This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft File: G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json) Hash identifier: 7W5RbDzGkaX1jW/MPPOB7P2XWPO+7KGF05GkB/p2hW4= Subject key identifier: 37:1F:30:03:75:55:2D:D8:9F:60:07:16:56:7A:01:1E:E5:95:37:01 Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59 Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759 Certificate serial: 019B3DFE710AAE9C144B67343439CBCA22E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft Manifest number: 14CF Signing time: Sat 20 Dec 2025 23:00:43 +0000 Manifest this update: Sat 20 Dec 2025 23:00:43 +0000 Manifest next update: Sun 21 Dec 2025 23:00:43 +0000 Files and hashes: 1: 7LJ9xawxzsvCYv_ns8BJ_8ldo2M.roa (hash: f0+qr316tmp0FcJIZdHHGP/bQ0+RaN5V5m4qk2p7tRk=) 2: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: 8eVIandNXXl93llyq+ueB5SKcATXv493h0LJQHc+Nv0=) 3: UGaWfYCCxk8EpYZCun7jXwhTkIs.roa (hash: 7hmag0/PqnLWj4L7od5Xt73eoy7sOpR+k3qrD6k4uBU=) 4: VUW_CECBbTHdD7KnSWpCp7f6Uls.roa (hash: dGtVeAhKlKvD4goyS7nYKPSCr10+/VHRE76M3fcZW0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:71:0a:ae:9c:14:4b:67:34:34:39:cb:ca:22:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759 Validity Not Before: Dec 20 23:00:43 2025 GMT Not After : Dec 21 23:00:43 2025 GMT Subject: CN=371f300375552dd89f600716567a011ee5953701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:03:a3:26:9f:fc:1e:cc:ea:ca:04:13:bf:e9: 07:db:46:3f:d9:a9:d5:ef:99:58:85:b4:c9:1a:54: b8:81:f4:b3:3a:1c:3e:9d:92:58:71:7f:14:72:51: c6:f4:8a:bc:e8:18:c6:18:a3:a2:50:19:60:37:f3: 5a:71:9e:d7:bf:e6:f0:51:fb:8e:9b:a6:45:42:34: 50:3e:a3:c8:05:4c:ea:79:85:54:ba:48:17:46:97: 1e:23:d4:98:96:70:e3:66:52:8c:e9:0a:4b:e9:0c: 01:f3:00:fa:49:bd:04:85:52:e3:50:d8:0f:58:0c: a0:9a:73:21:b5:a1:88:10:70:9e:ca:2a:70:3f:61: 40:e5:4a:28:a2:86:71:24:13:e2:70:44:6c:dc:fe: 46:77:5c:07:9b:06:81:7b:04:e2:11:89:e5:a5:aa: da:89:f6:06:ed:23:e8:e6:6b:4a:be:a4:84:ce:c2: 89:37:c8:52:a0:3c:2b:6e:39:ca:a0:4a:ac:37:92: 32:bf:e4:89:cb:c4:24:1e:3c:33:a1:47:d8:f0:14: 8c:27:73:9e:59:cd:3f:a0:c1:98:8a:e3:ed:9e:6e: c6:68:91:73:0d:3a:b0:c7:90:53:c3:fd:13:de:1c: 91:30:cf:39:fe:5b:c0:c0:9c:fd:18:48:3f:03:c0: 16:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1F:30:03:75:55:2D:D8:9F:60:07:16:56:7A:01:1E:E5:95:37:01 X509v3 Authority Key Identifier: keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c1:80:42:ac:77:2f:35:0b:10:42:8f:e3:ee:02:1d:fa:5b: 1d:80:30:42:bf:93:ad:b3:99:e7:58:31:ca:94:e4:53:cd:7f: 42:ec:4d:ba:73:32:62:94:96:4e:b7:38:a4:d9:06:d3:d0:80: 69:b9:56:80:8a:8f:90:7f:9e:39:b4:28:ce:5e:70:f7:f2:f7: 4e:35:d5:9e:01:03:e4:5e:a3:96:93:f7:09:e1:a8:c8:88:7b: 39:49:21:71:a7:db:c5:85:7c:88:ea:43:e9:44:a0:e5:0a:39: 40:bd:61:6d:6c:32:c7:37:45:6a:76:69:85:52:90:c1:eb:b3: bf:be:f0:2d:74:81:9d:f1:d7:c9:43:8e:b3:d9:53:74:32:5d: 9e:74:4e:ef:0d:f8:71:e8:b8:33:a7:c5:a4:20:57:77:9b:c8: 8f:9b:fe:42:cc:00:df:b6:55:c1:62:29:5e:ca:c4:78:87:94: e2:50:0e:8d:ff:90:29:8b:25:ed:86:2c:2e:37:9c:40:12:90: 18:df:de:b2:a4:0e:b4:05:77:a8:3a:9f:44:7e:cb:b7:4f:ab: b0:6e:11:a0:9d:c6:9e:e4:a1:a9:8c:29:e4:55:a1:02:55:35: 8e:c0:c7:2b:d5:1a:b6:a4:11:a9:f1:c9:36:9e:92:91:f7:47: 86:44:c8:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/nEKrpwUS2c0NDnLyiLmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYzE5OTRlYTYzZDUwZGJjOGI0M2FjZWNhZDI4NDJiNGRj MTU3NTkwHhcNMjUxMjIwMjMwMDQzWhcNMjUxMjIxMjMwMDQzWjAzMTEwLwYDVQQD EygzNzFmMzAwMzc1NTUyZGQ4OWY2MDA3MTY1NjdhMDExZWU1OTUzNzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QOjJp/8HszqygQTv+kH20Y/2anV 75lYhbTJGlS4gfSzOhw+nZJYcX8UclHG9Iq86BjGGKOiUBlgN/NacZ7Xv+bwUfuO m6ZFQjRQPqPIBUzqeYVUukgXRpceI9SYlnDjZlKM6QpL6QwB8wD6Sb0EhVLjUNgP WAygmnMhtaGIEHCeyipwP2FA5UooooZxJBPicERs3P5Gd1wHmwaBewTiEYnlpara ifYG7SPo5mtKvqSEzsKJN8hSoDwrbjnKoEqsN5Iyv+SJy8QkHjwzoUfY8BSMJ3Oe Wc0/oMGYiuPtnm7GaJFzDTqwx5BTw/0T3hyRMM85/lvAwJz9GEg/A8AWKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcfMAN1VS3Yn2AHFlZ6AR7llTcBMB8GA1UdIwQY MBaAFBvBmU6mPVDbyLQ6zsrShCtNwVdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xM2JkYmEtMDcxNS00ZTI2LWIwNzYt YWY1ODY3NDc2MzA5LzEvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xM2JkYmEtMDcxNS00ZTI2LWIwNzYtYWY1ODY3NDc2MzA5 LzEvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8GAQqx3 LzULEEKP4+4CHfpbHYAwQr+TrbOZ51gxypTkU81/QuxNunMyYpSWTrc4pNkG09CA ablWgIqPkH+eObQozl5w9/L3TjXVngED5F6jlpP3CeGoyIh7OUkhcafbxYV8iOpD 6USg5Qo5QL1hbWwyxzdFanZphVKQweuzv77wLXSBnfHXyUOOs9lTdDJdnnRO7w34 cei4M6fFpCBXd5vIj5v+QswA37ZVwWIpXsrEeIeU4lAOjf+QKYsl7YYsLjecQBKQ GN/esqQOtAV3qDqfRH7Lt0+rsG4RoJ3GnuShqYwp5FWhAlU1jsDHK9UatqQRqfHJ Np6SkfdHhkTIqQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:44:54 2025 by rpki-client