This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft File: GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft (raw, json) Hash identifier: gRLiFhqYvy6+Yj107IBSle64B4sR7/T0+ToVOPCUOtg= Subject key identifier: 1E:AF:58:89:A0:FD:23:EA:91:22:A6:89:86:37:1C:67:2F:C7:E9:B7 Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64 Certificate issuer: /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864 Certificate serial: 019B563DB09613674EEB788F123628172F86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 16:00:41 +0000 Manifest this update: Thu 25 Dec 2025 16:00:41 +0000 Manifest next update: Fri 26 Dec 2025 16:00:41 +0000 Files and hashes: 1: D2QGXtZvmL4KeLGdXQs__twf4cc.roa (hash: yx8HKD3i4ZtDorjPhtWxamWyQ9PcoYYTYwiIZAy3Cf4=) 2: GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl (hash: kDqMoNQH/R4rN/3YTj7pitlw6S1o6NtECTcN38ljeWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 16:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:3d:b0:96:13:67:4e:eb:78:8f:12:36:28:17:2f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864 Validity Not Before: Dec 25 16:00:41 2025 GMT Not After : Dec 26 16:00:41 2025 GMT Subject: CN=1eaf5889a0fd23ea9122a68986371c672fc7e9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:0f:3c:ec:e7:46:14:96:ad:15:47:ad:34: 9a:4b:f9:2c:96:a7:83:58:47:6f:8f:bb:12:a7:76: 4a:df:b5:6e:e5:15:38:cd:2b:04:ef:8c:8c:79:1f: 61:9d:e8:32:b3:67:a3:ce:99:b2:94:67:43:b2:b0: b8:49:97:9b:59:6c:a6:ac:05:cc:f6:41:33:ab:e4: 67:0b:3c:f1:a7:cb:13:b0:bd:9b:46:70:6b:d8:b9: d0:b9:38:c7:53:4f:6b:32:28:97:61:ae:32:18:2c: cf:5d:e7:f8:3f:87:bc:f5:d5:a1:19:f7:0c:83:0a: 0e:bb:37:ce:a3:65:ab:18:53:91:e5:fb:be:8b:09: 5b:c9:d0:f4:09:48:11:7f:d6:27:00:a6:17:f8:eb: 07:55:67:0c:d9:48:88:6f:9a:65:92:03:c7:f2:72: 8a:c8:fb:93:3c:2c:5b:6f:aa:7f:cb:b8:0e:5c:dc: 13:da:09:b6:39:ff:8a:c6:aa:19:89:06:17:56:78: 27:35:0e:c7:9f:0d:c9:5c:b0:70:b1:70:32:57:f4: d2:bc:c9:b4:d1:51:0a:f7:21:50:eb:a2:ec:e2:8d: 9f:bc:96:90:e0:f8:87:3c:aa:e9:02:85:e2:8e:f1: 2c:56:65:d7:be:8f:c0:e6:b5:4b:8b:e5:77:83:b7: 3a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AF:58:89:A0:FD:23:EA:91:22:A6:89:86:37:1C:67:2F:C7:E9:B7 X509v3 Authority Key Identifier: keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c1:4d:7d:65:5a:22:35:e3:1d:aa:75:ff:30:94:08:36:8b: 31:c9:28:5c:df:fe:a0:11:1b:9f:bc:77:1f:86:d9:86:ff:65: bb:a9:98:da:ed:57:e4:9b:c7:ac:04:ae:7b:e7:74:7f:d6:a0: b0:13:70:43:83:03:9f:ef:67:cc:80:50:cf:bc:72:a2:b3:5a: 22:5d:9f:ee:44:0d:d1:f0:ff:b7:47:0e:e6:fc:c6:4c:21:1e: 64:c8:cd:34:e1:05:a6:74:2d:be:35:4f:4d:9b:2d:11:fe:48: 13:e8:cb:b2:e6:ff:67:d3:3a:1c:7a:84:bb:6c:26:ad:52:12: 33:01:1c:7f:97:4a:32:a4:9a:3b:60:60:06:12:da:ff:82:8a: e1:1e:45:3e:a3:ab:39:37:fd:f3:18:6d:54:bb:8c:cd:8a:b6: 25:2f:c3:20:2c:92:c8:39:7f:6b:ff:00:14:a8:41:19:54:9a: f3:cc:31:7b:08:3e:32:9b:8f:67:b5:ac:c3:b8:b1:05:29:7d: 6e:a3:3e:31:41:ba:fd:25:a3:d8:a7:44:9e:bb:dc:6d:27:6f: 72:3a:fd:a0:e9:2e:b2:61:fd:43:34:0d:37:c8:79:ea:3f:d2: c5:3c:9d:e0:3f:3f:5b:51:e0:bb:63:14:86:b0:fe:1a:3a:2e: 85:41:57:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWPbCWE2dO63iPEjYoFy+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZDE5OWMzZDIwZjQzNGQ4YzBhMGEyZWY1ZTUyMzQ2NjY1 Y2E4NjQwHhcNMjUxMjI1MTYwMDQxWhcNMjUxMjI2MTYwMDQxWjAzMTEwLwYDVQQD EygxZWFmNTg4OWEwZmQyM2VhOTEyMmE2ODk4NjM3MWM2NzJmYzdlOWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAongPPOznRhSWrRVHrTSaS/kslqeD WEdvj7sSp3ZK37Vu5RU4zSsE74yMeR9hnegys2ejzpmylGdDsrC4SZebWWymrAXM 9kEzq+RnCzzxp8sTsL2bRnBr2LnQuTjHU09rMiiXYa4yGCzPXef4P4e89dWhGfcM gwoOuzfOo2WrGFOR5fu+iwlbydD0CUgRf9YnAKYX+OsHVWcM2UiIb5plkgPH8nKK yPuTPCxbb6p/y7gOXNwT2gm2Of+KxqoZiQYXVngnNQ7Hnw3JXLBwsXAyV/TSvMm0 0VEK9yFQ66Ls4o2fvJaQ4PiHPKrpAoXijvEsVmXXvo/A5rVLi+V3g7c63QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6vWImg/SPqkSKmiYY3HGcvx+m3MB8GA1UdIwQY MBaAFBnRmcPSD0NNjAoKLvXlI0ZmXKhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2RHWnc5SVBRMDJNQ2dvdTllVWpSbVpjcUdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81Yjc4ZjQtNzcxZC00NzU2LWEzODkt YjQyZmEwMGY1N2RlLzEvR2RHWnc5SVBRMDJNQ2dvdTllVWpSbVpjcUdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81Yjc4ZjQtNzcxZC00NzU2LWEzODktYjQyZmEwMGY1N2Rl LzEvR2RHWnc5SVBRMDJNQ2dvdTllVWpSbVpjcUdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcFNfWVa IjXjHap1/zCUCDaLMckoXN/+oBEbn7x3H4bZhv9lu6mY2u1X5JvHrASue+d0f9ag sBNwQ4MDn+9nzIBQz7xyorNaIl2f7kQN0fD/t0cO5vzGTCEeZMjNNOEFpnQtvjVP TZstEf5IE+jLsub/Z9M6HHqEu2wmrVISMwEcf5dKMqSaO2BgBhLa/4KK4R5FPqOr OTf98xhtVLuMzYq2JS/DICySyDl/a/8AFKhBGVSa88wxewg+MpuPZ7Wsw7ixBSl9 bqM+MUG6/SWj2KdEnrvcbSdvcjr9oOkusmH9QzQNN8h56j/SxTyd4D8/W1Hgu2MU hrD+GjouhUFXYA== -----END CERTIFICATE-----Generated at Fri Dec 26 00:02:54 2025 by rpki-client