This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft File: GNgB3p_opmgHWIF4I642ugZcYQ0.mft (raw, json) Hash identifier: NkMGU+cxTCCOzkk0VzKGl1yt7+nIBQsIz25eKJQyq+o= Subject key identifier: 69:3F:1A:C7:9C:F5:8A:50:BE:A1:EE:50:36:C6:CD:E6:FF:AE:FE:D4 Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d Certificate serial: 019B10EF15D3EB32EA11D5A18DE7F0A385E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft Manifest number: 1774 Signing time: Fri 12 Dec 2025 05:01:02 +0000 Manifest this update: Fri 12 Dec 2025 05:01:02 +0000 Manifest next update: Sat 13 Dec 2025 05:01:02 +0000 Files and hashes: 1: C4rk1AoVqjrEH7_zmAJ_svnQgQc.roa (hash: 6jKvc5VnDLqI6HwXgEfuuUIvLcH534eewNyGGwZxdKE=) 2: GNgB3p_opmgHWIF4I642ugZcYQ0.crl (hash: cN396QBNO2jNC70nMno5G6qE7tHBvL+Yy5OOyfIfFgI=) 3: O6hC_E85D-gML2iRrUU2b5ibO0s.roa (hash: F14l9yzbuoxNtXqq8ma/CyqbNDJtpPWFpWAVl55tljo=) 4: RHkq_2B9aSMLyQYFQ9FNfjZTBIs.roa (hash: H0KL1J+ki0U19ojTdr1t7y2YJD+4cxGfJhTHY1ROEwg=) 5: kb5y1-Zbrkx7MXP5JuLQmArjfW8.roa (hash: HnOpO7aMn3/CAKcuytA4hwDqnkBIYl9jaOvFbzTHg2g=) 6: pZmFD-f-bh4pXBFGtCsTwrl3XA0.roa (hash: QUgueN8QgFQMRwHuvSGXOdyJNx8a23P2PHJjPzXyVW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ef:15:d3:eb:32:ea:11:d5:a1:8d:e7:f0:a3:85:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d Validity Not Before: Dec 12 05:01:02 2025 GMT Not After : Dec 13 05:01:02 2025 GMT Subject: CN=693f1ac79cf58a50bea1ee5036c6cde6ffaefed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:60:77:b2:5d:8a:d5:12:a8:2b:8c:ba:51: c4:70:68:92:8b:61:c3:6b:42:9e:40:94:fa:67:ef: c7:d7:25:8c:b2:a4:12:ac:0a:2a:d2:25:11:d2:aa: 41:fa:89:64:c1:f8:f0:9e:5a:fb:3f:8c:3f:19:5b: 41:6a:39:a1:42:29:f3:ab:60:16:52:34:80:2a:76: f1:b8:dd:be:36:60:cc:99:f8:b0:34:89:25:7e:89: 8f:71:91:d2:e8:7f:21:d7:ee:84:84:a0:1a:4a:7f: c0:07:b6:dc:12:ee:ce:81:10:1d:c6:8a:ce:68:8d: 6b:40:b1:64:06:2c:bc:35:87:a6:ea:a3:6d:7c:48: d9:eb:4c:33:1d:31:98:41:0f:13:23:d4:05:39:da: 62:f6:69:06:aa:4f:cc:8c:68:27:0f:d6:44:d6:55: 24:8e:05:0d:d7:20:d9:ed:0a:c8:47:32:18:02:b0: 18:8b:f8:9d:75:58:70:96:9a:19:c9:22:31:4f:1e: 36:7c:d3:b7:02:31:6b:34:7c:98:ca:6d:75:2f:7c: ec:42:a9:3f:4c:d6:d7:09:f0:63:92:3e:a1:d6:45: bf:bd:59:82:50:84:c2:a9:34:00:ec:e7:15:c6:56: 4e:9a:e7:ae:e1:c0:17:e7:ba:d7:30:ec:8b:55:9e: e4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3F:1A:C7:9C:F5:8A:50:BE:A1:EE:50:36:C6:CD:E6:FF:AE:FE:D4 