This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft File: gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json) Hash identifier: ZQyXbZil0xFAr+DYqPtuuel58ewxBfxnENU+UrkNXf0= Subject key identifier: FF:D8:06:B3:B0:D2:A3:D5:27:3B:79:0C:47:EB:A0:A8:C9:A6:53:71 Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A Certificate issuer: /CN=8260152edd476b31708404452958615b65ddcb0a Certificate serial: 019B6B7C5702F525971F160326946CCD666B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft Manifest number: 179F Signing time: Mon 29 Dec 2025 19:01:09 +0000 Manifest this update: Mon 29 Dec 2025 19:01:09 +0000 Manifest next update: Tue 30 Dec 2025 19:01:09 +0000 Files and hashes: 1: ABnX77DVikk7gn2fQ6SCyXZp5CY.roa (hash: tGweD2UyMDN3jg0C7H8c7WDDk9iUdxSAoQTdTpfDf5g=) 2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: wOJFDbKirCuHAmpS223ouLJhJQjswaMaZX0C8oEyVqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 19:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:7c:57:02:f5:25:97:1f:16:03:26:94:6c:cd:66:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8260152edd476b31708404452958615b65ddcb0a Validity Not Before: Dec 29 19:01:09 2025 GMT Not After : Dec 30 19:01:09 2025 GMT Subject: CN=ffd806b3b0d2a3d5273b790c47eba0a8c9a65371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ad:fe:b9:14:c2:89:2b:0c:73:3f:6d:07:8c: 4b:3b:0d:eb:96:7f:d6:f9:1c:b1:f5:4d:f2:6a:5f: eb:36:46:0e:da:4c:20:72:99:51:77:b0:46:71:02: 9c:3b:41:27:6d:c5:2f:6a:c0:34:61:42:a6:65:7e: a1:ee:2e:92:86:ab:2c:4f:18:08:27:ff:d8:9b:1c: a9:e1:d8:f1:b0:6b:93:8f:10:c7:86:87:9f:f0:ec: 32:d4:1a:03:40:82:3a:21:c7:39:40:41:60:78:bf: e6:a2:66:47:2d:74:3e:a2:e3:54:67:e6:28:54:28: 9f:20:8e:ce:9b:20:94:da:79:99:f4:e1:14:55:32: ed:a8:2a:da:e0:c7:76:ad:22:3a:7b:f0:8f:37:1e: 66:67:5c:97:29:ae:bb:54:cf:84:06:ae:13:ef:39: 9e:6a:5e:de:c5:cc:81:a7:94:8d:92:9c:e7:26:bc: 25:ca:da:2a:2c:93:62:0f:50:16:74:8a:bf:7e:15: cc:df:2e:55:27:d0:e8:fa:1d:fd:b1:14:52:3e:61: 71:35:cd:83:fd:28:cf:9c:a6:4a:45:03:a6:9d:86: 2f:a3:d0:7e:31:bf:b2:88:f4:20:46:89:3e:db:5f: ca:76:b4:53:b9:be:8f:49:fa:5c:bf:93:21:58:e6: c4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D8:06:B3:B0:D2:A3:D5:27:3B:79:0C:47:EB:A0:A8:C9:A6:53:71 X509v3 Authority Key Identifier: keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:73:d8:60:dc:d7:d1:64:ba:c2:27:5b:ef:d8:35:b6:97:fa: 