This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft File: Gk-AAcMMrFRuP5IQO0sScy38v1I.mft (raw, json) Hash identifier: U9FESRoA4eIwIrwS0ykLE9oXa8iMSUaFBuKqgoEsKUA= Subject key identifier: BC:CF:35:3B:2F:D4:89:4F:10:06:A0:8A:14:00:81:3F:5D:AC:1B:7B Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52 Certificate issuer: /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52 Certificate serial: 019B0EC9EAF1CDBA95AE2085103BCA73C773 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 19:01:12 +0000 Manifest this update: Thu 11 Dec 2025 19:01:12 +0000 Manifest next update: Fri 12 Dec 2025 19:01:12 +0000 Files and hashes: 1: 03PqHmjkj4TD2ylDKAOumX_8ZTA.roa (hash: x+gVojJiPW6JgGHksggk6Pxvk6Hei1FVA2Qg8c4io0A=) 2: F9dWkDI-kpGgHo1RGxktanl_gRQ.roa (hash: BuoIxKvYOd7Wk6s+uxgqf+pVlc2a+8mJGV3BltAm2us=) 3: Gk-AAcMMrFRuP5IQO0sScy38v1I.crl (hash: nFreuaz2BCjOyW6MOKR/Fg6OJE4fQwJ0G9F68keiCpg=) 4: eWcWfNZ-EfWW-NGvXQCC85ntpH8.roa (hash: JnQ17QGfxQtAemBJMFLXpPFmY/ueJsW7rAduSoORn4I=) 5: qa59xb1800lClBGKgPJD3m5Rw8s.roa (hash: g552CxuAT1A0kuubtT8ih3j4BuCostjRts289tICv1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:ea:f1:cd:ba:95:ae:20:85:10:3b:ca:73:c7:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52 Validity Not Before: Dec 11 19:01:12 2025 GMT Not After : Dec 12 19:01:12 2025 GMT Subject: CN=bccf353b2fd4894f1006a08a1400813f5dac1b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:67:fe:aa:7d:65:ad:90:2e:dc:81:61:db:d6: 19:87:22:1b:b6:00:e2:94:c8:62:29:e3:f9:a9:b7: 99:74:ef:18:e5:8e:c8:b5:51:e1:e7:48:ec:4e:76: 9c:88:37:a7:02:98:3d:4f:fd:51:69:6e:29:d6:d7: 57:cc:b4:10:9a:62:1a:60:71:76:7b:15:14:89:01: 9d:ec:21:1e:18:1c:57:df:29:b4:c3:45:99:21:2b: 88:fc:f0:fa:ab:42:c7:aa:9a:7c:95:b3:22:8f:fe: 7c:77:51:24:f0:03:a1:fe:87:3a:97:71:30:e5:c5: 37:9f:8f:09:76:fd:92:14:78:70:aa:4f:8b:72:41: bc:b1:e3:c1:f9:f4:fc:dd:cd:87:e2:d1:07:39:97: 4d:d6:3a:75:50:19:b1:25:55:42:40:2c:31:3e:c0: 6f:1f:fc:15:62:a4:67:78:54:6f:92:f7:30:ca:c6: 5b:4b:11:1e:3b:f1:f4:20:5a:18:be:cb:87:e8:22: 82:21:b7:b4:0f:13:cf:59:1b:96:80:3e:0a:15:e7: 36:3f:8e:73:c4:80:98:98:63:c1:d2:56:68:9f:43: da:12:0e:b4:00:d5:3b:d0:0a:f0:59:f1:c8:ea:d5: c7:d9:85:27:cd:70:6d:b2:98:47:62:d8:6d:63:67: d2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CF:35:3B:2F:D4:89:4F:10:06:A0:8A:14:00:81:3F:5D:AC:1B:7B X509v3 Authority Key Identifier: keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e3:22:ac:82:df:64:3a:fa:b1:0b:b2:32:36:7c:0a:b9:4b: 82:4d:80:1a:ac:6e:c8:81:c9:2d:e6:0e:c6:2d:f9:b6:b8:8d: ea:e1:fe:c8:7c:9c:33:4b:46:cf:c0:73:27:69:f8:a8:3d:66: cc:85:0d:fb:ab:84:64:36:51:ce:f6:ea:09:e6:5f:b7:b0:12: d8:74:cb:84:f2:7e:79:56:97:c2:56:94:5a:0d:46:3e:97:e6: 9c:60:e2:bf:ff:5a:a1:46:51:b4:79:52:28:b4:9d:5e:12:a1: 37:4b:aa:f2:74:0e:a4:25:06:e3:44:d2:56:a7:e5:66:63:b1: 13:e9:b7:33:ad:19:a7:92:af:d3:5d:e7:c1:11:b7:85:e5:b7: af:3b:04:da:17:d3:de:c9:9a:1f:8a:4b:d3:e2:77:d0:a0:83: bf:18:8b:45:39:80:00:76:d9:cc:ca:94:38:c2:1a:94:f5:97: 78:9f:4d:6e:fe:ca:ac:4a:71:ab:54:b7:ab:3c:91:fd:96:ac: 5b:ca:f8:f2:e1:81:d1:bf:6f:34:5c:6c:3c:c7:5b:22:ad:b7: fe:b0:b8:fb:97:8e:06:c8:3e:3e:03:96:23:63:6b:86:3f:d0: fd:10:66:d4:31:ec:16:f2:00:9e:79:da:64:33:a2:5f:5e:53: 46:5e:f1:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyerxzbqVriCFEDvKc8dzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGY4MDAxYzMwY2FjNTQ2ZTNmOTIxMDNiNGIxMjczMmRm Y2JmNTIwHhcNMjUxMjExMTkwMTEyWhcNMjUxMjEyMTkwMTEyWjAzMTEwLwYDVQQD EyhiY2NmMzUzYjJmZDQ4OTRmMTAwNmEwOGExNDAwODEzZjVkYWMxYjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGf+qn1lrZAu3IFh29YZhyIbtgDi lMhiKeP5qbeZdO8Y5Y7ItVHh50jsTnaciDenApg9T/1RaW4p1tdXzLQQmmIaYHF2 exUUiQGd7CEeGBxX3ym0w0WZISuI/PD6q0LHqpp8lbMij/58d1Ek8AOh/oc6l3Ew 5cU3n48Jdv2SFHhwqk+LckG8sePB+fT83c2H4tEHOZdN1jp1UBmxJVVCQCwxPsBv H/wVYqRneFRvkvcwysZbSxEeO/H0IFoYvsuH6CKCIbe0DxPPWRuWgD4KFec2P45z xICYmGPB0lZon0PaEg60ANU70ArwWfHI6tXH2YUnzXBtsphHYthtY2fSoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzPNTsv1IlPEAagihQAgT9drBt7MB8GA1UdIwQY MBaAFBpPgAHDDKxUbj+SEDtLEnMt/L9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNmM4NmQtNmM2NS00YTI1LWE4ZmEt MzhkNGYzMjExODk2LzEvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kNmM4NmQtNmM2NS00YTI1LWE4ZmEtMzhkNGYzMjExODk2 LzEvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+MirILf ZDr6sQuyMjZ8CrlLgk2AGqxuyIHJLeYOxi35triN6uH+yHycM0tGz8BzJ2n4qD1m zIUN+6uEZDZRzvbqCeZft7AS2HTLhPJ+eVaXwlaUWg1GPpfmnGDiv/9aoUZRtHlS KLSdXhKhN0uq8nQOpCUG40TSVqflZmOxE+m3M60Zp5Kv013nwRG3heW3rzsE2hfT 3smaH4pL0+J30KCDvxiLRTmAAHbZzMqUOMIalPWXeJ9Nbv7KrEpxq1S3qzyR/Zas W8r48uGB0b9vNFxsPMdbIq23/rC4+5eOBsg+PgOWI2Nrhj/Q/RBm1DHsFvIAnnna ZDOiX15TRl7xUw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:17:26 2025 by rpki-client