This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft File: gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json) Hash identifier: t+JY4/UxrzHO7eCEJEs6clbJ4PVJElyEjYhss79zOn0= Subject key identifier: FA:0D:2A:60:72:BD:6F:65:9C:5C:33:5B:D0:7E:98:B2:0C:E7:2A:5E Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0 Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0 Certificate serial: 019B4324CB3363E45C1D104AE715D1891459 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 23:00:43 +0000 Manifest this update: Sun 21 Dec 2025 23:00:43 +0000 Manifest next update: Mon 22 Dec 2025 23:00:43 +0000 Files and hashes: 1: 3mULbMkLr_MPSOSnvFYfAUenRp4.roa (hash: 6qqpV0wkHRjm2TnedKwLS/E8U5BGoXw+wiRnm1KNFsU=) 2: JjY_rmjM0m285v9bnJnGMH-MzW4.roa (hash: Wfm9h1Fvy7QUJSpQZVDtJ3sdWPEGrotdzPy8ZnW4oPI=) 3: OSPVEMKxRvS3K2S9RynwSClpPy0.roa (hash: I2dq/kcaAdZwjzuTK1RJZZE0wsjKNorsCYjqSblF2e4=) 4: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: RZWRmfR36PGzY9cztnpJqCSyhZiG9EtifyElWTVZPYw=) 5: wlPsVBZE3IB9ajxNMFuhywUiQmU.roa (hash: Vf+lexsaTCbsX6oyeji8k6+eXormbDvLL1F56QDbmpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:cb:33:63:e4:5c:1d:10:4a:e7:15:d1:89:14:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0 Validity Not Before: Dec 21 23:00:43 2025 GMT Not After : Dec 22 23:00:43 2025 GMT Subject: CN=fa0d2a6072bd6f659c5c335bd07e98b20ce72a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:79:6e:fa:99:31:7a:f1:b4:5a:56:b3:b1: c4:e6:2b:c4:3b:ee:26:12:5d:6a:c6:a6:e3:9b:a7: 24:30:e6:d8:e0:2d:82:53:8a:43:7b:05:ee:d7:8e: 11:bb:cf:1a:7b:8f:bb:00:10:50:b7:ef:c6:b4:5b: 0c:9c:f2:f5:b9:e1:0e:02:c1:b3:fc:9b:48:f3:00: 72:dd:3a:a7:b4:8a:93:d5:34:0b:b1:2d:48:8d:00: 4e:e2:a9:58:72:e1:b4:57:29:0b:60:2b:38:06:7a: 1a:47:dd:56:e2:81:4d:37:49:79:70:66:25:b7:d5: 97:9c:c9:c3:e1:ff:bd:1e:02:0a:b9:82:87:06:3c: 92:46:67:50:21:29:4d:64:8c:c0:42:77:67:76:ec: fa:c9:93:f8:b4:e8:59:dd:a0:2e:93:9b:06:8d:0d: 10:58:b8:a9:59:59:86:0a:00:a4:83:16:f3:3f:7f: f4:b4:d6:46:a2:c1:b8:7a:e1:32:a8:28:98:59:3c: cd:40:82:4c:07:52:3f:ea:04:2d:5f:7f:ba:1f:64: 05:0c:bf:00:f0:90:47:da:3f:8a:f8:e7:7b:0e:55: 76:92:72:9f:d2:2a:6a:51:a5:ba:49:44:f4:45:e9: 2c:31:cb:81:e8:b5:92:79:dd:90:c3:82:5d:14:c7: ba:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0D:2A:60:72:BD:6F:65:9C:5C:33:5B:D0:7E:98:B2:0C:E7:2A:5E