This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft File: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft (raw, json) Hash identifier: 7wPRuyNlFMbDbGPURw7za538d3opcD4WLUCGrKBtOGE= Subject key identifier: A5:C3:15:8F:14:63:BF:4C:72:E5:1D:CB:30:84:03:C3:EA:45:FF:DA Authority key identifier: 1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA Certificate issuer: /CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da Certificate serial: 019B2BC177BB4BC45EEDD8A9AE65F626736B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft Manifest number: 103C Signing time: Wed 17 Dec 2025 10:00:57 +0000 Manifest this update: Wed 17 Dec 2025 10:00:57 +0000 Manifest next update: Thu 18 Dec 2025 10:00:57 +0000 Files and hashes: 1: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl (hash: 2mC1xeOhuGJA+ZIaYjbd78MPMUZi+scJzUHTOk9d+3E=) 2: dhbqsDMCYbdJQ5KWes-T7R0t68c.roa (hash: A26S4K/y1MLobATqv2Mkxdn527XJqQ0E6NlZCnsWU/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:77:bb:4b:c4:5e:ed:d8:a9:ae:65:f6:26:73:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da Validity Not Before: Dec 17 10:00:57 2025 GMT Not After : Dec 18 10:00:57 2025 GMT Subject: CN=a5c3158f1463bf4c72e51dcb308403c3ea45ffda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:98:f7:6d:e4:24:6e:0e:81:2d:ba:f0:bc: fc:13:96:80:7c:d4:fc:be:a0:48:00:33:2d:49:fe: 13:b1:ea:ca:38:17:b8:d0:65:f9:ea:5d:d1:41:8e: 2a:42:89:e7:e8:ca:a0:c0:9a:66:f4:39:8f:44:de: 3f:50:a0:16:c4:47:81:56:e8:55:63:00:77:3f:8f: 18:ca:48:6f:e3:29:a5:9d:32:82:f5:7d:46:f4:1a: 4d:51:79:81:98:a4:e8:88:63:c3:25:8a:58:b7:4f: 43:a8:b7:6a:b6:51:b1:16:8e:de:4c:e8:7c:7d:e4: 9c:8d:83:0c:6e:5c:d4:07:9f:b9:3c:25:bd:66:51: df:d6:cd:bb:58:44:bd:70:46:aa:81:35:58:fc:e6: f1:c2:5b:55:ff:39:f9:28:1a:f2:28:15:03:82:bb: c2:ca:f4:82:1d:36:8e:f8:90:c7:69:ec:74:df:ea: 54:b0:cf:d5:9c:5b:ef:f9:69:99:3f:9e:58:7c:c2: cf:a4:a6:4c:c8:74:03:07:9a:15:5f:43:6a:68:42: 80:96:34:a0:7e:aa:14:1d:19:dc:7d:fb:5c:bc:cf: 6c:b6:78:9d:63:e6:23:3b:98:dc:0a:63:93:a2:8e: 84:86:00:35:cf:bc:3a:08:47:f4:e2:1c:37:a5:a8: 0b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C3:15:8F:14:63:BF:4C:72:E5:1D:CB:30:84:03:C3:EA:45:FF:DA X509v3 Authority Key Identifier: keyid:1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:4c:bf:b7:4f:dd:84:f9:1a:53:7f:ee:1d:b6:15:49:9f:98: db:d1:36:1a:5c:06:21:d6:53:76:e6:14:78:a7:ea:bd:be:a0: 7e:28:53:73:35:b0:4b:82:85:63:43:d2:77:8b:1d:78:dc:19: 69:10:3d:93:e4:dd:85:f1:d8:7e:f6:42:1c:66:a7:a8:87:4c: 1c:16:b6:fa:e0:82:31:19:49:89:1f:68:ef:24:5e:41:15:ac: e1:87:9e:74:7a:6e:93:3e:88:d9:a4:73:8d:5c:75:65:d5:50: b5:68:72:51:bd:f2:0a:94:b9:6a:dd:b8:f5:a8:4e:03:e2:c8: 54:3e:ec:99:32:7c:77:b6:fb:18:7e:0e:5a:20:da:d2:57:89: fe:86:85:8d:66:6e:00:9c:69:c4:d1:d9:63:d9:28:17:dd:75: aa:d9:be:93:0d:4f:75:c9:b2:66:d9:35:1a:78:14:c1:22:6f: af:e6:a2:17:c8:55:25:e2:e9:f8:07:93:cc:eb:a0:55:b5:27: 49:2f:7b:6a:f2:cb:84:df:99:2e:88:d7:cb:be:d8:99:f6:86: 69:22:e7:c6:4b:ad:d1:21:90:f8:00:13:3c:2f:77:44:fa:74: 9b:78:d8:5d:c7:8f:0c:b6:6d:31:8f:3b:7f:3d:c2:c9:c2:3c: d0:ca:32:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwXe7S8Re7diprmX2JnNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMWI0YjVjMmRhYWE2ZmMzNTA3MWY0MzhmOTY4YWY2ZmY2 Y2E0ZGEwHhcNMjUxMjE3MTAwMDU3WhcNMjUxMjE4MTAwMDU3WjAzMTEwLwYDVQQD EyhhNWMzMTU4ZjE0NjNiZjRjNzJlNTFkY2IzMDg0MDNjM2VhNDVmZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqKY923kJG4OgS268Lz8E5aAfNT8 vqBIADMtSf4TserKOBe40GX56l3RQY4qQonn6MqgwJpm9DmPRN4/UKAWxEeBVuhV YwB3P48Yykhv4ymlnTKC9X1G9BpNUXmBmKToiGPDJYpYt09DqLdqtlGxFo7eTOh8 feScjYMMblzUB5+5PCW9ZlHf1s27WES9cEaqgTVY/ObxwltV/zn5KBryKBUDgrvC yvSCHTaO+JDHaex03+pUsM/VnFvv+WmZP55YfMLPpKZMyHQDB5oVX0NqaEKAljSg fqoUHRncfftcvM9stnidY+YjO5jcCmOToo6EhgA1z7w6CEf04hw3pagLcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXDFY8UY79McuUdyzCEA8PqRf/aMB8GA1UdIwQY MBaAFBsbS1wtqqb8NQcfQ4+Wivb/bKTaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kZGFjMGQtMzc0My00Y2QyLWE2YTMt YTEyNDZjNjdkOWRlLzEvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9kZGFjMGQtMzc0My00Y2QyLWE2YTMtYTEyNDZjNjdkOWRl LzEvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhky/t0/d hPkaU3/uHbYVSZ+Y29E2GlwGIdZTduYUeKfqvb6gfihTczWwS4KFY0PSd4sdeNwZ aRA9k+TdhfHYfvZCHGanqIdMHBa2+uCCMRlJiR9o7yReQRWs4YeedHpukz6I2aRz jVx1ZdVQtWhyUb3yCpS5at249ahOA+LIVD7smTJ8d7b7GH4OWiDa0leJ/oaFjWZu AJxpxNHZY9koF911qtm+kw1PdcmyZtk1GngUwSJvr+aiF8hVJeLp+AeTzOugVbUn SS97avLLhN+ZLojXy77YmfaGaSLnxkut0SGQ+AATPC93RPp0m3jYXcePDLZtMY87 fz3CycI80MoyZg== -----END CERTIFICATE-----Generated at Wed Dec 17 16:49:18 2025 by rpki-client