This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft File: GXSZvpe8wyf2Tp64xCOUUIygbWU.mft (raw, json) Hash identifier: fHXO59wo+VzdVgvGRba4GGFamFQBXbpn6BeJpffspEA= Subject key identifier: 9A:DC:C7:25:1F:99:6F:CD:68:28:4F:CC:18:3D:D4:73:D7:C6:39:97 Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65 Certificate issuer: /CN=197499be97bcc327f64e9eb8c42394508ca06d65 Certificate serial: 019B76A498833F95B2579419A0B39EF2B63C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft Manifest number: 0DFC Signing time: Wed 31 Dec 2025 23:00:57 +0000 Manifest this update: Wed 31 Dec 2025 23:00:57 +0000 Manifest next update: Thu 01 Jan 2026 23:00:57 +0000 Files and hashes: 1: GXSZvpe8wyf2Tp64xCOUUIygbWU.crl (hash: lJl1/HKTF7nnNaw2ufI7xa3N7Zz/Q6dPBpgNUjEwdD8=) 2: sotFwW0dd18jhlgGMEoNrnqopP4.roa (hash: gVSt/FfSJjyB1+rQ4tB9A+DWP4ec6C61j3+zsQZbog8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:a4:98:83:3f:95:b2:57:94:19:a0:b3:9e:f2:b6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65 Validity Not Before: Dec 31 23:00:57 2025 GMT Not After : Jan 1 23:00:57 2026 GMT Subject: CN=9adcc7251f996fcd68284fcc183dd473d7c63997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e1:38:42:d1:12:e0:1f:61:e0:cc:06:cb:ee: 5d:f3:a0:7b:c2:cc:a8:b7:bf:c4:95:84:ce:46:26: 3a:68:c5:3a:e7:bf:f9:ba:26:ef:a9:1b:50:50:3c: c2:47:a0:7d:51:41:76:89:1b:08:9b:a8:cf:33:ef: 27:6f:b2:e4:76:ec:f2:38:98:36:1e:67:55:79:80: ae:d3:9c:c7:fa:c2:6f:79:1f:19:28:c3:e5:4c:d7: a9:aa:be:ed:f6:ae:81:e2:b7:8b:67:24:97:8d:fc: e6:42:3e:d8:db:f1:0d:4c:4f:f6:03:89:82:bf:ac: 2b:e4:66:45:84:da:ed:be:5b:8c:7a:72:61:c9:f2: 9c:d6:4f:ed:d1:52:36:3b:14:4a:4a:15:19:cd:99: dd:e7:d5:5c:4d:2d:71:f5:d3:34:79:dc:93:7a:a7: 32:3e:6b:6c:77:d7:da:b8:3e:e7:32:aa:b5:ef:7b: aa:da:4e:47:af:be:4c:05:a1:c7:61:7f:a4:f4:56: 42:68:f0:34:a7:05:07:12:d5:48:04:5a:20:30:72: b3:09:a0:44:9f:c3:b0:51:ac:78:e6:9e:d8:69:b1: 12:7a:a7:8f:08:fb:9e:4a:90:44:51:74:ac:7b:20: e7:a3:53:4b:5e:7e:75:91:bd:66:20:ba:33:91:42: 0f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DC:C7:25:1F:99:6F:CD:68:28:4F:CC:18:3D:D4:73:D7:C6:39:97 X509v3 Authority Key Identifier: keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:35:50:ff:37:d0:1f:04:43:7f:6c:40:10:af:68:83:11:30: 