This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft File: gvWThvzeWW90WQde3qTXTBmwHKI.mft (raw, json) Hash identifier: tUjV/M7YYimqE9owAj+sJO0p0vgLDjM4RjNGpKNfTQA= Subject key identifier: AD:FE:BA:73:A2:AF:FF:AB:F7:BC:E2:F4:B5:21:9B:2A:8C:A4:5D:17 Authority key identifier: 82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2 Certificate issuer: /CN=82f59386fcde596f7459075edea4d74c19b01ca2 Certificate serial: 019B42EE4F66756D4F2EB9D0436A349F0023 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft Manifest number: 0A29 Signing time: Sun 21 Dec 2025 22:01:12 +0000 Manifest this update: Sun 21 Dec 2025 22:01:12 +0000 Manifest next update: Mon 22 Dec 2025 22:01:12 +0000 Files and hashes: 1: MVRm2B27-mtawpjQijtz-fTQOKU.roa (hash: TjDlm71DJPQeofi//IsXEPB4VT8uuUFQlFrO0LSDhhk=) 2: gvWThvzeWW90WQde3qTXTBmwHKI.crl (hash: 33GI1wyq2wbegG1bXkR0wVg68ISrOAECsJ1IGlmBfog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:4f:66:75:6d:4f:2e:b9:d0:43:6a:34:9f:00:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82f59386fcde596f7459075edea4d74c19b01ca2 Validity Not Before: Dec 21 22:01:12 2025 GMT Not After : Dec 22 22:01:12 2025 GMT Subject: CN=adfeba73a2afffabf7bce2f4b5219b2a8ca45d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:36:c9:e2:61:f1:37:36:ca:26:eb:35:4e:9d: 79:b0:e8:b7:f8:d4:23:02:97:16:08:9a:0f:48:94: b0:94:0a:5b:23:c2:26:84:bf:81:5a:81:97:45:d8: 01:a2:07:2c:e2:3c:6e:dd:d4:45:18:10:eb:26:db: d9:de:1b:d3:9c:89:20:ec:09:68:44:f3:7c:7a:08: f8:5d:91:6a:d1:b4:bc:02:89:71:f9:13:d7:4e:41: d2:75:a9:f7:9b:2e:a9:26:e4:30:26:53:27:03:5c: 42:4f:33:3a:91:39:d3:7f:5e:82:c7:43:c1:08:b9: 5c:a3:ce:5d:0f:9d:e3:13:1c:b7:42:8e:28:4a:7e: 1c:1a:70:e8:4f:0f:d3:70:2b:f9:3a:5a:2a:6b:88: d4:0a:2e:b2:8a:22:a1:ef:95:74:c5:b3:00:b6:9a: f9:c2:dd:97:25:94:2e:25:5c:4b:d8:f0:b3:94:52: 3a:8b:89:5d:4a:bd:5f:aa:32:65:27:c9:74:79:a2: fd:ca:be:ec:44:3e:5f:bb:18:71:99:4d:e1:d0:ff: a2:a5:71:31:4c:58:59:4f:f8:a0:79:43:07:8b:10: 33:76:3c:a2:bc:28:bd:3c:67:62:ae:68:a9:af:16: 16:76:d5:28:43:8a:e7:50:4f:48:7e:55:6b:5a:38: fa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FE:BA:73:A2:AF:FF:AB:F7:BC:E2:F4:B5:21:9B:2A:8C:A4:5D:17 X509v3 Authority Key Identifier: keyid:82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:e2:ac:f3:24:12:af:77:de:58:d7:1f:ab:24:55:3c:51:1d: 12:1c:72:8e:24:84:fa:9c:81:cb:f9:a4:b2:61:9c:a7:23:27: 