This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json) Hash identifier: 2trx9PkORqeoia1CLSRsV4n0+zoPLk1WsLRUNbiSncU= Subject key identifier: C4:74:34:C7:94:D6:7E:3C:DB:61:C8:CC:B2:4D:46:AC:BC:59:90:A0 Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b Certificate serial: 019B0DB6EF2BE6A309C16FC3B0C5CA022FC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft Manifest number: 0216 Signing time: Thu 11 Dec 2025 14:00:51 +0000 Manifest this update: Thu 11 Dec 2025 14:00:51 +0000 Manifest next update: Fri 12 Dec 2025 14:00:51 +0000 Files and hashes: 1: 9PkegdPcOVaHYch8whuUGhkGOzc.roa (hash: nTpt8kDLjSLrMGR0C/m0j9Ftj77WGzhvL7KxFH3u7Z8=) 2: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: AB4c8PTWCNeXn3T8jXg64QH0WwL3BD8+61W3Y9KuA/4=) 3: mo525hECNfAEonllRKyyBVCuVuY.roa (hash: a5b0LUZ9waSvhihXnwQQ6mCuKjGwIDzPkvhonuJ3oDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:ef:2b:e6:a3:09:c1:6f:c3:b0:c5:ca:02:2f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b Validity Not Before: Dec 11 14:00:51 2025 GMT Not After : Dec 12 14:00:51 2025 GMT Subject: CN=c47434c794d67e3cdb61c8ccb24d46acbc5990a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:c6:b5:0a:c2:a9:64:46:7f:cf:7f:9f:91: 6b:71:76:90:3f:90:e2:74:af:59:52:e4:33:b5:3a: d6:02:eb:ae:df:d6:79:21:f4:c5:8c:2e:68:0f:4d: 6e:51:01:0f:bd:d8:e2:03:b6:4a:63:aa:4f:9a:90: 2d:66:3d:56:59:1d:f1:9e:aa:f8:f5:29:de:96:15: 8e:78:0e:ad:06:eb:d4:66:9c:43:d4:49:14:a0:de: 9d:1e:80:6c:c8:3c:cd:95:7e:5e:43:00:0e:44:78: a4:65:c2:b6:b7:2a:6c:d4:34:4e:92:93:39:1b:f2: fc:dd:f6:42:c1:d4:1d:1e:15:4d:6e:e1:76:6c:3a: 9d:6a:31:5c:a0:6a:fe:f8:71:1f:37:00:5f:c4:f9: c0:dc:86:bd:f3:24:15:90:7f:0e:b7:93:43:27:c1: 0a:aa:be:a2:40:04:43:f4:a6:51:1f:d4:28:8f:d1: 3f:05:76:28:e2:ad:81:4f:9d:fb:00:71:53:8a:2e: df:3c:25:f9:59:38:2a:55:4e:4d:bd:cb:db:b0:33: 39:23:25:83:11:25:a7:9c:49:e3:73:21:09:0e:0b: 43:ed:8f:98:68:ea:f7:45:47:7e:d4:a9:2e:5e:f0: 07:9a:f6:52:39:23:54:de:d4:b2:bd:97:92:4b:2f: 57:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:74:34:C7:94:D6:7E:3C:DB:61:C8:CC:B2:4D:46:AC:BC:59:90:A0 X509v3 Authority Key Identifier: keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:7b:1f:80:81:27:07:13:f7:3a:b6:52:a8:e0:b9:e9:36:0d: 05:e9:6f:7f:59:30:f1:48:18:9c:78:21:5a:78:d9:be:62:85: c9:4a:32:d2:be:04:f7:8d:40:38:88:c9:ab:1a:8f:f5:4b:1e: 0d:12:af:7d:1e:4c:a6:98:37:da:8c:27:2b:d8:4c:fa:ec:d7: 2b:fe:1a:b3:3d:88:11:05:cd:f6:27:09:4c:47:65:41:e6:00: ca:51:94:9b:98:7f:1c:9d:23:b2:f8:b2:2f:b5:2c:74:df:c8: d7:ee:95:32:d8:1b:2b:7f:bd:a6:e2:73:b4:4d:64:bb:38:c4: 08:a7:43:de:23:ee:94:ae:a0:17:24:75:7f:b7:87:2a:55:70: 36:6f:5b:66:05:79:3c:af:6a:5d:68:16:ff:7a:1a:09:3e:34: 40:68:01:02:17:41:33:d7:6f:f9:61:14:4e:e5:40:39:6e:e4: 36:4b:bb:17:35:b5:52:21:30:71:70:d1:3f:49:94:d1:31:40: 91:81:46:e3:fe:21:aa:95:f6:00:0a:5c:8e:48:94:9b:aa:71: 8e:cd:d2:70:3c:96:5c:e3:38:9f:71:06:93:26:98:66:a9:c1: 1d:60:04:db:d7:a9:5e:7f:a9:d0:8e:04:54:39:74:8d:40:87: f2:95:1c:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtu8r5qMJwW/DsMXKAi/JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NGUxMGE5NTZmYTUyNTE2ZThmZDNiOTMxOGU4NGE1NTM4 M2Q2MmIwHhcNMjUxMjExMTQwMDUxWhcNMjUxMjEyMTQwMDUxWjAzMTEwLwYDVQQD EyhjNDc0MzRjNzk0ZDY3ZTNjZGI2MWM4Y2NiMjRkNDZhY2JjNTk5MGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyLGtQrCqWRGf89/n5FrcXaQP5Di dK9ZUuQztTrWAuuu39Z5IfTFjC5oD01uUQEPvdjiA7ZKY6pPmpAtZj1WWR3xnqr4 9SnelhWOeA6tBuvUZpxD1EkUoN6dHoBsyDzNlX5eQwAORHikZcK2typs1DROkpM5 G/L83fZCwdQdHhVNbuF2bDqdajFcoGr++HEfNwBfxPnA3Ia98yQVkH8Ot5NDJ8EK qr6iQARD9KZRH9Qoj9E/BXYo4q2BT537AHFTii7fPCX5WTgqVU5NvcvbsDM5IyWD ESWnnEnjcyEJDgtD7Y+YaOr3RUd+1KkuXvAHmvZSOSNU3tSyvZeSSy9XHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMR0NMeU1n4822HIzLJNRqy8WZCgMB8GA1UdIwQY MBaAFBlOEKlW+lJRbo/TuTGOhKVTg9YrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kMmVmNWYtMmFlOS00ODZhLThiZDct NTFmMDc3ZjMwZDNmLzEvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9kMmVmNWYtMmFlOS00ODZhLThiZDctNTFmMDc3ZjMwZDNm LzEvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsXsfgIEn BxP3OrZSqOC56TYNBelvf1kw8UgYnHghWnjZvmKFyUoy0r4E941AOIjJqxqP9Use DRKvfR5Mppg32ownK9hM+uzXK/4asz2IEQXN9icJTEdlQeYAylGUm5h/HJ0jsviy L7UsdN/I1+6VMtgbK3+9puJztE1kuzjECKdD3iPulK6gFyR1f7eHKlVwNm9bZgV5 PK9qXWgW/3oaCT40QGgBAhdBM9dv+WEUTuVAOW7kNku7FzW1UiEwcXDRP0mU0TFA kYFG4/4hqpX2AApcjkiUm6pxjs3ScDyWXOM4n3EGkyaYZqnBHWAE29epXn+p0I4E VDl0jUCH8pUcIQ== -----END CERTIFICATE-----Generated at Thu Dec 11 19:20:07 2025 by rpki-client