This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft File: g_gpRGn7euwmAbsDdy0BVvRwt00.mft (raw, json) Hash identifier: ds9aAkPia7qh2MdVmjkQ2syCTwbebIK+wshDAd8bgYI= Subject key identifier: 88:A3:4A:09:E7:F5:8E:E4:9B:4F:E9:DF:1F:43:E2:B3:4B:03:57:C1 Authority key identifier: 83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D Certificate issuer: /CN=83f8294469fb7aec2601bb03772d0156f470b74d Certificate serial: 019B6EEAD9F77EADF4E6FC8A8E455FACE831 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 11:00:43 +0000 Manifest this update: Tue 30 Dec 2025 11:00:43 +0000 Manifest next update: Wed 31 Dec 2025 11:00:43 +0000 Files and hashes: 1: atkABp03ezo3IQf9p_BdcUMTGKY.roa (hash: XIGewf/YhXuM1/3dqCaqTKBoy+0/E1uQhatEfe1jkfI=) 2: g_gpRGn7euwmAbsDdy0BVvRwt00.crl (hash: g7vfpDsMLbO2ULcUWTS0ZTHK3orMtgXkZ4I517gULGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:ea:d9:f7:7e:ad:f4:e6:fc:8a:8e:45:5f:ac:e8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83f8294469fb7aec2601bb03772d0156f470b74d Validity Not Before: Dec 30 11:00:43 2025 GMT Not After : Dec 31 11:00:43 2025 GMT Subject: CN=88a34a09e7f58ee49b4fe9df1f43e2b34b0357c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:15:cd:33:81:e0:ef:81:67:af:0d:95:b6:49: c1:cd:b4:80:b0:0c:14:7e:b7:f1:ab:92:ec:a7:15: 03:2e:56:f5:3a:e6:c6:f8:4c:fa:f0:38:d9:6d:5c: 5f:3e:b3:ae:75:ed:2f:90:3d:00:d6:12:f1:3e:f4: dd:53:88:63:83:51:f0:d2:5e:96:7c:85:f9:6b:c0: 9d:27:5c:92:5a:23:d4:21:11:db:23:47:93:07:76: 29:03:1e:10:7a:9b:3a:8e:e0:72:d6:9e:74:56:be: 3e:06:39:4e:ce:05:2b:cf:7a:20:94:99:8b:57:b5: 1d:97:e3:f9:63:94:9d:61:fd:d5:a4:ad:b4:ce:63: 10:bf:a3:6f:a0:cd:49:0d:df:c1:7d:e4:ba:b8:b1: 42:70:ae:d9:fe:47:68:59:f3:54:ef:d2:8d:6c:f3: 57:ca:bb:c8:ac:0b:a6:bc:eb:d1:33:84:46:fc:22: 69:14:ae:f8:9f:06:f0:51:6d:84:87:0f:79:0f:a8: f6:85:2a:d8:9e:a9:46:2e:36:47:b1:32:93:9a:2d: 79:cc:e7:b4:1e:9f:26:c2:93:e3:28:c4:f1:31:a8: 80:42:72:8b:f9:f9:3d:3f:b8:ac:20:a0:13:24:23: bd:91:2a:79:47:eb:17:d1:ae:b0:db:fc:bb:d7:1c: ea:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A3:4A:09:E7:F5:8E:E4:9B:4F:E9:DF:1F:43:E2:B3:4B:03:57:C1 X509v3 Authority Key Identifier: keyid:83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4e:39:ea:de:bf:cb:23:8d:69:71:5b:cd:a3:44:4a:ba:b4: 86:ad:ba:0e:cb:d9:69:e5:ad:6f:1b:fc:03:64:68:18:56:05: 