This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft File: gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft (raw, json) Hash identifier: O19vDQGWB6wSOs3fe2+yHtP+9yeJXhI6xbJUSz3w/9g= Subject key identifier: EC:5F:34:25:06:1F:17:E1:2E:54:D8:B4:17:1D:42:06:6F:76:F8:98 Authority key identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53 Certificate issuer: /CN=813e051cb831d1989607bb76c0bc5693ff947b53 Certificate serial: 019B703444AE97BEE33F83C3468237A00162 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft Manifest number: 17AF Signing time: Tue 30 Dec 2025 17:00:32 +0000 Manifest this update: Tue 30 Dec 2025 17:00:32 +0000 Manifest next update: Wed 31 Dec 2025 17:00:32 +0000 Files and hashes: 1: gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl (hash: daSmTFdMg4tHmYRSYCgpAD3d0Yk34Q+cOvfcZxttn0g=) 2: x_N3hpJtRSPWEjO0n6o6sQry1Jg.roa (hash: L4PUkpr3w+Sn4bU/wKaWhl8LERzOZYhflR9066iKXwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:34:44:ae:97:be:e3:3f:83:c3:46:82:37:a0:01:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=813e051cb831d1989607bb76c0bc5693ff947b53 Validity Not Before: Dec 30 17:00:32 2025 GMT Not After : Dec 31 17:00:32 2025 GMT Subject: CN=ec5f3425061f17e12e54d8b4171d42066f76f898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:be:48:40:18:01:5c:70:51:d5:a8:fd:8b: 5f:46:73:07:44:30:ef:98:87:74:12:62:bf:dc:1e: db:f6:17:78:df:04:de:2f:ae:32:c1:48:3e:42:20: c9:f2:de:e5:a8:df:5f:1b:3b:42:72:2a:76:72:a4: 9b:98:aa:82:bd:ca:f4:85:a1:4f:10:50:19:e2:d3: 5f:0a:65:91:ad:cf:6d:2f:28:67:3b:5a:6b:78:e7: 47:57:f6:75:b1:9e:5f:cc:b3:18:dd:db:66:ec:f4: 53:db:49:68:97:d5:3d:b0:69:7f:18:ae:50:17:28: 8a:07:3a:6e:fa:4e:4a:d2:11:f1:e6:07:09:32:1c: a3:00:1d:69:8e:3d:8b:5e:76:cb:de:7e:db:a4:1e: a9:38:b8:09:bc:be:9c:cb:6c:b2:fd:fa:fe:49:ef: 43:f1:cd:bd:d4:b5:6b:28:38:61:9e:b6:69:21:41: e5:8a:ce:94:e1:05:c2:a1:64:bc:28:29:30:4f:8b: b3:aa:48:2c:f3:fc:b7:85:cb:70:bf:b7:f3:ea:80: 60:15:5e:0b:a5:c9:1f:2f:65:c1:fe:56:e3:1e:57: b3:16:27:a0:e9:a3:af:c9:46:42:bf:a0:7b:2b:f7: 62:bc:ae:97:f5:5e:2f:40:fc:72:0e:d6:43:5d:af: af:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5F:34:25:06:1F:17:E1:2E:54:D8:B4:17:1D:42:06:6F:76:F8:98 X509v3 Authority Key Identifier: keyid:81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3f:96:a4:6c:e0:4f:73:d6:30:a0:22:40:fd:22:16:7e:38: