This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft File: gXFLKnOMo96ukVr4fDqRxhPhvEk.mft (raw, json) Hash identifier: iWEF+uTL3Ck4vknp4X81IIwylYBRfu50ZX5RAPmD7dI= Subject key identifier: 78:07:3C:08:F1:FE:4B:DA:71:E7:A2:CD:B2:D1:3D:7C:E1:4A:93:21 Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49 Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49 Certificate serial: 019B4438DD3C2BF8ADFC2C190FD7DC75613F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft Manifest number: 0813 Signing time: Mon 22 Dec 2025 04:02:15 +0000 Manifest this update: Mon 22 Dec 2025 04:02:15 +0000 Manifest next update: Tue 23 Dec 2025 04:02:15 +0000 Files and hashes: 1: 1--9ef5BuonyT90ODHV5G8KHwvGM.roa (hash: 96x1zDsthw+xfBLv+9YvZciWmPNAhtiP7Hkhk8XWewA=) 2: gXFLKnOMo96ukVr4fDqRxhPhvEk.crl (hash: /26GD3KtGp/Co7lV6XXvh1BFjG57Gax6R53kEX1kLHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:dd:3c:2b:f8:ad:fc:2c:19:0f:d7:dc:75:61:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49 Validity Not Before: Dec 22 04:02:15 2025 GMT Not After : Dec 23 04:02:15 2025 GMT Subject: CN=78073c08f1fe4bda71e7a2cdb2d13d7ce14a9321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f1:96:a2:f1:42:a6:d2:7d:95:63:5c:ca:81: 2a:fc:32:0c:ff:23:f6:6c:0d:24:c8:e6:d0:3d:f8: 77:c8:7f:e9:3d:fc:92:d1:00:9e:dd:9b:92:b3:8f: ac:07:d6:fb:4a:ee:48:51:0d:1d:0f:a9:9b:51:ee: 5a:27:a2:74:2e:88:97:dd:0f:41:60:77:b4:7f:0f: 69:4c:13:ba:28:15:4c:23:b7:80:81:eb:a4:68:c7: 99:4c:c3:6c:35:af:98:6f:43:1e:b1:c1:0d:98:ff: b9:dc:11:39:da:b6:f8:07:cf:84:fd:d3:47:32:1e: ef:20:eb:81:98:cb:87:d8:b4:6d:c4:52:b5:6e:eb: ca:ce:ef:29:35:3b:14:b4:ed:50:3a:e4:88:b2:16: 0d:af:f2:db:dc:59:70:36:8f:7c:e6:59:8d:2f:2f: 98:3d:39:20:8d:c9:01:c1:ca:9a:11:c9:e2:2c:58: 7b:c0:5f:ab:18:5e:ea:39:c7:45:02:93:6c:d0:6d: 30:1e:05:81:d0:92:1e:aa:df:57:93:79:e5:3f:0d: 95:3f:ea:e2:a6:87:f9:71:45:17:8a:a3:52:48:9d: 0a:88:ee:10:36:0f:20:0b:71:5f:b4:e7:35:7d:e2: bf:9c:54:d1:d2:eb:44:fc:fe:81:9c:2e:f4:aa:f0: 17:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:07:3C:08:F1:FE:4B:DA:71:E7:A2:CD:B2:D1:3D:7C:E1:4A:93:21 X509v3 Authority Key Identifier: keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:13:b1:ff:93:68:c4:1f:3e:e6:a3:d2:6a:ce:32:be:3f:78: 68:15:5d:81:a9:44:50:1a:3d:5d:2e:d6:1c:05:a3:e9:1e:55: 19:1e:5c:f3:c5:35:ae:bc:50:a4:3f:e2:49:67:6a:14:e3:31: 7e:c5:c0:b6:ed:67:24:b2:76:1c:76:dc:80:bb:2d:bf:06:01: 76:bd:f8:c9:57:f3:1f:dc:23:56:c3:3c:f1:19:a9:5a:94:0c: 45:f4:68:8d:a4:73:2c:6d:ed:4f:f1:72:96:d3:10:21:91:9e: b2:ea:8b:65:a1:80:69:66:66:50:54:2e:3a:fd:86:a2:f9:f5: 6a:0e:8b:e4:02:67:2e:ca:ee:6d:4a:22:ad:a8:97:a3:91:b3: 7d:24:d8:60:71:fb:22:e1:5f:75:ff:b6:54:23:3c:d4:4d:fb: 94:da:40:63:2f:5d:5d:78:2c:8e:5a:aa:26:be:ac:a0:55:e3: f0:c8:7a:c4:a4:cb:8a:f6:e7:d9:fd:8f:36:f6:6f:38:06:de: 7c:93:c7:87:60:48:12:bd:91:6a:50:fe:30:6a:f3:ec:3f:81: 46:34:12:25:32:de:b0:bf:77:1d:2b:24:7a:50:ca:96:97:1c: 98:4e:a8:a0:af:d3:c2:b5:a2:06:c2:89:4b:aa:e0:35:73:3e: 4e:9f:5d:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEON08K/it/CwZD9fcdWE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNzE0YjJhNzM4Y2EzZGVhZTkxNWFmODdjM2E5MWM2MTNl MWJjNDkwHhcNMjUxMjIyMDQwMjE1WhcNMjUxMjIzMDQwMjE1WjAzMTEwLwYDVQQD Eyg3ODA3M2MwOGYxZmU0YmRhNzFlN2EyY2RiMmQxM2Q3Y2UxNGE5MzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fGWovFCptJ9lWNcyoEq/DIM/yP2 bA0kyObQPfh3yH/pPfyS0QCe3ZuSs4+sB9b7Su5IUQ0dD6mbUe5aJ6J0LoiX3Q9B YHe0fw9pTBO6KBVMI7eAgeukaMeZTMNsNa+Yb0MescENmP+53BE52rb4B8+E/dNH Mh7vIOuBmMuH2LRtxFK1buvKzu8pNTsUtO1QOuSIshYNr/Lb3FlwNo985lmNLy+Y PTkgjckBwcqaEcniLFh7wF+rGF7qOcdFApNs0G0wHgWB0JIeqt9Xk3nlPw2VP+ri pof5cUUXiqNSSJ0KiO4QNg8gC3FftOc1feK/nFTR0utE/P6BnC70qvAXKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgHPAjx/kvaceeizbLRPXzhSpMhMB8GA1UdIwQY MBaAFIFxSypzjKPerpFa+Hw6kcYT4bxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWIt MTg5NzI0M2M2MmVmLzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWItMTg5NzI0M2M2MmVm LzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAthOx/5No xB8+5qPSas4yvj94aBVdgalEUBo9XS7WHAWj6R5VGR5c88U1rrxQpD/iSWdqFOMx fsXAtu1nJLJ2HHbcgLstvwYBdr34yVfzH9wjVsM88RmpWpQMRfRojaRzLG3tT/Fy ltMQIZGesuqLZaGAaWZmUFQuOv2Govn1ag6L5AJnLsrubUoiraiXo5GzfSTYYHH7 IuFfdf+2VCM81E37lNpAYy9dXXgsjlqqJr6soFXj8Mh6xKTLivbn2f2PNvZvOAbe fJPHh2BIEr2RalD+MGrz7D+BRjQSJTLesL93HSskelDKlpccmE6ooK/TwrWiBsKJ S6rgNXM+Tp9dLw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:29:18 2025 by rpki-client