This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft File: GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json) Hash identifier: Wgcs/T6VHZXAOTF+bpBjVCQz+2ke6TkUdkRKfwBUxdc= Subject key identifier: EB:95:31:E5:67:98:F1:9B:A2:B1:DB:54:AE:6B:F8:D2:71:46:DB:C4 Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e Certificate serial: 019B413633AC12E1886C3AD9E854A189E351 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft Manifest number: 02B3 Signing time: Sun 21 Dec 2025 14:00:29 +0000 Manifest this update: Sun 21 Dec 2025 14:00:29 +0000 Manifest next update: Mon 22 Dec 2025 14:00:29 +0000 Files and hashes: 1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: Zu+H2X23Yro19Ncmcp/m6AIpNrxk9jenZH7XRoxFEWo=) 2: uNOJmAq6voVkPfj182da4gb5W7g.roa (hash: /Vgo6Tc+QicjXS2eidHAg9cx4rFLuic3fsDr6FFDDKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:33:ac:12:e1:88:6c:3a:d9:e8:54:a1:89:e3:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e Validity Not Before: Dec 21 14:00:29 2025 GMT Not After : Dec 22 14:00:29 2025 GMT Subject: CN=eb9531e56798f19ba2b1db54ae6bf8d27146dbc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f8:6c:e6:a0:4d:ee:95:2a:f5:4c:e2:09:38: 01:18:9a:56:fc:6d:be:79:c9:08:d7:4d:bf:8a:eb: 73:6c:63:83:1f:23:54:49:61:af:b9:48:48:e8:97: 79:06:e8:bd:98:bd:47:e1:04:2f:e1:16:ae:a7:5b: 3f:35:e3:65:d8:ef:25:8a:05:94:ae:2d:40:98:a1: da:36:7a:a9:d3:7e:8f:f9:00:e5:53:d7:a6:6e:a6: d4:da:26:1c:f2:96:94:5e:14:3d:0a:db:4d:42:4a: a7:8e:44:c4:6e:3a:b5:8b:12:ad:08:5f:8b:3c:17: 0f:28:42:05:0c:f6:d1:0a:be:b4:58:89:d1:e1:f0: 19:fc:ad:cc:be:28:37:63:d7:ab:38:9c:ba:08:78: 1a:fb:16:dc:2d:f6:07:cc:e5:7b:ae:32:6c:a7:fa: 3f:79:4a:e2:e9:d6:ed:03:96:78:07:06:de:dd:8f: 93:42:b0:1c:0b:0c:9e:53:42:0f:7a:02:30:56:46: 5b:2c:f9:1a:49:40:29:ef:b5:02:8d:27:ca:0b:2a: 71:22:18:b8:81:cd:d7:66:95:cc:6c:37:8f:50:f8: 65:4a:36:74:24:34:88:3f:45:2b:c1:e7:eb:50:ce: 0d:95:6b:37:3d:6c:a7:50:14:23:11:9e:8e:2f:c7: 14:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:95:31:E5:67:98:F1:9B:A2:B1:DB:54:AE:6B:F8:D2:71:46:DB:C4 X509v3 Authority Key Identifier: keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:1e:68:c1:d7:e6:81:c7:92:af:1d:4b:3c:b8:2f:26:39:20: 74:a2:1d:d4:7c:5e:5f:ac:ab:ab:bc:fa:23:f4:c1:bc:60:6a: e0:83:b4:4d:dd:13:5d:c4:a5:6b:80:be:e4:3e:88:a4:9f:a7: 04:dd:09:06:47:e3:fc:bf:86:2f:60:4f:78:98:8b:9e:63:da: 2e:35:46:79:9b:a7:98:1d:d0:d0:25:65:fc:96:bc:75:9c:e1: e2:f8:34:cf:44:5f:e5:0b:c6:62:ae:75:b9:2f:1e:31:cd:9b: d0:ef:da:f6:5f:b0:46:b3:02:76:27:d2:bb:00:94:42:13:e5: 3e:37:a3:68:49:c3:6b:02:21:84:11:f9:24:20:64:8b:cb:37: 1e:f0:23:a9:8e:55:11:41:f0:3e:85:69:62:e8:65:dd:c8:b7: 70:4a:46:05:1f:0f:f7:45:b4:ba:d2:b8:eb:42:06:31:a1:0c: 5a:be:91:50:56:ea:f3:96:69:ca:2f:a0:f9:4a:95:3e:e5:19: 27:64:14:29:25:3a:b7:1a:1d:d0:b4:96:43:e4:1d:b5:1a:98: ac:b4:ca:43:c8:cb:15:62:b6:78:e6:45:17:9d:ac:e0:b3:5e: e4:cb:9c:40:bf:fa:13:ae:ac:b5:55:76:0f:68:85:08:ce:5e: 97:98:64:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNjOsEuGIbDrZ6FShieNRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZmNkODdlNjFmOTE3NjVjMmMxMDAyMDQxNDFiNTk0ZDMy YzdiMmUwHhcNMjUxMjIxMTQwMDI5WhcNMjUxMjIyMTQwMDI5WjAzMTEwLwYDVQQD EyhlYjk1MzFlNTY3OThmMTliYTJiMWRiNTRhZTZiZjhkMjcxNDZkYmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfhs5qBN7pUq9UziCTgBGJpW/G2+ eckI102/iutzbGODHyNUSWGvuUhI6Jd5Bui9mL1H4QQv4Raup1s/NeNl2O8ligWU ri1AmKHaNnqp036P+QDlU9embqbU2iYc8paUXhQ9CttNQkqnjkTEbjq1ixKtCF+L PBcPKEIFDPbRCr60WInR4fAZ/K3Mvig3Y9erOJy6CHga+xbcLfYHzOV7rjJsp/o/ eUri6dbtA5Z4Bwbe3Y+TQrAcCwyeU0IPegIwVkZbLPkaSUAp77UCjSfKCypxIhi4 gc3XZpXMbDePUPhlSjZ0JDSIP0UrwefrUM4NlWs3PWynUBQjEZ6OL8cUBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuVMeVnmPGborHbVK5r+NJxRtvEMB8GA1UdIwQY MBaAFBr82H5h+RdlwsEAIEFBtZTTLHsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81NDI3NGItNjFjYi00Njg2LWFiOGEt NGNmOGNmNGZmNmNkLzEvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS81NDI3NGItNjFjYi00Njg2LWFiOGEtNGNmOGNmNGZmNmNk LzEvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXx5owdfm gceSrx1LPLgvJjkgdKId1HxeX6yrq7z6I/TBvGBq4IO0Td0TXcSla4C+5D6IpJ+n BN0JBkfj/L+GL2BPeJiLnmPaLjVGeZunmB3Q0CVl/Ja8dZzh4vg0z0Rf5QvGYq51 uS8eMc2b0O/a9l+wRrMCdifSuwCUQhPlPjejaEnDawIhhBH5JCBki8s3HvAjqY5V EUHwPoVpYuhl3ci3cEpGBR8P90W0utK460IGMaEMWr6RUFbq85Zpyi+g+UqVPuUZ J2QUKSU6txod0LSWQ+QdtRqYrLTKQ8jLFWK2eOZFF52s4LNe5MucQL/6E66stVV2 D2iFCM5el5hk7A== -----END CERTIFICATE-----Generated at Mon Dec 22 00:08:17 2025 by rpki-client