This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft File: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json) Hash identifier: ySf5lwvFuW0w8ey5FUVM8ygZstDLb+k8F8MSgYIWRKU= Subject key identifier: D8:0B:15:52:D8:7F:44:33:AD:8B:3F:2A:45:50:77:AD:97:AF:32:EF Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F Certificate issuer: /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f Certificate serial: 019B4CCD0D5F545697C2D8CCC7AB43364F45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft Manifest number: 125E Signing time: Tue 23 Dec 2025 20:01:05 +0000 Manifest this update: Tue 23 Dec 2025 20:01:05 +0000 Manifest next update: Wed 24 Dec 2025 20:01:05 +0000 Files and hashes: 1: 91a4AyjiQ11AE-ejkjHD7dP2jCw.roa (hash: mqMxschgmHfJobGTtzuGdiipq4NqJDFBcrZK6ygd+ok=) 2: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: 7Xic5D+uOF2i4EDR4t5lygHAtiPwDD7nVw3zXQOGvyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cd:0d:5f:54:56:97:c2:d8:cc:c7:ab:43:36:4f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f Validity Not Before: Dec 23 20:01:05 2025 GMT Not After : Dec 24 20:01:05 2025 GMT Subject: CN=d80b1552d87f4433ad8b3f2a455077ad97af32ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:37:48:e9:c9:a5:1c:bd:02:99:24:5a:2b: 95:ee:fe:60:60:68:bc:56:ae:44:a7:05:49:6e:e9: ae:a7:19:a8:59:63:54:1e:a0:67:28:fe:b4:5d:22: 0c:a9:2f:6f:fa:8d:df:e8:06:8b:4e:b5:a9:d2:b8: 6c:09:8d:4c:ea:57:05:f7:2c:59:68:24:98:ef:99: 55:1c:38:44:0c:b1:e2:09:09:98:5f:57:1d:62:71: f0:54:43:8e:e3:25:fd:78:d2:16:35:32:7c:15:e9: 46:a1:a0:a2:61:a1:5e:a5:ca:ea:af:e7:15:2a:09: 50:af:80:64:52:0c:51:cd:e5:da:3f:52:42:d2:69: a9:9d:ec:b7:cd:b6:e0:0d:c8:8d:03:87:50:2f:96: 3e:d3:63:7f:d1:e3:eb:c7:4b:67:b5:07:8e:58:d6: 61:d9:51:83:db:e1:7f:dc:ba:5f:5d:a2:08:ef:ab: eb:57:c6:2a:07:bf:a3:f1:14:2e:fa:4c:5d:db:33: fc:ab:47:1b:fa:7f:3c:36:4c:19:51:e1:81:aa:d3: b9:10:6f:b0:8e:ea:8b:da:e8:a6:1c:8d:2c:f6:bd: d3:2d:d3:b5:ae:ca:e4:3a:79:5a:fa:bf:08:79:68: fa:4b:98:ca:58:ff:11:99:53:1e:fd:51:d3:b8:a9: 93:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0B:15:52:D8:7F:44:33:AD:8B:3F:2A:45:50:77:AD:97:AF:32:EF X509v3 Authority Key Identifier: keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:b0:59:24:4a:b3:b9:7a:a0:cc:01:1c:68:6a:38:75:21:5e: d8:98:c6:b9:83:06:16:09:15:6b:3f:8a:4c:3a:0e:19:0f:b4: 