This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json) Hash identifier: VcUKULAyrg6YM7IwnN0NLtsWsFt8uC4LOQl4BLsmZGk= Subject key identifier: 70:24:88:0E:46:B7:95:52:A5:D0:A4:0D:EA:18:6E:02:14:FC:CD:37 Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019AE3DF57D5AD60754B5585FCAA15BA7D4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft Manifest number: 0153 Signing time: Wed 03 Dec 2025 11:00:56 +0000 Manifest this update: Wed 03 Dec 2025 11:00:56 +0000 Manifest next update: Thu 04 Dec 2025 11:00:56 +0000 Files and hashes: 1: 087UupeobRWZv5Tg2oEF0C56iBA.roa (hash: zWP3Bk5tOFSv0zyFnnjB/V+owp0c/zcYuM6L9hK4AdI=) 2: 3k17-uWuUEzIQWTV_aVrN2V9Ofg.roa (hash: lbMYwlKT8p0c2RnTCHNjGMo+pJEqRoXVFA94xVV3t/E=) 3: Bfi6-xQT04yN66u_rQS1r7flXkU.roa (hash: PJBuPraxMMA88Mc0/9rfamS2pUKaPReKLKV0byRzJ3U=) 4: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: UQqxGsNiX6p4luquKImciDCEPb1c7w9mfHvKNxY8Oa8=) 5: Mt_VNn0wmc81hsecIMu3jqoMOsg.roa (hash: /qV7E1eaQO7DWdG03O+XJ/c74Qjz8Q2sixe0Z3MOhVo=) 6: NyZ3Dofc_Rv7ap76WDtCTKEXKj4.roa (hash: 3TqJB5Q7QyDWlaShmD68OJqAT+J+aYaPFIrNd+LhhvU=) 7: TAbKgUyv1M2o14k63ItFm954szQ.roa (hash: 0s5M02Od9+2ZIHBPyatRe7MUX/RFakfKEZMoY/+NOmo=) 8: eTWaJF1jcP1FVrHZa6cVmzIJVbg.roa (hash: bcxESYuVYuSLDJzSWqEVRgmG4yGHvDtFkg4deBqL9ZA=) 9: ji-mlSpBC_ldO2fH2xoveSznohQ.roa (hash: y40m1DQahvtjZ0nXGs/iy40JwpshjeqdE7p40jR78SQ=) 10: n0fnP9GXaFRJPhy5vbQyPQlsx1o.roa (hash: miBa72UXa7BSH2oPhnZ56lT+ncKxjPO6Ow6UUI4sQts=) 11: q980DZSkE5Qn7ArpF9csEKjlkQ4.roa (hash: kpNR/NWQa7mqrmGvQZLHhcKdp0yiHUbzVPv9O+jM+CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:df:57:d5:ad:60:75:4b:55:85:fc:aa:15:ba:7d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Dec 3 11:00:56 2025 GMT Not After : Dec 4 11:00:56 2025 GMT Subject: CN=7024880e46b79552a5d0a40dea186e0214fccd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:58:5d:b6:1e:40:bd:88:ce:26:5e:9e:b0:74: 97:ab:4b:03:c3:31:70:e1:2f:10:e0:e1:d6:9c:1b: 86:b6:c8:0d:d6:ad:62:d7:83:27:81:11:44:dc:0d: 09:eb:f6:a6:1e:94:2f:7c:ff:17:5b:cf:d8:50:f3: 4a:a0:ac:4b:8e:81:d6:6c:dc:43:a1:84:eb:2b:b3: c5:7f:1e:84:84:2f:0e:c4:b9:dc:3b:4a:3f:fa:5c: f7:65:61:ee:78:0f:c5:d3:80:ee:3f:6a:2c:51:79: de:c5:a3:25:91:5e:3a:80:a9:aa:a4:a9:dc:34:c2: 0c:d5:f7:a6:7e:a8:20:60:45:92:ee:53:85:1c:8d: 8f:cb:a1:dd:72:24:7a:b6:01:21:a6:cc:bb:2f:ea: a7:5e:47:3c:90:0b:39:91:d2:3d:20:15:1b:79:45: 98:31:8b:b8:71:86:97:93:21:9c:a9:24:93:18:39: 