This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft File: GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json) Hash identifier: 6bXS0vDZJ0HhS0fKrZifJakpbz2gGPAD7fsaJ6tsNlk= Subject key identifier: 29:59:4D:57:61:36:84:E8:46:A4:DE:AF:65:35:60:E8:E1:8F:7A:4E Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c Certificate serial: 019B48146EFAED455A1F019F5014B03B6D13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 22:00:57 +0000 Manifest this update: Mon 22 Dec 2025 22:00:57 +0000 Manifest next update: Tue 23 Dec 2025 22:00:57 +0000 Files and hashes: 1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: zS1UF5UmJejogWCbTtrlnsFqsp6e+pPgpmHitAjY3yI=) 2: qjOZ0ypY-v05Ar9oVOzV-LgMvAA.roa (hash: /cIFZv0Z52Y5+S3hgVxJBf+tIN9m9T+pJ4ZgMnUSMa0=) 3: uVBTeEzfoyB7JY96y5uQlYBoA00.roa (hash: 1QuqtDmpz5L96A5DhcdUsvLbu6XhjJTyVS+t4jv+5BI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:6e:fa:ed:45:5a:1f:01:9f:50:14:b0:3b:6d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c Validity Not Before: Dec 22 22:00:57 2025 GMT Not After : Dec 23 22:00:57 2025 GMT Subject: CN=29594d57613684e846a4deaf653560e8e18f7a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:db:c3:e0:09:04:ca:1c:61:10:d7:fd:e6:7a: ed:fe:7b:cf:89:85:19:f9:2b:e4:35:38:2c:26:de: 08:8f:a3:36:1c:b7:1d:35:6b:84:8a:74:c5:fd:42: ce:2c:f0:e8:b3:1e:a3:1b:a7:da:55:d7:67:32:e8: 0d:52:8b:63:a6:93:23:fb:fa:6f:b8:3d:7d:1d:f2: e9:24:65:2d:c2:f3:e1:64:14:36:72:17:3b:33:cb: f9:82:4b:c9:8a:5d:fd:81:bc:15:08:b2:6d:d8:a0: 17:ca:73:8a:ee:07:00:a6:68:e9:a6:b1:2a:9c:da: a1:67:16:d0:ce:e8:bb:d7:9e:31:67:92:25:8c:f3: f0:f4:f6:30:72:2b:28:e8:40:d0:38:97:52:55:24: dc:78:a9:6e:2f:d2:bf:e9:6a:b8:9d:05:ae:cd:30: de:cf:50:d2:ba:f7:66:69:16:0b:4c:1e:e9:52:93: 03:f9:90:4e:b9:84:90:74:e6:7f:ac:8f:46:b1:36: 76:af:99:9c:25:b2:f4:61:f2:f8:ba:98:45:e5:37: 44:f0:49:fc:0a:7b:1f:66:7c:1b:12:01:12:b6:ee: 29:63:13:ce:21:e8:05:20:54:27:4b:a5:06:a4:19: ca:c0:09:fe:61:65:c7:6c:f7:ad:ae:bf:30:93:e9: 4c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:59:4D:57:61:36:84:E8:46:A4:DE:AF:65:35:60:E8:E1:8F:7A:4E X509v3 Authority Key Identifier: keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:10:eb:e7:b5:0f:51:31:f3:89:a8:33:5c:b6:58:3e:ec:b4: b9:ca:c0:60:a7:e5:fe:68:db:09:8c:42:6b:8c:94:34:2a:8e: ba:f4:13:f5:49:36:4a:20:59:4f:b8:25:3c:eb:22:ce:9a:82: 11:48:5c:eb:ef:c7:db:f1:b9:40:37:6f:bc:40:69:e5:01:d2: b0:47:f3:e0:49:52:5b:7c:12:99:47:38:02:3e:97:ef:88:18: 36:03:87:95:f4:44:12:1a:f7:2b:19:73:22:ff:1c:d8:ca:94: 84:58:03:cb:c9:62:4e:63:6e:05:8b:59:1a:4f:21:38:d8:77: d3:17:0d:4e:c1:79:36:4b:09:b9:8a:c2:0e:44:eb:cf:0e:23: ce:89:96:84:a7:e4:a0:86:50:90:c5:15:16:88:89:e9:10:9e: 1a:e6:5e:ac:7f:e0:bd:6b:bd:8c:f1:ad:02:86:28:ea:e1:4c: 3c:b2:41:e5:a8:e9:02:01:17:77:aa:09:f4:29:11:4a:5a:3d: af:79:1e:15:fa:70:77:7a:a5:05:a0:ec:93:e2:28:88:40:1a: 6a:9a:06:31:66:b9:65:7f:5d:c9:3b:df:0b:49:f3:7b:74:18: fa:d3:76:9e:e4:04:f9:ca:b6:90:69:52:7f:48:e6:4a:67:24: 2a:f1:20:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFG767UVaHwGfUBSwO20TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMTI1MDllNGYyYTczMGUxNjk5MzdkNDA4MzNiYjg5M2Vl N2I5OGMwHhcNMjUxMjIyMjIwMDU3WhcNMjUxMjIzMjIwMDU3WjAzMTEwLwYDVQQD EygyOTU5NGQ1NzYxMzY4NGU4NDZhNGRlYWY2NTM1NjBlOGUxOGY3YTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dvD4AkEyhxhENf95nrt/nvPiYUZ +SvkNTgsJt4Ij6M2HLcdNWuEinTF/ULOLPDosx6jG6faVddnMugNUotjppMj+/pv uD19HfLpJGUtwvPhZBQ2chc7M8v5gkvJil39gbwVCLJt2KAXynOK7gcApmjpprEq nNqhZxbQzui7154xZ5IljPPw9PYwciso6EDQOJdSVSTceKluL9K/6Wq4nQWuzTDe z1DSuvdmaRYLTB7pUpMD+ZBOuYSQdOZ/rI9GsTZ2r5mcJbL0YfL4uphF5TdE8En8 CnsfZnwbEgEStu4pYxPOIegFIFQnS6UGpBnKwAn+YWXHbPetrr8wk+lMPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClZTVdhNoToRqTer2U1YOjhj3pOMB8GA1UdIwQY MBaAFBoSUJ5PKnMOFpk31Agzu4k+57mMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMzE3MzEtNWNkMy00NDVlLThjYjMt NDE5NmIwZWFjZDI3LzEvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iMzE3MzEtNWNkMy00NDVlLThjYjMtNDE5NmIwZWFjZDI3 LzEvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBDr57UP UTHziagzXLZYPuy0ucrAYKfl/mjbCYxCa4yUNCqOuvQT9Uk2SiBZT7glPOsizpqC EUhc6+/H2/G5QDdvvEBp5QHSsEfz4ElSW3wSmUc4Aj6X74gYNgOHlfREEhr3Kxlz Iv8c2MqUhFgDy8liTmNuBYtZGk8hONh30xcNTsF5NksJuYrCDkTrzw4jzomWhKfk oIZQkMUVFoiJ6RCeGuZerH/gvWu9jPGtAoYo6uFMPLJB5ajpAgEXd6oJ9CkRSlo9 r3keFfpwd3qlBaDsk+IoiEAaapoGMWa5ZX9dyTvfC0nze3QY+tN2nuQE+cq2kGlS f0jmSmckKvEg7g== -----END CERTIFICATE-----Generated at Tue Dec 23 02:23:25 2025 by rpki-client