This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json) Hash identifier: 3LGnNMonjAEeOFiOi6qwCr8PRUczgvigpejzhNSouhk= Subject key identifier: CE:8D:8E:D8:A2:D6:AD:3C:18:14:C7:B1:6F:F6:B9:C6:B4:D9:FC:5D Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b Certificate serial: 019B3A90FCC89B72619784BD3D780622E762 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft Manifest number: 16F6 Signing time: Sat 20 Dec 2025 07:02:18 +0000 Manifest this update: Sat 20 Dec 2025 07:02:18 +0000 Manifest next update: Sun 21 Dec 2025 07:02:18 +0000 Files and hashes: 1: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: 7X/uN1klgJBWwsUEM2Z/avc/rStA08EjPmfHiniLlrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:fc:c8:9b:72:61:97:84:bd:3d:78:06:22:e7:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b Validity Not Before: Dec 20 07:02:18 2025 GMT Not After : Dec 21 07:02:18 2025 GMT Subject: CN=ce8d8ed8a2d6ad3c1814c7b16ff6b9c6b4d9fc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dc:a8:90:bc:aa:13:03:2d:63:d3:d3:7d:ec: 22:13:e4:06:5e:c5:71:4b:88:86:87:89:27:de:99: f4:15:fe:64:ed:3e:02:fb:e8:66:ae:64:db:ca:a6: 43:91:d4:84:06:68:73:c4:aa:64:50:0e:97:4f:1e: 2c:14:67:bd:cf:9f:c2:fb:0b:98:33:e9:da:14:a7: d9:89:d6:fc:59:17:2d:70:bd:07:24:bd:f3:12:ac: 40:fc:77:c5:57:34:35:f0:fc:bb:ca:bc:d1:c6:4e: da:97:b3:7b:6d:e6:94:cb:0a:76:77:b4:fe:71:d6: 61:19:39:53:27:37:43:42:64:46:2b:bb:28:ba:d9: 05:a8:5d:a1:20:cc:70:d5:6d:5f:65:f2:27:1f:bb: e1:10:8d:21:ae:ac:1f:09:c8:e1:28:ef:35:b0:59: 73:a3:9d:14:30:b2:38:15:66:e8:6d:0d:97:db:ba: aa:e8:b2:08:a5:4b:0b:b7:6a:10:75:86:c7:40:8c: cf:06:9e:b7:4c:e1:a0:15:8e:1d:c9:cd:49:3f:25: 9a:9d:14:34:51:ab:1f:69:ae:82:48:f8:06:b8:1b: d6:59:61:95:c0:87:47:a6:4c:1a:a1:73:88:15:c2: 0e:e3:59:10:2e:a6:92:22:96:d4:f5:5a:2a:77:97: 11:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8D:8E:D8:A2:D6:AD:3C:18:14:C7:B1:6F:F6:B9:C6:B4:D9:FC:5D X509v3 Authority Key Identifier: keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:20:77:50:0d:47:f2:26:36:20:66:45:29:55:d7:06:b2:34: 1f:93:40:df:db:3b:28:14:db:6a:4f:ce:06:2a:7d:e6:fc:a4: cb:e5:7a:f9:14:e1:50:41:be:77:32:09:61:53:8b:a1:19:20: 81:e8:5f:65:2b:46:a8:c0:79:bf:c2:94:ea:e6:60:1a:bd:2b: 32:ba:24:9f:aa:59:a2:6d:8f:70:18:d3:3b:ee:c1:c3:39:b2: 69:6e:a7:d5:1d:37:61:3c:45:80:c9:43:f9:03:1f:cd:99:0d: fb:09:8d:56:ed:8f:40:ab:3b:88:5e:91:43:6f:7e:fd:47:b2: d2:a8:da:6b:72:0f:b1:c9:f6:a1:ac:52:04:34:3c:17:52:6a: c3:0b:9a:48:ae:8e:12:89:72:5d:98:9a:6d:4b:82:e9:2f:5e: fc:e0:1c:d6:d4:46:2b:01:71:c3:2f:85:dd:91:9c:e3:18:b3: 36:24:07:7e:f8:f3:ca:31:4d:50:2e:ec:1a:b0:8a:b2:78:b2: c3:86:52:9b:27:b2:8e:8b:cd:ef:f9:da:bb:b8:a6:57:a1:22: 90:09:82:cc:3c:23:ab:60:ff:b6:36:4f:62:8c:3b:5b:53:4f: c4:43:ce:ea:7b:8a:35:4c:ae:ab:ed:fe:81:57:83:cb:43:5a: 35:88:a6:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kPzIm3Jhl4S9PXgGIudiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYmM2MzNlMjg0NjY0YTRjYTUxYWQ1OTc2YzdmYWYyYzYy NDZiNGIwHhcNMjUxMjIwMDcwMjE4WhcNMjUxMjIxMDcwMjE4WjAzMTEwLwYDVQQD EyhjZThkOGVkOGEyZDZhZDNjMTgxNGM3YjE2ZmY2YjljNmI0ZDlmYzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNyokLyqEwMtY9PTfewiE+QGXsVx S4iGh4kn3pn0Ff5k7T4C++hmrmTbyqZDkdSEBmhzxKpkUA6XTx4sFGe9z5/C+wuY M+naFKfZidb8WRctcL0HJL3zEqxA/HfFVzQ18Py7yrzRxk7al7N7beaUywp2d7T+ cdZhGTlTJzdDQmRGK7soutkFqF2hIMxw1W1fZfInH7vhEI0hrqwfCcjhKO81sFlz o50UMLI4FWbobQ2X27qq6LIIpUsLt2oQdYbHQIzPBp63TOGgFY4dyc1JPyWanRQ0 Uasfaa6CSPgGuBvWWWGVwIdHpkwaoXOIFcIO41kQLqaSIpbU9Voqd5cRbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6Njtii1q08GBTHsW/2uca02fxdMB8GA1UdIwQY MBaAFIK8Yz4oRmSkylGtWXbH+vLGJGtLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAt MmE5MWMyY2QyMDc5LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAtMmE5MWMyY2QyMDc5 LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSB3UA1H 8iY2IGZFKVXXBrI0H5NA39s7KBTbak/OBip95vyky+V6+RThUEG+dzIJYVOLoRkg gehfZStGqMB5v8KU6uZgGr0rMrokn6pZom2PcBjTO+7BwzmyaW6n1R03YTxFgMlD +QMfzZkN+wmNVu2PQKs7iF6RQ29+/Uey0qjaa3IPscn2oaxSBDQ8F1JqwwuaSK6O EolyXZiabUuC6S9e/OAc1tRGKwFxwy+F3ZGc4xizNiQHfvjzyjFNUC7sGrCKsniy w4ZSmyeyjovN7/nau7imV6EikAmCzDwjq2D/tjZPYow7W1NPxEPO6nuKNUyuq+3+ gVeDy0NaNYim5A== -----END CERTIFICATE-----Generated at Sat Dec 20 16:48:38 2025 by rpki-client