This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json) Hash identifier: ZwGfMGmqh4WCToWo552sz7J0LgDX1izu5hUG8143cyY= Subject key identifier: 1E:76:57:77:D2:AD:D1:68:DC:0C:AB:CD:BD:83:C6:3F:DD:FF:5B:29 Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1 Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1 Certificate serial: 019B4F5FC4399F90E09713EBD215E59D3080 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft Manifest number: 0CFC Signing time: Wed 24 Dec 2025 08:00:34 +0000 Manifest this update: Wed 24 Dec 2025 08:00:34 +0000 Manifest next update: Thu 25 Dec 2025 08:00:34 +0000 Files and hashes: 1: 6BQqkGrM3gw54Pj0HSmQY8wMCck.roa (hash: Ar7D9TbLcSVMAE2S4iadlofqY6yoHjuB0ZjyXAJSQDg=) 2: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: oVeqpVRjyiGHUG8l0+X330Z1ajZYTHujBzZ+HBX98JQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:5f:c4:39:9f:90:e0:97:13:eb:d2:15:e5:9d:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1 Validity Not Before: Dec 24 08:00:34 2025 GMT Not After : Dec 25 08:00:34 2025 GMT Subject: CN=1e765777d2add168dc0cabcdbd83c63fddff5b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fd:80:7e:e7:9d:0b:c8:27:32:ee:9f:9d:8d: 5e:4f:da:4c:ce:7a:f0:64:52:cf:b0:d1:4c:90:86: ba:f8:b0:fb:83:19:de:11:02:7d:e1:6d:5c:8a:4d: 76:45:62:8c:ac:64:ae:ee:cf:3c:b2:cf:fe:a4:c6: 79:ae:01:8c:01:2c:7f:d6:5b:f6:fa:7e:56:95:db: 0b:71:6a:87:ee:f5:b3:b6:a5:f9:c2:cb:b5:d0:f5: 20:09:8a:cd:e1:21:b2:3f:c1:4e:4a:9e:16:41:62: 69:39:96:7e:3a:84:27:8e:06:44:b9:58:47:1f:7c: c1:6e:79:52:a9:da:c5:17:76:2e:f4:c8:a8:71:2b: a9:2e:6b:10:4e:62:2a:53:4e:a6:42:0d:42:d3:94: 78:69:e9:7d:ed:91:f2:d2:23:98:ec:21:2f:24:b0: 22:39:ea:d4:c4:5f:cb:d5:d9:c9:67:17:65:b5:db: 9c:8a:2d:88:85:6c:b4:7e:d0:e4:41:1e:42:46:d4: 37:2e:ed:ce:45:fa:67:24:66:ef:34:45:88:3a:3d: bd:a5:4b:69:35:d1:43:8b:09:bc:d4:89:de:29:bc: 4e:19:ae:32:02:9b:57:52:aa:d5:f0:e6:c2:d3:26: bf:6e:58:19:94:3e:fd:75:db:f6:20:c9:02:7c:56: c7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:76:57:77:D2:AD:D1:68:DC:0C:AB:CD:BD:83:C6:3F:DD:FF:5B:29 X509v3 Authority Key Identifier: keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:79:76:76:3a:c9:d3:2b:e0:42:eb:a9:fc:bf:5e:8b:f8:82: e8:33:f1:1e:95:6c:93:1f:9b:c5:c9:f4:16:9a:3f:1c:2c:9b: 44:1a:dc:fc:5c:49:fa:ac:7e:4b:81:31:28:cf:0b:85:c0:8f: 88:b2:8e:ac:4c:c7:7c:68:2e:62:40:82:aa:cc:9b:07:9a:97: dd:5c:cd:4d:12:05:2b:42:aa:3f:a7:84:4b:4d:3f:c1:82:6a: 70:2f:c8:ec:bf:9d:0f:d2:08:2e:39:27:f7:4f:28:59:08:1d: bd:6e:7b:26:ad:33:11:ea:09:a3:5b:30:04:cf:54:57:04:d1: f6:3a:1a:91:a3:b8:d9:d3:e8:a7:93:b3:1a:0b:4b:95:dd:0b: d8:a5:ba:b4:e9:7f:60:0a:ae:b7:9d:ba:bc:27:98:12:4a:a4: 06:be:aa:06:65:a4:5f:6c:af:d5:0a:72:83:94:de:15:f2:1c: 8e:80:39:22:ee:7b:29:26:3a:e4:a6:7e:8e:f4:70:99:ad:dc: 2c:6a:ae:5e:22:8c:bc:94:35:75:62:0f:5a:02:be:8e:e2:a3: b2:78:61:6f:4d:b7:69:d9:a4:d1:49:de:7c:a2:db:fd:3b:d8: 33:25:59:3a:23:70:78:e8:52:fc:44:17:56:cf:0e:89:f0:4e: ec:38:ff:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPX8Q5n5DglxPr0hXlnTCAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMzEyNDBiZGFhN2MxMmU4MTBhMTczOGJjZGY3NWE3NDY1 MzBiYzEwHhcNMjUxMjI0MDgwMDM0WhcNMjUxMjI1MDgwMDM0WjAzMTEwLwYDVQQD EygxZTc2NTc3N2QyYWRkMTY4ZGMwY2FiY2RiZDgzYzYzZmRkZmY1YjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6f2AfuedC8gnMu6fnY1eT9pMznrw ZFLPsNFMkIa6+LD7gxneEQJ94W1cik12RWKMrGSu7s88ss/+pMZ5rgGMASx/1lv2 +n5WldsLcWqH7vWztqX5wsu10PUgCYrN4SGyP8FOSp4WQWJpOZZ+OoQnjgZEuVhH H3zBbnlSqdrFF3Yu9MiocSupLmsQTmIqU06mQg1C05R4ael97ZHy0iOY7CEvJLAi OerUxF/L1dnJZxdltducii2IhWy0ftDkQR5CRtQ3Lu3ORfpnJGbvNEWIOj29pUtp NdFDiwm81IneKbxOGa4yAptXUqrV8ObC0ya/blgZlD79ddv2IMkCfFbHHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB52V3fSrdFo3Ayrzb2Dxj/d/1spMB8GA1UdIwQY MBaAFIExJAvap8EugQoXOLzfdadGUwvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUt ZTllMDIzNjA5YzdmLzEvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUtZTllMDIzNjA5Yzdm LzEvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqnl2djrJ 0yvgQuup/L9ei/iC6DPxHpVskx+bxcn0Fpo/HCybRBrc/FxJ+qx+S4ExKM8LhcCP iLKOrEzHfGguYkCCqsybB5qX3VzNTRIFK0KqP6eES00/wYJqcC/I7L+dD9IILjkn 908oWQgdvW57Jq0zEeoJo1swBM9UVwTR9joakaO42dPop5OzGgtLld0L2KW6tOl/ YAqut526vCeYEkqkBr6qBmWkX2yv1Qpyg5TeFfIcjoA5Iu57KSY65KZ+jvRwma3c LGquXiKMvJQ1dWIPWgK+juKjsnhhb023admk0UnefKLb/TvYMyVZOiNweOhS/EQX Vs8OifBO7Dj/Tg== -----END CERTIFICATE-----Generated at Wed Dec 24 18:05:24 2025 by rpki-client