This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft File: gz8MJRPUNTtAzvg5F57r-HOCRcY.mft (raw, json) Hash identifier: HZO6OUw04Aji9k4cmuzUJIae2oEZbF1Mv4Jc7H6l3ZE= Subject key identifier: 2F:CD:94:4D:E2:66:49:16:63:FD:80:CF:E7:6C:EA:33:0F:34:89:35 Authority key identifier: 83:3F:0C:25:13:D4:35:3B:40:CE:F8:39:17:9E:EB:F8:73:82:45:C6 Certificate issuer: /CN=833f0c2513d4353b40cef839179eebf8738245c6 Certificate serial: 019B51BC39650CA0067066A9F3AE8CE6AE91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz8MJRPUNTtAzvg5F57r-HOCRcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft Manifest number: 1267 Signing time: Wed 24 Dec 2025 19:00:48 +0000 Manifest this update: Wed 24 Dec 2025 19:00:48 +0000 Manifest next update: Thu 25 Dec 2025 19:00:48 +0000 Files and hashes: 1: gz8MJRPUNTtAzvg5F57r-HOCRcY.crl (hash: M8t8IE+0ugvGjdPkggNuO5KWIYJXWxNBTJot9jS4UWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft rsync://rpki.ripe.net/repository/DEFAULT/gz8MJRPUNTtAzvg5F57r-HOCRcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:39:65:0c:a0:06:70:66:a9:f3:ae:8c:e6:ae:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833f0c2513d4353b40cef839179eebf8738245c6 Validity Not Before: Dec 24 19:00:48 2025 GMT Not After : Dec 25 19:00:48 2025 GMT Subject: CN=2fcd944de266491663fd80cfe76cea330f348935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:64:33:bd:67:5c:f1:85:d6:1f:75:d0:1f:04: aa:b6:5f:70:0d:15:e1:de:82:36:53:a3:0f:26:15: 45:86:91:3a:b8:68:8d:5d:c3:45:2c:ae:77:c2:36: de:58:16:d7:eb:9b:6d:13:34:33:f2:cc:9e:58:4d: d9:a4:47:fb:2a:5a:bb:99:77:e7:a3:7d:32:01:b0: b9:e7:cb:f2:46:46:27:54:a9:34:a8:d8:eb:ef:ed: 50:ef:4b:8b:5a:2f:75:27:50:62:d3:88:34:2e:ef: d6:35:5a:c0:37:35:25:51:0f:05:cc:44:00:d9:d9: e7:4f:ae:5f:09:0c:7b:99:65:17:47:86:f6:bf:c2: 53:cd:40:33:df:b5:27:30:5b:71:97:43:c7:1f:5d: d8:33:74:a8:aa:68:de:09:94:2a:a6:de:96:b3:cc: 75:f3:a5:3a:02:33:0b:94:84:f8:8b:42:3f:1c:6c: 75:e7:ad:b1:ff:d4:24:8c:9a:4c:b4:95:8b:a6:82: b6:ef:47:7c:34:86:55:c6:71:1e:90:a5:62:69:d7: d1:34:9d:a9:53:51:15:24:10:73:ba:0d:6f:a7:14: be:de:d7:98:3f:5a:75:62:39:28:08:bf:25:fa:54: 67:e2:06:53:8a:1f:80:71:de:7e:4f:96:de:77:d9: f6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CD:94:4D:E2:66:49:16:63:FD:80:CF:E7:6C:EA:33:0F:34:89:35 X509v3 Authority Key Identifier: keyid:83:3F:0C:25:13:D4:35:3B:40:CE:F8:39:17:9E:EB:F8:73:82:45:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz8MJRPUNTtAzvg5F57r-HOCRcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1f:07:48:2a:88:18:26:c5:5f:16:74:5f:d1:89:c9:1d:18: 