00:5d:8f:b3:be:57:dd:08:91:07:97:c7:31:97:75:f3:fe:1c: da:ce:a5:6b:80:8b:06:4b:e7:0d:70:f4:a3:0c:5f:86:e2:43: 0e:08:20:e2:f4:7d:e0:4e:52:80:30:fa:78:97:ea:7a:ba:29: 0c:5d:b0:32:f7:6b:66:47:bf:8a:0d:13:29:12:f3:2e:54:14: 56:1b:f2:33:20:4b:40:72:a3:94:9c:7c:84:3a:fe:78:42:db: c4:79:15:55:ae:83:aa:90:69:7c:88:49:a5:02:2a:c9:c5:c3: 4b:4a:d7:d4:42:b7:ef:de:72:61:fc:71:2e:9e:ac:9a:b5:24: a6:df:7a:09:7a:00:bf:b0:83:be:a4:02:9f:30:63:4c:ee:c4: f1:82:98:b6:f8:0d:ba:9d:9f:d0:f6:79:fb:04:ce:6b:4b:91: de:fc:0d:f6:3b:a4:9c:21:17:47:66:2b:6e:29:bc:b3:a5:3f: cb:5a:c8:c7:c8:3e:39:88:8b:1a:19:7e:70:50:b7:27:3d:ba: a1:32:8f:85:8b:9f:ba:f7:0c:35:8a:b6:f2:4d:ca:7c:06:df: 58:93:a6:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7k9mdW1PLrnQQ2o0nwAjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZjU5Mzg2ZmNkZTU5NmY3NDU5MDc1ZWRlYTRkNzRjMTli MDFjYTIwHhcNMjUxMjIxMjIwMTEyWhcNMjUxMjIyMjIwMTEyWjAzMTEwLwYDVQQD EyhhZGZlYmE3M2EyYWZmZmFiZjdiY2UyZjRiNTIxOWIyYThjYTQ1ZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTbJ4mHxNzbKJus1Tp15sOi3+NQj ApcWCJoPSJSwlApbI8ImhL+BWoGXRdgBogcs4jxu3dRFGBDrJtvZ3hvTnIkg7Alo RPN8egj4XZFq0bS8Aolx+RPXTkHSdan3my6pJuQwJlMnA1xCTzM6kTnTf16Cx0PB CLlco85dD53jExy3Qo4oSn4cGnDoTw/TcCv5Oloqa4jUCi6yiiKh75V0xbMAtpr5 wt2XJZQuJVxL2PCzlFI6i4ldSr1fqjJlJ8l0eaL9yr7sRD5fuxhxmU3h0P+ipXEx TFhZT/igeUMHixAzdjyivCi9PGdirmiprxYWdtUoQ4rnUE9IflVrWjj6FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3+unOir/+r97zi9LUhmyqMpF0XMB8GA1UdIwQY MBaAFIL1k4b83llvdFkHXt6k10wZsByiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3ZXVGh2emVXVzkwV1FkZTNxVFhUQm13SEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC81YmMxMzQtNTYyNS00ZWIxLTlmNzAt ZjlmZWRiZjYzMjcyLzEvZ3ZXVGh2emVXVzkwV1FkZTNxVFhUQm13SEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC81YmMxMzQtNTYyNS00ZWIxLTlmNzAtZjlmZWRiZjYzMjcy LzEvZ3ZXVGh2emVXVzkwV1FkZTNxVFhUQm13SEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeKs8yQS r3feWNcfqyRVPFEdEhxyjiSE+pyBy/mksmGcpyMnAF2Ps75X3QiRB5fHMZd18/4c 2s6la4CLBkvnDXD0owxfhuJDDggg4vR94E5SgDD6eJfqeropDF2wMvdrZke/ig0T KRLzLlQUVhvyMyBLQHKjlJx8hDr+eELbxHkVVa6DqpBpfIhJpQIqycXDS0rX1EK3 795yYfxxLp6smrUkpt96CXoAv7CDvqQCnzBjTO7E8YKYtvgNup2f0PZ5+wTOa0uR 3vwN9juknCEXR2Yrbim8s6U/y1rIx8g+OYiLGhl+cFC3Jz26oTKPhYufuvcMNYq2 8k3KfAbfWJOmRA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:05:35 2025 by rpki-client