38:34:e0:4c:b2:d1:a4:d6:e6:7e:a1:1e:ab:7f:d6:aa:2e:bb: e2:b4:8b:3c:a1:d4:b7:16:1d:99:1d:f5:a8:d6:b1:34:8c:4d: 7d:9e:2a:ec:aa:51:79:f1:d6:ed:dc:11:fa:8e:a0:c5:8e:db: 3d:78:d2:18:1d:e9:b8:14:12:e4:b8:86:aa:ab:af:00:bb:fb: 67:1e:9b:90:e1:a7:65:6e:4c:f4:82:5f:a1:5a:3e:95:25:5b: 52:28:ae:f8:8a:f5:8f:3a:cd:03:ed:80:80:98:49:7c:89:85: b6:71:07:00:03:65:16:ca:5b:7f:94:c7:c2:eb:39:a0:9c:f6: 8a:41:90:da:95:85:13:2b:5f:01:61:18:9e:67:92:66:bf:4d: 58:40:d4:27:8d:3f:bd:52:7f:2b:fe:99:cd:05:bd:2d:93:12: 53:dd:c7:b6:dd:d3:f0:92:f5:60:32:23:26:84:ff:71:f4:f6: f8:e0:0d:d9:ac:c0:5f:91:39:cb:15:57:51:fe:e8:7d:d0:09: 9a:60:84:aa:ef:c9:ec:26:a1:4e:fd:f8:10:65:a1:ae:a0:7f: 19:07:7c:45:e0:63:83:3a:21:5b:a4:f8:f7:25:5f:5e:5b:7d: 7d:6c:e2:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrfFcC9SWXHxYDJpRszWZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjAxNTJlZGQ0NzZiMzE3MDg0MDQ0NTI5NTg2MTViNjVk ZGNiMGEwHhcNMjUxMjI5MTkwMTA5WhcNMjUxMjMwMTkwMTA5WjAzMTEwLwYDVQQD EyhmZmQ4MDZiM2IwZDJhM2Q1MjczYjc5MGM0N2ViYTBhOGM5YTY1MzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a3+uRTCiSsMcz9tB4xLOw3rln/W +Ryx9U3yal/rNkYO2kwgcplRd7BGcQKcO0EnbcUvasA0YUKmZX6h7i6ShqssTxgI J//Ymxyp4djxsGuTjxDHhoef8Owy1BoDQII6Icc5QEFgeL/momZHLXQ+ouNUZ+Yo VCifII7OmyCU2nmZ9OEUVTLtqCra4Md2rSI6e/CPNx5mZ1yXKa67VM+EBq4T7zme al7excyBp5SNkpznJrwlytoqLJNiD1AWdIq/fhXM3y5VJ9Do+h39sRRSPmFxNc2D /SjPnKZKRQOmnYYvo9B+Mb+yiPQgRok+21/KdrRTub6PSfpcv5MhWObETQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/YBrOw0qPVJzt5DEfroKjJplNxMB8GA1UdIwQY MBaAFIJgFS7dR2sxcIQERSlYYVtl3csKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21BVkx0MUhhekZ3aEFSRktWaGhXMlhkeXdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80OWY0MGMtNTQ0OC00MjE3LTk1NmYt Y2NmOWIwZjBlMjI3LzEvZ21BVkx0MUhhekZ3aEFSRktWaGhXMlhkeXdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80OWY0MGMtNTQ0OC00MjE3LTk1NmYtY2NmOWIwZjBlMjI3 LzEvZ21BVkx0MUhhekZ3aEFSRktWaGhXMlhkeXdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXPYYNzX 0WS6widb79g1tpf6ODTgTLLRpNbmfqEeq3/Wqi674rSLPKHUtxYdmR31qNaxNIxN fZ4q7KpRefHW7dwR+o6gxY7bPXjSGB3puBQS5LiGqquvALv7Zx6bkOGnZW5M9IJf oVo+lSVbUiiu+Ir1jzrNA+2AgJhJfImFtnEHAANlFspbf5THwus5oJz2ikGQ2pWF EytfAWEYnmeSZr9NWEDUJ40/vVJ/K/6ZzQW9LZMSU93Htt3T8JL1YDIjJoT/cfT2 +OAN2azAX5E5yxVXUf7ofdAJmmCEqu/J7CahTv34EGWhrqB/GQd8ReBjgzohW6T4 9yVfXlt9fWziJw== -----END CERTIFICATE-----Generated at Tue Dec 30 02:15:22 2025 by rpki-client