74:64:ae:c8:53:f4:3f:b2:e4:2a:12:f4:d2:51:df: 5e:56:0e:f4:c5:b8:53:3c:fb:48:2b:8e:f3:8e:f9: ec:88:9d:1b:20:15:96:e3:ba:c6:5a:11:e4:8a:4e: 1f:6f:26:9f:98:9b:9b:98:8d:79:95:8d:21:5e:62: 63:d7:c7:68:f3:89:27:47:fe:7c:0b:24:61:9f:c7: ec:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:24:88:0E:46:B7:95:52:A5:D0:A4:0D:EA:18:6E:02:14:FC:CD:37 X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:49:31:2e:da:83:5f:20:71:86:9f:62:32:94:c2:cb:be:e0: 8a:0f:cb:d4:01:42:e6:c5:ce:1f:cb:96:9c:32:97:14:58:20: b6:d7:57:4d:50:7f:36:60:3c:37:ff:3c:2e:0b:ab:a2:37:4e: d8:53:67:85:8b:9f:38:86:ab:48:2b:87:a2:1c:39:4d:ac:a0: e4:29:a8:8b:52:f4:90:c4:9c:58:3e:86:8d:88:42:1f:7b:41: 4a:d7:c7:58:ef:57:0f:28:90:d9:ff:87:9f:44:37:bd:25:e0: 7d:5e:e4:62:af:6e:46:c0:d2:d9:fe:26:c5:96:90:a9:bf:bc: d7:09:b9:21:16:b4:08:37:f2:3e:31:31:5e:e2:ad:1b:9b:14: 1d:01:5c:13:5b:f0:a2:cb:99:15:67:d0:1b:52:d3:4d:99:67: b8:f5:90:79:f7:09:02:0e:e8:56:10:6d:64:bf:dc:57:98:8c: 29:13:ae:97:39:0c:36:a3:49:16:54:85:8e:af:88:f8:08:ab: 80:e0:f0:2f:af:bf:01:b6:0c:8a:f3:d0:8f:c9:1d:64:62:c6: f8:5a:f5:cd:b7:f0:19:98:9e:53:86:48:61:18:33:a2:bf:f9: 85:da:4a:14:6e:5e:0a:9c:bf:6e:df:32:9c:96:04:d4:ea:b8: b1:54:32:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrj31fVrWB1S1WF/KoVun1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjUxMjAzMTEwMDU2WhcNMjUxMjA0MTEwMDU2WjAzMTEwLwYDVQQD Eyg3MDI0ODgwZTQ2Yjc5NTUyYTVkMGE0MGRlYTE4NmUwMjE0ZmNjZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61hdth5AvYjOJl6esHSXq0sDwzFw 4S8Q4OHWnBuGtsgN1q1i14MngRFE3A0J6/amHpQvfP8XW8/YUPNKoKxLjoHWbNxD oYTrK7PFfx6EhC8OxLncO0o/+lz3ZWHueA/F04DuP2osUXnexaMlkV46gKmqpKnc NMIM1femfqggYEWS7lOFHI2Py6HdciR6tgEhpsy7L+qnXkc8kAs5kdI9IBUbeUWY MYu4cYaXkyGcqSSTGDl0ZK7IU/Q/suQqEvTSUd9eVg70xbhTPPtIK47zjvnsiJ0b IBWW47rGWhHkik4fbyafmJubmI15lY0hXmJj18do84knR/58CyRhn8fsDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAkiA5Gt5VSpdCkDeoYbgIU/M03MB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0kxLtqD XyBxhp9iMpTCy77gig/L1AFC5sXOH8uWnDKXFFggttdXTVB/NmA8N/88LgurojdO 2FNnhYufOIarSCuHohw5Tayg5Cmoi1L0kMScWD6GjYhCH3tBStfHWO9XDyiQ2f+H n0Q3vSXgfV7kYq9uRsDS2f4mxZaQqb+81wm5IRa0CDfyPjExXuKtG5sUHQFcE1vw osuZFWfQG1LTTZlnuPWQefcJAg7oVhBtZL/cV5iMKROulzkMNqNJFlSFjq+I+Air gODwL6+/AbYMivPQj8kdZGLG+Fr1zbfwGZieU4ZIYRgzor/5hdpKFG5eCpy/bt8y nJYE1Oq4sVQyiQ== -----END CERTIFICATE-----Generated at Wed Dec 3 12:41:39 2025 by rpki-client