6b:07:6b:91:7d:cc:75:96:ed:81:56:af:38:58:88:43:57:2f: 44:ba:ec:f1:e7:a3:61:e9:6f:a0:01:a8:af:cb:ca:4e:9e:5f: db:cc:36:8a:b3:57:dc:f0:a7:30:38:ed:0f:9e:1b:9c:b9:80: b4:d6:26:87:5d:f7:7c:b2:97:3a:7b:d1:e2:62:da:97:46:e1: ab:f1:2a:8e:3d:48:5e:5d:76:d4:cb:fb:bc:bc:3f:e1:c7:22: 45:7f:f3:2a:3d:67:62:cf:6f:0b:8c:85:11:3c:db:11:b7:7c: 08:b5:c4:d6:d4:a5:35:41:2c:2b:ff:96:6f:94:95:06:9f:dd: 1b:89:80:93:33:7d:9e:f2:fb:91:50:5c:3c:71:85:98:85:03: e2:cf:6a:14:9c:bd:4c:25:a3:89:55:df:66:e5:51:64:3e:f0: 67:dc:76:d6:cd:12:e0:5e:92:ee:1d:35:65:da:43:e3:80:ce: a0:6c:3f:4d:1a:dc:76:be:58:c7:dc:92:a6:4e:a3:59:05:82: 6d:71:b0:e8:49:53:b6:36:d9:10:28:f2:1c:77:1b:35:29:c0: 11:26:b8:7b:1c:3c:54:07:23:2d:4c:ea:12:7c:46:75:78:d4: be:c2:b2:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvDllDKAGcGap866M5q6RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2YwYzI1MTNkNDM1M2I0MGNlZjgzOTE3OWVlYmY4NzM4 MjQ1YzYwHhcNMjUxMjI0MTkwMDQ4WhcNMjUxMjI1MTkwMDQ4WjAzMTEwLwYDVQQD EygyZmNkOTQ0ZGUyNjY0OTE2NjNmZDgwY2ZlNzZjZWEzMzBmMzQ4OTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GQzvWdc8YXWH3XQHwSqtl9wDRXh 3oI2U6MPJhVFhpE6uGiNXcNFLK53wjbeWBbX65ttEzQz8syeWE3ZpEf7Klq7mXfn o30yAbC558vyRkYnVKk0qNjr7+1Q70uLWi91J1Bi04g0Lu/WNVrANzUlUQ8FzEQA 2dnnT65fCQx7mWUXR4b2v8JTzUAz37UnMFtxl0PHH13YM3SoqmjeCZQqpt6Ws8x1 86U6AjMLlIT4i0I/HGx1562x/9QkjJpMtJWLpoK270d8NIZVxnEekKViadfRNJ2p U1EVJBBzug1vpxS+3teYP1p1YjkoCL8l+lRn4gZTih+Acd5+T5bed9n2SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/NlE3iZkkWY/2Az+ds6jMPNIk1MB8GA1UdIwQY MBaAFIM/DCUT1DU7QM74ORee6/hzgkXGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o4TUpSUFVOVHRBenZnNUY1N3ItSE9DUmNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85ZjJmYzgtOGYyYy00N2UwLTk3ZGEt ZWQwN2VjZjJkYzM2LzEvZ3o4TUpSUFVOVHRBenZnNUY1N3ItSE9DUmNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi85ZjJmYzgtOGYyYy00N2UwLTk3ZGEtZWQwN2VjZjJkYzM2 LzEvZ3o4TUpSUFVOVHRBenZnNUY1N3ItSE9DUmNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATx8HSCqI GCbFXxZ0X9GJyR0YawdrkX3MdZbtgVavOFiIQ1cvRLrs8eejYelvoAGor8vKTp5f 28w2irNX3PCnMDjtD54bnLmAtNYmh133fLKXOnvR4mLal0bhq/Eqjj1IXl121Mv7 vLw/4cciRX/zKj1nYs9vC4yFETzbEbd8CLXE1tSlNUEsK/+Wb5SVBp/dG4mAkzN9 nvL7kVBcPHGFmIUD4s9qFJy9TCWjiVXfZuVRZD7wZ9x21s0S4F6S7h01ZdpD44DO oGw/TRrcdr5Yx9ySpk6jWQWCbXGw6ElTtjbZECjyHHcbNSnAESa4exw8VAcjLUzq EnxGdXjUvsKygw== -----END CERTIFICATE-----Generated at Thu Dec 25 01:21:14 2025 by rpki-client