This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft File: gXNntPK_jrMfbhYk7Vbtq6nwITs.mft (raw, json) Hash identifier: i+vUpLUc7k3xvNVORx7vH3TOBMYiNSIx2k/roIz+viw= Subject key identifier: 1D:17:9B:DC:C6:AD:63:D5:AB:3F:CC:D4:CD:6D:42:F7:39:8B:67:70 Authority key identifier: 81:73:67:B4:F2:BF:8E:B3:1F:6E:16:24:ED:56:ED:AB:A9:F0:21:3B Certificate issuer: /CN=817367b4f2bf8eb31f6e1624ed56edaba9f0213b Certificate serial: 019B74ED22F735C498B20F5FFCBA455497D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXNntPK_jrMfbhYk7Vbtq6nwITs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft Manifest number: 0EC0 Signing time: Wed 31 Dec 2025 15:00:56 +0000 Manifest this update: Wed 31 Dec 2025 15:00:56 +0000 Manifest next update: Thu 01 Jan 2026 15:00:56 +0000 Files and hashes: 1: gXNntPK_jrMfbhYk7Vbtq6nwITs.crl (hash: hDHesazV+CxH3wqZiVkFhmDAT3NDMPQ2viwBG4hR+QU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft rsync://rpki.ripe.net/repository/DEFAULT/gXNntPK_jrMfbhYk7Vbtq6nwITs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:ed:22:f7:35:c4:98:b2:0f:5f:fc:ba:45:54:97:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817367b4f2bf8eb31f6e1624ed56edaba9f0213b Validity Not Before: Dec 31 15:00:56 2025 GMT Not After : Jan 1 15:00:56 2026 GMT Subject: CN=1d179bdcc6ad63d5ab3fccd4cd6d42f7398b6770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:99:28:b0:1f:fa:94:5b:3b:e1:7a:96:fb:89: 0d:d9:45:73:7b:f7:39:b2:65:29:9c:d5:5f:c8:fb: 4e:59:61:39:06:7b:57:80:3f:e2:0c:fe:12:4d:f1: 83:3e:0e:b8:05:6e:d0:95:1e:df:15:21:0e:11:49: eb:57:04:1a:7f:85:18:c4:56:3d:4b:4b:64:1d:eb: b8:34:63:b9:14:1a:c8:23:a1:2f:58:27:d3:f4:69: d3:f0:76:a5:d1:13:87:06:56:31:f7:a8:88:89:be: 70:29:48:80:2a:32:1f:18:1b:83:45:7b:5f:26:16: 6a:87:6e:1d:22:28:ca:b9:14:93:33:1d:79:94:92: 6e:c6:22:6f:86:4e:8a:7a:8d:89:74:1e:d1:9f:22: 81:00:2b:99:8d:55:2c:ea:de:5d:22:e2:ec:94:ad: 99:50:a8:a8:e3:46:e4:e9:51:a5:d9:2e:a6:c1:58: 39:df:36:46:14:21:cf:d6:09:a3:80:51:ed:bb:27: 2b:80:bb:84:20:80:b9:8d:5a:05:4f:b0:b6:a0:cb: 65:91:69:2c:e0:80:f2:2c:de:b1:5a:fd:62:81:e7: 49:9c:d1:8d:6a:e5:50:90:0f:2c:84:79:92:b9:cd: ae:86:a2:8f:92:7a:1f:15:14:c5:9d:73:15:73:65: 6e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:17:9B:DC:C6:AD:63:D5:AB:3F:CC:D4:CD:6D:42:F7:39:8B:67:70 X509v3 Authority Key Identifier: keyid:81:73:67:B4:F2:BF:8E:B3:1F:6E:16:24:ED:56:ED:AB:A9:F0:21:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXNntPK_jrMfbhYk7Vbtq6nwITs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:86:e2:f5:6f:d9:6a:14:22:00:34:46:20:28:c1:a4:42:2a: 