This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft File: GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft (raw, json) Hash identifier: n5sY47dlsTyxECTCm7LX2e83tv7/Z/MxL9h1cTg/DPA= Subject key identifier: D3:B7:56:34:7F:DC:4C:A1:19:FC:FD:48:03:99:03:0F:06:2E:F2:35 Authority key identifier: 19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E Certificate issuer: /CN=197fc930e4aa59b0303459f755698e8f998f471e Certificate serial: 019B3D90C87157625F6DEB2569409EF2AAD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 21:00:57 +0000 Manifest this update: Sat 20 Dec 2025 21:00:57 +0000 Manifest next update: Sun 21 Dec 2025 21:00:57 +0000 Files and hashes: 1: GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl (hash: oUy4DmZkPlNMETOvhylnfXSUXtb4wwpHXhyTKnr+z24=) 2: dPTbW5NvAJKveanwf9xsMOGfn5Y.roa (hash: DpFROJeoc1UpOy7/3HzFb7ViY51RvdrZHobQAff/jls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:c8:71:57:62:5f:6d:eb:25:69:40:9e:f2:aa:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=197fc930e4aa59b0303459f755698e8f998f471e Validity Not Before: Dec 20 21:00:57 2025 GMT Not After : Dec 21 21:00:57 2025 GMT Subject: CN=d3b756347fdc4ca119fcfd480399030f062ef235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:ea:e0:0f:47:f7:8c:85:ee:51:cd:d7:dd: ad:55:02:36:d8:bb:97:e9:b3:0a:06:3a:6b:2f:f4: e3:73:28:c1:4f:4e:31:3f:6c:d9:17:5b:7d:73:18: 0d:7b:b6:ed:a3:bf:0a:78:ac:5d:06:34:f3:15:4f: ed:96:08:41:08:37:52:77:18:dc:23:d4:34:85:e3: e7:72:f9:59:4a:3d:bf:a5:63:9d:e1:fb:09:c0:4a: b7:ab:e7:d6:72:71:b5:21:07:dd:a9:ba:b7:4d:fd: 5e:54:3f:d2:71:6f:49:4d:2f:b3:75:aa:96:ae:06: f4:c2:1d:16:e0:df:35:6b:74:77:96:8b:af:7c:90: 69:ec:93:68:a0:89:bc:bb:7b:67:73:4c:f3:da:68: e9:b5:93:71:e6:e8:6f:23:f6:a3:51:ec:32:37:5a: 92:96:6a:91:9f:24:bc:20:ac:45:24:40:d3:c5:66: 38:b8:61:2a:3c:61:ff:c1:5d:5d:c0:49:96:f7:c9: c1:ad:77:42:12:06:0e:db:e0:b7:f6:6f:60:8a:de: 45:8d:de:6c:e9:6a:5e:eb:f1:60:68:5d:55:92:d9: 8f:08:aa:c2:df:00:66:9c:9e:21:60:00:d0:6c:04: 73:f4:cc:75:a1:1e:2e:ae:2c:c8:a5:0b:97:5d:56: 51:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B7:56:34:7F:DC:4C:A1:19:FC:FD:48:03:99:03:0F:06:2E:F2:35 X509v3 Authority Key Identifier: keyid:19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:18:f7:9b:c0:34:25:58:de:a7:ee:56:88:ed:67:e3:fa:d8: 71:43:ad:da:b4:2e:52:45:d7:8f:18:3f:8b:e6:77:70:3a:7b: c9:01:78:ef:74:fa:67:2c:1c:f9:7f:90:52:28:e1:06:dc:ba: ad:35:c3:80:e4:89:74:f5:7d:24:d1:7b:dd:3a:a5:2f:d2:9e: 80:90:ac:04:81:40:55:4b:b1:a7:5f:50:87:21:60:24:03:73: 8e:fd:50:18:14:46:0a:b2:3c:2f:2b:89:73:77:f7:c6:ec:2b: c2:88:54:14:04:07:a6:ea:67:6d:bb:ca:88:b2:09:ae:ce:72: c1:91:d2:47:c5:ff:15:26:88:10:12:04:c9:8f:41:80:5d:b4: 34:b6:e1:2f:f7:6c:6f:ec:84:40:4c:66:a7:db:a7:c2:54:f1: e9:61:27:71:e2:24:ea:a3:59:02:f6:8a:85:97:99:5d:55:0a: 47:b9:50:ef:2f:0d:fa:73:f8:99:0b:81:11:12:0c:33:5b:fd: d1:dc:d3:71:8a:48:f6:4b:7e:5f:52:53:6d:92:33:b8:ed:de: 51:43:40:fe:6b:df:a4:80:dd:5a:b4:58:c8:d8:7c:d4:48:fd: bd:14:a9:32:22:ad:bc:12:f6:67:a8:78:ad:0f:e4:be:cb:4f: e9:dc:b5:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kMhxV2JfbeslaUCe8qrWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5N2ZjOTMwZTRhYTU5YjAzMDM0NTlmNzU1Njk4ZThmOTk4 ZjQ3MWUwHhcNMjUxMjIwMjEwMDU3WhcNMjUxMjIxMjEwMDU3WjAzMTEwLwYDVQQD EyhkM2I3NTYzNDdmZGM0Y2ExMTlmY2ZkNDgwMzk5MDMwZjA2MmVmMjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw23q4A9H94yF7lHN192tVQI22LuX 6bMKBjprL/TjcyjBT04xP2zZF1t9cxgNe7bto78KeKxdBjTzFU/tlghBCDdSdxjc I9Q0hePncvlZSj2/pWOd4fsJwEq3q+fWcnG1IQfdqbq3Tf1eVD/ScW9JTS+zdaqW rgb0wh0W4N81a3R3louvfJBp7JNooIm8u3tnc0zz2mjptZNx5uhvI/ajUewyN1qS lmqRnyS8IKxFJEDTxWY4uGEqPGH/wV1dwEmW98nBrXdCEgYO2+C39m9git5Fjd5s 6Wpe6/FgaF1VktmPCKrC3wBmnJ4hYADQbARz9Mx1oR4urizIpQuXXVZR5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNO3VjR/3EyhGfz9SAOZAw8GLvI1MB8GA1UdIwQY MBaAFBl/yTDkqlmwMDRZ91Vpjo+Zj0ceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1hfSk1PU3FXYkF3TkZuM1ZXbU9qNW1QUng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yZWEwZTktMjdmNy00ZDcxLWE5MDAt MjdiZTA5MTE4YzYxLzEvR1hfSk1PU3FXYkF3TkZuM1ZXbU9qNW1QUng0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yZWEwZTktMjdmNy00ZDcxLWE5MDAtMjdiZTA5MTE4YzYx LzEvR1hfSk1PU3FXYkF3TkZuM1ZXbU9qNW1QUng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRj3m8A0 JVjep+5WiO1n4/rYcUOt2rQuUkXXjxg/i+Z3cDp7yQF473T6Zywc+X+QUijhBty6 rTXDgOSJdPV9JNF73TqlL9KegJCsBIFAVUuxp19QhyFgJANzjv1QGBRGCrI8LyuJ c3f3xuwrwohUFAQHpupnbbvKiLIJrs5ywZHSR8X/FSaIEBIEyY9BgF20NLbhL/ds b+yEQExmp9unwlTx6WEnceIk6qNZAvaKhZeZXVUKR7lQ7y8N+nP4mQuBERIMM1v9 0dzTcYpI9kt+X1JTbZIzuO3eUUNA/mvfpIDdWrRYyNh81Ej9vRSpMiKtvBL2Z6h4 rQ/kvstP6dy1Sg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:56:47 2025 by rpki-client