This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft File: gV_CISVyYlbWo189oo91E90xwf4.mft (raw, json) Hash identifier: pGGJNaANmJoFjKfczBTQgOxHG9t5EdM8P4+JbeNUab8= Subject key identifier: 22:9A:94:E8:33:46:09:29:0C:FD:0D:D0:D5:17:27:E3:EC:4C:BB:88 Authority key identifier: 81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE Certificate issuer: /CN=815fc22125726256d6a35f3da28f7513dd31c1fe Certificate serial: 019B3D59F020404CABA6507AC983250B4468 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft Manifest number: 1719 Signing time: Sat 20 Dec 2025 20:01:02 +0000 Manifest this update: Sat 20 Dec 2025 20:01:02 +0000 Manifest next update: Sun 21 Dec 2025 20:01:02 +0000 Files and hashes: 1: aBrEW06-xKv77MgMEwK2_lYbz-I.roa (hash: RP6KdM7YV2WY/3+umq6rKSdZ3FIW7gCCmbirjcfrx/0=) 2: gV_CISVyYlbWo189oo91E90xwf4.crl (hash: VWmgfMMk+0wwW5mPRg9MHPUyjrCdt1g7AuWUJIpcLBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:f0:20:40:4c:ab:a6:50:7a:c9:83:25:0b:44:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=815fc22125726256d6a35f3da28f7513dd31c1fe Validity Not Before: Dec 20 20:01:02 2025 GMT Not After : Dec 21 20:01:02 2025 GMT Subject: CN=229a94e8334609290cfd0dd0d51727e3ec4cbb88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:84:6b:92:c0:2f:40:08:2e:16:64:d5:32:03: 6a:8c:4b:d1:62:cb:ff:85:4a:c2:88:41:b7:17:c2: bd:84:01:81:68:93:5a:b6:0b:95:3b:4b:41:6b:e4: 26:e4:fb:7e:74:96:48:82:3b:e0:7a:1e:fa:9a:40: de:2b:98:f7:55:ea:2a:dc:d9:2c:a0:3a:36:e4:be: e0:69:e1:9f:f1:ee:75:42:ac:88:76:48:65:9d:8c: e8:f0:ea:f9:4b:0b:bf:f3:99:d7:86:cc:6f:ab:96: 85:52:bf:1f:67:8e:99:c7:59:32:f5:63:a3:36:60: 56:84:a9:0c:08:a8:29:76:a0:70:8a:ca:77:10:62: 1d:7c:2c:64:a2:08:e3:e7:da:7c:a4:da:35:e8:f1: ff:dd:d5:4b:ea:ff:da:2a:bd:ce:0d:e0:dc:b0:95: 06:f1:00:5d:bd:9c:58:a6:da:cb:b2:f0:92:20:da: 4b:66:52:7b:c8:3c:55:2a:cf:6e:2a:ed:01:ac:bf: 39:92:23:3e:7a:39:6f:64:81:2f:b2:66:4b:26:71: 29:a5:4d:27:69:67:47:9a:d5:1f:c2:fa:33:ed:66: 54:db:2d:bb:bd:05:17:67:57:08:e1:a1:b6:a1:0b: e7:6d:06:cd:b6:76:df:c7:9b:07:4e:d0:c8:c2:fe: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9A:94:E8:33:46:09:29:0C:FD:0D:D0:D5:17:27:E3:EC:4C:BB:88 X509v3 Authority Key Identifier: keyid:81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:0c:ba:58:b6:10:a8:e2:e5:b5:d7:34:7b:fc:22:71:47:d7: ee:a9:0b:55:e9:ad:f5:21:83:b4:0b:3f:2c:a2:57:fd:3f:cd: 