This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft File: gXFLKnOMo96ukVr4fDqRxhPhvEk.mft (raw, json) Hash identifier: dv489mVENBfqjupNQxnulr8s68nK67cojjdLZS7MoIU= Subject key identifier: 80:2B:6A:7F:84:2B:D4:09:AB:9A:03:42:F9:61:F0:3C:AA:25:7A:B9 Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49 Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49 Certificate serial: 019B3E6DBD16FBA7A87C908663E87FC3027B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft Manifest number: 0810 Signing time: Sun 21 Dec 2025 01:02:17 +0000 Manifest this update: Sun 21 Dec 2025 01:02:17 +0000 Manifest next update: Mon 22 Dec 2025 01:02:17 +0000 Files and hashes: 1: 1--9ef5BuonyT90ODHV5G8KHwvGM.roa (hash: 96x1zDsthw+xfBLv+9YvZciWmPNAhtiP7Hkhk8XWewA=) 2: gXFLKnOMo96ukVr4fDqRxhPhvEk.crl (hash: Zx8AYX/FhMy0eeoULf2xRt8zdi1xBKcmjPCZ/DaeDHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:bd:16:fb:a7:a8:7c:90:86:63:e8:7f:c3:02:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49 Validity Not Before: Dec 21 01:02:17 2025 GMT Not After : Dec 22 01:02:17 2025 GMT Subject: CN=802b6a7f842bd409ab9a0342f961f03caa257ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dd:e2:0d:ec:d8:1d:10:e5:f0:07:fb:02:71: 2f:dd:84:85:44:c1:e0:90:e0:a3:93:c1:e0:72:72: f4:1d:85:e0:d8:36:ef:68:b5:2c:b2:a0:53:d5:bb: c6:ae:8b:e7:55:cc:c8:81:0d:4c:a0:fd:b7:8b:7f: e4:e2:e3:47:77:22:78:26:67:93:6d:92:24:c5:c2: 1a:8a:1c:53:f9:22:7a:80:08:d8:e5:ce:51:b2:b0: 22:4e:d6:48:a3:f1:3f:f2:52:d4:33:5b:5d:00:d8: 97:b1:57:5c:d2:f6:8a:b2:2a:e0:37:cf:af:e8:b8: ac:fb:74:0e:d9:93:79:f3:14:46:2e:48:de:48:d9: 18:6b:45:dc:e9:d2:cd:ea:75:4f:27:50:3a:6c:f3: bc:47:31:61:54:f8:7a:bb:6a:e5:c0:38:57:75:93: 5d:09:c3:e0:4a:f5:d2:a1:df:37:77:2d:1a:66:38: 28:e4:0f:e3:ea:8a:3b:a8:5d:11:cc:f5:80:d2:c3: 8d:a7:50:c9:14:d4:75:cb:3e:e3:95:61:6a:2f:c9: f9:2c:9d:4b:f4:9f:bb:1e:1a:2d:c4:60:30:fd:0c: f7:4a:1d:22:5a:3d:2e:1c:c5:10:4f:59:72:0b:30: f6:56:f3:5b:d4:69:3e:b2:81:10:44:e7:16:ee:db: 1d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2B:6A:7F:84:2B:D4:09:AB:9A:03:42:F9:61:F0:3C:AA:25:7A:B9 X509v3 Authority Key Identifier: keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:06:74:0c:c9:eb:25:76:70:84:4c:d0:cc:ce:8c:e1:b9:49: 24:9f:ca:b0:c1:cf:0f:25:2b:9e:9b:aa:f3:71:c5:36:c2:b1: 4b:5c:10:94:bb:1a:43:9f:da:7f:94:12:91:fd:72:4f:7c:a2: 6d:9e:d8:31:8d:e0:99:e4:bd:1f:b7:3e:f4:7d:88:4f:ed:57: f8:38:8d:0e:4e:f6:aa:9f:01:5d:c0:35:39:be:db:03:e8:44: a8:d1:11:44:08:69:64:a7:a0:41:62:58:18:fc:7d:1c:bb:38: 66:18:20:19:c8:2d:d1:e6:d0:8f:50:48:0a:90:4c:ab:01:3c: c7:9b:26:17:f8:3c:9b:d0:c1:88:cb:95:5b:da:88:a3:4a:f9: 82:c8:de:67:d2:72:3b:0a:6c:f6:01:68:60:f2:9e:c0:82:c6: 93:b8:61:9f:a1:95:80:4f:0a:50:33:be:d0:25:75:c0:2b:0c: 0a:47:85:66:86:3a:7d:9c:13:25:80:86:ef:48:a0:b6:58:d4: b6:66:26:e1:ce:84:da:59:2e:0f:1d:98:97:dd:28:71:c1:f4: d0:62:92:be:9f:1c:9f:20:c0:62:b1:45:e1:90:f9:d0:1c:de: a9:a6:4f:f1:52:df:58:be:ba:ac:f5:73:13:67:15:cd:92:95: 2b:26:15:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bb0W+6eofJCGY+h/wwJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNzE0YjJhNzM4Y2EzZGVhZTkxNWFmODdjM2E5MWM2MTNl MWJjNDkwHhcNMjUxMjIxMDEwMjE3WhcNMjUxMjIyMDEwMjE3WjAzMTEwLwYDVQQD Eyg4MDJiNmE3Zjg0MmJkNDA5YWI5YTAzNDJmOTYxZjAzY2FhMjU3YWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d3iDezYHRDl8Af7AnEv3YSFRMHg kOCjk8HgcnL0HYXg2DbvaLUssqBT1bvGrovnVczIgQ1MoP23i3/k4uNHdyJ4JmeT bZIkxcIaihxT+SJ6gAjY5c5RsrAiTtZIo/E/8lLUM1tdANiXsVdc0vaKsirgN8+v 6Lis+3QO2ZN58xRGLkjeSNkYa0Xc6dLN6nVPJ1A6bPO8RzFhVPh6u2rlwDhXdZNd CcPgSvXSod83dy0aZjgo5A/j6oo7qF0RzPWA0sONp1DJFNR1yz7jlWFqL8n5LJ1L 9J+7HhotxGAw/Qz3Sh0iWj0uHMUQT1lyCzD2VvNb1Gk+soEQROcW7tsdfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAran+EK9QJq5oDQvlh8DyqJXq5MB8GA1UdIwQY MBaAFIFxSypzjKPerpFa+Hw6kcYT4bxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWIt MTg5NzI0M2M2MmVmLzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWItMTg5NzI0M2M2MmVm LzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwZ0DMnr JXZwhEzQzM6M4blJJJ/KsMHPDyUrnpuq83HFNsKxS1wQlLsaQ5/af5QSkf1yT3yi bZ7YMY3gmeS9H7c+9H2IT+1X+DiNDk72qp8BXcA1Ob7bA+hEqNERRAhpZKegQWJY GPx9HLs4ZhggGcgt0ebQj1BICpBMqwE8x5smF/g8m9DBiMuVW9qIo0r5gsjeZ9Jy Owps9gFoYPKewILGk7hhn6GVgE8KUDO+0CV1wCsMCkeFZoY6fZwTJYCG70igtljU tmYm4c6E2lkuDx2Yl90occH00GKSvp8cnyDAYrFF4ZD50BzeqaZP8VLfWL66rPVz E2cVzZKVKyYVHQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:51:23 2025 by rpki-client