X509v3 Authority Key Identifier: keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:b6:00:c1:4d:0f:35:f0:d4:10:c0:57:6d:cf:58:e5:6f:6f: 42:62:f0:72:a1:0d:2b:34:e9:fe:4d:e3:55:09:0b:2f:85:04: 21:85:d0:e4:fd:a5:54:3c:02:0d:1d:c8:94:f6:10:23:f1:de: 8e:92:a9:6c:85:ff:c9:c2:7e:fd:9d:a5:e1:7c:7c:8d:1f:66: 88:bc:00:a8:13:00:ae:8a:dc:a0:a7:11:d1:86:87:5a:d3:99: 16:23:47:77:9e:2c:6a:3f:5f:0b:7f:68:29:9c:9e:d7:ee:57: 0a:46:24:70:ed:4c:70:83:c9:e4:fe:3f:bb:43:7d:29:cd:2b: a9:15:41:5c:79:74:61:23:d9:2c:45:a5:4e:d3:09:97:14:63: 72:36:26:d3:5b:64:e0:f8:b6:4b:a9:e5:60:bc:28:85:91:dd: a7:07:6e:0e:58:ac:d6:28:dd:e5:6d:c1:ae:41:c8:42:47:8f: c5:ae:3f:20:a0:45:94:07:21:5e:c9:52:54:b3:66:f1:6d:bd: ad:6f:28:5b:1c:f6:7c:a1:c0:70:82:ba:8f:7e:1e:11:ac:a6: c7:b7:0f:dd:53:d2:61:21:a4:4f:86:2e:8d:e4:d5:66:4c:87: 87:48:e9:bb:fb:c6:25:05:8c:06:84:f5:3c:ce:ed:6f:71:8a: 70:93:fd:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJMszY+RcHRBK5xXRiRRZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyN2FmMTdmMDQ5OTYyN2U0YjNjOGNjNWMzMzNlYzRiOGU3 NjM1ZTAwHhcNMjUxMjIxMjMwMDQzWhcNMjUxMjIyMjMwMDQzWjAzMTEwLwYDVQQD EyhmYTBkMmE2MDcyYmQ2ZjY1OWM1YzMzNWJkMDdlOThiMjBjZTcyYTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmJ5bvqZMXrxtFpWs7HE5ivEO+4m El1qxqbjm6ckMObY4C2CU4pDewXu144Ru88ae4+7ABBQt+/GtFsMnPL1ueEOAsGz /JtI8wBy3TqntIqT1TQLsS1IjQBO4qlYcuG0VykLYCs4BnoaR91W4oFNN0l5cGYl t9WXnMnD4f+9HgIKuYKHBjySRmdQISlNZIzAQndnduz6yZP4tOhZ3aAuk5sGjQ0Q WLipWVmGCgCkgxbzP3/0tNZGosG4euEyqCiYWTzNQIJMB1I/6gQtX3+6H2QFDL8A 8JBH2j+K+Od7DlV2knKf0ipqUaW6SUT0ReksMcuB6LWSed2Qw4JdFMe66wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoNKmByvW9lnFwzW9B+mLIM5ypeMB8GA1UdIwQY MBaAFIJ68X8EmWJ+SzyMxcMz7EuOdjXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgt NzMxM2M3ZjNjYTNmLzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgtNzMxM2M3ZjNjYTNm LzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLYAwU0P NfDUEMBXbc9Y5W9vQmLwcqENKzTp/k3jVQkLL4UEIYXQ5P2lVDwCDR3IlPYQI/He jpKpbIX/ycJ+/Z2l4Xx8jR9miLwAqBMArorcoKcR0YaHWtOZFiNHd54saj9fC39o KZye1+5XCkYkcO1McIPJ5P4/u0N9Kc0rqRVBXHl0YSPZLEWlTtMJlxRjcjYm01tk 4Pi2S6nlYLwohZHdpwduDlis1ijd5W3BrkHIQkePxa4/IKBFlAchXslSVLNm8W29 rW8oWxz2fKHAcIK6j34eEaymx7cP3VPSYSGkT4YujeTVZkyHh0jpu/vGJQWMBoT1 PM7tb3GKcJP9mQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:41:09 2025 by rpki-client