This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft File: gU7b0ZY0y7kaDS2v11nUyafne3o.mft (raw, json) Hash identifier: srEJdWJ86eho42JQNzJppumoFoX9rSlctnaKAzEGK/4= Subject key identifier: D7:1B:43:97:B1:A9:83:82:38:DB:E6:0F:DB:A8:A2:EE:68:CE:02:AB Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a Certificate serial: 019B39B41B51AB239BFD5006C2F1D3802FE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 03:01:03 +0000 Manifest this update: Sat 20 Dec 2025 03:01:03 +0000 Manifest next update: Sun 21 Dec 2025 03:01:03 +0000 Files and hashes: 1: _ZGs7yyYUfcWFHaeoN_irFYY-Fs.roa (hash: k/ZQQ+Kv/qHUrbi6eDGukQ6+rynVgaxf2EU7N8rlEaQ=) 2: gU7b0ZY0y7kaDS2v11nUyafne3o.crl (hash: Edl/BfWm1WOxVoQD1PNqPXTuOrce6Fb29iSsrtDuyok=) 3: xpTRCuHlYWLPipg1pf1wuJHDIPg.roa (hash: 8yVx7sKih/ir7FZHTNGaky/UBkdstIszyQkTRTd/9nQ=) 4: ywM-ydmbzESoETxNsRnDQ6bbYxg.roa (hash: GmNC6UbYgSd9tbGR+GgvLCmczbY/RBGea7VtxVomphs=) 5: zticNdKOcKpGZ7y9nSwo2z1Ata4.roa (hash: 8+4soy6gmx5EG7p1nRpzUiPyWHyd7/QxOctDatWj2cE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:1b:51:ab:23:9b:fd:50:06:c2:f1:d3:80:2f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a Validity Not Before: Dec 20 03:01:03 2025 GMT Not After : Dec 21 03:01:03 2025 GMT Subject: CN=d71b4397b1a9838238dbe60fdba8a2ee68ce02ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b7:a3:3b:9f:7c:22:9d:22:b1:09:bb:0c:eb: 0a:28:31:43:c3:d5:8a:0f:ea:be:2b:13:b4:c7:25: 62:f1:18:e1:d2:44:83:ec:c3:71:b2:d3:60:5c:61: 55:e7:12:bf:72:81:36:55:f4:17:aa:e6:c9:cc:8b: d3:b9:95:94:ad:ff:98:0a:9b:18:60:40:e2:07:8d: 94:d9:60:b4:a2:ff:07:56:f7:71:f3:a2:f9:15:de: 66:96:f9:ed:7f:01:90:00:62:75:cf:95:ae:1e:bd: c8:ad:50:a5:4c:f2:6e:47:a5:b3:9e:1b:09:a1:17: 0a:c3:d3:fa:9e:4e:ab:69:73:25:d1:13:d8:83:ab: 17:28:dd:76:47:79:34:23:09:12:b5:9a:ca:7a:5a: 1c:26:35:63:03:dd:6a:8c:43:48:d3:ac:30:25:8e: 92:71:a2:98:46:6f:8b:d0:ab:2d:f3:57:3c:a6:44: f9:cf:03:93:b1:03:98:ac:13:91:b7:94:95:66:7b: 6d:96:e4:92:1a:8a:d8:e8:c4:dc:7b:bd:b2:57:6f: 49:f8:c6:36:f7:23:27:2d:6e:49:ee:5a:6a:a2:3e: 25:49:31:79:71:e2:f8:68:d0:ae:7b:aa:4b:13:1a: c5:ed:30:cd:06:83:cd:79:b1:49:eb:82:7e:3d:6f: 33:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1B:43:97:B1:A9:83:82:38:DB:E6:0F:DB:A8:A2:EE:68:CE:02:AB X509v3 Authority Key Identifier: keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:bb:30:a4:f6:69:a9:ea:ee:57:90:90:f4:ae:f4:75:f3:8b: 4d:b2:0c:27:df:fc:0c:88:31:9b:05:d0:9e:6c:8d:19:09:c0: 68:11:3d:db:f3:36:a0:06:fd:6b:ad:dc:3f:f7:e3:00:71:70: 2f:df:c1:cd:f8:a1:4e:95:40:61:f9:a6:2b:81:89:9a:ab:69: de:f7:16:fc:38:d5:08:81:49:1b:44:af:da:de:5e:22:a9:7d: 6b:a8:9e:06:6c:41:2a:a8:41:d7:81:ce:4f:9c:90:58:c2:cf: 32:30:34:62:d2:c9:46:e1:3d:c5:4f:9a:5d:c7:1b:5c:64:a8: 5c:ee:2f:00:2e:d7:8e:ec:e7:c1:2a:bc:1f:80:41:9b:52:83: 5f:c9:bd:99:43:08:5e:50:f4:45:3e:4e:cc:88:3c:7a:fd:4c: fb:c5:22:90:28:53:20:6d:71:47:e6:15:db:9a:7a:d2:57:df: a2:dd:d6:1d:d2:98:4e:c3:6a:18:dd:f4:ff:eb:84:ef:62:0b: f6:0a:f7:86:a4:b5:e3:91:ed:12:93:1c:3e:6c:84:90:86:c1: 3e:4f:3e:63:94:07:b5:4f:ba:e2:59:e4:44:f1:4f:63:27:b3: 91:27:03:07:0c:42:e5:97:db:1a:74:2c:a0:33:71:5d:7e:dc: 8f:5b:b2:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tBtRqyOb/VAGwvHTgC/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNGVkYmQxOTYzNGNiYjkxYTBkMmRhZmQ3NTlkNGM5YTdl NzdiN2EwHhcNMjUxMjIwMDMwMTAzWhcNMjUxMjIxMDMwMTAzWjAzMTEwLwYDVQQD EyhkNzFiNDM5N2IxYTk4MzgyMzhkYmU2MGZkYmE4YTJlZTY4Y2UwMmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLejO598Ip0isQm7DOsKKDFDw9WK D+q+KxO0xyVi8Rjh0kSD7MNxstNgXGFV5xK/coE2VfQXqubJzIvTuZWUrf+YCpsY YEDiB42U2WC0ov8HVvdx86L5Fd5mlvntfwGQAGJ1z5WuHr3IrVClTPJuR6WznhsJ oRcKw9P6nk6raXMl0RPYg6sXKN12R3k0IwkStZrKelocJjVjA91qjENI06wwJY6S caKYRm+L0Kst81c8pkT5zwOTsQOYrBORt5SVZnttluSSGorY6MTce72yV29J+MY2 9yMnLW5J7lpqoj4lSTF5ceL4aNCue6pLExrF7TDNBoPNebFJ64J+PW8zzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcbQ5exqYOCONvmD9uoou5ozgKrMB8GA1UdIwQY MBaAFIFO29GWNMu5Gg0tr9dZ1Mmn53t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMt YzA4OTk3YTdhMDhmLzEvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMtYzA4OTk3YTdhMDhm LzEvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwrswpPZp qeruV5CQ9K70dfOLTbIMJ9/8DIgxmwXQnmyNGQnAaBE92/M2oAb9a63cP/fjAHFw L9/BzfihTpVAYfmmK4GJmqtp3vcW/DjVCIFJG0Sv2t5eIql9a6ieBmxBKqhB14HO T5yQWMLPMjA0YtLJRuE9xU+aXccbXGSoXO4vAC7XjuznwSq8H4BBm1KDX8m9mUMI XlD0RT5OzIg8ev1M+8UikChTIG1xR+YV25p60lffot3WHdKYTsNqGN30/+uE72IL 9gr3hqS145HtEpMcPmyEkIbBPk8+Y5QHtU+64lnkRPFPYyezkScDBwxC5ZfbGnQs oDNxXX7cj1uyZA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:53:58 2025 by rpki-client