This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json) Hash identifier: /V1L3tTbY/7GksI86h7E/wTdifDVhbmeuKFJUTm3Vyo= Subject key identifier: 97:F2:22:6E:2F:FD:33:AD:1A:A5:A8:EB:85:08:86:F1:3D:A1:AC:40 Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1 Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1 Certificate serial: 019B514E6939BF3DB1AA88F1FCB4490D1C11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft Manifest number: 0871 Signing time: Wed 24 Dec 2025 17:00:51 +0000 Manifest this update: Wed 24 Dec 2025 17:00:51 +0000 Manifest next update: Thu 25 Dec 2025 17:00:51 +0000 Files and hashes: 1: 8sYphYrrmRM_ErwAJ8gqIzEpDGo.roa (hash: rt/OwZDBbcaVJA7rLlh63ti0IkxjXIhkThQceeCTgkI=) 2: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: XoxcLbGk4pbgrWJXtcLueJR3O2S1YppoxCNcuBrUVpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 17:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:69:39:bf:3d:b1:aa:88:f1:fc:b4:49:0d:1c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1 Validity Not Before: Dec 24 17:00:51 2025 GMT Not After : Dec 25 17:00:51 2025 GMT Subject: CN=97f2226e2ffd33ad1aa5a8eb850886f13da1ac40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cd:ae:4c:a1:e4:b6:90:bf:fb:26:b1:98:dc: cb:47:e3:65:12:75:37:c1:f5:71:3c:0b:65:d5:8f: ab:bf:3e:b0:25:f9:96:2e:df:aa:7c:08:f4:9f:fc: 7c:e0:ea:f2:3c:5a:26:c6:da:88:1d:eb:43:af:ed: 56:f9:84:12:09:88:49:5b:0b:c4:f0:1d:c8:9c:d1: 04:fb:57:f3:96:38:2a:38:e3:ba:a9:c1:a3:3d:fb: 7d:5d:82:b3:f6:bf:d8:97:89:48:74:ea:0d:85:52: 6f:b8:38:b6:95:77:5b:7e:2d:5e:63:dc:8c:55:7d: c2:91:9c:e4:9f:b9:8f:20:1c:ac:84:f9:0a:53:6b: e8:55:08:bb:2d:7d:bc:a3:fc:2b:b1:49:20:0c:dd: d0:f2:df:7f:b0:4d:54:49:e1:58:3a:b4:00:f3:79: 9c:e5:75:43:86:3b:d3:92:80:82:3e:51:31:3e:49: 00:bf:81:47:cf:67:69:76:09:1e:ce:56:7b:6f:17: 82:33:2b:3b:c0:16:aa:27:e6:89:54:0c:97:b3:a1: 63:e7:f4:8d:ad:57:91:03:89:f1:35:65:eb:19:3a: ca:c1:52:e5:19:ec:bb:6e:e3:af:ea:40:26:8e:d8: 98:6d:55:3a:9b:71:d0:b6:a9:ed:2b:c7:7c:f4:56: 0c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F2:22:6E:2F:FD:33:AD:1A:A5:A8:EB:85:08:86:F1:3D:A1:AC:40 X509v3 Authority Key Identifier: keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9c:d0:61:3c:67:b2:4c:5e:2e:9c:c1:70:52:ef:7e:14:ba: 68:c0:ee:7b:40:5e:80:c6:31:55:e6:b4:4a:c9:e7:ba:80:b0: c7:3e:60:83:b7:3b:a8:bc:9e:da:1b:25:ca:e2:24:52:68:40: 7a:5a:b9:03:9c:07:a1:27:e5:c2:68:3e:b8:3f:18:50:21:b6: c8:05:d8:67:7c:6e:e3:5a:97:4a:de:46:50:77:ed:bc:f6:e8: 6c:28:9d:02:d3:a2:c1:db:16:be:75:d0:01:0f:95:ae:b8:70: 4f:61:74:2c:46:56:8e:38:bc:9a:bc:0f:82:26:a6:72:49:ef: 84:a7:2d:db:8b:59:8a:6f:13:bf:43:16:d2:70:29:75:45:10: c8:78:c0:3e:47:44:48:ab:8d:29:d7:12:a7:a7:50:5c:28:80: 3b:51:e1:30:2f:64:71:52:31:39:9e:f0:c4:79:f2:27:ff:0a: d4:f3:f8:94:5f:bc:46:7c:f1:dc:65:e9:74:d6:d5:ff:0a:64: ba:74:d2:c0:b9:b1:94:90:ab:37:8f:81:14:d1:c0:80:f4:00: 68:c1:1f:9f:fe:1d:3a:4f:33:b5:63:37:a9:d1:da:7c:e8:2b: 7e:35:92:eb:e4:11:16:49:82:42:a0:86:c6:c3:84:81:14:09: f3:af:ed:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTmk5vz2xqojx/LRJDRwRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxN2NiMTRjZTQwMTRhYzMyNjlkNzBlZWVhODljODcwNTVi MTc2ZjEwHhcNMjUxMjI0MTcwMDUxWhcNMjUxMjI1MTcwMDUxWjAzMTEwLwYDVQQD Eyg5N2YyMjI2ZTJmZmQzM2FkMWFhNWE4ZWI4NTA4ODZmMTNkYTFhYzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws2uTKHktpC/+yaxmNzLR+NlEnU3 wfVxPAtl1Y+rvz6wJfmWLt+qfAj0n/x84OryPFomxtqIHetDr+1W+YQSCYhJWwvE 8B3InNEE+1fzljgqOOO6qcGjPft9XYKz9r/Yl4lIdOoNhVJvuDi2lXdbfi1eY9yM VX3CkZzkn7mPIByshPkKU2voVQi7LX28o/wrsUkgDN3Q8t9/sE1USeFYOrQA83mc 5XVDhjvTkoCCPlExPkkAv4FHz2dpdgkezlZ7bxeCMys7wBaqJ+aJVAyXs6Fj5/SN rVeRA4nxNWXrGTrKwVLlGey7buOv6kAmjtiYbVU6m3HQtqntK8d89FYMsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfyIm4v/TOtGqWo64UIhvE9oaxAMB8GA1UdIwQY MBaAFIF8sUzkAUrDJp1w7uqJyHBVsXbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMt MWEyYWJkYTFhOWU1LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMtMWEyYWJkYTFhOWU1 LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5zQYTxn skxeLpzBcFLvfhS6aMDue0BegMYxVea0SsnnuoCwxz5gg7c7qLye2hslyuIkUmhA elq5A5wHoSflwmg+uD8YUCG2yAXYZ3xu41qXSt5GUHftvPbobCidAtOiwdsWvnXQ AQ+VrrhwT2F0LEZWjji8mrwPgiamcknvhKct24tZim8Tv0MW0nApdUUQyHjAPkdE SKuNKdcSp6dQXCiAO1HhMC9kcVIxOZ7wxHnyJ/8K1PP4lF+8Rnzx3GXpdNbV/wpk unTSwLmxlJCrN4+BFNHAgPQAaMEfn/4dOk8ztWM3qdHafOgrfjWS6+QRFkmCQqCG xsOEgRQJ86/tDw== -----END CERTIFICATE-----Generated at Thu Dec 25 02:46:09 2025 by rpki-client