This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft File: GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json) Hash identifier: qntsiW9z3zJwl4/i/T3NNL1QsyR6HZlm9J+9RljrS0o= Subject key identifier: 16:A1:02:4C:2F:A9:AD:D0:1C:3A:36:9F:0A:57:46:24:82:35:EA:3F Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c Certificate serial: 019AFBB1222B9D340B626674E1A51F25D150 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft Manifest number: 1764 Signing time: Mon 08 Dec 2025 02:01:21 +0000 Manifest this update: Mon 08 Dec 2025 02:01:21 +0000 Manifest next update: Tue 09 Dec 2025 02:01:21 +0000 Files and hashes: 1: BegdDrTAjfq3QF_xE0SFA-JsmmY.roa (hash: UdhM2lVwgozCDdJmvHRy0hTuIS1j9lD7X7Mun/eqHgw=) 2: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: PAfIwWr12p2dZPeAySF6IiT5HXJjToVxw8gZ+uvFB8A=) 3: Q-JTW2pMbNHJuQzQ3GB1MFwgWco.roa (hash: Lazq6w2zk0BI/gQTS7LpUxVn4e7nb0oKSy4DjZT1z9U=) 4: czVnbZc92doWqy2gBGIdv1iBjnw.roa (hash: FGIHMIe1fM4M87IQciBzvSamGa61S/MPL+xAE/AMTyI=) 5: h31D8UJNE_u1sTKbKP1SFsGVcFY.roa (hash: kwansroYJJGhl0jfhBp7y2GRUoE1YU2JrM6J/UDWiVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:b1:22:2b:9d:34:0b:62:66:74:e1:a5:1f:25:d1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c Validity Not Before: Dec 8 02:01:21 2025 GMT Not After : Dec 9 02:01:21 2025 GMT Subject: CN=16a1024c2fa9add01c3a369f0a5746248235ea3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:db:b6:09:95:7d:91:13:b8:14:b9:7d:1c:14: 3c:6e:15:d5:d0:53:2a:e3:08:a9:6d:b8:b7:50:25: bc:a1:19:9e:91:ee:35:cd:b6:c7:3d:f2:e6:30:db: f3:37:9a:fe:e0:84:45:88:44:69:23:07:4c:10:e5: 4b:f0:6f:ea:bc:9b:af:48:2b:5e:78:b5:7c:cf:60: 9f:36:e0:40:90:af:57:a7:e6:36:4f:be:4a:48:98: b5:2e:ab:50:52:76:ae:ba:8f:c6:37:89:3d:21:02: 23:e1:19:51:b3:ba:c2:e1:56:90:0c:71:6d:d1:f4: cd:e2:08:e5:8a:4b:ac:6b:20:62:c9:c5:b0:ed:26: 2c:c7:15:11:89:8e:78:7c:fd:f2:d4:76:61:d8:09: a6:ec:10:7f:00:2d:b0:aa:3c:83:9a:22:c7:a4:43: d5:59:75:69:6a:33:d4:46:76:76:05:2a:02:54:57: ec:a1:a5:15:3a:ac:1d:f3:88:e4:3c:9f:cd:97:49: 53:1e:dc:47:be:cd:67:9a:5c:4c:71:0c:9a:da:4d: 0f:42:91:98:d1:29:e4:0a:e2:b8:90:c2:fb:13:e9: f9:cf:04:f7:8b:d6:83:a2:2f:6a:78:d7:86:49:26: dc:08:22:05:b4:d2:76:1a:ba:51:a7:f1:46:1d:50: ef:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A1:02:4C:2F:A9:AD:D0:1C:3A:36:9F:0A:57:46:24:82:35:EA:3F