This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft File: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json) Hash identifier: Ii0II5Qvn9iasZ9bzayS9yBYTwNeB1uvQtXU7QUo/L8= Subject key identifier: 7D:AA:B4:52:B9:59:9F:37:34:0B:7F:3E:37:DF:57:6C:90:08:F8:6B Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91 Certificate issuer: /CN=194e32a82e98f22d939ff9984455813be2ba6a91 Certificate serial: 019B44DD1DEA1777961A1394BC23F1D46BED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft Manifest number: 02AA Signing time: Mon 22 Dec 2025 07:01:40 +0000 Manifest this update: Mon 22 Dec 2025 07:01:40 +0000 Manifest next update: Tue 23 Dec 2025 07:01:40 +0000 Files and hashes: 1: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: wApV2XylBPSe4P/eTy/wk7VY9ASY3DYTqTKT72fQNI8=) 2: UfSgUAAlY9L-pxjy9r66ZUMHciI.roa (hash: lfZloxngOlvdGd9PgYcQqf9/LWwVeSvhKaVHeCHu4Rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dd:1d:ea:17:77:96:1a:13:94:bc:23:f1:d4:6b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91 Validity Not Before: Dec 22 07:01:40 2025 GMT Not After : Dec 23 07:01:40 2025 GMT Subject: CN=7daab452b9599f37340b7f3e37df576c9008f86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a9:36:5c:5f:cc:50:f8:bf:56:78:e5:76:1c: 6b:86:bd:ae:ef:ec:63:04:ac:e7:c5:4f:87:32:7b: 5f:94:a6:3a:b3:48:49:07:76:43:19:09:67:78:79: 45:d2:91:11:fa:86:a0:f8:83:1f:b4:ca:78:17:dd: df:4b:59:78:8f:f7:27:7c:d0:ee:e8:ad:63:44:0e: 37:cf:ae:0c:a4:7b:e0:8f:47:cd:0a:55:a2:50:a9: b7:13:08:1f:7d:21:1b:03:9a:5c:24:16:02:a3:1b: 0b:a3:58:c1:cb:98:17:b1:8a:59:61:bc:80:21:3f: d0:aa:dd:55:12:77:41:9e:54:09:6a:ef:74:e0:a0: 81:4c:47:f0:e1:ef:0d:e7:52:ce:28:cd:69:29:d5: 03:9f:28:9d:b3:f4:2b:6b:f7:94:a0:34:7f:94:d0: b1:80:e7:1b:3e:fa:26:a6:3b:24:fa:20:6d:2e:ba: d4:83:bf:14:ce:c2:30:06:96:09:84:bd:78:3c:5d: 36:e8:9f:cd:b5:21:c9:e9:4d:ba:f6:d7:69:28:89: 51:cc:fa:bf:63:b6:01:8a:76:b6:a6:6b:6c:e5:a7: 83:ca:d5:0f:d7:6c:9f:18:cc:f8:9e:97:34:8b:8c: 93:a4:00:cf:8b:4e:71:7e:26:da:6b:da:f2:76:dc: 39:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AA:B4:52:B9:59:9F:37:34:0B:7F:3E:37:DF:57:6C:90:08:F8:6B X509v3 Authority Key Identifier: keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:72:e0:26:2b:4b:5d:d8:3e:80:3e:5e:5c:c1:48:01:75:9e: dd:d8:4d:f5:ce:f3:35:13:ae:5e:76:f0:66:5f:07:6e:e3:12: 99:12:b8:84:97:60:8f:fb:a1:84:37:64:93:24:96:60:21:b6: 6a:3a:e9:ab:04:87:cf:16:ac:87:cd:58:21:0c:99:aa:86:04: 5f:3a:63:80:3a:48:c9:e2:2e:4b:58:82:cd:22:78:1b:9b:64: fb:32:03:59:48:03:45:dc:ae:50:d5:96:cd:bb:8b:46:b6:a0: ce:89:78:f7:61:96:92:dd:f3:0b:92:9b:ec:6c:13:07:73:8a: 07:a5:dd:95:e4:ba:38:67:fb:5d:f2:1c:ec:33:9a:31:3f:48: 20:d8:02:f3:a2:9a:5a:a3:db:7f:d6:46:ba:24:84:91:b3:f4: 28:7d:59:ab:3a:b3:5c:88:66:41:38:bb:4b:0e:7b:2c:b7:13: bb:1a:ed:d0:73:61:07:69:3a:8b:62:75:d6:06:93:08:2a:5e: 57:a9:dd:18:bb:0f:e7:b3:2e:d4:0e:be:d8:51:4f:49:11:a5: 6e:e9:4b:a7:07:25:27:1e:64:0e:34:53:25:02:c6:3d:57:9a: 73:3b:2f:fb:69:30:6e:77:12:b3:12:69:4e:b7:f0:18:0d:12: f1:71:53:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3R3qF3eWGhOUvCPx1GvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NGUzMmE4MmU5OGYyMmQ5MzlmZjk5ODQ0NTU4MTNiZTJi YTZhOTEwHhcNMjUxMjIyMDcwMTQwWhcNMjUxMjIzMDcwMTQwWjAzMTEwLwYDVQQD Eyg3ZGFhYjQ1MmI5NTk5ZjM3MzQwYjdmM2UzN2RmNTc2YzkwMDhmODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKk2XF/MUPi/Vnjldhxrhr2u7+xj BKznxU+HMntflKY6s0hJB3ZDGQlneHlF0pER+oag+IMftMp4F93fS1l4j/cnfNDu 6K1jRA43z64MpHvgj0fNClWiUKm3EwgffSEbA5pcJBYCoxsLo1jBy5gXsYpZYbyA IT/Qqt1VEndBnlQJau904KCBTEfw4e8N51LOKM1pKdUDnyids/Qra/eUoDR/lNCx gOcbPvompjsk+iBtLrrUg78UzsIwBpYJhL14PF026J/NtSHJ6U269tdpKIlRzPq/ Y7YBina2pmts5aeDytUP12yfGMz4npc0i4yTpADPi05xfibaa9rydtw5zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2qtFK5WZ83NAt/PjffV2yQCPhrMB8GA1UdIwQY MBaAFBlOMqgumPItk5/5mERVgTviumqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mMzZiOWMtN2UzNy00ZjE4LTg4NjUt MTNlNzNmNjYzOTdiLzEvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mMzZiOWMtN2UzNy00ZjE4LTg4NjUtMTNlNzNmNjYzOTdi LzEvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenLgJitL Xdg+gD5eXMFIAXWe3dhN9c7zNROuXnbwZl8HbuMSmRK4hJdgj/uhhDdkkySWYCG2 ajrpqwSHzxash81YIQyZqoYEXzpjgDpIyeIuS1iCzSJ4G5tk+zIDWUgDRdyuUNWW zbuLRragzol492GWkt3zC5Kb7GwTB3OKB6XdleS6OGf7XfIc7DOaMT9IINgC86Ka WqPbf9ZGuiSEkbP0KH1ZqzqzXIhmQTi7Sw57LLcTuxrt0HNhB2k6i2J11gaTCCpe V6ndGLsP57Mu1A6+2FFPSRGlbulLpwclJx5kDjRTJQLGPVeaczsv+2kwbncSsxJp TrfwGA0S8XFTjQ== -----END CERTIFICATE-----Generated at Mon Dec 22 17:09:01 2025 by rpki-client