This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft File: gvGLgDOdiuY39KAvM1u-x8jCa94.mft (raw, json) Hash identifier: C1l6iym8/JXZO5BkdYm8uk6xR9hZ9mHWSkGobGZ4Y2Y= Subject key identifier: 01:BB:95:D3:5B:67:5E:44:01:DF:4C:23:54:5F:BF:86:92:75:1C:7C Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE Certificate issuer: /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde Certificate serial: 019B3F11228B59D4565A00FA8A0678290762 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 04:00:46 +0000 Manifest this update: Sun 21 Dec 2025 04:00:46 +0000 Manifest next update: Mon 22 Dec 2025 04:00:46 +0000 Files and hashes: 1: 1-q3Sc_aFuf3HEfZnJlmO5IobYdI.roa (hash: 1ZydJMw0C7UeG9c7OwbN/uc3B58dbwLgrfGBkI/dEhg=) 2: gvGLgDOdiuY39KAvM1u-x8jCa94.crl (hash: 0UIYGtPC5Rev5PosqFbogfEZga7veJ6aKI7bx+YtbA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:22:8b:59:d4:56:5a:00:fa:8a:06:78:29:07:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde Validity Not Before: Dec 21 04:00:46 2025 GMT Not After : Dec 22 04:00:46 2025 GMT Subject: CN=01bb95d35b675e4401df4c23545fbf8692751c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:f5:27:be:47:93:df:97:92:a8:09:9b:e5: f3:85:ea:d8:89:68:36:56:87:5f:07:68:e1:46:d8: 19:e6:44:04:21:ae:ab:8a:33:28:e7:bc:ca:9c:56: 4c:da:3f:94:43:75:9c:41:03:57:5a:08:15:9a:c9: 35:cb:24:ee:4f:fb:a1:bc:9c:b8:91:e7:f7:ac:ed: 77:15:c4:c4:bd:59:19:d6:5b:7f:a0:02:c5:71:44: bd:3d:3f:c6:c3:9c:94:25:b9:eb:06:d1:40:9e:30: 8f:18:f6:c6:79:a9:d1:2d:7f:7c:a3:c3:59:17:7e: 05:7a:b7:b6:09:b3:38:b3:7c:fe:df:70:45:51:a4: 66:63:94:56:bb:bc:6b:78:c6:3a:50:b9:56:7e:9b: f9:94:71:37:07:cb:3f:ee:68:fd:6a:10:7d:9e:3c: 32:7d:fa:7e:2d:af:8c:d5:ff:d6:ae:2d:2a:1e:b2: 64:44:01:1e:49:f5:68:9a:9c:6e:07:65:23:86:97: 43:cc:d2:c1:ad:b6:f7:05:d0:51:66:74:48:12:61: 6e:85:87:b5:01:fe:b3:f2:f4:c2:88:05:c7:85:78: d9:f0:d2:e7:78:ea:07:a7:57:27:79:65:89:68:59: 71:ee:21:76:40:3a:d9:0f:66:d8:12:10:59:35:78: b2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BB:95:D3:5B:67:5E:44:01:DF:4C:23:54:5F:BF:86:92:75:1C:7C X509v3 Authority Key Identifier: keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:6a:4f:79:05:45:ad:a4:b6:d4:7c:0a:9b:9c:08:72:5c:93: 88:be:87:b1:80:b4:b8:80:b3:73:2d:72:ad:88:7b:b6:f7:c5: cd:99:94:24:ec:50:6c:e1:ee:82:2e:60:7b:2a:b0:93:66:2f: c0:68:26:f3:db:26:ae:c8:30:6a:4a:79:fd:dc:f3:ab:dc:3a: 01:46:e6:cd:83:4f:5c:4a:82:1d:b4:de:ba:3f:1e:29:a1:04: 35:20:b6:37:5c:1a:dc:58:6a:71:80:a2:e4:61:a2:4f:54:ff: 21:5c:84:71:52:28:df:7d:4b:a2:24:e7:24:8d:2e:ce:26:37: 8c:0e:d5:2c:a0:59:55:93:b7:c5:76:42:3b:bf:d0:ef:65:85: 45:40:05:5e:73:40:64:8c:78:9b:32:73:55:99:82:67:cc:9a: 41:59:86:38:7e:0b:70:c2:86:32:a3:d1:73:b5:5f:9e:16:38: 4b:b6:fd:72:e7:eb:66:59:a3:2a:5a:5a:51:ea:c8:5e:54:c1: 1d:51:0b:74:4f:cc:d8:ea:0d:76:cb:85:da:af:89:91:4d:06: 61:73:f3:05:63:71:08:1a:00:56:9b:3b:b0:90:c3:74:30:a3: e6:bd:8e:e0:73:4d:08:bf:b9:95:25:f6:9a:89:52:5c:32:5d: ba:22:df:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ESKLWdRWWgD6igZ4KQdiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZjE4YjgwMzM5ZDhhZTYzN2Y0YTAyZjMzNWJiZWM3Yzhj MjZiZGUwHhcNMjUxMjIxMDQwMDQ2WhcNMjUxMjIyMDQwMDQ2WjAzMTEwLwYDVQQD EygwMWJiOTVkMzViNjc1ZTQ0MDFkZjRjMjM1NDVmYmY4NjkyNzUxYzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXH1J75Hk9+XkqgJm+XzherYiWg2 VodfB2jhRtgZ5kQEIa6rijMo57zKnFZM2j+UQ3WcQQNXWggVmsk1yyTuT/uhvJy4 kef3rO13FcTEvVkZ1lt/oALFcUS9PT/Gw5yUJbnrBtFAnjCPGPbGeanRLX98o8NZ F34Fere2CbM4s3z+33BFUaRmY5RWu7xreMY6ULlWfpv5lHE3B8s/7mj9ahB9njwy ffp+La+M1f/Wri0qHrJkRAEeSfVompxuB2UjhpdDzNLBrbb3BdBRZnRIEmFuhYe1 Af6z8vTCiAXHhXjZ8NLneOoHp1cneWWJaFlx7iF2QDrZD2bYEhBZNXiynwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAG7ldNbZ15EAd9MI1Rfv4aSdRx8MB8GA1UdIwQY MBaAFILxi4AznYrmN/SgLzNbvsfIwmveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3ZHTGdET2RpdVkzOUtBdk0xdS14OGpDYTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82NWMyZDktODBkNC00NTlmLWFlNjEt YjViZDQyOGYxOTBjLzEvZ3ZHTGdET2RpdVkzOUtBdk0xdS14OGpDYTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS82NWMyZDktODBkNC00NTlmLWFlNjEtYjViZDQyOGYxOTBj LzEvZ3ZHTGdET2RpdVkzOUtBdk0xdS14OGpDYTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2pPeQVF raS21HwKm5wIclyTiL6HsYC0uICzcy1yrYh7tvfFzZmUJOxQbOHugi5geyqwk2Yv wGgm89smrsgwakp5/dzzq9w6AUbmzYNPXEqCHbTeuj8eKaEENSC2N1wa3FhqcYCi 5GGiT1T/IVyEcVIo331LoiTnJI0uziY3jA7VLKBZVZO3xXZCO7/Q72WFRUAFXnNA ZIx4mzJzVZmCZ8yaQVmGOH4LcMKGMqPRc7VfnhY4S7b9cufrZlmjKlpaUerIXlTB HVELdE/M2OoNdsuF2q+JkU0GYXPzBWNxCBoAVps7sJDDdDCj5r2O4HNNCL+5lSX2 molSXDJduiLftA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:15:22 2025 by rpki-client