This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft File: GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft (raw, json) Hash identifier: BHOxGrymsRTKlvmJRfYLEe6pKzsXalggz6cBHsToIPk= Subject key identifier: 65:74:66:E2:F9:E1:5C:0F:9F:26:15:10:16:50:BF:FC:86:F7:F7:56 Authority key identifier: 19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2 Certificate issuer: /CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2 Certificate serial: 019B5C09794825492645F5C1A20FDD5282D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft Manifest number: 1638 Signing time: Fri 26 Dec 2025 19:01:23 +0000 Manifest this update: Fri 26 Dec 2025 19:01:23 +0000 Manifest next update: Sat 27 Dec 2025 19:01:23 +0000 Files and hashes: 1: GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl (hash: dURgTAEePN+XE1TI6uLV0lYgQ3Wa+glVqkXWpM4eq90=) 2: T6BmY5F3A76c40Avg5lTJbK0mkw.roa (hash: v+5wW5iBlMaLk7U/wCyygoAJ3jQnHxe9Wti6cfnchrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 19:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:79:48:25:49:26:45:f5:c1:a2:0f:dd:52:82:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2 Validity Not Before: Dec 26 19:01:23 2025 GMT Not After : Dec 27 19:01:23 2025 GMT Subject: CN=657466e2f9e15c0f9f2615101650bffc86f7f756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f0:2a:01:87:8a:14:95:1a:b4:fb:4d:39:6f: c9:e0:5c:6d:c3:13:99:2e:ae:7e:65:0d:af:25:05: e4:1b:c2:00:00:58:dc:9c:5f:96:a6:9e:74:f1:f1: 80:aa:7b:17:75:79:a0:03:f3:09:f6:df:68:25:61: 6e:25:e9:b8:3c:9e:df:6c:c8:10:fa:61:85:1d:e3: 74:f3:4c:91:07:e8:36:e9:8e:b0:40:d6:d4:63:ec: 53:d1:20:30:b4:c7:42:c6:ab:69:aa:a8:1e:41:49: 86:5a:64:ff:73:ef:f2:47:5e:d8:41:5d:2b:a5:b3: 4a:2b:37:33:cd:a9:17:e0:33:3d:4e:cc:67:87:b9: 1a:69:5b:ff:d6:40:dd:8a:6f:03:b6:35:b0:37:a0: 2d:1f:3c:17:54:a7:83:31:60:d3:66:9e:6c:5d:aa: 13:0e:93:3b:e1:f1:81:34:e4:25:bd:5a:e1:58:aa: 07:f7:df:f8:64:cb:77:fd:c8:ff:fe:20:c3:5c:01: de:cc:cf:a7:fe:8b:9b:36:8d:af:ba:34:4d:fa:6d: fd:e1:a1:f2:f8:6f:14:0b:f4:9c:95:e0:5f:76:ba: e3:71:1d:d5:90:5b:54:b1:b4:c9:2e:50:81:9c:04: 4b:a7:41:c5:eb:5a:b0:4f:fb:89:fd:12:4c:d1:5c: e4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:74:66:E2:F9:E1:5C:0F:9F:26:15:10:16:50:BF:FC:86:F7:F7:56 X509v3 Authority Key Identifier: keyid:19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:35:04:a4:ad:e9:a0:60:b1:f4:9f:80:57:10:ce:dd:ba:40: 25:b5:48:a3:20:d5:7f:c1:70:8c:c4:81:f0:8c:8e:90:e5:d0: d2:8e:fc:7d:b9:90:49:94:ba:e0:ec:ba:5a:e0:34:e5:29:4f: b6:95:61:d7:6b:8e:87:d6:f2:85:24:31:60:31:e5:25:24:39: b1:7c:07:91:2f:f6:e0:a9:af:3c:e5:64:5f:67:cd:a0:10:e6: 2f:03:b2:77:c7:e9:9e:5d:e2:4b:94:88:bd:c4:b6:92:93:fc: f9:88:9d:13:b1:f8:3d:f7:80:49:78:9b:32:34:0d:c0:b3:f5: 85:27:86:3d:6d:55:57:43:35:b9:f1:93:39:d3:06:a9:28:24: 12:d7:ba:3e:1a:90:a1:93:79:a7:fe:a9:a3:e4:e0:55:32:b8: 02:db:e5:57:fd:cf:0a:2a:9f:52:7e:c9:20:a3:e2:5e:82:ba: 84:80:5e:2d:e0:d4:41:b2:2f:59:30:eb:43:ee:a6:0c:21:25: 23:2e:3c:c8:c3:38:e5:78:f9:6d:87:60:c3:e3:5e:f4:9f:bc: fa:fc:cd:c5:68:db:91:07:37:96:b4:57:eb:9b:03:3d:b4:32: 51:77:2e:fe:ba:e5:50:5e:7f:11:58:8e:9c:7a:40:ca:5e:7c: af:56:12:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCXlIJUkmRfXBog/dUoLSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZjVlMDRiNjU1NWYxZTJjOTJkN2E0MWFjMTA2YTc1ZGVh OTI4YTIwHhcNMjUxMjI2MTkwMTIzWhcNMjUxMjI3MTkwMTIzWjAzMTEwLwYDVQQD Eyg2NTc0NjZlMmY5ZTE1YzBmOWYyNjE1MTAxNjUwYmZmYzg2ZjdmNzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfAqAYeKFJUatPtNOW/J4FxtwxOZ Lq5+ZQ2vJQXkG8IAAFjcnF+Wpp508fGAqnsXdXmgA/MJ9t9oJWFuJem4PJ7fbMgQ +mGFHeN080yRB+g26Y6wQNbUY+xT0SAwtMdCxqtpqqgeQUmGWmT/c+/yR17YQV0r pbNKKzczzakX4DM9Tsxnh7kaaVv/1kDdim8DtjWwN6AtHzwXVKeDMWDTZp5sXaoT DpM74fGBNOQlvVrhWKoH99/4ZMt3/cj//iDDXAHezM+n/oubNo2vujRN+m394aHy +G8UC/ScleBfdrrjcR3VkFtUsbTJLlCBnARLp0HF61qwT/uJ/RJM0VzkEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGV0ZuL54VwPnyYVEBZQv/yG9/dWMB8GA1UdIwQY MBaAFBn14EtlVfHiyS16QawQanXeqSiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMmU5MjUtNmZlNi00YjI2LWE0OTgt NzUzMDRmOWY1YzI0LzEvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zMmU5MjUtNmZlNi00YjI2LWE0OTgtNzUzMDRmOWY1YzI0 LzEvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjUEpK3p oGCx9J+AVxDO3bpAJbVIoyDVf8FwjMSB8IyOkOXQ0o78fbmQSZS64Oy6WuA05SlP tpVh12uOh9byhSQxYDHlJSQ5sXwHkS/24KmvPOVkX2fNoBDmLwOyd8fpnl3iS5SI vcS2kpP8+YidE7H4PfeASXibMjQNwLP1hSeGPW1VV0M1ufGTOdMGqSgkEte6PhqQ oZN5p/6po+TgVTK4AtvlV/3PCiqfUn7JIKPiXoK6hIBeLeDUQbIvWTDrQ+6mDCEl Iy48yMM45Xj5bYdgw+Ne9J+8+vzNxWjbkQc3lrRX65sDPbQyUXcu/rrlUF5/EViO nHpAyl58r1YSEQ== -----END CERTIFICATE-----Generated at Sat Dec 27 04:03:04 2025 by rpki-client