This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json) Hash identifier: 5SYYB6T1niTRi5/QFhc+Gc424BotwTK35gANwR5Xha4= Subject key identifier: FB:58:D0:37:62:50:92:2C:35:84:D2:42:F0:0C:6C:71:9E:F9:17:7B Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0 Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0 Certificate serial: 019B38A242872E29447D03A608D7C498EA93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft Manifest number: 0BAF Signing time: Fri 19 Dec 2025 22:01:56 +0000 Manifest this update: Fri 19 Dec 2025 22:01:56 +0000 Manifest next update: Sat 20 Dec 2025 22:01:56 +0000 Files and hashes: 1: XTZ-6WhmzXiDDwFWajhChN4966c.roa (hash: 76eYyVPhyFyHfOEPHeaphAj0SWfwnKjZwUHP7osL/Jg=) 2: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: QzbF4K/AI8u6lHR73aR9tuwsscpeB3A3fcp16Itkt3o=) 3: kTc3tdsyRqEwIQUrDzGOak8nANc.roa (hash: 7cesO8GKLYeXhtn4E2bVxqR/wKRQ+h04HAytGr5/XYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:42:87:2e:29:44:7d:03:a6:08:d7:c4:98:ea:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0 Validity Not Before: Dec 19 22:01:56 2025 GMT Not After : Dec 20 22:01:56 2025 GMT Subject: CN=fb58d0376250922c3584d242f00c6c719ef9177b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1c:27:53:8a:f5:f5:64:4a:8b:8c:ae:ac:a7: e6:b7:de:15:51:a5:23:ba:d0:af:20:50:ee:d8:bc: c4:b2:22:c5:73:ba:f5:f5:12:5b:c8:84:9c:50:1c: 39:fd:6d:c0:79:cd:40:02:15:4c:1e:99:e1:00:e9: 2c:53:96:0e:14:9e:1b:e4:3c:89:0c:8e:75:f0:2d: b0:aa:26:a3:39:5d:50:70:f0:b8:a3:27:96:75:1f: 71:b6:1a:bd:a1:f2:3b:f8:fb:c0:17:f0:33:a9:ed: d9:0a:4a:21:0a:b8:54:3e:27:f0:a6:92:3b:18:77: c6:03:4b:53:9f:b2:f6:51:22:6c:9b:70:7b:70:b7: 87:6b:4d:10:09:91:4c:37:34:28:28:e6:c0:ec:ef: d3:c8:f1:c7:dc:dc:d4:91:5d:f5:12:93:5d:61:30: 61:ac:90:33:81:53:b6:ff:f9:12:46:da:c9:8a:b0: 8a:3f:eb:c3:43:68:d0:a5:30:22:a2:bb:02:7d:50: 20:d0:2a:c3:17:7d:0f:b1:7c:44:69:de:00:9c:1e: 43:65:88:d5:59:94:82:b7:76:2b:65:18:5e:a0:53: bb:48:98:ba:3e:05:0d:08:57:8a:32:29:68:4e:1d: 71:e7:c7:80:55:9e:6d:ab:f1:3a:de:cc:05:d3:b5: b2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:58:D0:37:62:50:92:2C:35:84:D2:42:F0:0C:6C:71:9E:F9:17:7B X509v3 Authority Key Identifier: keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b2:b0:9e:5c:e3:9c:12:db:c7:9e:d3:0c:04:84:9d:08:65: e1:c9:58:0f:0e:c2:e3:60:31:27:7f:c4:b4:70:7a:5c:1e:62: 0f:66:ca:2b:90:8c:9b:8d:be:d9:31:cc:4e:95:6a:8b:93:12: cf:8b:72:8c:4d:3e:c6:13:40:ec:f8:fe:55:ac:0d:02:3c:42: d1:80:90:0e:09:a4:33:12:32:84:3e:fc:45:24:92:e1:ae:ec: 0c:43:a2:ae:7d:bc:a2:ac:03:39:c2:7f:04:19:bd:00:2e:3f: 09:e8:29:f3:f0:cf:70:0b:3f:87:3c:a6:28:58:55:da:d4:8b: f7:48:67:b3:71:cf:53:84:cf:df:97:56:bf:9f:50:e2:8a:63: b4:67:22:34:c2:fd:00:b5:36:e2:c7:e0:e2:20:28:20:9d:f8: 5e:4b:67:fb:3a:d4:4a:2f:00:65:90:b3:a4:a3:44:12:f9:a2: 9b:39:77:b2:f9:16:89:af:4d:67:77:d1:0e:aa:7b:8c:58:61: 1e:a8:6b:33:51:cc:4a:7c:f8:df:9f:4a:0f:f0:99:60:ef:cd: 82:83:4a:80:f5:7b:99:14:df:30:c0:67:6b:3b:9b:1e:a6:f1: b2:a8:d0:e1:2a:f1:74:c8:d9:a3:38:30:7f:2d:d6:c4:4a:70: 80:a7:f8:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4okKHLilEfQOmCNfEmOqTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZTAxNGYxYzhjYTM5NjZhOTNlZjM5ZGJjNjEyZGFhYzBk ODNkYzAwHhcNMjUxMjE5MjIwMTU2WhcNMjUxMjIwMjIwMTU2WjAzMTEwLwYDVQQD EyhmYjU4ZDAzNzYyNTA5MjJjMzU4NGQyNDJmMDBjNmM3MTllZjkxNzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBwnU4r19WRKi4yurKfmt94VUaUj utCvIFDu2LzEsiLFc7r19RJbyIScUBw5/W3Aec1AAhVMHpnhAOksU5YOFJ4b5DyJ DI518C2wqiajOV1QcPC4oyeWdR9xthq9ofI7+PvAF/Azqe3ZCkohCrhUPifwppI7 GHfGA0tTn7L2USJsm3B7cLeHa00QCZFMNzQoKObA7O/TyPHH3NzUkV31EpNdYTBh rJAzgVO2//kSRtrJirCKP+vDQ2jQpTAiorsCfVAg0CrDF30PsXxEad4AnB5DZYjV WZSCt3YrZRheoFO7SJi6PgUNCFeKMiloTh1x58eAVZ5tq/E63swF07WyXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtY0DdiUJIsNYTSQvAMbHGe+Rd7MB8GA1UdIwQY MBaAFILgFPHIyjlmqT7znbxhLarA2D3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGIt NjZkODBlZDA5YmM3LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGItNjZkODBlZDA5YmM3 LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLKwnlzj nBLbx57TDASEnQhl4clYDw7C42AxJ3/EtHB6XB5iD2bKK5CMm42+2THMTpVqi5MS z4tyjE0+xhNA7Pj+VawNAjxC0YCQDgmkMxIyhD78RSSS4a7sDEOirn28oqwDOcJ/ BBm9AC4/Cegp8/DPcAs/hzymKFhV2tSL90hns3HPU4TP35dWv59Q4opjtGciNML9 ALU24sfg4iAoIJ34Xktn+zrUSi8AZZCzpKNEEvmimzl3svkWia9NZ3fRDqp7jFhh HqhrM1HMSnz4359KD/CZYO/NgoNKgPV7mRTfMMBnazubHqbxsqjQ4SrxdMjZozgw fy3WxEpwgKf45Q== -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:45 2025 by rpki-client