X509v3 Authority Key Identifier: keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f2:98:05:38:d5:69:85:e5:9e:a9:c8:19:75:5d:7b:bf:e0: 79:a6:f6:eb:ab:c6:b1:13:a8:65:64:b7:1d:1b:ad:e4:f9:cd: 6a:56:4b:b8:ef:e9:2c:39:9d:06:ba:13:69:37:d5:7c:1d:2f: d9:e5:76:ba:11:a3:84:b2:6e:3f:98:75:5a:05:8e:da:99:4c: 18:3a:22:aa:c2:6c:9b:dc:dc:16:b8:dd:52:82:ce:1e:c7:eb: 23:ee:b5:07:95:83:b9:6c:95:fe:fe:44:22:0b:37:35:56:86: 0c:7d:21:6a:94:fc:a3:ba:33:f0:5c:a3:3e:16:41:82:8b:36: d5:5c:cf:de:a8:fe:7d:35:ec:0a:55:7a:a0:c3:6f:7f:9e:f3: 1b:88:d0:ec:08:41:db:d9:b0:b2:ee:d4:7f:37:06:86:d4:77: 56:97:7e:28:c3:be:fd:1b:ed:c8:6a:58:0d:63:83:fc:fa:5d: 73:b5:b1:58:dc:5a:b7:15:fb:f9:76:cd:a3:b6:72:1f:f7:47: f7:59:71:e7:4b:d9:5d:e3:b9:68:ec:30:fa:44:78:0e:8a:1b: 1c:41:1f:0f:0d:6d:c0:f1:5b:af:89:44:f3:f1:cf:2a:00:3e: 14:41:1a:8d:b3:d8:30:4f:c9:e5:6c:1d:3c:37:2a:18:a6:4b: 99:87:05:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ7xXT6zLqEdWhjefwo4XoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZDgwMWRlOWZlOGE2NjgwNzU4ODE3ODIzYWUzNmJhMDY1 YzYxMGQwHhcNMjUxMjEyMDUwMTAyWhcNMjUxMjEzMDUwMTAyWjAzMTEwLwYDVQQD Eyg2OTNmMWFjNzljZjU4YTUwYmVhMWVlNTAzNmM2Y2RlNmZmYWVmZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/hgd7JditUSqCuMulHEcGiSi2HD a0KeQJT6Z+/H1yWMsqQSrAoq0iUR0qpB+olkwfjwnlr7P4w/GVtBajmhQinzq2AW UjSAKnbxuN2+NmDMmfiwNIklfomPcZHS6H8h1+6EhKAaSn/AB7bcEu7OgRAdxorO aI1rQLFkBiy8NYem6qNtfEjZ60wzHTGYQQ8TI9QFOdpi9mkGqk/MjGgnD9ZE1lUk jgUN1yDZ7QrIRzIYArAYi/iddVhwlpoZySIxTx42fNO3AjFrNHyYym11L3zsQqk/ TNbXCfBjkj6h1kW/vVmCUITCqTQA7OcVxlZOmueu4cAX57rXMOyLVZ7kkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGk/Gsec9YpQvqHuUDbGzeb/rv7UMB8GA1UdIwQY MBaAFBjYAd6f6KZoB1iBeCOuNroGXGENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NWMzYzgtNmFiMS00OTUxLThmNTkt NjU1MDNhOTMwNmEwLzEvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NWMzYzgtNmFiMS00OTUxLThmNTktNjU1MDNhOTMwNmEw LzEvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/KYBTjV aYXlnqnIGXVde7/geab266vGsROoZWS3HRut5PnNalZLuO/pLDmdBroTaTfVfB0v 2eV2uhGjhLJuP5h1WgWO2plMGDoiqsJsm9zcFrjdUoLOHsfrI+61B5WDuWyV/v5E Igs3NVaGDH0hapT8o7oz8FyjPhZBgos21VzP3qj+fTXsClV6oMNvf57zG4jQ7AhB 29mwsu7UfzcGhtR3Vpd+KMO+/RvtyGpYDWOD/Ppdc7WxWNxatxX7+XbNo7ZyH/dH 91lx50vZXeO5aOww+kR4DoobHEEfDw1twPFbr4lE8/HPKgA+FEEajbPYME/J5Wwd PDcqGKZLmYcFmA== -----END CERTIFICATE-----Generated at Fri Dec 12 06:41:43 2025 by rpki-client