This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft File: gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json) Hash identifier: 8PKdZWvZDeFK3Z5PGrHmDpT6krR2jr85hGBJrSVtuz0= Subject key identifier: 73:E8:B8:96:A3:19:55:00:29:30:AC:54:12:DA:9E:71:6B:9E:24:72 Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab Certificate serial: 019B40C880B1C252338DB9BB330D9D098864 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 12:00:40 +0000 Manifest this update: Sun 21 Dec 2025 12:00:40 +0000 Manifest next update: Mon 22 Dec 2025 12:00:40 +0000 Files and hashes: 1: LjTHS4WiiLbIvDv29J3ieyKf9N4.roa (hash: 0M1gHDPS8KhOTlzfhUcKPBiuX1DLKJxKwDXRimBbw2c=) 2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: aYDboGQcMzylRQ8jRKO47aBxXQOAJ9ERHzz1VMsv7z0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:80:b1:c2:52:33:8d:b9:bb:33:0d:9d:09:88:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab Validity Not Before: Dec 21 12:00:40 2025 GMT Not After : Dec 22 12:00:40 2025 GMT Subject: CN=73e8b896a31955002930ac5412da9e716b9e2472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:7d:92:9b:6d:cf:e0:72:b1:c1:8c:19:89: 69:32:7c:7b:f0:e9:22:98:ab:c0:89:47:aa:39:b6: bb:2e:2d:38:c0:09:68:08:fd:f5:0a:dd:d6:f1:ff: cb:10:7d:cf:43:f8:65:9e:36:06:a0:5b:f2:33:53: fd:d1:06:07:43:53:1c:81:bb:5b:f1:4e:b9:99:5c: 6e:c9:ad:01:c7:78:e4:08:de:22:42:cf:9b:c3:42: 86:03:cf:40:24:47:f8:8b:e2:40:7d:56:06:02:18: 65:99:44:36:02:1a:ee:23:25:29:f4:01:51:65:63: ec:b1:69:70:81:57:33:55:6a:7c:cb:5d:d7:fc:25: 2c:ec:27:b2:ec:f9:38:37:a6:a3:30:97:2a:9a:ef: 47:71:41:16:e9:d5:a8:b0:97:09:c4:b2:31:76:2a: dc:09:66:51:e1:3f:2b:0e:b3:aa:85:a5:e8:96:14: 13:33:c9:62:ff:eb:95:49:48:16:f0:47:1d:33:32: 42:59:6e:83:c7:ba:89:db:0c:52:59:a8:f7:65:a8: c9:3c:90:fb:df:33:0c:92:55:43:d7:b1:eb:1d:38: a1:18:c9:5d:fb:9b:3b:70:b2:e5:51:c9:7b:66:6c: 14:88:2d:1d:64:34:1f:05:35:94:51:70:ec:d4:03: 1a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E8:B8:96:A3:19:55:00:29:30:AC:54:12:DA:9E:71:6B:9E:24:72 X509v3 Authority Key Identifier: keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:88:53:dd:da:03:99:8c:76:ce:84:c2:90:2a:96:66:82:b1: e2:1f:16:0f:b9:98:1f:58:c8:f3:af:8f:fd:ea:01:87:8f:2a: 98:37:43:5d:86:57:28:cc:5d:a2:1a:68:99:6a:13:60:a2:57: 60:90:14:c8:8e:61:90:62:12:a5:56:5f:3e:b5:f9:8a:c0:e2: d5:f8:3f:15:19:d3:d2:9d:2e:fd:62:eb:f3:45:7b:ea:20:4e: b2:f9:0e:40:7a:5d:5b:c8:8c:0e:13:67:3f:5a:fe:40:fb:71: e0:40:d2:39:ed:89:f8:e4:08:ed:4d:48:03:2b:e9:26:42:3d: 37:f2:ff:20:39:1d:98:77:47:21:e1:4a:d7:5f:cf:c9:59:60: 4b:49:7c:e5:00:af:28:ed:bd:1f:85:f9:98:51:88:e0:a9:b6: 78:8f:4b:0b:fb:a0:12:4c:69:4a:8e:54:f9:0d:e2:db:2a:60: 59:2f:8c:bb:a6:55:07:c2:f9:af:0b:88:1d:79:2c:81:a8:1c: f0:6e:73:a6:d2:2e:ce:b2:88:25:df:84:00:1e:8c:4f:a8:c8: 38:8c:95:71:80:97:94:49:c2:32:be:ea:57:f2:c6:a7:13:d2: eb:e2:64:bc:f8:a1:31:d4:05:95:94:d5:1a:ad:7c:9b:de:b9: a8:d5:8b:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyICxwlIzjbm7Mw2dCYhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMTI0ZDA0MTFhMjBmZDJiYjU0Njk3MGVhODAxMTZlZjI3 NmRiYWIwHhcNMjUxMjIxMTIwMDQwWhcNMjUxMjIyMTIwMDQwWjAzMTEwLwYDVQQD Eyg3M2U4Yjg5NmEzMTk1NTAwMjkzMGFjNTQxMmRhOWU3MTZiOWUyNDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcN9kpttz+ByscGMGYlpMnx78Oki mKvAiUeqOba7Li04wAloCP31Ct3W8f/LEH3PQ/hlnjYGoFvyM1P90QYHQ1Mcgbtb 8U65mVxuya0Bx3jkCN4iQs+bw0KGA89AJEf4i+JAfVYGAhhlmUQ2AhruIyUp9AFR ZWPssWlwgVczVWp8y13X/CUs7Cey7Pk4N6ajMJcqmu9HcUEW6dWosJcJxLIxdirc CWZR4T8rDrOqhaXolhQTM8li/+uVSUgW8EcdMzJCWW6Dx7qJ2wxSWaj3ZajJPJD7 3zMMklVD17HrHTihGMld+5s7cLLlUcl7ZmwUiC0dZDQfBTWUUXDs1AMaJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPouJajGVUAKTCsVBLannFrniRyMB8GA1UdIwQY MBaAFIMSTQQRog/Su1RpcOqAEW7ydturMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmIt ZmNmMGYxNTk0ZDJmLzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmItZmNmMGYxNTk0ZDJm LzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkohT3doD mYx2zoTCkCqWZoKx4h8WD7mYH1jI86+P/eoBh48qmDdDXYZXKMxdohpomWoTYKJX YJAUyI5hkGISpVZfPrX5isDi1fg/FRnT0p0u/WLr80V76iBOsvkOQHpdW8iMDhNn P1r+QPtx4EDSOe2J+OQI7U1IAyvpJkI9N/L/IDkdmHdHIeFK11/PyVlgS0l85QCv KO29H4X5mFGI4Km2eI9LC/ugEkxpSo5U+Q3i2ypgWS+Mu6ZVB8L5rwuIHXksgagc 8G5zptIuzrKIJd+EAB6MT6jIOIyVcYCXlEnCMr7qV/LGpxPS6+JkvPihMdQFlZTV Gq18m965qNWLBw== -----END CERTIFICATE-----Generated at Sun Dec 21 14:38:57 2025 by rpki-client