0c:2b:32:d4:f3:26:63:b6:eb:ba:e0:83:dd:2b:fd:de:be:aa: 89:9d:f3:5c:86:63:58:f2:88:d2:5a:a6:42:14:2f:8e:41:bf: 25:af:36:62:9e:e0:a1:6d:72:14:16:48:24:1e:37:0f:1c:85: 80:77:5b:f9:6e:33:b2:f9:cf:44:b0:69:b6:2d:2d:f1:17:7e: e3:22:04:84:ee:7c:e5:ed:8c:28:1d:fa:47:3d:53:5d:a4:2e: 71:64:8f:85:b7:56:ed:0a:1a:1b:63:cd:17:2c:bd:c1:4f:42: 66:d5:10:24:8d:11:fc:17:ad:84:80:ac:37:06:77:29:91:8b: 22:e0:b8:e5:20:41:76:85:99:42:b8:66:96:a5:1f:12:43:81: 3d:26:3f:7f:a5:ef:4b:2f:66:d8:49:97:44:93:7d:4b:b6:d2: 78:ea:8b:98:6b:c7:c1:4f:4d:83:e2:06:46:9f:d0:28:be:29: c6:e7:3f:0c:9d:7a:7b:4d:00:a4:f8:b4:47:0b:6a:9a:db:74: 63:ee:79:df:e2:d7:07:10:33:52:dd:e6:33:d1:c9:c4:96:1b: 97:82:06:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WfAgQEyrplB6yYMlC0RoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNWZjMjIxMjU3MjYyNTZkNmEzNWYzZGEyOGY3NTEzZGQz MWMxZmUwHhcNMjUxMjIwMjAwMTAyWhcNMjUxMjIxMjAwMTAyWjAzMTEwLwYDVQQD EygyMjlhOTRlODMzNDYwOTI5MGNmZDBkZDBkNTE3MjdlM2VjNGNiYjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IRrksAvQAguFmTVMgNqjEvRYsv/ hUrCiEG3F8K9hAGBaJNatguVO0tBa+Qm5Pt+dJZIgjvgeh76mkDeK5j3Veoq3Nks oDo25L7gaeGf8e51QqyIdkhlnYzo8Or5Swu/85nXhsxvq5aFUr8fZ46Zx1ky9WOj NmBWhKkMCKgpdqBwisp3EGIdfCxkogjj59p8pNo16PH/3dVL6v/aKr3ODeDcsJUG 8QBdvZxYptrLsvCSINpLZlJ7yDxVKs9uKu0BrL85kiM+ejlvZIEvsmZLJnEppU0n aWdHmtUfwvoz7WZU2y27vQUXZ1cI4aG2oQvnbQbNtnbfx5sHTtDIwv5kjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKalOgzRgkpDP0N0NUXJ+PsTLuIMB8GA1UdIwQY MBaAFIFfwiElcmJW1qNfPaKPdRPdMcH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1ZfQ0lTVnlZbGJXbzE4OW9vOTFFOTB4d2Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iM2M4YTYtZTMyZS00NzAwLWI1ZWQt NmE5OTRlNWVjNDcyLzEvZ1ZfQ0lTVnlZbGJXbzE4OW9vOTFFOTB4d2Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9iM2M4YTYtZTMyZS00NzAwLWI1ZWQtNmE5OTRlNWVjNDcy LzEvZ1ZfQ0lTVnlZbGJXbzE4OW9vOTFFOTB4d2Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwy6WLYQ qOLltdc0e/wicUfX7qkLVemt9SGDtAs/LKJX/T/NDCsy1PMmY7bruuCD3Sv93r6q iZ3zXIZjWPKI0lqmQhQvjkG/Ja82Yp7goW1yFBZIJB43DxyFgHdb+W4zsvnPRLBp ti0t8Rd+4yIEhO585e2MKB36Rz1TXaQucWSPhbdW7QoaG2PNFyy9wU9CZtUQJI0R /BethICsNwZ3KZGLIuC45SBBdoWZQrhmlqUfEkOBPSY/f6XvSy9m2EmXRJN9S7bS eOqLmGvHwU9Ng+IGRp/QKL4pxuc/DJ16e00ApPi0Rwtqmtt0Y+553+LXBxAzUt3m M9HJxJYbl4IGLg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:20 2025 by rpki-client