This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json) Hash identifier: 201hzX3DbqaSa9kU6Q8ND+YtUt7okTXONcZdbHw5bbI= Subject key identifier: EF:32:74:C3:23:2B:3F:85:FB:D6:E8:03:61:2C:C0:01:6C:97:47:05 Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5 Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5 Certificate serial: 019B57F524220853916E239FCA4F72AD9AA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft Manifest number: 1477 Signing time: Fri 26 Dec 2025 00:00:41 +0000 Manifest this update: Fri 26 Dec 2025 00:00:41 +0000 Manifest next update: Sat 27 Dec 2025 00:00:41 +0000 Files and hashes: 1: 7lJrTTIO2zooVSl7zZp_UO3NA2A.roa (hash: ob9QTWC/tQoW4XviSigFRT+IWVM+wZzBVH2/SY3oV7I=) 2: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: /ufMBgomPDgUWDOKbtcqbwO+DSw5HZ5T1yxStNqiPio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:f5:24:22:08:53:91:6e:23:9f:ca:4f:72:ad:9a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5 Validity Not Before: Dec 26 00:00:41 2025 GMT Not After : Dec 27 00:00:41 2025 GMT Subject: CN=ef3274c3232b3f85fbd6e803612cc0016c974705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:39:68:ab:e3:77:74:c1:42:96:6a:9e:3e:ff: 07:8f:5a:91:d6:03:85:43:92:ff:ef:28:f0:9a:45: b6:9b:ff:03:79:73:2f:38:15:51:cb:08:d4:48:7a: c3:da:56:91:9a:66:be:32:bd:0f:f7:ce:db:ff:d3: e9:68:55:33:c9:47:32:54:9a:ab:31:f7:33:1d:4b: f9:41:c0:67:b3:4b:95:f9:ac:f4:92:88:4c:dd:64: 4e:45:dd:ea:01:0a:94:24:4a:2d:2d:ea:a8:23:f3: 52:e2:10:08:c8:87:d8:89:3b:71:46:ad:7e:bc:a5: 27:76:3d:bf:49:68:50:00:d5:78:da:85:b4:db:46: 6a:a3:b7:03:1a:e5:61:db:01:ad:4f:27:cb:1a:ed: 2f:7c:4b:4e:22:ae:fe:82:ac:5f:5e:fd:61:ce:9b: ca:44:0a:84:6d:e2:23:1e:36:cb:5f:64:10:88:26: c7:0b:d6:e9:da:e7:fd:fd:98:ca:c1:75:85:a2:eb: ec:7d:22:6c:44:f8:42:8f:40:e4:8f:4e:28:78:c9: bc:09:9e:18:28:bd:f2:58:40:35:5c:66:75:29:d0: 21:f0:07:d1:4c:83:7e:22:52:cf:8f:0d:3e:32:4b: 34:34:0f:bb:74:09:e1:f6:f7:28:0c:36:89:fe:16: f8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:32:74:C3:23:2B:3F:85:FB:D6:E8:03:61:2C:C0:01:6C:97:47:05 X509v3 Authority Key Identifier: keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:5c:78:42:43:64:2e:17:66:ea:c7:b7:fa:fd:96:2b:70:2e: de:39:49:29:f1:18:64:63:51:73:2d:d1:e0:5c:33:7b:6b:26: 7c:3a:35:22:d2:88:3d:ea:b1:ec:35:3f:83:a4:85:34:96:5e: 4a:a8:b1:3e:a6:1e:21:f7:b7:bd:07:2c:5a:73:53:0b:ce:16: d6:ef:ac:dd:3a:67:9c:27:a8:c2:e7:96:e7:ec:a7:3e:e0:86: ea:34:ec:4c:27:6c:fe:14:2c:b8:40:6f:ca:69:eb:7f:df:9c: 9f:f4:7b:ca:29:7a:a0:30:a5:8f:c9:7d:7e:21:40:9e:c9:cf: c5:8e:cc:5c:f7:ec:56:1e:af:84:e5:ce:cc:b0:65:ee:73:2d: 65:63:50:f0:57:fb:61:af:88:52:b0:e3:3e:de:48:eb:f1:84: 49:84:92:ec:68:c8:32:7d:b9:b9:12:ea:da:8e:3d:af:12:c4: 13:de:f3:3c:a3:2c:95:d4:a9:a8:86:fe:fa:5e:8c:19:c7:df: 7d:21:b1:bf:a0:1e:45:de:6d:c7:9c:3d:0a:bd:58:70:2d:3b: a5:a9:c0:c2:6b:3b:80:6e:3a:de:e3:fc:9b:da:f6:dd:02:88: 5c:08:15:a0:c7:99:cd:9b:0d:32:4e:e9:2c:58:16:09:d6:d7: 0a:64:24:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtX9SQiCFORbiOfyk9yrZqmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZDRjY2NlZmU1NWM1ZTIyM2E5YjMyMDViOTM4YTNkMWM5 ZTg2ZDUwHhcNMjUxMjI2MDAwMDQxWhcNMjUxMjI3MDAwMDQxWjAzMTEwLwYDVQQD EyhlZjMyNzRjMzIzMmIzZjg1ZmJkNmU4MDM2MTJjYzAwMTZjOTc0NzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Dloq+N3dMFClmqePv8Hj1qR1gOF Q5L/7yjwmkW2m/8DeXMvOBVRywjUSHrD2laRmma+Mr0P987b/9PpaFUzyUcyVJqr MfczHUv5QcBns0uV+az0kohM3WRORd3qAQqUJEotLeqoI/NS4hAIyIfYiTtxRq1+ vKUndj2/SWhQANV42oW020Zqo7cDGuVh2wGtTyfLGu0vfEtOIq7+gqxfXv1hzpvK RAqEbeIjHjbLX2QQiCbHC9bp2uf9/ZjKwXWFouvsfSJsRPhCj0Dkj04oeMm8CZ4Y KL3yWEA1XGZ1KdAh8AfRTIN+IlLPjw0+Mks0NA+7dAnh9vcoDDaJ/hb4NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8ydMMjKz+F+9boA2EswAFsl0cFMB8GA1UdIwQY MBaAFBrUzM7+VcXiI6mzIFuTij0cnobVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kMjM4NzAtNzRjNy00YTg0LTkwZWMt YzMyMDM2NzUwZTM2LzEvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9kMjM4NzAtNzRjNy00YTg0LTkwZWMtYzMyMDM2NzUwZTM2 LzEvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalx4QkNk Lhdm6se3+v2WK3Au3jlJKfEYZGNRcy3R4Fwze2smfDo1ItKIPeqx7DU/g6SFNJZe SqixPqYeIfe3vQcsWnNTC84W1u+s3TpnnCeowueW5+ynPuCG6jTsTCds/hQsuEBv ymnrf9+cn/R7yil6oDClj8l9fiFAnsnPxY7MXPfsVh6vhOXOzLBl7nMtZWNQ8Ff7 Ya+IUrDjPt5I6/GESYSS7GjIMn25uRLq2o49rxLEE97zPKMsldSpqIb++l6MGcff fSGxv6AeRd5tx5w9Cr1YcC07panAwms7gG463uP8m9r23QKIXAgVoMeZzZsNMk7p LFgWCdbXCmQkmg== -----END CERTIFICATE-----Generated at Fri Dec 26 05:42:47 2025 by rpki-client