This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json) Hash identifier: a6j925LgO0peH36skhKzpWokeNmirkJfLyytcopPzpA= Subject key identifier: 25:09:4C:69:FB:B5:D9:26:7A:AC:FC:3A:0E:E8:63:6E:59:1D:61:84 Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1 Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1 Certificate serial: 019B41DB2BEBC418BEB5C7A6D9FD9274B8CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft Manifest number: 0CF5 Signing time: Sun 21 Dec 2025 17:00:41 +0000 Manifest this update: Sun 21 Dec 2025 17:00:41 +0000 Manifest next update: Mon 22 Dec 2025 17:00:41 +0000 Files and hashes: 1: 6BQqkGrM3gw54Pj0HSmQY8wMCck.roa (hash: Ar7D9TbLcSVMAE2S4iadlofqY6yoHjuB0ZjyXAJSQDg=) 2: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: gAuCteTVaw+ROTCMW62Vv8t18hwZHyMpyml0Fkidwuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:2b:eb:c4:18:be:b5:c7:a6:d9:fd:92:74:b8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1 Validity Not Before: Dec 21 17:00:41 2025 GMT Not After : Dec 22 17:00:41 2025 GMT Subject: CN=25094c69fbb5d9267aacfc3a0ee8636e591d6184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bb:a3:e6:da:9c:53:7b:49:e3:fe:56:9a:da: 57:d4:fe:75:20:ee:d8:cc:07:35:f9:b4:ca:e7:70: ff:09:51:25:0b:c4:60:e0:79:00:6a:34:b3:d8:8d: 50:80:59:8b:07:ea:ac:84:de:9b:2d:90:38:72:44: ff:5a:30:e8:51:2d:0a:b0:cf:99:dc:c5:41:8f:b5: 25:03:9d:4c:a6:53:81:bc:53:c3:a7:7b:96:8b:a1: 17:54:08:ab:d3:9e:ee:70:59:2d:33:e1:cf:f9:04: 29:c1:e5:d3:77:d4:2a:0f:6f:22:35:0e:6c:12:47: 6d:2a:71:58:e0:45:e9:92:11:95:71:4f:8d:ca:cd: a9:d1:56:15:95:c7:bd:82:ac:9f:00:c1:7a:32:30: 7f:46:e8:4a:8b:3d:d7:d4:d6:3f:1a:6b:ea:83:47: 7b:5d:33:75:15:8c:b9:7a:01:1e:73:b5:19:07:46: fa:34:c9:18:9e:65:7b:fe:84:97:e7:0f:e6:d7:28: 1b:a2:e2:45:ff:87:d0:89:4b:92:b1:9f:74:30:86: 19:e8:c3:f7:50:7f:7b:0d:f0:ff:44:88:a3:61:c9: 6a:aa:58:ea:77:cd:62:d1:cd:67:91:c7:bf:5a:63: c0:71:c3:3d:d4:1a:e1:78:5a:7a:88:da:eb:51:17: 2a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:09:4C:69:FB:B5:D9:26:7A:AC:FC:3A:0E:E8:63:6E:59:1D:61:84 X509v3 Authority Key Identifier: keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:63:e1:79:90:c1:00:3d:3c:a8:1f:17:c9:fe:33:94:4b:cb: a1:aa:ff:b1:f5:70:5d:b1:0b:95:89:e1:ca:11:50:f3:9e:71: 80:38:93:35:24:17:af:e5:18:99:1e:31:14:c5:c2:97:54:0f: 38:ed:1c:c9:e8:ec:f9:30:cf:5e:d4:8a:f9:ea:13:37:c3:fa: 4a:13:ef:15:d2:07:ff:5f:91:d3:d4:20:2f:b4:ce:d5:e5:93: f7:ba:d7:3d:38:76:b9:cb:65:fb:de:14:d8:ae:89:3b:ec:0f: 71:78:fd:1b:40:cb:d3:d8:ed:f4:d2:38:ab:5c:73:4d:78:28: 75:75:71:2f:61:0d:e6:e0:60:fe:c2:af:ad:6f:6f:b6:bd:25: 46:f9:f3:b2:3f:98:45:af:bb:29:5e:ea:5e:45:82:19:f5:20: a0:7a:35:03:49:3b:25:ae:27:48:23:75:25:39:43:ab:1e:0e: 7a:1b:d1:bc:e9:b6:c0:5a:cd:f0:11:f7:d9:32:b1:95:51:e2: ed:b1:18:fc:a1:55:02:22:bd:56:b1:87:62:ec:1b:81:90:8c: c2:f7:d4:4a:d3:2f:6d:20:24:15:4a:28:40:5f:23:4d:3c:08: 8a:41:c5:ca:d6:3a:1b:c2:17:a2:23:a1:97:93:96:79:54:f3: b9:a9:fb:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2yvrxBi+tcem2f2SdLjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMzEyNDBiZGFhN2MxMmU4MTBhMTczOGJjZGY3NWE3NDY1 MzBiYzEwHhcNMjUxMjIxMTcwMDQxWhcNMjUxMjIyMTcwMDQxWjAzMTEwLwYDVQQD EygyNTA5NGM2OWZiYjVkOTI2N2FhY2ZjM2EwZWU4NjM2ZTU5MWQ2MTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLuj5tqcU3tJ4/5WmtpX1P51IO7Y zAc1+bTK53D/CVElC8Rg4HkAajSz2I1QgFmLB+qshN6bLZA4ckT/WjDoUS0KsM+Z 3MVBj7UlA51MplOBvFPDp3uWi6EXVAir057ucFktM+HP+QQpweXTd9QqD28iNQ5s EkdtKnFY4EXpkhGVcU+Nys2p0VYVlce9gqyfAMF6MjB/RuhKiz3X1NY/Gmvqg0d7 XTN1FYy5egEec7UZB0b6NMkYnmV7/oSX5w/m1ygbouJF/4fQiUuSsZ90MIYZ6MP3 UH97DfD/RIijYclqqljqd81i0c1nkce/WmPAccM91BrheFp6iNrrURcqywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUJTGn7tdkmeqz8Og7oY25ZHWGEMB8GA1UdIwQY MBaAFIExJAvap8EugQoXOLzfdadGUwvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUt ZTllMDIzNjA5YzdmLzEvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUtZTllMDIzNjA5Yzdm LzEvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2PheZDB AD08qB8Xyf4zlEvLoar/sfVwXbELlYnhyhFQ855xgDiTNSQXr+UYmR4xFMXCl1QP OO0cyejs+TDPXtSK+eoTN8P6ShPvFdIH/1+R09QgL7TO1eWT97rXPTh2uctl+94U 2K6JO+wPcXj9G0DL09jt9NI4q1xzTXgodXVxL2EN5uBg/sKvrW9vtr0lRvnzsj+Y Ra+7KV7qXkWCGfUgoHo1A0k7Ja4nSCN1JTlDqx4OehvRvOm2wFrN8BH32TKxlVHi 7bEY/KFVAiK9VrGHYuwbgZCMwvfUStMvbSAkFUooQF8jTTwIikHFytY6G8IXoiOh l5OWeVTzuan7vw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:27:01 2025 by rpki-client