This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft File: gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json) Hash identifier: 5YvgntxEHk5ckOPpCv/EneHA/MJ6WMIrVosssRE6X0k= Subject key identifier: B8:72:B4:C1:3F:9E:15:6C:C3:C3:19:51:D8:43:72:21:9A:60:C5:F4 Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0 Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0 Certificate serial: 019B0F006446BD17BD19E251E54EBB1EC9E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 20:00:42 +0000 Manifest this update: Thu 11 Dec 2025 20:00:42 +0000 Manifest next update: Fri 12 Dec 2025 20:00:42 +0000 Files and hashes: 1: 3mULbMkLr_MPSOSnvFYfAUenRp4.roa (hash: 6qqpV0wkHRjm2TnedKwLS/E8U5BGoXw+wiRnm1KNFsU=) 2: JjY_rmjM0m285v9bnJnGMH-MzW4.roa (hash: Wfm9h1Fvy7QUJSpQZVDtJ3sdWPEGrotdzPy8ZnW4oPI=) 3: OSPVEMKxRvS3K2S9RynwSClpPy0.roa (hash: I2dq/kcaAdZwjzuTK1RJZZE0wsjKNorsCYjqSblF2e4=) 4: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: 0XYvOj3YWDBx1wS60H4GQXWzZqA5G9gpBTt3m8XYE9M=) 5: wlPsVBZE3IB9ajxNMFuhywUiQmU.roa (hash: Vf+lexsaTCbsX6oyeji8k6+eXormbDvLL1F56QDbmpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:64:46:bd:17:bd:19:e2:51:e5:4e:bb:1e:c9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0 Validity Not Before: Dec 11 20:00:42 2025 GMT Not After : Dec 12 20:00:42 2025 GMT Subject: CN=b872b4c13f9e156cc3c31951d84372219a60c5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:72:3e:2b:95:0e:f7:cc:a3:fe:a5:4b:1b:4c: 73:fb:f3:6b:69:be:d9:ae:2e:2a:be:7a:52:29:ea: eb:b9:ad:0d:8c:0b:d4:c1:6e:82:8b:28:59:9b:91: 3b:74:36:a1:68:72:48:55:57:1c:e7:29:74:e3:c6: d2:e3:4d:6f:1e:77:5d:9d:12:e8:7d:85:8c:2b:1b: 15:f2:d7:af:ce:17:87:5c:08:7b:7d:c9:3d:8a:89: 1e:0f:c1:7e:72:92:30:b2:69:56:e3:fa:7c:a9:90: 4e:1c:f0:35:d0:4d:0a:18:c1:9b:5e:66:e4:08:7d: b2:67:23:34:c9:02:8b:7b:60:9e:a9:47:c9:50:ae: db:df:1b:55:55:9a:b6:13:e8:28:b1:36:b7:2e:99: 7f:11:c4:17:58:42:55:d9:9e:06:fb:3d:8e:20:a4: 69:b9:ea:0f:d5:71:94:20:2c:69:1a:fa:73:87:df: cf:ca:20:f0:ec:9b:82:41:d9:ac:f9:23:a3:48:32: 55:17:49:e4:8c:7e:14:6e:c4:fd:86:a1:bc:4b:cf: ed:d6:22:66:ff:17:31:ea:f1:53:6f:c5:37:c8:70: f3:f5:6e:25:f7:86:64:62:2e:d3:b1:02:59:07:68: 06:1f:2a:7b:82:5e:43:d0:9f:50:df:0a:46:21:4e: fe:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:72:B4:C1:3F:9E:15:6C:C3:C3:19:51:D8:43:72:21:9A:60:C5:F4 