X509v3 Authority Key Identifier: keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:93:4d:75:42:98:4e:a9:fc:45:aa:52:54:07:21:2a:7f:22: bd:48:cd:c5:05:e7:34:55:20:f8:0b:ed:51:3d:d8:48:ce:03: 4e:bf:62:e6:c0:82:5d:b4:be:24:12:ac:ed:3a:12:61:26:cf: 62:6a:7c:cc:4c:39:31:b5:8e:44:1d:7b:83:46:2f:49:15:70: 8b:3d:2b:e5:26:51:c2:c4:02:88:14:bd:f9:25:9a:62:bf:7a: 5e:07:bd:90:09:af:25:23:e7:42:7e:de:e1:b8:5b:43:80:05: b0:d7:eb:49:ec:8b:04:72:01:ac:ce:9a:cc:bc:88:41:f7:24: 6d:38:cb:d7:ce:3c:8b:29:96:1f:7b:a1:76:a9:45:b6:2f:1f: 75:1b:ab:8b:81:28:18:78:73:59:6f:65:c3:44:46:c6:96:d5: 4e:23:d0:8d:68:18:d6:f2:26:47:98:fa:e5:94:1c:bd:89:96: ee:71:a8:0f:49:bf:be:4f:6c:c9:04:38:cf:ad:e5:ab:53:cc: 64:ea:74:c1:52:8c:b4:2e:48:52:80:92:3e:33:e2:69:83:be: 1f:f4:7e:c1:0e:74:59:e4:d9:44:8e:8b:57:89:54:97:3c:58: a7:d5:6e:53:d8:43:9f:1b:cf:44:d8:a7:d3:40:7c:9d:ca:5e: db:1b:67:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7sSIrnTQLYmZ04aUfJdFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZjFhOWRkMTI2ZjM3MjM3Y2UyMDBmYjg2MTZmZjkzN2Jj YTk2NmMwHhcNMjUxMjA4MDIwMTIxWhcNMjUxMjA5MDIwMTIxWjAzMTEwLwYDVQQD EygxNmExMDI0YzJmYTlhZGQwMWMzYTM2OWYwYTU3NDYyNDgyMzVlYTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNu2CZV9kRO4FLl9HBQ8bhXV0FMq 4wipbbi3UCW8oRmeke41zbbHPfLmMNvzN5r+4IRFiERpIwdMEOVL8G/qvJuvSCte eLV8z2CfNuBAkK9Xp+Y2T75KSJi1LqtQUnauuo/GN4k9IQIj4RlRs7rC4VaQDHFt 0fTN4gjlikusayBiycWw7SYsxxURiY54fP3y1HZh2Amm7BB/AC2wqjyDmiLHpEPV WXVpajPURnZ2BSoCVFfsoaUVOqwd84jkPJ/Nl0lTHtxHvs1nmlxMcQya2k0PQpGY 0SnkCuK4kML7E+n5zwT3i9aDoi9qeNeGSSbcCCIFtNJ2GrpRp/FGHVDvcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBahAkwvqa3QHDo2nwpXRiSCNeo/MB8GA1UdIwQY MBaAFBnxqd0SbzcjfOIA+4YW/5N7ypZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgt M2ZkMzA5ODhmNjc3LzEvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgtM2ZkMzA5ODhmNjc3 LzEvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpNNdUKY Tqn8RapSVAchKn8ivUjNxQXnNFUg+AvtUT3YSM4DTr9i5sCCXbS+JBKs7ToSYSbP Ymp8zEw5MbWORB17g0YvSRVwiz0r5SZRwsQCiBS9+SWaYr96Xge9kAmvJSPnQn7e 4bhbQ4AFsNfrSeyLBHIBrM6azLyIQfckbTjL1848iymWH3uhdqlFti8fdRuri4Eo GHhzWW9lw0RGxpbVTiPQjWgY1vImR5j65ZQcvYmW7nGoD0m/vk9syQQ4z63lq1PM ZOp0wVKMtC5IUoCSPjPiaYO+H/R+wQ50WeTZRI6LV4lUlzxYp9VuU9hDnxvPRNin 00B8ncpe2xtnsg== -----END CERTIFICATE-----Generated at Mon Dec 8 08:27:04 2025 by rpki-client