wed 17 Dec 2025 12:00:45 +0000 Manifest next update: Thu 18 Dec 2025 12:00:45 +0000 Files and hashes: 1: eS_V4C4cNESsUi7U8IjjlNIhlSE.roa (hash: wdsqtGZ831qd+AJFvCqG1OGszbCCIEt4963PPzg5D0k=) 2: gvJFXc9FrmWm_cz494Ic48UkAR0.crl (hash: 5q+MXCo9N9sG5HATtevN5h/dT60zAN9pNy5x41v4RPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:24:d1:d6:57:49:ad:7f:6f:69:57:87:92:7f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d Validity Not Before: Dec 17 12:00:45 2025 GMT Not After : Dec 18 12:00:45 2025 GMT Subject: CN=eda12d720b2cb87a996f271a80bf66943f3fcc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:64:25:a3:4c:ff:80:cc:ad:82:c1:89:5f:4f: 89:2c:a3:ec:57:f6:4f:5f:1b:ec:7d:79:27:57:fd: 0f:84:76:86:f6:3b:0b:55:f2:23:1e:09:c3:a3:25: 65:6b:f2:ec:d1:db:b6:32:6c:03:94:c0:c1:6c:fe: f9:40:fc:9c:80:10:cd:06:fd:a1:e0:e3:6e:e6:a6: 0b:94:11:2d:99:da:be:98:aa:bb:e0:24:9d:f4:28: 69:50:e2:c7:5e:41:16:39:c4:57:f0:7f:a1:71:7e: d7:a5:9c:77:c9:e2:81:c1:23:42:fa:90:3b:72:cf: 1f:e5:be:dd:a0:7e:0e:e7:37:20:4e:a0:2f:a2:0b: 05:be:f6:3b:1e:7f:3b:b6:14:b8:9b:c7:92:4a:ed: ad:0f:5c:80:ac:3b:99:1c:6b:1e:72:56:36:e4:c0: 6c:bd:a6:db:e7:ab:40:d8:0a:25:d0:7f:1a:04:49: bc:c5:72:e1:ec:47:79:71:d9:77:0d:49:d0:99:20: 68:50:8d:f3:67:f8:e4:fa:d0:a0:b9:78:76:2b:96: 5d:99:8c:fd:e5:c4:dc:85:21:32:d7:f0:fc:cf:c3: eb:f5:d4:dd:a4:f1:66:57:e4:46:f8:15:35:0d:4c: 09:8c:09:3d:0b:1f:cf:b9:c8:ec:54:a2:e1:33:e8: 2c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A1:2D:72:0B:2C:B8:7A:99:6F:27:1A:80:BF:66:94:3F:3F:CC:87 X509v3 Authority Key Identifier: keyid:82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:20:3a:6c:70:f6:d3:47:b1:81:be:37:88:bb:5e:5e:d5:70: 32:8a:1a:bb:9e:22:cd:55:39:8d:1c:8f:c3:f6:b1:b7:3c:49: 8a:07:14:d4:df:33:12:c1:f8:8c:87:b1:60:97:f4:a5:7b:bb: a0:a5:de:5d:d1:08:4f:2e:cf:73:91:35:cc:1d:79:87:b4:67: 69:00:3d:fc:4c:e8:85:e5:55:f1:a8:aa:f7:81:22:5b:84:34: 48:24:0e:fd:b8:cd:5a:c2:da:d3:68:f6:9a:af:40:b8:7e:b8: 87:1b:62:07:19:1d:0a:cd:40:16:12:53:8f:12:e1:70:f4:8a: c8:ea:43:da:7c:ef:9e:85:65:e6:4a:b6:d9:b7:e3:72:d3:eb: dc:d0:6e:b7:f8:61:20:db:e4:ea:5d:86:71:f9:42:df:6d:a1: 3b:3a:21:22:be:ac:ad:95:a4:ac:98:1e:92:54:a5:36:cb:85: 5f:5a:53:64:9c:50:6a:10:8d:ac:86:ed:ce:54:62:8d:67:c1: e4:3c:fa:8c:87:94:e0:f3:da:e9:25:5d:29:9e:f0:f2:e5:10: 1e:26:1a:42:7c:a0:31:2c:bc:69:cf:85:5b:09:9e:29:45:a3: 34:d3:56:81:f1:a0:64:4d:d8:b4:27:e7:1d:99:b8:40:ce:70: 2f:39:a2:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLyTR1ldJrX9vaVeHkn9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZjI0NTVkY2Y0NWFlNjVhNmZkY2NmOGY3ODIxY2UzYzUy NDAxMWQwHhcNMjUxMjE3MTIwMDQ1WhcNMjUxMjE4MTIwMDQ1WjAzMTEwLwYDVQQD EyhlZGExMmQ3MjBiMmNiODdhOTk2ZjI3MWE4MGJmNjY5NDNmM2ZjYzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWQlo0z/gMytgsGJX0+JLKPsV/ZP XxvsfXknV/0PhHaG9jsLVfIjHgnDoyVla/Ls0du2MmwDlMDBbP75QPycgBDNBv2h 4ONu5qYLlBEtmdq+mKq74CSd9ChpUOLHXkEWOcRX8H+hcX7XpZx3yeKBwSNC+pA7 cs8f5b7doH4O5zcgTqAvogsFvvY7Hn87thS4m8eSSu2tD1yArDuZHGseclY25MBs vabb56tA2Aol0H8aBEm8xXLh7Ed5cdl3DUnQmSBoUI3zZ/jk+tCguXh2K5ZdmYz9 5cTchSEy1/D8z8Pr9dTdpPFmV+RG+BU1DUwJjAk9Cx/PucjsVKLhM+gsGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2hLXILLLh6mW8nGoC/ZpQ/P8yHMB8GA1UdIwQY MBaAFILyRV3PRa5lpv3M+PeCHOPFJAEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3ZKRlhjOUZybVdtX2N6NDk0SWM0OFVrQVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81YTI0ZGUtNDRmMC00YTU0LTkxMzct ZWNkOWZhZmYyNjJjLzEvZ3ZKRlhjOUZybVdtX2N6NDk0SWM0OFVrQVIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81YTI0ZGUtNDRmMC00YTU0LTkxMzctZWNkOWZhZmYyNjJj LzEvZ3ZKRlhjOUZybVdtX2N6NDk0SWM0OFVrQVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSA6bHD2 00exgb43iLteXtVwMooau54izVU5jRyPw/axtzxJigcU1N8zEsH4jIexYJf0pXu7 oKXeXdEITy7Pc5E1zB15h7RnaQA9/EzoheVV8aiq94EiW4Q0SCQO/bjNWsLa02j2 mq9AuH64hxtiBxkdCs1AFhJTjxLhcPSKyOpD2nzvnoVl5kq22bfjctPr3NBut/hh INvk6l2GcflC322hOzohIr6srZWkrJgeklSlNsuFX1pTZJxQahCNrIbtzlRijWfB 5Dz6jIeU4PPa6SVdKZ7w8uUQHiYaQnygMSy8ac+FWwmeKUWjNNNWgfGgZE3YtCfn HZm4QM5wLzmiZw== -----END CERTIFICATE-----Generated at Wed Dec 17 15:17:15 2025 by rpki-client