X509v3 Authority Key Identifier: keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:87:6f:b2:77:2d:a8:b0:cc:e4:52:8a:8d:f1:23:33:59:ba: 41:c1:99:4c:33:ce:3d:e6:0e:38:d6:f8:c2:55:e4:58:d6:20: 2c:a5:c5:5d:ab:02:09:54:15:70:02:2f:be:97:01:14:98:20: 16:b4:d2:bd:d0:40:b5:0e:a0:47:8d:ed:23:e7:94:c9:7c:95: e9:b9:7f:01:54:ea:c5:7a:43:98:9c:9f:06:ce:ce:0a:ac:1b: b1:39:ed:9a:5e:3a:f0:fc:68:b7:17:2a:ca:14:ac:be:32:9e: 6b:ed:e4:74:88:46:af:1a:d6:d2:0d:1c:5e:26:1d:d0:c6:60: d5:6a:66:3b:3b:0a:a3:1f:a4:05:c2:a1:c2:cf:d7:ee:32:a6: ef:e2:e9:de:0a:25:4d:b6:52:8f:42:13:06:75:97:4b:57:a7: e8:ad:e2:d3:3b:40:45:65:02:57:65:18:f0:70:a9:91:db:40: fc:3a:93:c8:a1:0b:ae:4d:87:7f:17:7c:f6:3f:76:0e:5e:b2: 71:1d:d8:57:ec:45:87:07:92:69:d1:ff:6c:f2:b9:4c:d0:6c: 66:02:51:0c:a9:64:13:56:59:bf:33:f9:29:2e:84:60:a5:20: 54:cf:3f:85:42:e8:ad:66:b7:43:8c:9a:8d:a7:e1:4f:c9:7d: 52:fd:33:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAGRGvRe9GeJR5U67HsngMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyN2FmMTdmMDQ5OTYyN2U0YjNjOGNjNWMzMzNlYzRiOGU3 NjM1ZTAwHhcNMjUxMjExMjAwMDQyWhcNMjUxMjEyMjAwMDQyWjAzMTEwLwYDVQQD EyhiODcyYjRjMTNmOWUxNTZjYzNjMzE5NTFkODQzNzIyMTlhNjBjNWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHI+K5UO98yj/qVLG0xz+/Nrab7Z ri4qvnpSKerrua0NjAvUwW6CiyhZm5E7dDahaHJIVVcc5yl048bS401vHnddnRLo fYWMKxsV8tevzheHXAh7fck9iokeD8F+cpIwsmlW4/p8qZBOHPA10E0KGMGbXmbk CH2yZyM0yQKLe2CeqUfJUK7b3xtVVZq2E+gosTa3Lpl/EcQXWEJV2Z4G+z2OIKRp ueoP1XGUICxpGvpzh9/PyiDw7JuCQdms+SOjSDJVF0nkjH4UbsT9hqG8S8/t1iJm /xcx6vFTb8U3yHDz9W4l94ZkYi7TsQJZB2gGHyp7gl5D0J9Q3wpGIU7+ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhytME/nhVsw8MZUdhDciGaYMX0MB8GA1UdIwQY MBaAFIJ68X8EmWJ+SzyMxcMz7EuOdjXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgt NzMxM2M3ZjNjYTNmLzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgtNzMxM2M3ZjNjYTNm LzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACodvsnct qLDM5FKKjfEjM1m6QcGZTDPOPeYOONb4wlXkWNYgLKXFXasCCVQVcAIvvpcBFJgg FrTSvdBAtQ6gR43tI+eUyXyV6bl/AVTqxXpDmJyfBs7OCqwbsTntml468Pxotxcq yhSsvjKea+3kdIhGrxrW0g0cXiYd0MZg1WpmOzsKox+kBcKhws/X7jKm7+Lp3gol TbZSj0ITBnWXS1en6K3i0ztARWUCV2UY8HCpkdtA/DqTyKELrk2Hfxd89j92Dl6y cR3YV+xFhweSadH/bPK5TNBsZgJRDKlkE1ZZvzP5KS6EYKUgVM8/hULorWa3Q4ya jafhT8l9Uv0zbA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:20:20 2025 by rpki-client