This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json) Hash identifier: F/jMkzHFAmXswjf1cTYbMkuaEkQk7Ofrb/dmI/rYg/k= Subject key identifier: F9:10:24:43:EC:70:10:6C:95:B6:7C:5B:F9:B1:6A:53:34:AE:FF:22 Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff Certificate serial: 019B4A0362734DA433CF474A4AAB47EC79C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft Manifest number: 09B2 Signing time: Tue 23 Dec 2025 07:01:34 +0000 Manifest this update: Tue 23 Dec 2025 07:01:34 +0000 Manifest next update: Wed 24 Dec 2025 07:01:34 +0000 Files and hashes: 1: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: +92h4P+o3czf4/3M2Ka5tPuK8P9WGu6YpwyESFBHTPU=) 2: RO9l6hoPRiEk5kvu-1wGIx3JVQs.roa (hash: z3IHW9wPnoAAyV5Yp5JV/XIyxcaRpjPHnzXPpTc3PGc=) 3: zPmRtHrWAHHMjTbZqQxb_k1QEE0.roa (hash: b0+r/Py1tsQMqZ9+iwYrxYKeaOWfr9BHfO+bAPyD5ME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:62:73:4d:a4:33:cf:47:4a:4a:ab:47:ec:79:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff Validity Not Before: Dec 23 07:01:34 2025 GMT Not After : Dec 24 07:01:34 2025 GMT Subject: CN=f9102443ec70106c95b67c5bf9b16a5334aeff22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:62:de:fb:f8:e8:77:6a:5a:f1:6f:b7:cf:45: fa:a2:be:91:94:50:a6:da:12:59:22:33:bd:39:b0: c1:a0:c9:c8:c0:2e:97:bf:63:e9:4c:23:10:7e:06: b7:cf:7a:eb:10:ec:ed:bd:9c:07:7b:69:7d:13:b4: b8:06:6e:b6:a5:ab:21:c6:01:3f:fe:b0:cd:82:50: 20:2b:dd:d5:44:df:80:b4:bc:ef:28:4a:c3:c6:4b: 1b:cb:f0:32:32:06:c0:50:d2:db:38:f3:cc:56:3c: 60:e8:61:58:39:63:04:d3:8c:a0:1a:7c:88:e9:92: 5a:21:0c:9d:c8:64:39:15:62:1e:29:8e:34:0c:58: ce:a1:97:da:c4:32:ce:54:83:f2:76:01:83:be:68: 27:8f:dd:22:86:96:a8:08:e6:11:de:3e:eb:06:14: 2a:e9:93:e8:92:25:fa:07:9c:57:f0:b5:90:2c:38: 6f:5d:51:a4:cc:de:ee:07:3b:eb:1c:88:13:c7:b4: 56:9a:13:88:55:13:33:a3:7d:0a:3a:3a:28:b5:5a: d2:6e:91:85:9c:56:cc:30:c2:64:13:e0:dc:b5:6b: 3f:86:ac:24:51:a8:ed:10:ef:5d:9a:43:3e:d7:34: 7b:30:15:50:eb:56:db:85:d5:ab:8e:3f:31:82:1f: 05:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:10:24:43:EC:70:10:6C:95:B6:7C:5B:F9:B1:6A:53:34:AE:FF:22 X509v3 Authority Key Identifier: keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:80:18:72:0f:ff:1b:55:9e:82:c9:6b:73:cd:0f:8e:06:a7: aa:fa:bd:1c:99:f7:b7:9e:91:a5:96:84:1e:d4:fb:1a:85:82: 21:9e:31:d1:0f:02:01:35:4a:39:9a:37:41:62:87:33:eb:78: bd:9f:b3:4c:d9:10:9c:69:a5:67:06:9a:ad:f4:4a:31:5b:30: 2e:78:c3:8e:bc:99:09:84:6d:02:da:ac:1a:c5:00:5d:64:d6: 2c:37:57:c4:5f:74:2a:e0:a5:69:96:4c:34:01:dd:97:17:d5: 3b:c3:c7:fc:03:c0:af:f6:5d:d7:78:1f:bd:40:22:e0:9d:b9: 7e:91:3b:30:04:4f:1e:86:4e:85:c9:54:5c:9c:f3:f4:ae:6a: b7:fb:73:73:9e:c7:6c:ff:bb:a0:46:8c:c4:7a:b8:58:30:c4: 8f:32:1a:90:89:3b:3f:26:fd:1d:80:71:ff:0f:5a:79:52:56: fd:18:dc:90:f5:d8:65:37:78:0e:52:24:6b:c1:ea:46:9f:7b: 96:48:26:af:00:50:35:e7:a5:ac:a3:e0:3d:63:39:b6:5f:0b: d6:54:81:a0:6f:c0:b4:23:4d:24:6e:4b:39:29:33:40:27:f8: ce:3b:89:79:f1:35:b8:2b:f5:46:74:e0:c9:61:2e:ef:bf:70: 7a:5d:b0:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA2JzTaQzz0dKSqtH7HnIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NWEyZjY3ZDI0NWNiYTk1MThiMDE3MDYxYTcxNjkyZWU3 OWU3ZmYwHhcNMjUxMjIzMDcwMTM0WhcNMjUxMjI0MDcwMTM0WjAzMTEwLwYDVQQD EyhmOTEwMjQ0M2VjNzAxMDZjOTViNjdjNWJmOWIxNmE1MzM0YWVmZjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmLe+/jod2pa8W+3z0X6or6RlFCm 2hJZIjO9ObDBoMnIwC6Xv2PpTCMQfga3z3rrEOztvZwHe2l9E7S4Bm62pashxgE/ /rDNglAgK93VRN+AtLzvKErDxksby/AyMgbAUNLbOPPMVjxg6GFYOWME04ygGnyI 6ZJaIQydyGQ5FWIeKY40DFjOoZfaxDLOVIPydgGDvmgnj90ihpaoCOYR3j7rBhQq 6ZPokiX6B5xX8LWQLDhvXVGkzN7uBzvrHIgTx7RWmhOIVRMzo30KOjootVrSbpGF nFbMMMJkE+DctWs/hqwkUajtEO9dmkM+1zR7MBVQ61bbhdWrjj8xgh8FvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkQJEPscBBslbZ8W/mxalM0rv8iMB8GA1UdIwQY MBaAFBhaL2fSRcupUYsBcGGnFpLueef/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTkt YmIwMThjZmJlYWEyLzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTktYmIwMThjZmJlYWEy LzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAloAYcg// G1Wegslrc80Pjganqvq9HJn3t56RpZaEHtT7GoWCIZ4x0Q8CATVKOZo3QWKHM+t4 vZ+zTNkQnGmlZwaarfRKMVswLnjDjryZCYRtAtqsGsUAXWTWLDdXxF90KuClaZZM NAHdlxfVO8PH/APAr/Zd13gfvUAi4J25fpE7MARPHoZOhclUXJzz9K5qt/tzc57H bP+7oEaMxHq4WDDEjzIakIk7Pyb9HYBx/w9aeVJW/RjckPXYZTd4DlIka8HqRp97 lkgmrwBQNeelrKPgPWM5tl8L1lSBoG/AtCNNJG5LOSkzQCf4zjuJefE1uCv1RnTg yWEu779wel2wew== -----END CERTIFICATE-----Generated at Tue Dec 23 09:43:57 2025 by rpki-client