53:a1:ed:3d:5e:bf:f5:0c:da:69:6c:49:0c:c3:6a:6d:89:0c: b1:5f:c7:56:75:32:78:d3:62:25:c9:50:71:2d:ce:b7:2d:65: 11:9f:c5:82:6b:f8:cc:c5:a7:d0:b8:57:4d:bb:c4:f7:2b:77: e3:2c:78:d7:7a:7a:bd:8a:d9:78:c8:60:dc:81:ff:25:70:d0: 72:c2:57:aa:4e:4e:be:8c:4b:65:fc:7b:ae:a4:e6:d1:c5:2e: e0:d6:9a:9e:40:43:52:37:3d:d6:58:8d:38:e5:ed:e1:c1:ff: 85:6f:03:f3:fc:fe:e9:3f:8a:60:96:42:63:12:41:2d:41:ff: 5d:01:c4:89:45:41:7a:4d:68:28:0c:fc:73:bb:df:bc:95:37: bf:bc:f1:db:d7:49:b7:d8:ef:01:49:cc:ee:3b:8f:53:4f:dd: b3:2c:09:bc:f6:db:70:49:02:4b:6c:09:ed:f9:67:ef:4e:0a: 99:96:7e:b0:2c:50:d0:ba:d7:c3:07:30:85:7e:4a:c4:bf:75: 1c:b6:44:56:1b:e4:06:a4:64:c6:0d:40:a8:7a:dc:d6:6d:c5: 56:ce:04:6e:41:82:7b:9b:f8:dc:92:bc:f4:9b:b7:3d:3b:9d: 17:38:67:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt07SL3NcSYsg9f/LpFVJfRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNzM2N2I0ZjJiZjhlYjMxZjZlMTYyNGVkNTZlZGFiYTlm MDIxM2IwHhcNMjUxMjMxMTUwMDU2WhcNMjYwMTAxMTUwMDU2WjAzMTEwLwYDVQQD EygxZDE3OWJkY2M2YWQ2M2Q1YWIzZmNjZDRjZDZkNDJmNzM5OGI2NzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5kosB/6lFs74XqW+4kN2UVze/c5 smUpnNVfyPtOWWE5BntXgD/iDP4STfGDPg64BW7QlR7fFSEOEUnrVwQaf4UYxFY9 S0tkHeu4NGO5FBrII6EvWCfT9GnT8Hal0ROHBlYx96iIib5wKUiAKjIfGBuDRXtf JhZqh24dIijKuRSTMx15lJJuxiJvhk6Keo2JdB7RnyKBACuZjVUs6t5dIuLslK2Z UKio40bk6VGl2S6mwVg53zZGFCHP1gmjgFHtuycrgLuEIIC5jVoFT7C2oMtlkWks 4IDyLN6xWv1igedJnNGNauVQkA8shHmSuc2uhqKPknofFRTFnXMVc2Vu1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0Xm9zGrWPVqz/M1M1tQvc5i2dwMB8GA1UdIwQY MBaAFIFzZ7Tyv46zH24WJO1W7aup8CE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1hObnRQS19qck1mYmhZazdWYnRxNm53SVRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85NTc1ZDAtOWM3Yy00NTcxLTg2M2Et NTU1MTMwYTU3MDQxLzEvZ1hObnRQS19qck1mYmhZazdWYnRxNm53SVRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85NTc1ZDAtOWM3Yy00NTcxLTg2M2EtNTU1MTMwYTU3MDQx LzEvZ1hObnRQS19qck1mYmhZazdWYnRxNm53SVRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIbi9W/Z ahQiADRGICjBpEIqU6HtPV6/9QzaaWxJDMNqbYkMsV/HVnUyeNNiJclQcS3Oty1l EZ/Fgmv4zMWn0LhXTbvE9yt34yx413p6vYrZeMhg3IH/JXDQcsJXqk5OvoxLZfx7 rqTm0cUu4NaankBDUjc91liNOOXt4cH/hW8D8/z+6T+KYJZCYxJBLUH/XQHEiUVB ek1oKAz8c7vfvJU3v7zx29dJt9jvAUnM7juPU0/dsywJvPbbcEkCS2wJ7fln704K mZZ+sCxQ0LrXwwcwhX5KxL91HLZEVhvkBqRkxg1AqHrc1m3FVs4EbkGCe5v43JK8 9Ju3PTudFzhnqQ== -----END CERTIFICATE-----Generated at Wed Dec 31 21:49:42 2025 by rpki-client