This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft File: guX7w-pSWnjGMMTahkuppg4Zm_8.mft (raw, json) Hash identifier: IKKgQY2PXuAuTjDaGyasv7gSsQSa7D7QLGNCn9PCBgc= Subject key identifier: 58:99:AB:53:5C:6C:DB:30:E0:FE:86:07:8E:62:CA:C7:96:E2:CB:63 Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF Certificate issuer: /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff Certificate serial: 019B40FFBD231D33F69A2064CBE8BB8FF115 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 13:01:00 +0000 Manifest this update: Sun 21 Dec 2025 13:01:00 +0000 Manifest next update: Mon 22 Dec 2025 13:01:00 +0000 Files and hashes: 1: 1-QG4tCncv0FTtCHqg5B2GIvzr7Y.roa (hash: Y2rS+2UdPK85e7sE5yCklBS//u+UrJBVKAmv+QqSGio=) 2: guX7w-pSWnjGMMTahkuppg4Zm_8.crl (hash: W7ID9JmAF5Ic1smHPiMn57baEs7IzdAu5AnTy03YUR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:bd:23:1d:33:f6:9a:20:64:cb:e8:bb:8f:f1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff Validity Not Before: Dec 21 13:01:00 2025 GMT Not After : Dec 22 13:01:00 2025 GMT Subject: CN=5899ab535c6cdb30e0fe86078e62cac796e2cb63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c1:4a:09:c5:6c:71:01:2b:53:7c:87:76:65: ff:8b:b1:89:d4:f8:ef:cd:7d:cc:32:8a:73:33:69: 32:f8:ff:73:b5:37:e3:a8:67:79:3c:81:2d:dd:85: 45:80:07:59:17:74:f8:27:09:87:a6:b1:1d:e1:70: 63:6a:f3:26:3a:fa:f9:5e:2f:6a:42:22:39:43:98: 4f:88:a2:a5:cf:d1:01:df:08:12:97:79:5d:1e:79: 19:ab:55:6a:96:13:f6:65:1c:be:6d:ad:af:40:74: f6:82:e7:23:65:c5:c2:ce:e6:40:5f:16:54:7f:19: 21:10:33:d4:da:f7:1c:4e:d7:14:27:ae:eb:61:cd: 2a:a7:14:cf:9e:b0:ff:22:3f:2c:10:04:bf:65:40: 0d:23:1e:cb:ff:13:b7:c3:9c:81:ed:92:cf:20:b2: ce:ef:9d:6a:94:f0:e6:3f:b6:80:56:f4:5c:91:00: 9e:e4:7d:71:49:31:1c:2a:2b:93:df:3d:e4:16:d5: fa:ed:7d:d1:8f:f8:2c:25:13:fa:37:2e:f8:25:72: ca:90:31:24:e1:ec:39:37:d9:c0:4f:ba:54:0b:4e: 4e:93:42:ca:c1:d6:03:11:ea:0c:e7:1a:15:cb:0b: 6c:85:61:10:55:05:2d:81:49:1a:63:91:6b:c3:27: 48:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:99:AB:53:5C:6C:DB:30:E0:FE:86:07:8E:62:CA:C7:96:E2:CB:63 X509v3 Authority Key Identifier: keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:3d:e6:53:4d:38:5a:40:bb:f6:ca:b2:cc:59:8c:b0:7c:19: 1a:27:90:c1:90:01:54:14:6c:6d:41:6d:ec:7d:6b:4b:08:b5: 40:b7:49:70:72:83:aa:8a:26:25:2b:68:23:26:50:df:b2:b3: c3:38:44:26:22:06:9b:1e:26:6e:18:52:d0:93:2b:bf:01:94: b4:77:a1:3a:7b:e6:d5:d6:ae:c6:ad:91:58:5c:dc:0c:7c:f8: ce:7b:c7:b5:6a:4a:c2:52:54:34:77:88:2c:90:8a:96:3f:41: 58:c3:51:93:5d:c2:6b:9c:5e:a2:d2:5e:5b:da:ae:0d:27:9f: 6c:4d:fd:f0:ec:a1:e0:32:8c:fe:2e:ad:e2:e0:7d:ec:3f:65: eb:ee:a6:c3:a8:f0:87:d0:2e:09:d6:9e:e7:fb:78:d0:8b:5b: bb:52:c3:6c:9e:3d:ca:b0:18:76:2f:f8:39:31:66:7b:bb:b3: 53:d0:b7:fd:96:48:43:c8:82:b9:10:d3:17:46:c4:80:21:71: 27:52:63:ba:bb:88:96:f2:3a:64:d2:ba:43:81:46:8f:10:25: 77:c0:03:eb:07:00:c8:c0:b6:71:ca:da:50:59:93:fd:69:44: d0:d1:19:aa:eb:4e:68:c6:3c:49:64:c9:e5:37:2b:a6:c6:f1: 86:1a:44:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/70jHTP2miBky+i7j/EVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZTVmYmMzZWE1MjVhNzhjNjMwYzRkYTg2NGJhOWE2MGUx OTliZmYwHhcNMjUxMjIxMTMwMTAwWhcNMjUxMjIyMTMwMTAwWjAzMTEwLwYDVQQD Eyg1ODk5YWI1MzVjNmNkYjMwZTBmZTg2MDc4ZTYyY2FjNzk2ZTJjYjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MFKCcVscQErU3yHdmX/i7GJ1Pjv zX3MMopzM2ky+P9ztTfjqGd5PIEt3YVFgAdZF3T4JwmHprEd4XBjavMmOvr5Xi9q QiI5Q5hPiKKlz9EB3wgSl3ldHnkZq1VqlhP2ZRy+ba2vQHT2gucjZcXCzuZAXxZU fxkhEDPU2vccTtcUJ67rYc0qpxTPnrD/Ij8sEAS/ZUANIx7L/xO3w5yB7ZLPILLO 751qlPDmP7aAVvRckQCe5H1xSTEcKiuT3z3kFtX67X3Rj/gsJRP6Ny74JXLKkDEk 4ew5N9nAT7pUC05Ok0LKwdYDEeoM5xoVywtshWEQVQUtgUkaY5FrwydIAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiZq1NcbNsw4P6GB45iyseW4stjMB8GA1UdIwQY MBaAFILl+8PqUlp4xjDE2oZLqaYOGZv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yZWNlMjYtMTc4MS00NTVlLTgwYjMt OTNkZDY1MDc0ODhlLzEvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8yZWNlMjYtMTc4MS00NTVlLTgwYjMtOTNkZDY1MDc0ODhl LzEvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZD3mU004 WkC79sqyzFmMsHwZGieQwZABVBRsbUFt7H1rSwi1QLdJcHKDqoomJStoIyZQ37Kz wzhEJiIGmx4mbhhS0JMrvwGUtHehOnvm1dauxq2RWFzcDHz4znvHtWpKwlJUNHeI LJCKlj9BWMNRk13Ca5xeotJeW9quDSefbE398Oyh4DKM/i6t4uB97D9l6+6mw6jw h9AuCdae5/t40Itbu1LDbJ49yrAYdi/4OTFme7uzU9C3/ZZIQ8iCuRDTF0bEgCFx J1JjuruIlvI6ZNK6Q4FGjxAld8AD6wcAyMC2ccraUFmT/WlE0NEZqutOaMY8SWTJ 5TcrpsbxhhpE8A== -----END CERTIFICATE-----Generated at Sun Dec 21 23:13:20 2025 by rpki-client