This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft File: ghhRSqrfoDhGuh9tOfH55DfGPEE.mft (raw, json) Hash identifier: isdRVCLs0aAUpvImYbWX3tncBeEOBpBBPK9EDwN18Po= Subject key identifier: 40:B1:30:14:24:43:1E:62:E5:2C:C7:66:A0:CC:6D:89:A4:00:5F:6E Authority key identifier: 82:18:51:4A:AA:DF:A0:38:46:BA:1F:6D:39:F1:F9:E4:37:C6:3C:41 Certificate issuer: /CN=8218514aaadfa03846ba1f6d39f1f9e437c63c41 Certificate serial: 019B59769C4FFDAF5C1C40DBA2EB6EEE1503 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghhRSqrfoDhGuh9tOfH55DfGPEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft Manifest number: 024C Signing time: Fri 26 Dec 2025 07:01:43 +0000 Manifest this update: Fri 26 Dec 2025 07:01:43 +0000 Manifest next update: Sat 27 Dec 2025 07:01:43 +0000 Files and hashes: 1: ghhRSqrfoDhGuh9tOfH55DfGPEE.crl (hash: TVXoe2UEqSvVduJBjEDd+fXu2qLGdM8mTT+KoysoFBs=) 2: i_8OV4hfwWGXwF9V2zc6PphYPKE.roa (hash: C7CIFHPDYn+G4rh2qeYAbZYKxEJSwAPGvW6pQ9glEwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.crl rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft rsync://rpki.ripe.net/repository/DEFAULT/ghhRSqrfoDhGuh9tOfH55DfGPEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:9c:4f:fd:af:5c:1c:40:db:a2:eb:6e:ee:15:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8218514aaadfa03846ba1f6d39f1f9e437c63c41 Validity Not Before: Dec 26 07:01:43 2025 GMT Not After : Dec 27 07:01:43 2025 GMT Subject: CN=40b1301424431e62e52cc766a0cc6d89a4005f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8b:42:6c:14:93:95:9f:89:10:3a:20:06:ec: 30:bb:b4:9b:95:38:6b:33:6d:8c:22:45:f3:f7:ef: 0d:9a:22:ba:64:f3:3a:30:5e:42:5c:92:af:fc:9a: 81:da:80:fc:71:c8:2d:d1:83:cc:07:80:d4:9e:86: 5b:17:ce:0f:cf:a4:de:a0:a6:b8:b6:b3:ab:d0:3b: 6c:6f:31:34:ec:62:dc:1c:c7:bc:03:b4:58:71:91: 1f:28:71:62:40:7f:9b:b7:d3:18:c2:ec:44:01:b1: 8d:f3:cf:bc:01:59:7b:06:88:fc:07:66:71:f4:ff: e8:fa:1b:4d:c5:45:12:5a:8f:24:16:a6:2d:51:b0: 63:35:ae:5e:f0:9a:18:69:ec:21:e1:d6:e4:5b:54: 50:cd:31:44:72:6a:e6:90:f7:be:d9:8f:f2:10:1f: 58:ca:24:a7:dd:f6:f7:fa:b3:ff:25:fd:35:e3:f9: 4b:83:93:a8:f8:db:33:17:e3:91:ea:c0:51:5f:a1: b7:e8:a7:6a:f4:35:ad:c5:a9:b4:fc:bd:eb:58:6c: 55:aa:3f:52:1a:9b:86:2e:6e:10:94:e9:7b:b4:b5: 8f:23:17:0e:2b:c1:f4:2a:6e:0f:7b:74:1e:b1:fd: 8d:4b:88:1d:71:15:0e:e0:90:d9:8a:00:10:ad:bb: cb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B1:30:14:24:43:1E:62:E5:2C:C7:66:A0:CC:6D:89:A4:00:5F:6E X509v3 Authority Key Identifier: keyid:82:18:51:4A:AA:DF:A0:38:46:BA:1F:6D:39:F1:F9:E4:37:C6:3C:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghhRSqrfoDhGuh9tOfH55DfGPEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:20:f8:2a:06:58:89:9e:5f:b1:ab:f6:96:81:4c:da:01:c4: d3:cf:c4:19:45:a4:73:c8:c3:9b:7d:fd:c8:e9:5b:91:6e:7f: 33:40:9c:a8:cc:32:34:e5:4a:7c:5c:b8:e4:9a:24:7e:1b:1d: 4d:4f:9e:c3:d5:4c:18:2d:1d:42:a4:ee:ba:3c:aa:e4:c9:a6: 03:a6:fd:9b:6b:35:a3:eb:f2:d5:24:89:8d:e0:72:3c:cb:4e: 02:35:42:63:8b:8e:1f:2c:e8:76:86:e4:24:08:7c:b3:a6:9f: 55:18:cb:be:94:4a:89:de:22:35:e8:ff:af:8c:58:77:cf:69: 47:10:d6:0f:6e:4d:01:d2:23:8e:16:2f:d9:88:5e:6f:4c:31: 7b:7c:d8:50:03:c7:04:7c:01:3d:9f:3e:ad:54:0f:0d:43:73: c4:82:e1:fb:d7:b7:ea:44:e1:33:cf:13:f9:0b:fb:d0:a7:ad: 30:bb:03:d6:cf:de:c1:b5:0a:c8:22:fc:95:47:27:5e:fc:d9: 89:29:f9:b8:f1:52:b6:bd:fb:36:d2:0a:1e:59:2a:68:57:3a: 90:04:1b:57:78:f7:03:23:18:46:00:2e:a5:42:a2:5a:aa:70: 4b:f6:6b:2c:c7:35:81:fd:52:64:c9:4f:c1:f1:82:50:82:18: 67:06:05:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdpxP/a9cHEDboutu7hUDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMTg1MTRhYWFkZmEwMzg0NmJhMWY2ZDM5ZjFmOWU0Mzdj NjNjNDEwHhcNMjUxMjI2MDcwMTQzWhcNMjUxMjI3MDcwMTQzWjAzMTEwLwYDVQQD Eyg0MGIxMzAxNDI0NDMxZTYyZTUyY2M3NjZhMGNjNmQ4OWE0MDA1ZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoItCbBSTlZ+JEDogBuwwu7SblThr M22MIkXz9+8NmiK6ZPM6MF5CXJKv/JqB2oD8ccgt0YPMB4DUnoZbF84Pz6TeoKa4 trOr0DtsbzE07GLcHMe8A7RYcZEfKHFiQH+bt9MYwuxEAbGN88+8AVl7Boj8B2Zx 9P/o+htNxUUSWo8kFqYtUbBjNa5e8JoYaewh4dbkW1RQzTFEcmrmkPe+2Y/yEB9Y yiSn3fb3+rP/Jf014/lLg5Oo+NszF+OR6sBRX6G36Kdq9DWtxam0/L3rWGxVqj9S GpuGLm4QlOl7tLWPIxcOK8H0Km4Pe3Qesf2NS4gdcRUO4JDZigAQrbvLFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECxMBQkQx5i5SzHZqDMbYmkAF9uMB8GA1UdIwQY MBaAFIIYUUqq36A4RrofbTnx+eQ3xjxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hoUlNxcmZvRGhHdWg5dE9mSDU1RGZHUEVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8zNzQyM2MtZWJkZC00ZWE4LTgxNGMt MzMzODk2YTAwZTZmLzEvZ2hoUlNxcmZvRGhHdWg5dE9mSDU1RGZHUEVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8zNzQyM2MtZWJkZC00ZWE4LTgxNGMtMzMzODk2YTAwZTZm LzEvZ2hoUlNxcmZvRGhHdWg5dE9mSDU1RGZHUEVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSD4KgZY iZ5fsav2loFM2gHE08/EGUWkc8jDm339yOlbkW5/M0CcqMwyNOVKfFy45Jokfhsd TU+ew9VMGC0dQqTuujyq5MmmA6b9m2s1o+vy1SSJjeByPMtOAjVCY4uOHyzodobk JAh8s6afVRjLvpRKid4iNej/r4xYd89pRxDWD25NAdIjjhYv2Yheb0wxe3zYUAPH BHwBPZ8+rVQPDUNzxILh+9e36kThM88T+Qv70KetMLsD1s/ewbUKyCL8lUcnXvzZ iSn5uPFStr37NtIKHlkqaFc6kAQbV3j3AyMYRgAupUKiWqpwS/ZrLMc1gf1SZMlP wfGCUIIYZwYF0g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:53 2025 by rpki-client