This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft File: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft (raw, json) Hash identifier: SRQOAM9WEg7oUUYxAGUxlAF2OrErDQ+vUwGkm1jCFS4= Subject key identifier: A5:D0:15:EF:C7:EE:73:D9:F5:80:6D:C4:71:C3:30:E3:2D:40:6D:F5 Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Certificate serial: 019B119441A33578FB789E5AAA98A4039B8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft Manifest number: 1775 Signing time: Fri 12 Dec 2025 08:01:27 +0000 Manifest this update: Fri 12 Dec 2025 08:01:27 +0000 Manifest next update: Sat 13 Dec 2025 08:01:27 +0000 Files and hashes: 1: 6UgffgqyRmXA4X4lQkfxVrdwBsA.roa (hash: evXeFj81thsrgyrUvw1aQVJLYDNLbEIIyY5wmZWNCGU=) 2: EMVnap43Y9UsFWtlCe55L5ZXNno.roa (hash: 79QWn/jDXhxzY15VXil6olMuq2XcT6cSiSrWZxg+0Gg=) 3: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl (hash: 9GSTq/s+9naUhXEz0PIXs4cBuzxtsLrD7xpXroYtIHE=) 4: LxmN4uMoK6wh408GJ6l9gH0ugu0.roa (hash: kJ1RLjAnYMeLDEzPUcjx7KqkgbH5nyx8Lbk4P/H0Wtw=) 5: ST5QgStVsZ8VLKir2fIMPSp6_jU.roa (hash: 2UGwzfV+8KmtBgovMvwjTZRncLGcWbahxwdG9QTxnao=) 6: fRi0G2cIUxI61l2GTTKIFQAG9RE.roa (hash: IiPf4Yv8/FcDmWTn4xUhoGH8CrL6FWqGZiw6UQ0WOHg=) 7: yAm1lV_S8WQU9xUYSz0xhS5WWFk.roa (hash: +RLHgrQThKYdngYSU7w4Ac27ABqxEk770X6x0K5R6ZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:94:41:a3:35:78:fb:78:9e:5a:aa:98:a4:03:9b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4 Validity Not Before: Dec 12 08:01:27 2025 GMT Not After : Dec 13 08:01:27 2025 GMT Subject: CN=a5d015efc7ee73d9f5806dc471c330e32d406df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d7:e7:51:e3:35:02:23:08:0a:c6:0d:26:23: 30:ba:f2:dd:bf:20:f9:39:3b:3f:96:4d:35:d9:a0: 2d:a9:19:38:cd:99:00:9e:b0:a5:6a:dc:b4:72:bd: 46:34:88:a3:35:7b:29:a7:0f:3e:07:9e:4a:e8:b7: 43:51:b5:37:d8:74:fe:05:3d:0a:41:b7:dc:6b:05: 63:b7:f1:eb:e2:f9:89:c9:b3:9e:12:09:46:f9:b6: 01:df:22:28:78:42:5d:98:ad:f5:0f:39:57:ea:3f: 7f:bb:82:cf:43:98:d5:8f:d5:96:50:35:ad:51:e8: 7c:9b:cf:37:69:4a:97:d6:c6:71:42:05:ef:69:c0: 10:b7:95:70:7a:e7:53:cc:af:61:e3:34:70:a5:7a: 15:94:44:d3:16:49:b7:7a:bc:d4:66:db:69:40:64: f6:bd:7f:7a:0c:f0:07:bc:df:ee:6e:64:59:b1:49: 93:48:6a:68:9f:c2:e8:53:c1:09:8b:03:96:de:e7: d6:d4:f2:a8:79:a1:c1:1e:97:e7:0e:07:56:aa:33: 68:ee:32:68:cf:69:33:81:9d:84:a6:38:44:7b:e7: fc:88:1f:7b:0c:f0:cc:7f:65:9e:13:cd:8e:ea:a0: 9e:29:98:62:19:e7:47:37:15:80:01:29:9a:ce:63: d3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D0:15:EF:C7:EE:73:D9:F5:80:6D:C4:71:C3:30:E3:2D:40:6D:F5 X509v3 Authority Key Identifier: keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:43:76:0d:72:b4:25:cb:b0:57:76:2e:c3:e9:fc:54:a3:4d: 20:ef:10:2a:b1:5b:b7:3e:bb:0f:13:38:b9:3f:53:8c:57:ee: 80:16:4e:40:ec:ad:49:06:1f:bc:64:f7:b8:26:e7:d2:35:d2: 6e:c5:56:12:49:ce:fa:30:6e:56:90:5e:26:5e:e6:36:bf:b8: c9:71:96:42:f0:58:a0:d6:61:45:95:24:f0:94:87:af:a6:9e: 03:41:77:89:3c:04:92:28:6d:41:b7:44:ea:09:aa:60:8e:47: aa:a2:15:90:b5:70:f8:b9:cd:c5:c2:c8:b9:9d:44:d1:39:9b: c4:a4:3d:98:83:29:b1:2f:43:a9:94:33:9b:0c:40:53:eb:ad: 86:32:e5:18:e2:4d:6a:6a:77:05:50:33:52:a9:6c:3a:33:cf: be:c0:48:ca:2c:13:7e:65:f1:37:64:e0:aa:87:d9:ba:ab:9e: 15:94:36:6e:6b:25:c1:b7:85:3b:d9:ed:55:f3:e2:9b:2d:e7: b4:14:71:87:0c:31:ee:25:ae:9c:53:1f:04:4d:66:28:d2:e8: 09:58:62:fe:e8:1f:ee:4a:51:a2:40:d0:a4:19:1b:a2:e3:3f: d2:f3:75:58:17:4a:90:8a:36:60:19:35:f9:83:87:19:8a:15: 9f:d9:ea:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRlEGjNXj7eJ5aqpikA5uPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRkMTE1NTQyNDdiZDJiZDMwMWNlYTQzZmY1MTgwMzcy YzM4ZTQwHhcNMjUxMjEyMDgwMTI3WhcNMjUxMjEzMDgwMTI3WjAzMTEwLwYDVQQD EyhhNWQwMTVlZmM3ZWU3M2Q5ZjU4MDZkYzQ3MWMzMzBlMzJkNDA2ZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNfnUeM1AiMICsYNJiMwuvLdvyD5 OTs/lk012aAtqRk4zZkAnrClaty0cr1GNIijNXsppw8+B55K6LdDUbU32HT+BT0K QbfcawVjt/Hr4vmJybOeEglG+bYB3yIoeEJdmK31DzlX6j9/u4LPQ5jVj9WWUDWt Ueh8m883aUqX1sZxQgXvacAQt5VweudTzK9h4zRwpXoVlETTFkm3erzUZttpQGT2 vX96DPAHvN/ubmRZsUmTSGpon8LoU8EJiwOW3ufW1PKoeaHBHpfnDgdWqjNo7jJo z2kzgZ2EpjhEe+f8iB97DPDMf2WeE82O6qCeKZhiGedHNxWAASmazmPTrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXQFe/H7nPZ9YBtxHHDMOMtQG31MB8GA1UdIwQY MBaAFBpN0RVUJHvSvTAc6kP/UYA3LDjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUt M2JhNWYzMGNhYWJmLzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUtM2JhNWYzMGNhYWJm LzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUN2DXK0 JcuwV3Yuw+n8VKNNIO8QKrFbtz67DxM4uT9TjFfugBZOQOytSQYfvGT3uCbn0jXS bsVWEknO+jBuVpBeJl7mNr+4yXGWQvBYoNZhRZUk8JSHr6aeA0F3iTwEkihtQbdE 6gmqYI5HqqIVkLVw+LnNxcLIuZ1E0TmbxKQ9mIMpsS9DqZQzmwxAU+uthjLlGOJN amp3BVAzUqlsOjPPvsBIyiwTfmXxN2TgqofZuqueFZQ2bmslwbeFO9ntVfPimy3n tBRxhwwx7iWunFMfBE1mKNLoCVhi/ugf7kpRokDQpBkbouM/0vN1WBdKkIo2YBk1 +YOHGYoVn9nqYg== -----END CERTIFICATE-----Generated at Fri Dec 12 11:53:00 2025 by rpki-client