4e:5f:10:f4:43:fe:ba:2c:11:4a:1e:ee:a4:eb:d9:b5:2e:69: 91:db:7b:20:8f:6d:28:ab:d7:52:7e:4d:7c:6d:f4:d1:df:c1: 36:22:a9:9d:e7:3b:e1:e8:86:97:01:19:9f:ad:4e:1f:61:1e: cb:5a:9e:2e:82:23:f2:9a:55:c9:54:8f:5c:6a:41:c6:91:7f: 42:f6:ef:01:00:72:cd:b0:9a:e8:6e:94:df:5f:5d:6d:35:25: 29:b3:70:e8:41:8b:ed:05:cc:59:0b:a0:4d:5e:b8:90:36:5f: 4e:87:53:22:ce:6b:95:82:05:8c:3f:cc:b2:78:b4:f3:cd:a0: 2e:dc:31:21:97:ff:d6:cd:1d:a2:17:88:24:2f:ed:d0:21:10: cc:91:29:8b:c7:87:d7:5a:0c:f7:b8:1e:ce:2d:b7:da:ee:61: ef:40:01:64:bd:0f:39:1a:09:d0:d2:96:f0:34:13:90:a8:c0: 5a:22:53:7a:bb:cc:b9:af:be:f7:57:54:65:e1:81:49:2c:a3: 12:58:61:8d:f0:c7:4b:2b:55:78:1c:0f:a6:9e:13:2d:5a:9e: a1:b7:8e:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzQ1fVFaXwtjMx6tDNk9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMThlMGExOWFlNzkwZmE1MDM5NTE1NTlmNDdkNDFiNDdl N2ZkMGYwHhcNMjUxMjIzMjAwMTA1WhcNMjUxMjI0MjAwMTA1WjAzMTEwLwYDVQQD EyhkODBiMTU1MmQ4N2Y0NDMzYWQ4YjNmMmE0NTUwNzdhZDk3YWYzMmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3g3SOnJpRy9ApkkWiuV7v5gYGi8 Vq5EpwVJbumupxmoWWNUHqBnKP60XSIMqS9v+o3f6AaLTrWp0rhsCY1M6lcF9yxZ aCSY75lVHDhEDLHiCQmYX1cdYnHwVEOO4yX9eNIWNTJ8FelGoaCiYaFepcrqr+cV KglQr4BkUgxRzeXaP1JC0mmpney3zbbgDciNA4dQL5Y+02N/0ePrx0tntQeOWNZh 2VGD2+F/3LpfXaII76vrV8YqB7+j8RQu+kxd2zP8q0cb+n88NkwZUeGBqtO5EG+w juqL2uimHI0s9r3TLdO1rsrkOnla+r8IeWj6S5jKWP8RmVMe/VHTuKmTIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgLFVLYf0QzrYs/KkVQd62XrzLvMB8GA1UdIwQY MBaAFBsY4KGa55D6UDlRVZ9H1BtH5/0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hqZ29acm5rUHBRT1ZGVm4wZlVHMGZuX1E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mMmUyYzktY2VhYi00ZDdiLWE5ZDgt YTEwNTc3NmMzMzQ3LzEvR3hqZ29acm5rUHBRT1ZGVm4wZlVHMGZuX1E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mMmUyYzktY2VhYi00ZDdiLWE5ZDgtYTEwNTc3NmMzMzQ3 LzEvR3hqZ29acm5rUHBRT1ZGVm4wZlVHMGZuX1E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7BZJEqz uXqgzAEcaGo4dSFe2JjGuYMGFgkVaz+KTDoOGQ+0Tl8Q9EP+uiwRSh7upOvZtS5p kdt7II9tKKvXUn5NfG300d/BNiKpnec74eiGlwEZn61OH2Eey1qeLoIj8ppVyVSP XGpBxpF/QvbvAQByzbCa6G6U319dbTUlKbNw6EGL7QXMWQugTV64kDZfTodTIs5r lYIFjD/Msni0882gLtwxIZf/1s0doheIJC/t0CEQzJEpi8eH11oM97gezi232u5h 70ABZL0PORoJ0NKW8DQTkKjAWiJTervMua++91dUZeGBSSyjElhhjfDHSytVeBwP pp4TLVqeobeOEA== -----END CERTIFICATE-----Generated at Wed Dec 24 03:01:01 2025 by rpki-client