This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft File: GftWrckHHV6f2itmlDi5K_hj5Y8.mft (raw, json) Hash identifier: yqaG5CusmJgmHln5kHWGdLGyLg3Ht0i7b9o8UcmdbIQ= Subject key identifier: 8D:0D:CF:54:4B:FF:21:C8:3A:A2:A3:81:01:98:4E:8B:47:A3:0A:9D Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F Certificate issuer: /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f Certificate serial: 019B0F377637E5B43E9F3576921C79DDACFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft Manifest number: 1287 Signing time: Thu 11 Dec 2025 21:00:51 +0000 Manifest this update: Thu 11 Dec 2025 21:00:51 +0000 Manifest next update: Fri 12 Dec 2025 21:00:51 +0000 Files and hashes: 1: 97TEoE2zAQxZI3sREml1jxvx638.roa (hash: 88Edm2WqicmrATpjZjEgq8BI+OITrMBwRffegS2fN0U=) 2: GftWrckHHV6f2itmlDi5K_hj5Y8.crl (hash: hC9EOcjx43ABp9p93rVnAvDuRcId5qlVAdXEmwQhPzY=) 3: q9SsxYbRIp9e4XDgj9J3VkZ0CgM.roa (hash: vHSPBUTKHvDa0CMaWz0/b1NLlD2hxXAs+Bnl2Vh/Iqc=) 4: ssy_2Rdm-NB6qlZB6S5XdjkNovk.roa (hash: M4nmdu5lLDUg1zn32w5JxWA1YF5KBgjR54KBKiRLUIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:76:37:e5:b4:3e:9f:35:76:92:1c:79:dd:ac:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f Validity Not Before: Dec 11 21:00:51 2025 GMT Not After : Dec 12 21:00:51 2025 GMT Subject: CN=8d0dcf544bff21c83aa2a38101984e8b47a30a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:54:9c:93:dd:34:ae:6e:66:ce:da:9c:ad:96: 26:86:2c:27:d5:6a:33:cc:82:d7:ac:3d:6b:4b:b3: c9:18:40:3b:05:5e:50:fb:1d:d9:23:dc:bc:15:07: 0c:5f:d4:a8:49:f0:23:4d:81:f1:99:3a:6e:48:f5: de:89:d7:6e:bc:11:c6:0e:76:a7:df:c6:bb:e8:f5: 3c:29:a3:28:50:16:ad:f8:53:52:14:d6:6a:b3:5e: 20:15:fc:27:d0:c0:be:c6:8d:5c:7a:7d:d6:64:6b: 99:a4:3e:49:5f:c0:ae:7a:d7:3d:e6:be:05:87:58: 4e:d2:68:84:6c:d8:89:1c:c3:79:36:ec:01:24:28: ec:7a:e1:9a:1f:1c:ce:68:9c:94:34:f3:c3:c7:06: bd:88:1d:0a:db:06:79:64:6f:a0:5a:88:27:a6:9f: 18:32:8f:4a:0f:f1:67:c0:27:ee:2e:48:95:02:7f: fd:e4:59:cb:a7:66:1c:90:fb:c8:12:3e:31:da:92: 94:e0:9a:20:db:d8:e6:3a:1a:04:31:2e:67:8b:a7: 51:1d:b9:52:e6:ea:78:ad:20:5f:e9:37:24:2a:3d: a1:da:09:10:6a:b4:a3:e8:3b:3b:09:35:77:57:74: 9d:14:58:94:ee:64:18:6a:8c:a0:5f:18:df:19:a8: 90:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0D:CF:54:4B:FF:21:C8:3A:A2:A3:81:01:98:4E:8B:47:A3:0A:9D X509v3 Authority Key Identifier: keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:1a:1e:ae:1a:29:c0:a5:63:4c:c4:f1:5f:68:31:86:a0:94: 29:81:1f:f4:59:b6:3e:65:83:f0:3d:c1:ff:d1:c6:10:da:e9: 49:93:68:14:d4:d7:34:b3:96:c1:7f:15:9e:1b:c4:4a:71:f2: ba:19:0c:2a:dd:9b:96:e2:c0:72:46:9e:2f:b3:6e:3e:e4:7e: c2:59:fb:69:e7:5b:32:7d:da:c9:87:1d:3a:6d:84:8e:37:79: 36:c5:74:e2:22:40:77:16:23:1a:5a:98:ae:29:2a:88:f5:d7: 6d:ae:a8:46:67:aa:b4:09:73:e8:09:8a:72:e0:79:e8:1e:d4: ba:3b:e5:70:e6:dc:45:72:98:39:40:40:ba:7d:9f:40:fb:26: e9:fc:2e:44:38:83:e8:f4:c8:37:ea:77:91:ea:97:85:e3:f3: 03:dd:29:a7:b3:8e:b4:a0:60:7b:23:26:ac:d5:0c:b3:1a:91: 98:fd:22:a4:59:25:f9:6e:d2:f7:07:95:e4:36:fb:ba:d9:29: 2a:c4:0d:77:b7:50:02:b1:76:93:71:80:d9:d8:25:0f:28:9e: 68:23:0f:40:42:bf:6e:f6:0d:bb:3e:0b:36:08:72:b5:eb:fc: c1:1a:06:7b:1d:b0:fa:b9:29:e3:64:a2:ea:da:e3:4b:c1:b3: 54:2d:29:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN3Y35bQ+nzV2khx53az6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZmI1NmFkYzkwNzFkNWU5ZmRhMmI2Njk0MzhiOTJiZjg2 M2U1OGYwHhcNMjUxMjExMjEwMDUxWhcNMjUxMjEyMjEwMDUxWjAzMTEwLwYDVQQD Eyg4ZDBkY2Y1NDRiZmYyMWM4M2FhMmEzODEwMTk4NGU4YjQ3YTMwYTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolSck900rm5mztqcrZYmhiwn1Woz zILXrD1rS7PJGEA7BV5Q+x3ZI9y8FQcMX9SoSfAjTYHxmTpuSPXeidduvBHGDnan 38a76PU8KaMoUBat+FNSFNZqs14gFfwn0MC+xo1cen3WZGuZpD5JX8Cuetc95r4F h1hO0miEbNiJHMN5NuwBJCjseuGaHxzOaJyUNPPDxwa9iB0K2wZ5ZG+gWognpp8Y Mo9KD/FnwCfuLkiVAn/95FnLp2YckPvIEj4x2pKU4Jog29jmOhoEMS5ni6dRHblS 5up4rSBf6TckKj2h2gkQarSj6Ds7CTV3V3SdFFiU7mQYaoygXxjfGaiQ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0Nz1RL/yHIOqKjgQGYTotHowqdMB8GA1UdIwQY MBaAFBn7Vq3JBx1en9orZpQ4uSv4Y+WPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82MTgzOTktYzUzYi00Y2YyLTkzMGUt NjNlZWJlMDMyNWVjLzEvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82MTgzOTktYzUzYi00Y2YyLTkzMGUtNjNlZWJlMDMyNWVj LzEvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBoerhop wKVjTMTxX2gxhqCUKYEf9Fm2PmWD8D3B/9HGENrpSZNoFNTXNLOWwX8VnhvESnHy uhkMKt2bluLAckaeL7NuPuR+wln7aedbMn3ayYcdOm2Ejjd5NsV04iJAdxYjGlqY rikqiPXXba6oRmeqtAlz6AmKcuB56B7UujvlcObcRXKYOUBAun2fQPsm6fwuRDiD 6PTIN+p3keqXhePzA90pp7OOtKBgeyMmrNUMsxqRmP0ipFkl+W7S9weV5Db7utkp KsQNd7dQArF2k3GA2dglDyieaCMPQEK/bvYNuz4LNghytev8wRoGex2w+rkp42Si 6trjS8GzVC0pag== -----END CERTIFICATE-----Generated at Fri Dec 12 06:37:27 2025 by rpki-client