This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft File: GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json) Hash identifier: k67A+JCCzOulQuaDFIkkNjP6XFJpZDevW88dHWT8S3c= Subject key identifier: 78:77:88:B5:90:BA:74:3E:67:5B:A2:4C:94:66:72:1C:AA:F7:A3:4B Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d Certificate serial: 019B2B8A31468DC716D637617AD485E89F70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft Manifest number: 147C Signing time: Wed 17 Dec 2025 09:00:35 +0000 Manifest this update: Wed 17 Dec 2025 09:00:35 +0000 Manifest next update: Thu 18 Dec 2025 09:00:35 +0000 Files and hashes: 1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: WB/Ny05vd/cz+TNuSuPptAt95hhwLU9+o2G/yeGELMc=) 2: dh95O1dB3GK1CEkOtCIFzjLf5oE.roa (hash: iquwJa/eYSZ4o0HvbhTJ3GQJK6OG8r+hAE6Yg/LMclY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:31:46:8d:c7:16:d6:37:61:7a:d4:85:e8:9f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d Validity Not Before: Dec 17 09:00:35 2025 GMT Not After : Dec 18 09:00:35 2025 GMT Subject: CN=787788b590ba743e675ba24c9466721caaf7a34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:6e:71:b4:18:c2:8a:4b:a1:ab:1b:ed:af: a0:9f:13:7a:0e:ef:35:bb:7a:72:33:07:54:5d:6f: 00:59:aa:fd:ea:1f:31:ea:2f:23:30:1a:d8:0f:4a: 77:77:b5:f2:fd:88:40:d6:7d:6a:25:44:85:fa:a5: 58:53:8c:0b:a2:4d:4f:50:53:a5:39:14:fe:4e:d9: 05:d7:0e:ce:e8:e5:92:22:de:22:52:9d:2c:d1:1c: 47:03:cb:65:5d:a5:60:10:1c:db:1d:d2:30:c6:ea: fa:c6:c9:19:be:a6:44:6f:2c:a7:1f:e8:36:da:cb: d0:ef:00:3d:1a:77:59:d3:96:2f:6b:39:a3:18:5e: da:7d:65:2d:21:ed:8f:0c:de:b3:be:24:19:83:15: f7:a3:00:9d:54:4c:b8:43:8a:14:0e:c2:a1:24:ad: 50:3b:d9:6b:8c:84:86:9a:fe:4d:61:9d:d8:9b:32: 2a:6f:ea:e3:7d:b8:dc:22:c4:75:29:d6:98:ea:d2: f7:7f:a8:8d:09:93:bb:a0:47:66:17:e0:8f:02:56: 82:4d:c9:84:03:3a:6f:ab:c9:14:a3:8f:17:7d:a8: 74:83:1f:24:5e:4e:13:65:34:e3:24:65:04:8c:8e: 8b:fe:89:75:63:67:f5:4b:b0:e3:e0:b4:1d:d4:0a: e1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:77:88:B5:90:BA:74:3E:67:5B:A2:4C:94:66:72:1C:AA:F7:A3:4B X509v3 Authority Key Identifier: keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:19:47:87:b4:22:f0:c7:b9:f6:dc:a3:63:bb:45:ff:f5:8d: ef:c3:34:85:97:84:d9:c3:a2:a8:8b:a5:b5:ff:4b:e5:0c:ee: 17:a9:7d:25:b5:10:6f:2d:f8:bc:50:73:ed:25:3d:76:8c:42: a4:86:77:cd:e0:5c:16:48:12:fd:d1:a7:31:7d:1d:43:1e:fa: 5d:32:ed:7c:7f:c5:a4:5e:7c:40:71:90:c3:17:77:f8:5e:f6: 94:bc:50:af:57:db:01:31:d2:5e:6c:de:94:d7:69:3f:8e:7c: 27:0f:a9:e8:50:15:32:34:8f:78:67:ba:7c:1f:57:29:4d:e9: c1:81:48:f5:48:a1:5f:35:fb:98:52:6f:90:ac:52:82:36:12: 7f:5a:73:32:30:fe:87:27:fa:ac:cc:7c:cf:14:a0:a7:dc:46: f7:db:2d:71:4e:b3:30:34:0e:5a:e1:f6:84:36:c2:f8:fe:bb: 9c:4b:b6:eb:4e:01:a3:35:09:7f:42:fc:5d:86:25:ed:c3:70: 6a:f8:e5:3b:72:78:4a:5b:31:bf:b8:84:74:7a:03:60:c6:6c: 97:d5:02:19:3b:b6:7c:08:3f:59:44:f6:21:2e:c1:a3:06:74: 12:6f:93:85:33:64:ad:da:f3:6f:f1:80:1e:69:4c:bc:23:12: 2e:40:00:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrijFGjccW1jdhetSF6J9wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNjBiOTY2NzA4OTNmYzNkNjM3MWY2YzU3NDZjNWYyNmI2 YTIwM2QwHhcNMjUxMjE3MDkwMDM1WhcNMjUxMjE4MDkwMDM1WjAzMTEwLwYDVQQD Eyg3ODc3ODhiNTkwYmE3NDNlNjc1YmEyNGM5NDY2NzIxY2FhZjdhMzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsghucbQYwopLoasb7a+gnxN6Du81 u3pyMwdUXW8AWar96h8x6i8jMBrYD0p3d7Xy/YhA1n1qJUSF+qVYU4wLok1PUFOl ORT+TtkF1w7O6OWSIt4iUp0s0RxHA8tlXaVgEBzbHdIwxur6xskZvqZEbyynH+g2 2svQ7wA9GndZ05YvazmjGF7afWUtIe2PDN6zviQZgxX3owCdVEy4Q4oUDsKhJK1Q O9lrjISGmv5NYZ3YmzIqb+rjfbjcIsR1KdaY6tL3f6iNCZO7oEdmF+CPAlaCTcmE Azpvq8kUo48Xfah0gx8kXk4TZTTjJGUEjI6L/ol1Y2f1S7Dj4LQd1ArhbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHh3iLWQunQ+Z1uiTJRmchyq96NLMB8GA1UdIwQY MBaAFBpguWZwiT/D1jcfbFdGxfJraiA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMWMxZWMtYWI2NC00OTc5LWFmYjkt NmE2MTM5NGY2MjY5LzEvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xMWMxZWMtYWI2NC00OTc5LWFmYjktNmE2MTM5NGY2MjY5 LzEvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRlHh7Qi 8Me59tyjY7tF//WN78M0hZeE2cOiqIultf9L5QzuF6l9JbUQby34vFBz7SU9doxC pIZ3zeBcFkgS/dGnMX0dQx76XTLtfH/FpF58QHGQwxd3+F72lLxQr1fbATHSXmze lNdpP458Jw+p6FAVMjSPeGe6fB9XKU3pwYFI9UihXzX7mFJvkKxSgjYSf1pzMjD+ hyf6rMx8zxSgp9xG99stcU6zMDQOWuH2hDbC+P67nEu2604BozUJf0L8XYYl7cNw avjlO3J4Slsxv7iEdHoDYMZsl9UCGTu2fAg/WUT2IS7BowZ0Em+ThTNkrdrzb/GA HmlMvCMSLkAA9w== -----END CERTIFICATE-----Generated at Wed Dec 17 19:12:09 2025 by rpki-client