This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json) Hash identifier: fE8B+J/Jd6ATNO6gRtAawVd/70kzqYUaSJybwW+woNM= Subject key identifier: 48:7F:EC:00:4C:81:B5:B8:F1:B8:29:C5:BD:68:CE:D7:4E:05:08:71 Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1 Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1 Certificate serial: 019B3FECA37BB3640981AB70B361590F140B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft Manifest number: 0868 Signing time: Sun 21 Dec 2025 08:00:31 +0000 Manifest this update: Sun 21 Dec 2025 08:00:31 +0000 Manifest next update: Mon 22 Dec 2025 08:00:31 +0000 Files and hashes: 1: 8sYphYrrmRM_ErwAJ8gqIzEpDGo.roa (hash: rt/OwZDBbcaVJA7rLlh63ti0IkxjXIhkThQceeCTgkI=) 2: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: W9MvCE2UtP59GZFwvI7MD/f0ZbAfzNQSUxo9yHhLRd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:a3:7b:b3:64:09:81:ab:70:b3:61:59:0f:14:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1 Validity Not Before: Dec 21 08:00:31 2025 GMT Not After : Dec 22 08:00:31 2025 GMT Subject: CN=487fec004c81b5b8f1b829c5bd68ced74e050871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:10:ad:79:82:c9:16:2e:3a:43:35:b5:e3:b7: aa:86:ba:bb:7a:ef:11:8c:7b:63:d6:17:5f:88:a1: f5:7e:a0:c1:42:04:3a:e4:c2:09:ed:e3:f7:61:6f: 7f:c4:ab:cc:f1:19:24:33:d1:5a:b5:92:37:ad:fb: e6:e7:cf:be:71:dc:16:e0:26:46:c6:cb:60:04:37: 4d:a5:ec:a9:19:c2:e4:e6:d3:1c:51:8a:e2:a0:1c: 23:2c:03:1d:c7:3c:13:5f:27:bf:47:1d:0e:41:7b: 4b:11:b8:fc:11:b1:31:11:ac:3d:73:c7:d3:b5:ba: af:a5:be:f1:43:8e:72:46:8c:3b:a6:c1:25:9c:90: 33:ca:b5:6b:a1:87:6a:c2:9a:c6:89:35:7b:4f:18: b6:20:dc:eb:64:10:43:7e:84:b8:91:e3:9a:42:52: 56:25:05:17:82:bd:d7:9b:97:59:89:0c:32:7a:6e: 57:9b:5f:3b:87:52:93:05:ec:16:34:4b:f4:35:45: 35:8b:3c:d4:38:67:e8:70:0c:0e:26:51:ca:54:1a: 42:a2:9f:18:d3:8c:97:37:c6:c4:65:27:37:0d:66: e2:97:50:6f:84:32:8a:f8:bb:83:c1:5d:ed:39:bc: 8c:2a:ff:6f:3f:b8:c9:a8:0f:f0:89:70:59:dd:2d: 9c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7F:EC:00:4C:81:B5:B8:F1:B8:29:C5:BD:68:CE:D7:4E:05:08:71 X509v3 Authority Key Identifier: keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:04:2b:5c:d4:29:b5:45:be:5b:a6:2a:35:5e:51:53:78:7d: cf:75:37:46:e7:4f:b2:49:80:68:b7:14:b4:d7:10:13:30:c0: 1e:a8:60:db:bc:45:c1:44:da:3d:0f:54:a1:75:79:f4:d8:fb: ff:db:9f:31:a5:70:7e:db:d4:55:b4:41:be:5f:4d:37:2e:1a: 65:00:5e:a9:65:4b:4e:ec:ab:9c:4e:87:48:1c:70:9c:2a:6c: a3:f6:4e:8b:2b:59:a9:33:0a:9d:f8:0e:b1:28:a9:73:53:b6: d4:26:cc:bf:83:d9:79:60:fd:18:6b:83:f3:c1:1d:69:69:b1: 45:9a:62:7e:09:af:25:d8:f0:74:70:3a:25:e6:05:48:a7:4f: c9:a0:7a:3e:18:8f:5d:c2:44:57:ba:61:38:80:ee:5b:3b:f2: 08:81:64:f5:b3:29:0e:32:ce:bc:28:83:6f:1f:e6:81:4c:ee: ec:46:28:82:9c:f9:fb:2f:5f:41:48:be:a7:22:3d:5e:d1:67: bd:20:5d:55:ec:41:ac:97:17:5e:ff:d7:2f:c7:7d:de:d2:27: ea:f4:e0:02:81:06:90:c9:e2:c7:eb:c6:a2:ce:ff:43:0c:53: 14:01:e9:0f:70:34:76:02:87:7b:96:c0:e1:14:84:95:f9:e8: d0:03:04:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7KN7s2QJgatws2FZDxQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxN2NiMTRjZTQwMTRhYzMyNjlkNzBlZWVhODljODcwNTVi MTc2ZjEwHhcNMjUxMjIxMDgwMDMxWhcNMjUxMjIyMDgwMDMxWjAzMTEwLwYDVQQD Eyg0ODdmZWMwMDRjODFiNWI4ZjFiODI5YzViZDY4Y2VkNzRlMDUwODcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBCteYLJFi46QzW147eqhrq7eu8R jHtj1hdfiKH1fqDBQgQ65MIJ7eP3YW9/xKvM8RkkM9FatZI3rfvm58++cdwW4CZG xstgBDdNpeypGcLk5tMcUYrioBwjLAMdxzwTXye/Rx0OQXtLEbj8EbExEaw9c8fT tbqvpb7xQ45yRow7psElnJAzyrVroYdqwprGiTV7Txi2INzrZBBDfoS4keOaQlJW JQUXgr3Xm5dZiQwyem5Xm187h1KTBewWNEv0NUU1izzUOGfocAwOJlHKVBpCop8Y 04yXN8bEZSc3DWbil1BvhDKK+LuDwV3tObyMKv9vP7jJqA/wiXBZ3S2ccwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEh/7ABMgbW48bgpxb1oztdOBQhxMB8GA1UdIwQY MBaAFIF8sUzkAUrDJp1w7uqJyHBVsXbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMt MWEyYWJkYTFhOWU1LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMtMWEyYWJkYTFhOWU1 LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAQrXNQp tUW+W6YqNV5RU3h9z3U3RudPskmAaLcUtNcQEzDAHqhg27xFwUTaPQ9UoXV59Nj7 /9ufMaVwftvUVbRBvl9NNy4aZQBeqWVLTuyrnE6HSBxwnCpso/ZOiytZqTMKnfgO sSipc1O21CbMv4PZeWD9GGuD88EdaWmxRZpifgmvJdjwdHA6JeYFSKdPyaB6PhiP XcJEV7phOIDuWzvyCIFk9bMpDjLOvCiDbx/mgUzu7EYogpz5+y9fQUi+pyI9XtFn vSBdVexBrJcXXv/XL8d93tIn6vTgAoEGkMnix+vGos7/QwxTFAHpD3A0dgKHe5bA 4RSElfno0AMEmw== -----END CERTIFICATE-----Generated at Sun Dec 21 14:59:13 2025 by rpki-client