This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft File: gvGLgDOdiuY39KAvM1u-x8jCa94.mft (raw, json) Hash identifier: zw3UtGX9nxijH6XSoWDPz8YTsLeQVePWjA244lJMxik= Subject key identifier: AE:38:B8:DB:73:C2:98:C7:CA:0D:F3:74:85:CE:BF:FE:34:6A:3F:C6 Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE Certificate issuer: /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde Certificate serial: 019B44DC5AD0AF9BA4CC41A1DEC738B842AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 07:00:50 +0000 Manifest this update: Mon 22 Dec 2025 07:00:50 +0000 Manifest next update: Tue 23 Dec 2025 07:00:50 +0000 Files and hashes: 1: 1-q3Sc_aFuf3HEfZnJlmO5IobYdI.roa (hash: 1ZydJMw0C7UeG9c7OwbN/uc3B58dbwLgrfGBkI/dEhg=) 2: gvGLgDOdiuY39KAvM1u-x8jCa94.crl (hash: 6HtQzG8wKqRHqX+J4MbG81HW3JoBTVi4TSgHK24tECk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:5a:d0:af:9b:a4:cc:41:a1:de:c7:38:b8:42:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde Validity Not Before: Dec 22 07:00:50 2025 GMT Not After : Dec 23 07:00:50 2025 GMT Subject: CN=ae38b8db73c298c7ca0df37485cebffe346a3fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5c:9e:97:58:23:9f:27:ff:e1:d4:de:78:7d: 62:42:cd:0e:ce:bb:a8:5e:9b:a8:37:a8:e9:1d:f5: 67:b0:d9:ab:73:67:3b:b6:69:55:ad:df:c8:b5:0b: 81:4e:33:81:02:de:fd:47:c6:ca:a3:cb:cb:01:d9: 54:6c:17:4b:7c:8f:c1:c2:66:fd:fb:3c:20:3c:c9: c0:11:53:17:6f:6c:dd:c1:6d:c4:a0:d1:b7:ea:34: 51:aa:d1:5d:85:f4:1c:f6:e4:c8:12:35:f7:5d:63: bc:22:22:84:18:a0:bf:21:50:6e:4b:58:8a:c7:51: 7c:63:cf:c6:06:a9:b7:c7:ce:a4:2e:58:73:e6:6d: 6e:73:ea:d9:5b:aa:68:e5:87:7f:47:7f:dd:80:de: ac:99:71:5a:50:f2:4c:9c:7b:4f:16:a0:ad:16:29: 16:99:4f:e0:36:24:d3:ac:03:96:b6:b2:25:b2:81: 20:5e:6c:d4:bb:4c:b8:61:1d:6d:a2:ce:ba:d5:b6: 5e:8b:de:0c:6a:69:71:25:ca:07:54:55:4e:e5:e4: 78:58:b2:43:73:df:57:f8:34:e4:ef:d1:a8:23:83: 1f:54:28:18:bb:7d:b9:8e:f5:57:0e:7f:ee:01:75: 04:bc:b7:4a:a7:1a:fd:c4:af:5e:cf:03:be:2f:69: af:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:38:B8:DB:73:C2:98:C7:CA:0D:F3:74:85:CE:BF:FE:34:6A:3F:C6 X509v3 Authority Key Identifier: keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:8a:46:9a:1a:10:07:e7:9f:32:92:0a:3c:43:b6:1a:e0:ac: 68:d5:0f:e1:90:a9:00:4e:ea:92:8f:6f:9f:ca:e7:b3:05:56: 9d:8a:b7:18:5d:1a:81:1f:c3:80:e5:b9:76:e5:37:42:75:55: ce:7a:5a:91:b3:21:01:aa:69:ec:bf:d7:ac:38:39:9f:5b:73: f0:ce:c3:8d:46:d5:04:79:81:e3:f2:0b:1d:95:ec:fb:8c:49: 29:59:9e:de:60:2b:29:e2:87:3e:89:c6:3a:a7:7d:f6:d1:f0: 9e:d7:ec:32:93:2e:2e:39:fa:06:69:cf:c4:de:18:fc:c6:d2: 5d:7e:4c:8b:ad:8d:79:f3:b1:9a:bd:58:7d:79:6a:fb:ab:5f: 14:f1:5a:1e:18:12:e9:24:6e:90:dc:06:7b:ac:33:00:bf:5a: ef:cb:9e:a0:4a:37:09:ee:95:06:3b:67:29:8d:61:ce:0f:79: c7:e5:3d:e2:07:ba:17:50:dc:3e:fd:16:12:67:3c:ba:c8:d6: bc:71:02:69:8f:2e:42:2c:6a:22:94:e5:d7:3d:28:e0:64:55: 21:4c:69:04:9f:32:83:66:32:18:13:b7:20:a3:e2:1a:0c:a6: 90:97:dc:45:90:5c:b4:71:6c:f7:2f:86:fe:a0:22:b9:50:4f: d2:d4:25:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3FrQr5ukzEGh3sc4uEKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZjE4YjgwMzM5ZDhhZTYzN2Y0YTAyZjMzNWJiZWM3Yzhj MjZiZGUwHhcNMjUxMjIyMDcwMDUwWhcNMjUxMjIzMDcwMDUwWjAzMTEwLwYDVQQD EyhhZTM4YjhkYjczYzI5OGM3Y2EwZGYzNzQ4NWNlYmZmZTM0NmEzZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFyel1gjnyf/4dTeeH1iQs0Ozruo XpuoN6jpHfVnsNmrc2c7tmlVrd/ItQuBTjOBAt79R8bKo8vLAdlUbBdLfI/Bwmb9 +zwgPMnAEVMXb2zdwW3EoNG36jRRqtFdhfQc9uTIEjX3XWO8IiKEGKC/IVBuS1iK x1F8Y8/GBqm3x86kLlhz5m1uc+rZW6po5Yd/R3/dgN6smXFaUPJMnHtPFqCtFikW mU/gNiTTrAOWtrIlsoEgXmzUu0y4YR1tos661bZei94MamlxJcoHVFVO5eR4WLJD c99X+DTk79GoI4MfVCgYu325jvVXDn/uAXUEvLdKpxr9xK9ezwO+L2mvUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK44uNtzwpjHyg3zdIXOv/40aj/GMB8GA1UdIwQY MBaAFILxi4AznYrmN/SgLzNbvsfIwmveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3ZHTGdET2RpdVkzOUtBdk0xdS14OGpDYTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82NWMyZDktODBkNC00NTlmLWFlNjEt YjViZDQyOGYxOTBjLzEvZ3ZHTGdET2RpdVkzOUtBdk0xdS14OGpDYTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS82NWMyZDktODBkNC00NTlmLWFlNjEtYjViZDQyOGYxOTBj LzEvZ3ZHTGdET2RpdVkzOUtBdk0xdS14OGpDYTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIpGmhoQ B+efMpIKPEO2GuCsaNUP4ZCpAE7qko9vn8rnswVWnYq3GF0agR/DgOW5duU3QnVV znpakbMhAapp7L/XrDg5n1tz8M7DjUbVBHmB4/ILHZXs+4xJKVme3mArKeKHPonG Oqd99tHwntfsMpMuLjn6BmnPxN4Y/MbSXX5Mi62NefOxmr1YfXlq+6tfFPFaHhgS 6SRukNwGe6wzAL9a78ueoEo3Ce6VBjtnKY1hzg95x+U94ge6F1DcPv0WEmc8usjW vHECaY8uQixqIpTl1z0o4GRVIUxpBJ8yg2YyGBO3IKPiGgymkJfcRZBctHFs9y+G /qAiuVBP0tQlbA== -----END CERTIFICATE-----Generated at Mon Dec 22 14:04:13 2025 by rpki-client