This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft File: gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft (raw, json) Hash identifier: i9GFAphRgsjo1THP5p4IkGel0b76Fdbxly3HaKRruFs= Subject key identifier: 8B:87:09:3E:54:93:38:19:26:BB:A9:8B:B6:2D:67:FC:78:FC:B5:6A Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56 Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356 Certificate serial: 019B631D802B4D588BBC334D606554A2109D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft Manifest number: 0F58 Signing time: Sun 28 Dec 2025 04:00:36 +0000 Manifest this update: Sun 28 Dec 2025 04:00:36 +0000 Manifest next update: Mon 29 Dec 2025 04:00:36 +0000 Files and hashes: 1: L47fpbavJjM8YwHHhvMkJOYd5vE.roa (hash: IzwhrGUTddMft7RJzZ/2mXaFd/PY/Xp0a/SU/LUo1YY=) 2: dCYxk7-D8dNtxIgEsnMqwJ6THLg.roa (hash: PjGfWgf8wj53bPtlEQkRSwYcsy5G/eLRYAuG9DVnO5o=) 3: dP1XMz72bEIizOJx_8e3gubbo08.roa (hash: 34zsks6roiR3rEQ6SRISFcNl3J9bQeeIWhcKnK78jO8=) 4: gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl (hash: YWn6eSvWEb75dJLFLW6Kavk19ylAV37k4nMolFWaOhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1d:80:2b:4d:58:8b:bc:33:4d:60:65:54:a2:10:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356 Validity Not Before: Dec 28 04:00:36 2025 GMT Not After : Dec 29 04:00:36 2025 GMT Subject: CN=8b87093e5493381926bba98bb62d67fc78fcb56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:d6:06:a4:6b:b2:6f:fc:6f:f5:41:b7:fa: bb:22:8f:89:a0:af:ec:2c:fa:da:73:a8:44:fd:3b: 24:fc:8f:38:21:a9:a9:b9:eb:5d:e1:62:f3:93:7d: 82:93:82:c0:a2:45:cb:d3:3a:0b:14:60:d2:39:29: 4b:0c:e0:22:08:4f:3a:72:e7:bf:4f:bd:03:00:34: be:42:e0:75:61:c9:0f:45:b8:f4:7f:c7:28:f4:82: e9:3e:73:58:a7:68:07:f4:96:20:13:e8:d1:3f:8c: 6a:86:9e:db:df:be:7f:d5:01:37:29:20:0f:66:8e: 7e:e0:ff:0e:a9:51:e1:21:93:82:d2:18:10:1a:c6: 74:83:2f:be:16:2f:26:6a:7c:09:b1:fd:2e:05:9b: 68:e1:b2:10:70:45:b1:fa:0f:29:29:02:82:7c:91: fb:60:35:6f:c7:13:f9:c0:c8:91:31:3c:ef:71:ea: 69:3b:c1:65:e6:78:9e:31:eb:0d:18:4f:59:33:b9: 41:c6:c1:95:49:10:31:8f:72:fb:2a:2f:e5:0c:99: 90:ed:de:80:3f:d6:54:c6:ee:6e:cb:73:6b:f9:64: 8f:bc:61:d2:54:dd:3d:1c:23:7b:da:dc:e0:7e:39: 80:f5:99:fc:80:d0:30:58:9c:92:d7:7b:d2:c6:86: 05:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:87:09:3E:54:93:38:19:26:BB:A9:8B:B6:2D:67:FC:78:FC:B5:6A X509v3 Authority Key Identifier: keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:54:5c:d4:32:f1:fa:1f:b6:e8:27:9e:cb:a5:12:13:71:e0: d2:8d:1a:9c:77:e1:ca:a2:db:11:52:ce:e1:42:b5:23:e2:32: 15:9e:ca:70:de:b3:da:68:1c:51:7f:e5:ab:f2:11:6a:95:49: 06:7c:d6:61:29:41:80:71:9b:00:98:6c:5f:29:3e:03:1e:9c: a4:18:54:89:22:37:f4:11:8b:46:0e:e4:35:ee:10:eb:21:f0: 7c:5e:5b:65:13:87:9d:8c:fe:76:a8:c1:0f:9b:c1:59:52:d5: 3b:1a:a0:04:70:0b:81:a7:96:d7:19:64:b4:2b:dc:1e:42:ae: 77:e1:0b:7c:6b:13:be:e1:33:1d:f2:ce:61:c7:86:8f:6e:b6: b9:6f:71:fd:fc:c7:25:bd:dc:5f:ca:ac:d8:73:b3:b0:fc:71: 94:9b:ec:6a:0b:7c:8d:38:69:e6:55:4c:09:09:b9:97:76:a8: f1:5d:09:ef:36:0d:2d:19:4b:ee:80:18:41:49:ec:96:56:7a: 7d:07:0c:f5:87:f0:01:89:de:34:7b:24:96:9a:e8:9a:5d:fe: 2d:06:43:c4:56:59:d1:2d:c4:4b:0d:cf:7b:64:b1:57:15:38: 10:aa:fb:df:f3:a0:46:a6:52:94:7d:90:5c:ae:0c:c5:5b:98: f5:fc:18:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHYArTViLvDNNYGVUohCdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZDdmZTczMTJlZmI0MmJkOGQxZWNkODJhYzc2MTkxZWEy NmMzNTYwHhcNMjUxMjI4MDQwMDM2WhcNMjUxMjI5MDQwMDM2WjAzMTEwLwYDVQQD Eyg4Yjg3MDkzZTU0OTMzODE5MjZiYmE5OGJiNjJkNjdmYzc4ZmNiNTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkrWBqRrsm/8b/VBt/q7Io+JoK/s LPrac6hE/Tsk/I84Iampuetd4WLzk32Ck4LAokXL0zoLFGDSOSlLDOAiCE86cue/ T70DADS+QuB1YckPRbj0f8co9ILpPnNYp2gH9JYgE+jRP4xqhp7b375/1QE3KSAP Zo5+4P8OqVHhIZOC0hgQGsZ0gy++Fi8manwJsf0uBZto4bIQcEWx+g8pKQKCfJH7 YDVvxxP5wMiRMTzvceppO8Fl5nieMesNGE9ZM7lBxsGVSRAxj3L7Ki/lDJmQ7d6A P9ZUxu5uy3Nr+WSPvGHSVN09HCN72tzgfjmA9Zn8gNAwWJyS13vSxoYFlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuHCT5UkzgZJrupi7YtZ/x4/LVqMB8GA1UdIwQY MBaAFILX/nMS77Qr2NHs2CrHYZHqJsNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYt MzdiMjFiYWIzYjAwLzEvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYtMzdiMjFiYWIzYjAw LzEvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplRc1DLx +h+26Ceey6USE3Hg0o0anHfhyqLbEVLO4UK1I+IyFZ7KcN6z2mgcUX/lq/IRapVJ BnzWYSlBgHGbAJhsXyk+Ax6cpBhUiSI39BGLRg7kNe4Q6yHwfF5bZROHnYz+dqjB D5vBWVLVOxqgBHALgaeW1xlktCvcHkKud+ELfGsTvuEzHfLOYceGj262uW9x/fzH Jb3cX8qs2HOzsPxxlJvsagt8jThp5lVMCQm5l3ao8V0J7zYNLRlL7oAYQUnsllZ6 fQcM9YfwAYneNHsklproml3+LQZDxFZZ0S3ESw3Pe2SxVxU4EKr73/OgRqZSlH2Q XK4MxVuY9fwYDA== -----END CERTIFICATE-----Generated at Sun Dec 28 07:33:59 2025 by rpki-client