af:dd:a6:ec:1c:01:e0:fe:21:0a:9a:b1:f2:f2:31:d9:dd:27: 50:8b:01:6a:f2:10:83:2d:9d:cd:1e:e3:02:b4:55:bb:6c:aa: dd:75:4f:95:7e:1c:e4:80:83:cf:bd:7c:13:7b:50:7e:2c:6e: 7b:f5:be:27:9a:b6:e0:40:2b:2b:1f:a0:2b:d2:f7:3d:35:84: a2:85:3d:38:bb:4d:ad:03:09:d7:35:e9:55:eb:e0:2b:7c:7d: 33:2d:70:3e:b7:17:46:04:3f:61:bb:1d:ad:24:69:65:20:89: 84:dc:24:93:eb:4e:6b:9e:d9:78:0a:38:2b:5c:ac:42:b8:0c: db:b8:34:27:ed:2e:7d:af:26:40:23:15:2d:70:9b:b7:e1:eb: 26:c5:a2:3a:51:d9:17:2c:44:50:4c:35:0c:b1:3c:af:61:80: cc:2a:ef:fe:dd:92:fc:ce:a8:86:90:67:4e:a4:3d:01:2c:17: fe:07:38:27:4e:d6:d1:b6:04:88:3e:8e:1e:78:de:3a:3a:d7: 3f:2b:e0:f7:b7:3b:10:ec:a6:a4:81:55:6a:c5:e3:90:c4:04: 58:c6:1b:75:9e:54:4e:49:e5:59:0a:7b:91:9c:02:d6:0f:92: 13:c2:71:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwNESul77jP4PDRoI3oAFiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxM2UwNTFjYjgzMWQxOTg5NjA3YmI3NmMwYmM1NjkzZmY5 NDdiNTMwHhcNMjUxMjMwMTcwMDMyWhcNMjUxMjMxMTcwMDMyWjAzMTEwLwYDVQQD EyhlYzVmMzQyNTA2MWYxN2UxMmU1NGQ4YjQxNzFkNDIwNjZmNzZmODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfS+SEAYAVxwUdWo/YtfRnMHRDDv mId0EmK/3B7b9hd43wTeL64ywUg+QiDJ8t7lqN9fGztCcip2cqSbmKqCvcr0haFP EFAZ4tNfCmWRrc9tLyhnO1preOdHV/Z1sZ5fzLMY3dtm7PRT20lol9U9sGl/GK5Q FyiKBzpu+k5K0hHx5gcJMhyjAB1pjj2LXnbL3n7bpB6pOLgJvL6cy2yy/fr+Se9D 8c291LVrKDhhnrZpIUHlis6U4QXCoWS8KCkwT4uzqkgs8/y3hctwv7fz6oBgFV4L pckfL2XB/lbjHlezFieg6aOvyUZCv6B7K/divK6X9V4vQPxyDtZDXa+vpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxfNCUGHxfhLlTYtBcdQgZvdviYMB8GA1UdIwQY MBaAFIE+BRy4MdGYlge7dsC8VpP/lHtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1Q0RkhMZ3gwWmlXQjd0MndMeFdrXy1VZTFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lNDVhZDYtZTVhZS00ODE5LTlmMjQt ZjU3N2FhNDZkZTgzLzEvZ1Q0RkhMZ3gwWmlXQjd0MndMeFdrXy1VZTFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9lNDVhZDYtZTVhZS00ODE5LTlmMjQtZjU3N2FhNDZkZTgz LzEvZ1Q0RkhMZ3gwWmlXQjd0MndMeFdrXy1VZTFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbj+WpGzg T3PWMKAiQP0iFn44r92m7BwB4P4hCpqx8vIx2d0nUIsBavIQgy2dzR7jArRVu2yq 3XVPlX4c5ICDz718E3tQfixue/W+J5q24EArKx+gK9L3PTWEooU9OLtNrQMJ1zXp VevgK3x9My1wPrcXRgQ/YbsdrSRpZSCJhNwkk+tOa57ZeAo4K1ysQrgM27g0J+0u fa8mQCMVLXCbt+HrJsWiOlHZFyxEUEw1DLE8r2GAzCrv/t2S/M6ohpBnTqQ9ASwX /gc4J07W0bYEiD6OHnjeOjrXPyvg97c7EOympIFVasXjkMQEWMYbdZ5UTknlWQp7 kZwC1g+SE8Jxjg== -----END CERTIFICATE-----Generated at Wed Dec 31 00:10:00 2025 by rpki-client