81:85:d1:47:bd:c8:c0:c8:c8:b8:29:78:a4:27:d7:00:f8:e6: f7:04:1a:1c:4b:6e:e7:13:a3:58:fe:4b:cf:c6:94:d0:01:c8: 7c:b2:d3:a7:ee:40:b7:fb:4c:9c:c2:6f:d0:68:2a:9e:68:8f: c0:b4:ee:3e:22:12:c2:fe:35:ec:fc:53:d2:bf:03:f7:ab:64: fb:7b:d5:14:4c:87:9b:62:62:42:2c:0a:e0:c5:56:8f:f8:6e: 65:d0:01:21:50:6d:67:83:e2:4c:71:d1:11:38:1b:dd:db:2b: 3e:93:ab:bc:e5:4d:32:9c:f3:47:11:19:89:94:10:d6:a3:aa: 94:9c:8f:97:0d:a7:45:5b:3d:b8:38:f8:3f:a0:33:c8:b3:ac: 1b:71:68:99:ef:3b:f2:f0:5e:a1:bc:dc:0b:7e:f0:d8:9c:d2: 8e:5d:d8:b4:6a:f0:4d:2f:77:a9:5a:aa:7f:cd:14:9f:c7:dd: f6:83:db:13:48:29:0e:ae:4f:96:24:c5:52:7c:52:63:58:63: 38:94:64:90:1e:0b:de:a9:ed:71:05:33:60:55:ce:25:bb:aa: 53:ef:5c:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtu6tn3fq305vyKjkVfrOgxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZjgyOTQ0NjlmYjdhZWMyNjAxYmIwMzc3MmQwMTU2ZjQ3 MGI3NGQwHhcNMjUxMjMwMTEwMDQzWhcNMjUxMjMxMTEwMDQzWjAzMTEwLwYDVQQD Eyg4OGEzNGEwOWU3ZjU4ZWU0OWI0ZmU5ZGYxZjQzZTJiMzRiMDM1N2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRXNM4Hg74Fnrw2VtknBzbSAsAwU frfxq5LspxUDLlb1OubG+Ez68DjZbVxfPrOude0vkD0A1hLxPvTdU4hjg1Hw0l6W fIX5a8CdJ1ySWiPUIRHbI0eTB3YpAx4Qeps6juBy1p50Vr4+BjlOzgUrz3oglJmL V7Udl+P5Y5SdYf3VpK20zmMQv6NvoM1JDd/BfeS6uLFCcK7Z/kdoWfNU79KNbPNX yrvIrAumvOvRM4RG/CJpFK74nwbwUW2Ehw95D6j2hSrYnqlGLjZHsTKTmi15zOe0 Hp8mwpPjKMTxMaiAQnKL+fk9P7isIKATJCO9kSp5R+sX0a6w2/y71xzqEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIijSgnn9Y7km0/p3x9D4rNLA1fBMB8GA1UdIwQY MBaAFIP4KURp+3rsJgG7A3ctAVb0cLdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19ncFJHbjdldXdtQWJzRGR5MEJWdlJ3dDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NjFmMzItODFmNC00ZDY0LTg2MTAt NTRkZTdhNmNiM2IxLzEvZ19ncFJHbjdldXdtQWJzRGR5MEJWdlJ3dDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My84NjFmMzItODFmNC00ZDY0LTg2MTAtNTRkZTdhNmNiM2Ix LzEvZ19ncFJHbjdldXdtQWJzRGR5MEJWdlJ3dDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALU456t6/ yyONaXFbzaNESrq0hq26DsvZaeWtbxv8A2RoGFYFgYXRR73IwMjIuCl4pCfXAPjm 9wQaHEtu5xOjWP5Lz8aU0AHIfLLTp+5At/tMnMJv0GgqnmiPwLTuPiISwv417PxT 0r8D96tk+3vVFEyHm2JiQiwK4MVWj/huZdABIVBtZ4PiTHHRETgb3dsrPpOrvOVN MpzzRxEZiZQQ1qOqlJyPlw2nRVs9uDj4P6AzyLOsG3Fome878vBeobzcC37w2JzS jl3YtGrwTS93qVqqf80Un8fd9oPbE0gpDq5PliTFUnxSY1hjOJRkkB4L3qntcQUz YFXOJbuqU+9cFA== -----END CERTIFICATE-----Generated at Tue Dec 30 14:56:21 2025 by rpki-client