This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft File: gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft (raw, json) Hash identifier: VcDhdk/CfQIVc06O/wYkCtUj8KIrEMvrkJ7qhxRXkP4= Subject key identifier: 2A:D3:53:E4:98:52:25:4A:76:01:17:94:28:EC:8F:F8:E4:49:24:4B Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33 Certificate issuer: /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233 Certificate serial: 019B35A0258B36F7C1F992E046DC49221FF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft Manifest number: 0AF8 Signing time: Fri 19 Dec 2025 08:00:46 +0000 Manifest this update: Fri 19 Dec 2025 08:00:46 +0000 Manifest next update: Sat 20 Dec 2025 08:00:46 +0000 Files and hashes: 1: RKmtjmx8dGmZLS6fAJiBKQnORQs.roa (hash: uAM4Z/WN2c7W0xTj1SOSxZNG72uS1HvTkZghAtYIMtE=) 2: gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl (hash: 0auHGsUiYSkdoq6HJCSDeiby5KEZMc93dA+NSkI3JbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 08:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:25:8b:36:f7:c1:f9:92:e0:46:dc:49:22:1f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233 Validity Not Before: Dec 19 08:00:46 2025 GMT Not After : Dec 20 08:00:46 2025 GMT Subject: CN=2ad353e49852254a7601179428ec8ff8e449244b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5c:ac:18:1c:73:42:0d:4f:f7:a6:6b:bd:ab: d5:69:e9:1d:13:ff:8b:31:cd:2e:f2:c4:29:b8:e7: ad:c3:e4:cc:67:3d:88:78:59:79:10:84:a0:90:f0: 7a:98:ad:17:77:60:7a:97:19:ba:f6:39:c8:2d:fc: 21:d5:d9:4c:9a:0d:e1:f6:1d:ab:8a:43:9a:0b:d8: 12:42:c2:c6:1a:02:d2:9a:80:62:7a:86:ab:c6:c7: ec:96:e8:c5:2f:2b:f4:48:eb:9a:82:92:38:41:8f: 9b:1d:40:ae:89:e5:35:e6:80:40:c5:d6:22:dd:56: 10:75:8d:cc:6f:3e:6b:2d:a3:e3:1b:d5:18:28:57: af:7e:f7:de:7d:30:82:9c:dd:f0:71:59:3e:0a:77: 7f:2c:3b:5f:73:8b:cb:06:f3:2d:84:f5:7a:fc:4c: bf:4d:20:5d:d1:9a:7b:c2:db:b4:36:9d:78:08:6f: 00:19:24:61:16:e3:34:d4:fd:e0:77:b1:d6:a1:0c: 26:f7:9f:a7:1f:18:09:d0:96:c3:1a:67:b2:d6:f3: 14:c3:ce:e6:0b:89:48:a2:3b:a3:31:4a:e4:e2:0e: 7e:79:58:4b:1d:dc:c7:92:70:cb:e8:86:ab:43:c9: ef:6c:83:1c:ea:a9:51:8b:81:fa:6f:6d:2f:76:09: 3f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D3:53:E4:98:52:25:4A:76:01:17:94:28:EC:8F:F8:E4:49:24:4B X509v3 Authority Key Identifier: keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:15:40:de:ba:98:05:09:de:f4:e5:1d:48:95:d8:2b:ce:38: 85:21:06:89:2a:62:bb:fb:d3:6b:ae:8b:23:eb:77:6e:6d:8b: 9b:37:95:b8:4f:37:0a:04:a1:18:39:1c:52:12:c1:5d:23:c2: 16:2f:35:c7:c3:f4:7a:60:bf:96:43:52:fe:bf:17:a9:c1:c8: 94:38:54:56:02:c0:cd:25:20:45:92:31:92:9e:7b:17:35:7c: 15:a6:10:83:f7:7e:a7:0a:df:f1:05:95:51:77:9b:9a:78:ac: 7f:8e:9f:52:ef:9a:f0:9d:58:bb:ad:66:3f:8f:7f:ad:0d:1b: a8:2f:ed:a9:d2:13:da:a1:b8:23:63:18:3f:c2:63:f2:ac:27: 47:60:38:e2:49:5e:3f:93:41:2d:55:f7:06:93:00:a0:f1:48: 20:e5:b7:96:56:86:5f:eb:98:85:1c:6c:2c:63:c8:da:b7:89: c4:44:8a:fc:63:24:aa:c4:7a:27:fe:41:f9:7e:bd:2f:d4:99: da:0b:f8:4a:db:6a:88:d9:2a:c4:c2:4a:09:c8:c6:bd:65:af: be:81:e5:5d:2e:4a:a5:cd:5b:17:08:a9:57:40:79:4b:2a:f6: de:0e:d7:73:d6:24:38:9c:00:da:d8:08:14:d2:d1:a2:d9:3b: 22:06:1e:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oCWLNvfB+ZLgRtxJIh/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjFhNDJiZjIyNjRjYjVlYmNlYzZlMTkwZDAyYTZkNTUz YjYyMzMwHhcNMjUxMjE5MDgwMDQ2WhcNMjUxMjIwMDgwMDQ2WjAzMTEwLwYDVQQD EygyYWQzNTNlNDk4NTIyNTRhNzYwMTE3OTQyOGVjOGZmOGU0NDkyNDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FysGBxzQg1P96ZrvavVaekdE/+L Mc0u8sQpuOetw+TMZz2IeFl5EISgkPB6mK0Xd2B6lxm69jnILfwh1dlMmg3h9h2r ikOaC9gSQsLGGgLSmoBieoarxsfslujFLyv0SOuagpI4QY+bHUCuieU15oBAxdYi 3VYQdY3Mbz5rLaPjG9UYKFevfvfefTCCnN3wcVk+Cnd/LDtfc4vLBvMthPV6/Ey/ TSBd0Zp7wtu0Np14CG8AGSRhFuM01P3gd7HWoQwm95+nHxgJ0JbDGmey1vMUw87m C4lIojujMUrk4g5+eVhLHdzHknDL6IarQ8nvbIMc6qlRi4H6b20vdgk/oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrTU+SYUiVKdgEXlCjsj/jkSSRLMB8GA1UdIwQY MBaAFIJhpCvyJky1687G4ZDQKm1VO2IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81NGI2NzgtYjJmZS00NDlkLWIzMjYt ZGNhZTcwZjFjOTNiLzEvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS81NGI2NzgtYjJmZS00NDlkLWIzMjYtZGNhZTcwZjFjOTNi LzEvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehVA3rqY BQne9OUdSJXYK844hSEGiSpiu/vTa66LI+t3bm2LmzeVuE83CgShGDkcUhLBXSPC Fi81x8P0emC/lkNS/r8XqcHIlDhUVgLAzSUgRZIxkp57FzV8FaYQg/d+pwrf8QWV UXebmnisf46fUu+a8J1Yu61mP49/rQ0bqC/tqdIT2qG4I2MYP8Jj8qwnR2A44kle P5NBLVX3BpMAoPFIIOW3llaGX+uYhRxsLGPI2reJxESK/GMkqsR6J/5B+X69L9SZ 2gv4SttqiNkqxMJKCcjGvWWvvoHlXS5Kpc1bFwipV0B5Syr23g7Xc9YkOJwA2tgI FNLRotk7IgYeZQ== -----END CERTIFICATE-----Generated at Fri Dec 19 17:23:38 2025 by rpki-client