This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft File: GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft (raw, json) Hash identifier: 7oxp1olFtdiJxcBaeYBi/TvUISelWxepybK+uMpyorA= Subject key identifier: 1B:99:21:3B:5E:19:E2:72:B2:D5:73:0A:A3:5A:47:F7:06:E6:B8:84 Authority key identifier: 19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2 Certificate issuer: /CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2 Certificate serial: 019B318C6C61DA764FC4427F95F7D92981EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft Manifest number: 1622 Signing time: Thu 18 Dec 2025 13:00:44 +0000 Manifest this update: Thu 18 Dec 2025 13:00:44 +0000 Manifest next update: Fri 19 Dec 2025 13:00:44 +0000 Files and hashes: 1: GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl (hash: FmVqcLR49aQhpBkcfiz/aD+MkhzibBMbfEmzWbcMLzM=) 2: T6BmY5F3A76c40Avg5lTJbK0mkw.roa (hash: v+5wW5iBlMaLk7U/wCyygoAJ3jQnHxe9Wti6cfnchrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:6c:61:da:76:4f:c4:42:7f:95:f7:d9:29:81:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2 Validity Not Before: Dec 18 13:00:44 2025 GMT Not After : Dec 19 13:00:44 2025 GMT Subject: CN=1b99213b5e19e272b2d5730aa35a47f706e6b884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9d:ec:36:4d:5f:89:72:59:a8:3a:f4:78:7f: 71:75:a9:13:a2:62:18:6e:05:d9:b3:4a:83:59:42: 3d:e6:07:4d:02:7d:fd:16:85:fa:d2:6d:ab:8b:77: 88:a0:a8:c2:0f:6c:99:e7:16:aa:71:0e:68:90:f0: e4:02:e1:73:ef:7d:ae:f2:79:b1:22:73:df:0e:5f: a9:52:db:91:4b:98:1e:eb:98:09:74:98:72:a5:88: 08:f5:eb:3f:2d:62:17:42:1f:1f:46:3b:03:88:a6: be:9e:29:19:56:db:62:74:ab:f5:9f:f9:b3:94:ba: 27:2c:79:07:ab:50:10:f2:a5:b2:d7:e0:73:03:14: 22:94:5c:84:68:3e:7a:45:94:78:dc:79:9f:6c:58: 4f:22:f2:6b:47:bd:f3:16:9e:ca:1e:92:93:7d:4c: 9d:39:a9:33:72:2e:01:05:c9:78:d5:09:cd:43:1e: 53:5d:c4:01:0b:95:ac:f1:b5:fe:95:96:47:45:84: 34:47:b4:d1:fa:40:6c:d0:85:18:eb:d6:39:14:55: 73:08:cd:fe:38:e9:83:72:97:97:72:c1:90:68:03: d3:1a:e8:ab:87:06:fd:9d:00:5e:64:53:1b:9f:30: 52:97:db:52:fa:28:49:9e:ad:ba:20:4a:50:32:17: 62:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:99:21:3B:5E:19:E2:72:B2:D5:73:0A:A3:5A:47:F7:06:E6:B8:84 X509v3 Authority Key Identifier: keyid:19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:38:f4:b5:ca:bd:78:a1:d4:21:bd:90:2e:e0:39:9b:48:08: cb:62:e9:ce:7c:0b:d2:7f:40:bd:a4:11:54:64:c5:20:86:6b: ee:2d:9a:ef:2c:e2:15:07:9d:72:e6:6b:fb:17:9a:a6:ca:f3: b0:64:32:80:93:72:bf:7e:65:28:fe:23:0e:f7:0a:f1:0a:24: 27:d8:97:8f:84:42:89:d7:f7:96:b6:bd:a1:a1:03:3a:12:6e: 66:1d:12:43:07:07:6b:e4:5f:f7:30:0a:51:1d:1d:2c:4c:12: b0:58:7d:ad:c4:c7:b6:72:1c:61:11:c2:74:22:3a:ef:d0:35: 6e:42:81:d2:49:2c:9a:35:30:23:f5:fe:5e:bf:b6:46:06:43: 08:fa:67:1b:26:2c:79:01:3d:8b:bb:07:b3:e9:24:be:9a:60: f9:88:63:a7:5c:db:2e:e9:96:e1:aa:76:12:33:24:af:f2:7c: b3:ef:58:da:7d:a4:d5:b9:49:80:bc:75:64:51:73:39:24:c4: e6:a8:9c:76:54:65:cf:d1:cf:05:84:af:99:8f:bd:82:01:02: 87:77:10:1e:c5:09:67:96:99:fb:a2:f0:8f:12:2e:b4:fa:25: df:19:3f:2f:82:68:c7:40:71:c7:35:d9:e6:10:d6:ea:f6:84: a3:d2:32:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjGxh2nZPxEJ/lffZKYHvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZjVlMDRiNjU1NWYxZTJjOTJkN2E0MWFjMTA2YTc1ZGVh OTI4YTIwHhcNMjUxMjE4MTMwMDQ0WhcNMjUxMjE5MTMwMDQ0WjAzMTEwLwYDVQQD EygxYjk5MjEzYjVlMTllMjcyYjJkNTczMGFhMzVhNDdmNzA2ZTZiODg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp3sNk1fiXJZqDr0eH9xdakTomIY bgXZs0qDWUI95gdNAn39FoX60m2ri3eIoKjCD2yZ5xaqcQ5okPDkAuFz732u8nmx InPfDl+pUtuRS5ge65gJdJhypYgI9es/LWIXQh8fRjsDiKa+nikZVttidKv1n/mz lLonLHkHq1AQ8qWy1+BzAxQilFyEaD56RZR43HmfbFhPIvJrR73zFp7KHpKTfUyd Oakzci4BBcl41QnNQx5TXcQBC5Ws8bX+lZZHRYQ0R7TR+kBs0IUY69Y5FFVzCM3+ OOmDcpeXcsGQaAPTGuirhwb9nQBeZFMbnzBSl9tS+ihJnq26IEpQMhdiVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuZITteGeJystVzCqNaR/cG5riEMB8GA1UdIwQY MBaAFBn14EtlVfHiyS16QawQanXeqSiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMmU5MjUtNmZlNi00YjI2LWE0OTgt NzUzMDRmOWY1YzI0LzEvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zMmU5MjUtNmZlNi00YjI2LWE0OTgtNzUzMDRmOWY1YzI0 LzEvR2ZYZ1MyVlY4ZUxKTFhwQnJCQnFkZDZwS0tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjj0tcq9 eKHUIb2QLuA5m0gIy2LpznwL0n9AvaQRVGTFIIZr7i2a7yziFQedcuZr+xeapsrz sGQygJNyv35lKP4jDvcK8QokJ9iXj4RCidf3lra9oaEDOhJuZh0SQwcHa+Rf9zAK UR0dLEwSsFh9rcTHtnIcYRHCdCI679A1bkKB0kksmjUwI/X+Xr+2RgZDCPpnGyYs eQE9i7sHs+kkvppg+Yhjp1zbLumW4ap2EjMkr/J8s+9Y2n2k1blJgLx1ZFFzOSTE 5qicdlRlz9HPBYSvmY+9ggECh3cQHsUJZ5aZ+6LwjxIutPol3xk/L4Jox0BxxzXZ 5hDW6vaEo9IyPg== -----END CERTIFICATE-----Generated at Thu Dec 18 17:34:07 2025 by rpki-client