This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft File: GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json) Hash identifier: q9lA2GXDKsTYtGeUtFAmHgKokMDt5SWAxiB+CAShSpw= Subject key identifier: 5E:20:3E:40:9A:22:73:4C:0E:02:05:18:0A:3C:52:C0:63:8B:60:AA Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08 Certificate issuer: /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208 Certificate serial: 019B37C5CE148089D578877942901ED5BAA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 18:01:08 +0000 Manifest this update: Fri 19 Dec 2025 18:01:08 +0000 Manifest next update: Sat 20 Dec 2025 18:01:08 +0000 Files and hashes: 1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: HxFHOGTnWNjsfIJg82gqwO9USsP9D7rVT4IWKFRTOHE=) 2: hI5edSKk9SDqGgkmF4OcRVaTqCk.roa (hash: l/blfIEQUSaiKWBLl4Zw+Q08icOowG6w3h/+ddEop3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:ce:14:80:89:d5:78:87:79:42:90:1e:d5:ba:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208 Validity Not Before: Dec 19 18:01:08 2025 GMT Not After : Dec 20 18:01:08 2025 GMT Subject: CN=5e203e409a22734c0e0205180a3c52c0638b60aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:43:db:4b:ed:b2:bc:e4:52:0d:d4:d5:8b:a7: 76:c9:24:05:9e:5c:c1:0a:0f:20:65:39:a7:07:3e: 85:2f:b2:f4:e4:f8:9e:a6:42:e1:33:01:5a:be:19: 30:df:91:fa:9b:c8:21:d4:92:d6:ab:5a:b5:fc:99: 49:83:fd:e6:cd:10:06:07:a6:f2:bf:c4:d2:f1:23: e9:19:1e:34:a4:17:a3:df:df:bf:35:2e:04:10:9d: 09:8e:3a:6a:67:20:65:93:9f:1c:ad:9b:e5:18:f9: 52:5d:d6:20:09:79:26:d7:30:1d:5e:5b:9c:be:a0: c9:07:af:62:ef:53:1a:67:65:0c:41:4c:68:7a:a2: 8e:65:4a:cb:30:16:0f:6d:94:0f:70:2c:4f:de:75: 90:ab:c1:a7:a7:9c:17:1b:96:b6:d1:e9:59:62:9e: 89:0f:32:56:79:69:fb:d6:e8:9e:b8:2b:c5:b3:1d: c9:d7:59:d8:e6:85:ff:d4:f9:d0:74:ef:d2:93:77: 37:1d:27:c1:10:d7:8a:76:4d:33:3d:78:d7:91:a1: eb:e4:76:1b:08:ab:6c:4f:82:a0:91:e0:a3:48:02: 29:f2:80:1d:73:31:84:67:30:75:be:ba:fe:78:5a: 5b:bd:6b:30:6a:d6:a1:92:5f:04:bd:42:25:fb:6d: 34:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:20:3E:40:9A:22:73:4C:0E:02:05:18:0A:3C:52:C0:63:8B:60:AA X509v3 Authority Key Identifier: keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:84:8e:ed:92:b2:92:ef:8b:58:c3:fa:f4:ae:c8:c4:85:ad: b1:a8:0c:3c:79:29:44:fe:14:47:3d:8b:63:13:b4:ac:87:5f: 75:24:53:0f:c3:72:1d:05:ee:51:45:54:ba:18:85:a1:4e:0b: 38:0b:74:49:2e:8b:58:c8:63:44:15:91:64:f7:8c:73:44:1c: 2c:9d:bc:03:93:7e:a6:b3:cb:63:3b:e5:de:85:49:85:43:e5: 9e:95:13:cd:c6:42:04:1e:ce:0c:b6:47:df:73:c9:48:3a:09: 9b:cc:0d:a2:f5:a3:ef:67:29:e7:b4:c0:72:49:43:70:97:50: 28:7c:d4:f7:d9:ba:1a:f5:bc:88:61:a0:bc:ba:f2:f3:52:57: 41:ff:30:4b:79:d4:c3:ae:69:3b:fe:fb:9d:45:81:ca:cb:b7: 79:77:45:df:0a:44:a4:14:7e:5d:df:87:62:7a:25:d3:db:e9: fc:49:fd:8c:f5:0d:da:50:f4:ab:a9:27:a5:bc:f0:b0:01:10: 93:c0:1f:51:ad:e3:04:8e:9e:b7:bf:2d:36:a4:76:2e:6d:ac: 18:50:68:0f:80:31:20:cb:79:5f:26:0a:57:10:4e:95:83:81: 99:74:db:48:ac:2f:4c:02:d6:4c:91:05:24:c7:8d:16:4d:6a: 61:4d:c4:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xc4UgInVeId5QpAe1bqpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMTFhNjYzNmY4Y2UyY2VmNTgzNmM0NDM1NjVjNWZlM2Fl MmYyMDgwHhcNMjUxMjE5MTgwMTA4WhcNMjUxMjIwMTgwMTA4WjAzMTEwLwYDVQQD Eyg1ZTIwM2U0MDlhMjI3MzRjMGUwMjA1MTgwYTNjNTJjMDYzOGI2MGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEPbS+2yvORSDdTVi6d2ySQFnlzB Cg8gZTmnBz6FL7L05PiepkLhMwFavhkw35H6m8gh1JLWq1q1/JlJg/3mzRAGB6by v8TS8SPpGR40pBej39+/NS4EEJ0JjjpqZyBlk58crZvlGPlSXdYgCXkm1zAdXluc vqDJB69i71MaZ2UMQUxoeqKOZUrLMBYPbZQPcCxP3nWQq8Gnp5wXG5a20elZYp6J DzJWeWn71uieuCvFsx3J11nY5oX/1PnQdO/Sk3c3HSfBENeKdk0zPXjXkaHr5HYb CKtsT4KgkeCjSAIp8oAdczGEZzB1vrr+eFpbvWswatahkl8EvUIl+200zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4gPkCaInNMDgIFGAo8UsBji2CqMB8GA1UdIwQY MBaAFBoRpmNvjOLO9YNsRDVlxf464vIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hHbVkyLU00czcxZzJ4RU5XWEZfanJpOGdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mOGY5YzgtMGRlYi00MGRlLTg5NDYt MjkxZTRiZDcwMzA5LzEvR2hHbVkyLU00czcxZzJ4RU5XWEZfanJpOGdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9mOGY5YzgtMGRlYi00MGRlLTg5NDYtMjkxZTRiZDcwMzA5 LzEvR2hHbVkyLU00czcxZzJ4RU5XWEZfanJpOGdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4SO7ZKy ku+LWMP69K7IxIWtsagMPHkpRP4URz2LYxO0rIdfdSRTD8NyHQXuUUVUuhiFoU4L OAt0SS6LWMhjRBWRZPeMc0QcLJ28A5N+prPLYzvl3oVJhUPlnpUTzcZCBB7ODLZH 33PJSDoJm8wNovWj72cp57TAcklDcJdQKHzU99m6GvW8iGGgvLry81JXQf8wS3nU w65pO/77nUWBysu3eXdF3wpEpBR+Xd+HYnol09vp/En9jPUN2lD0q6knpbzwsAEQ k8AfUa3jBI6et78tNqR2Lm2sGFBoD4AxIMt5XyYKVxBOlYOBmXTbSKwvTALWTJEF JMeNFk1qYU3EGw== -----END CERTIFICATE-----Generated at Fri Dec 19 20:29:24 2025 by rpki-client