This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft File: Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft (raw, json) Hash identifier: xhCm5iWQ91fLwPS1XxuXvQaZv1xPEq6M7pSkBRttKuQ= Subject key identifier: 2B:7D:58:38:A3:35:DA:D6:F6:AD:31:48:9D:B7:B7:74:10:D3:86:FB Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23 Certificate issuer: /CN=1a9b70ef99760a0659deaefa660345a0e6115423 Certificate serial: 019B3D236CE9807F7A8A447D4897303FABD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 19:01:30 +0000 Manifest this update: Sat 20 Dec 2025 19:01:30 +0000 Manifest next update: Sun 21 Dec 2025 19:01:30 +0000 Files and hashes: 1: AI-SjUNk27UlWzeJbfub1LMpR_c.roa (hash: n1P92aXpjrqVVtgYbgV1MuvoAPU8jvz1Hn4J2/+sFwE=) 2: Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl (hash: bz4wYNF/uQRd7oYOSUif0kE2qHln2Rt9SczQIQ6aZ6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:6c:e9:80:7f:7a:8a:44:7d:48:97:30:3f:ab:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423 Validity Not Before: Dec 20 19:01:30 2025 GMT Not After : Dec 21 19:01:30 2025 GMT Subject: CN=2b7d5838a335dad6f6ad31489db7b77410d386fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:5f:34:4a:3f:05:17:8a:0f:8d:23:bb:53: bf:4a:61:72:52:74:2b:26:12:86:ba:ad:d6:8f:ea: cf:63:a5:c2:d7:a3:b4:83:f7:02:e3:1b:09:ea:0b: bb:4e:33:32:66:76:a7:eb:19:38:7f:de:ac:f6:9e: 58:1d:01:34:7e:f8:c4:e1:e8:98:10:31:d3:db:0a: 8d:b0:17:69:93:b2:4c:d2:6a:a5:32:21:ce:b1:37: ea:db:89:84:30:50:16:e9:fa:4a:00:53:87:8b:a8: 43:f7:35:95:69:74:85:ec:fa:9e:2b:b1:76:7e:94: 04:c2:08:2e:2f:4b:5a:21:41:1a:c3:ed:fe:6f:c4: 36:16:ad:58:24:2e:ef:da:c2:dd:95:5a:fc:47:4a: fc:f8:1c:62:7e:fa:af:bb:7a:6c:7e:ab:8c:f8:bf: a1:43:3c:d4:51:ab:aa:f5:9f:36:ff:52:a0:02:e8: 36:e6:2b:7f:55:10:0f:3e:c6:b2:cb:91:82:19:0e: bf:e1:e0:c3:1b:9b:ce:9a:18:67:e5:3c:27:81:f6: 5c:40:63:61:82:ff:8a:d3:fd:ff:a4:6a:20:9a:86: c3:7f:52:85:63:c8:f9:63:61:e9:3d:2a:06:a1:d1: 37:be:18:82:27:76:61:e5:97:ec:94:ad:5c:d7:8f: a5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7D:58:38:A3:35:DA:D6:F6:AD:31:48:9D:B7:B7:74:10:D3:86:FB X509v3 Authority Key Identifier: keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8f:4f:97:62:88:95:80:91:e3:9d:ef:d5:38:a0:c9:9e:0d: 88:bf:6c:b0:6a:7b:0f:f4:2d:5f:31:24:2b:ab:ab:26:62:20: 7a:45:4c:ce:4a:12:68:c3:3d:c3:30:3f:a7:e5:38:95:b9:a2: c6:41:e8:11:49:b7:97:34:7a:16:cb:58:a6:a6:05:c0:41:c9: 7f:7e:35:d8:40:eb:3a:d1:f9:48:2e:cb:b7:69:b4:41:0d:2d: 3e:8c:7c:1a:bb:77:17:6c:44:f2:df:6e:e0:de:3d:88:e8:e9: 73:57:ce:2f:1f:2a:ab:ca:7d:b4:f4:d5:65:4d:36:39:1a:f1: 6d:66:c4:d5:74:e3:78:b3:c0:28:bf:01:52:4d:a2:8a:5e:6a: ae:e3:a0:23:b0:ee:b3:b6:d9:16:3b:37:89:02:b7:01:01:56: d4:0e:f0:ea:dd:76:99:57:89:79:fa:93:ca:f5:90:f2:5d:19: 9f:a7:84:21:06:dd:8f:1c:08:fb:92:95:f6:68:8b:53:4a:81: 4c:40:bb:f6:e3:64:ad:87:9e:a9:7c:c4:7e:fa:01:76:5d:60: ab:cc:29:53:89:f5:20:2d:23:d7:95:78:92:2d:42:83:07:f2: 7e:0d:49:da:20:ef:eb:50:08:df:f5:91:f3:f1:a0:26:4a:9c: e8:f3:cd:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I2zpgH96ikR9SJcwP6vZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhOWI3MGVmOTk3NjBhMDY1OWRlYWVmYTY2MDM0NWEwZTYx MTU0MjMwHhcNMjUxMjIwMTkwMTMwWhcNMjUxMjIxMTkwMTMwWjAzMTEwLwYDVQQD EygyYjdkNTgzOGEzMzVkYWQ2ZjZhZDMxNDg5ZGI3Yjc3NDEwZDM4NmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoytfNEo/BReKD40ju1O/SmFyUnQr JhKGuq3Wj+rPY6XC16O0g/cC4xsJ6gu7TjMyZnan6xk4f96s9p5YHQE0fvjE4eiY EDHT2wqNsBdpk7JM0mqlMiHOsTfq24mEMFAW6fpKAFOHi6hD9zWVaXSF7PqeK7F2 fpQEwgguL0taIUEaw+3+b8Q2Fq1YJC7v2sLdlVr8R0r8+Bxifvqvu3psfquM+L+h QzzUUauq9Z82/1KgAug25it/VRAPPsayy5GCGQ6/4eDDG5vOmhhn5TwngfZcQGNh gv+K0/3/pGogmobDf1KFY8j5Y2HpPSoGodE3vhiCJ3Zh5ZfslK1c14+lMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCt9WDijNdrW9q0xSJ23t3QQ04b7MB8GA1UdIwQY MBaAFBqbcO+ZdgoGWd6u+mYDRaDmEVQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3B0dzc1bDJDZ1paM3E3NlpnTkZvT1lSVkNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jODlhNDYtNzkxMS00ZmRiLWE5M2It Mjk5MjJiMmQyOTFiLzEvR3B0dzc1bDJDZ1paM3E3NlpnTkZvT1lSVkNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jODlhNDYtNzkxMS00ZmRiLWE5M2ItMjk5MjJiMmQyOTFi LzEvR3B0dzc1bDJDZ1paM3E3NlpnTkZvT1lSVkNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb49Pl2KI lYCR453v1TigyZ4NiL9ssGp7D/QtXzEkK6urJmIgekVMzkoSaMM9wzA/p+U4lbmi xkHoEUm3lzR6FstYpqYFwEHJf3412EDrOtH5SC7Lt2m0QQ0tPox8Grt3F2xE8t9u 4N49iOjpc1fOLx8qq8p9tPTVZU02ORrxbWbE1XTjeLPAKL8BUk2iil5qruOgI7Du s7bZFjs3iQK3AQFW1A7w6t12mVeJefqTyvWQ8l0Zn6eEIQbdjxwI+5KV9miLU0qB TEC79uNkrYeeqXzEfvoBdl1gq8wpU4n1IC0j15V4ki1Cgwfyfg1J2iDv61AI3/WR 8/GgJkqc6PPNyw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:39:02 2025 by rpki-client