4b:a7:5f:03:2e:8c:a9:9c:c3:8f:f7:6c:68:9d:d1:cb:d4:53: 40:6e:4f:b7:80:4e:89:53:d4:4c:7e:5d:e9:71:cd:53:a3:0a: 32:4f:65:37:ef:ab:0a:c0:f2:a8:36:6b:a9:fa:65:ed:aa:41: 57:0c:52:84:7f:48:8a:d2:5d:ee:22:cd:c5:31:ab:9a:e4:3d: 41:7a:f9:cb:53:b9:03:6c:ab:b2:b6:59:b9:c9:e1:28:36:91: 00:93:20:4f:69:b8:37:c7:a6:73:e9:a9:d5:33:e0:c5:62:7a: 37:07:3d:b3:24:1b:b6:3f:e9:d6:9d:59:ca:ca:fe:dc:17:8a: ad:3a:b2:68:e0:b0:34:23:0f:57:34:ee:f3:88:d0:ed:d8:60: 73:07:43:d0:9f:bf:6a:90:39:4b:b9:ff:bc:27:5e:e5:63:d4: 16:cd:7c:35:7a:2b:c0:2f:25:08:01:64:bf:b5:06:1a:a4:d6: 81:75:8e:6d:6b:5b:0a:c7:d1:a1:97:6f:33:03:f0:ff:ba:b8: df:b8:a4:fd:34:f5:4b:ba:e6:01:73:05:3f:1b:de:6f:38:b9: 50:38:1d:ee:78:41:ff:d9:7f:8d:18:3b:2e:c6:7e:a8:ac:e9: 7a:ec:19:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2pJiDP5WyV5QZoLOe8rY8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NzQ5OWJlOTdiY2MzMjdmNjRlOWViOGM0MjM5NDUwOGNh MDZkNjUwHhcNMjUxMjMxMjMwMDU3WhcNMjYwMTAxMjMwMDU3WjAzMTEwLwYDVQQD Eyg5YWRjYzcyNTFmOTk2ZmNkNjgyODRmY2MxODNkZDQ3M2Q3YzYzOTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeE4QtES4B9h4MwGy+5d86B7wsyo t7/ElYTORiY6aMU657/5uibvqRtQUDzCR6B9UUF2iRsIm6jPM+8nb7LkduzyOJg2 HmdVeYCu05zH+sJveR8ZKMPlTNepqr7t9q6B4reLZySXjfzmQj7Y2/ENTE/2A4mC v6wr5GZFhNrtvluMenJhyfKc1k/t0VI2OxRKShUZzZnd59VcTS1x9dM0edyTeqcy Pmtsd9fauD7nMqq173uq2k5Hr75MBaHHYX+k9FZCaPA0pwUHEtVIBFogMHKzCaBE n8OwUax45p7YabESeqePCPueSpBEUXSseyDno1NLXn51kb1mILozkUIPdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrcxyUfmW/NaChPzBg91HPXxjmXMB8GA1UdIwQY MBaAFBl0mb6XvMMn9k6euMQjlFCMoG1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82YTkwMGEtOGI1Yy00MDdiLWEwOTQt ODk4MDM2NzM0ODc4LzEvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82YTkwMGEtOGI1Yy00MDdiLWEwOTQtODk4MDM2NzM0ODc4 LzEvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTVQ/zfQ HwRDf2xAEK9ogxEwS6dfAy6MqZzDj/dsaJ3Ry9RTQG5Pt4BOiVPUTH5d6XHNU6MK Mk9lN++rCsDyqDZrqfpl7apBVwxShH9IitJd7iLNxTGrmuQ9QXr5y1O5A2yrsrZZ ucnhKDaRAJMgT2m4N8emc+mp1TPgxWJ6Nwc9syQbtj/p1p1Zysr+3BeKrTqyaOCw NCMPVzTu84jQ7dhgcwdD0J+/apA5S7n/vCde5WPUFs18NXorwC8lCAFkv7UGGqTW gXWObWtbCsfRoZdvMwPw/7q437ik/TT1S7rmAXMFPxvebzi5UDgd7nhB/9l/jRg7 LsZ+qKzpeuwZUg== -----END CERTIFICATE-----Generated at Thu Jan 1 02:51:03 2026 by rpki-client