This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft File: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json) Hash identifier: Ewt6BXh+npKMEsXZDK64NygtoD86RoVq4l6kljn1K8I= Subject key identifier: CA:31:1B:5E:D2:D1:AF:65:77:FF:D4:AE:34:74:07:6D:04:E8:99:D8 Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F Certificate issuer: /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f Certificate serial: 019B3F4896DF66E3D79356C2835773CC47B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft Manifest number: 1257 Signing time: Sun 21 Dec 2025 05:01:20 +0000 Manifest this update: Sun 21 Dec 2025 05:01:20 +0000 Manifest next update: Mon 22 Dec 2025 05:01:20 +0000 Files and hashes: 1: 91a4AyjiQ11AE-ejkjHD7dP2jCw.roa (hash: mqMxschgmHfJobGTtzuGdiipq4NqJDFBcrZK6ygd+ok=) 2: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: gqrDT+19eA3f9PU6pUVi60d1pG15EYt8KD6Dp0JuW4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:96:df:66:e3:d7:93:56:c2:83:57:73:cc:47:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f Validity Not Before: Dec 21 05:01:20 2025 GMT Not After : Dec 22 05:01:20 2025 GMT Subject: CN=ca311b5ed2d1af6577ffd4ae3474076d04e899d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:4b:e1:cf:a3:5f:23:6b:fe:b4:57:a5:85: 97:30:3d:87:3a:ba:14:a7:49:fc:f2:ab:8a:24:27: 86:3f:e3:2d:14:b4:45:b0:7c:3a:80:bb:8c:eb:62: 93:c2:3a:95:38:7f:28:10:89:8a:fb:4f:77:98:d2: 2b:05:da:c9:95:2f:e8:33:f3:b5:ef:79:3f:9c:87: 3e:6f:b0:76:7b:83:36:1d:59:2b:c0:81:3a:a7:bd: 35:7f:b6:48:6b:ff:bf:03:0d:46:6f:96:41:78:6c: e3:e7:ae:21:3b:25:a8:c5:63:08:59:24:6b:91:95: 50:c9:3f:84:63:04:c4:ab:16:b4:80:04:4f:36:f6: 1a:1d:65:b5:94:46:36:44:6f:22:9b:46:e4:97:34: 3e:53:00:a3:61:75:ef:d3:bd:bc:5f:dd:92:8c:86: f8:8c:d3:ef:e5:87:ca:c6:a1:5c:21:9c:c8:c3:c8: 91:af:59:01:3c:9d:f4:21:3a:5f:0a:34:1f:81:ce: 7b:c6:4d:87:90:96:b7:ce:ce:0c:a1:ff:90:cc:85: d4:53:32:87:06:23:fe:05:58:bd:9d:f7:2f:61:f0: 46:a8:76:c1:00:df:c3:d7:6c:bc:fa:98:8b:fd:41: 16:ee:80:a0:ba:2a:8a:c0:f9:15:8b:b8:db:e3:20: d4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:31:1B:5E:D2:D1:AF:65:77:FF:D4:AE:34:74:07:6D:04:E8:99:D8 X509v3 Authority Key Identifier: keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:67:70:08:a2:f5:3d:68:f6:81:0c:30:05:c1:99:51:8f:ba: 75:b9:33:d6:34:18:51:0b:d8:f9:30:7b:7c:8f:ca:19:21:74: ca:de:b9:6a:19:d9:93:5d:14:24:34:5e:cf:8e:d8:44:32:16: ed:01:b5:c1:84:67:fa:35:98:d9:d4:fd:75:31:91:c2:7d:7f: 5e:30:3e:fc:69:40:3c:c8:33:4a:11:56:8f:d2:85:7d:1e:40: a4:25:be:4d:39:e1:07:25:1c:2c:3a:a4:71:ef:ba:21:80:00: a5:9f:9c:6c:67:ab:af:83:f3:3e:14:f8:d6:a0:ee:58:f1:b4: d8:4f:da:93:41:97:2b:69:3d:d4:b1:56:dd:7d:c4:87:6a:f3: 67:1a:46:db:3d:b8:ff:12:a3:23:03:e3:47:9c:be:18:8f:6a: 03:14:12:40:07:65:fb:7c:03:9d:da:55:6f:8b:6e:ca:f9:25: d8:6a:8c:bf:aa:22:80:fa:da:29:9f:48:9d:93:10:a8:4b:f7: 2f:46:52:f1:f7:d9:d2:4f:09:1c:36:94:b0:9a:2d:84:28:93: ac:ef:dc:92:6d:70:59:ae:11:8e:5e:6a:ab:bb:96:75:85:b1: 48:98:95:d4:6e:d0:99:40:ee:98:93:1c:61:03:0e:bd:e6:50: 84:a5:11:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SJbfZuPXk1bCg1dzzEe2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMThlMGExOWFlNzkwZmE1MDM5NTE1NTlmNDdkNDFiNDdl N2ZkMGYwHhcNMjUxMjIxMDUwMTIwWhcNMjUxMjIyMDUwMTIwWjAzMTEwLwYDVQQD EyhjYTMxMWI1ZWQyZDFhZjY1NzdmZmQ0YWUzNDc0MDc2ZDA0ZTg5OWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWJL4c+jXyNr/rRXpYWXMD2HOroU p0n88quKJCeGP+MtFLRFsHw6gLuM62KTwjqVOH8oEImK+093mNIrBdrJlS/oM/O1 73k/nIc+b7B2e4M2HVkrwIE6p701f7ZIa/+/Aw1Gb5ZBeGzj564hOyWoxWMIWSRr kZVQyT+EYwTEqxa0gARPNvYaHWW1lEY2RG8im0bklzQ+UwCjYXXv0728X92SjIb4 jNPv5YfKxqFcIZzIw8iRr1kBPJ30ITpfCjQfgc57xk2HkJa3zs4Mof+QzIXUUzKH BiP+BVi9nfcvYfBGqHbBAN/D12y8+piL/UEW7oCguiqKwPkVi7jb4yDUGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoxG17S0a9ld//UrjR0B20E6JnYMB8GA1UdIwQY MBaAFBsY4KGa55D6UDlRVZ9H1BtH5/0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hqZ29acm5rUHBRT1ZGVm4wZlVHMGZuX1E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mMmUyYzktY2VhYi00ZDdiLWE5ZDgt YTEwNTc3NmMzMzQ3LzEvR3hqZ29acm5rUHBRT1ZGVm4wZlVHMGZuX1E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mMmUyYzktY2VhYi00ZDdiLWE5ZDgtYTEwNTc3NmMzMzQ3 LzEvR3hqZ29acm5rUHBRT1ZGVm4wZlVHMGZuX1E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2dwCKL1 PWj2gQwwBcGZUY+6dbkz1jQYUQvY+TB7fI/KGSF0yt65ahnZk10UJDRez47YRDIW 7QG1wYRn+jWY2dT9dTGRwn1/XjA+/GlAPMgzShFWj9KFfR5ApCW+TTnhByUcLDqk ce+6IYAApZ+cbGerr4PzPhT41qDuWPG02E/ak0GXK2k91LFW3X3Eh2rzZxpG2z24 /xKjIwPjR5y+GI9qAxQSQAdl+3wDndpVb4tuyvkl2GqMv6oigPraKZ9InZMQqEv3 L0ZS8ffZ0k8JHDaUsJothCiTrO/ckm1wWa4Rjl5qq7uWdYWxSJiV1G7QmUDumJMc YQMOveZQhKURCA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:16 2025 by rpki-client