This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft File: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft (raw, json) Hash identifier: RMU1Xo8UJ51s8rSfg834zja2byCAcRN9EYU1pJ1D24Q= Subject key identifier: 29:23:8A:11:0A:CC:9D:2B:FB:93:D2:99:0A:89:8C:43:C9:3E:3D:6E Authority key identifier: 1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2 Certificate issuer: /CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2 Certificate serial: 019B5A51AA6D2D5DC0E43C52A8E7071697A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft Manifest number: 077A Signing time: Fri 26 Dec 2025 11:00:59 +0000 Manifest this update: Fri 26 Dec 2025 11:00:59 +0000 Manifest next update: Sat 27 Dec 2025 11:00:59 +0000 Files and hashes: 1: 71VKnDjS2pIKav8fy7VWvbZMqKY.roa (hash: x3r/u2CpBN4vA9H4DRg1/AuBeG7a5/EYABNheKy1tXk=) 2: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl (hash: 0b6JKMkPlxA/zcPH479lAjgMWzXE4UNUzqwmxLPtOjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:aa:6d:2d:5d:c0:e4:3c:52:a8:e7:07:16:97:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2 Validity Not Before: Dec 26 11:00:59 2025 GMT Not After : Dec 27 11:00:59 2025 GMT Subject: CN=29238a110acc9d2bfb93d2990a898c43c93e3d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:17:cd:61:30:13:42:55:36:c1:67:94:17:b8: 46:18:07:f1:77:6d:e6:34:54:2e:fa:d6:b8:7b:62: 31:5d:ef:d4:96:17:03:22:e9:6f:3e:00:2d:70:07: 50:23:f7:c4:27:bd:c0:42:58:b8:ee:cf:53:2c:0d: f9:23:5e:fc:d0:78:85:49:94:70:b9:cc:dc:90:43: f1:6b:9a:f0:c8:0f:bc:0b:9f:8b:29:9f:fb:74:bb: 3d:c7:e5:8b:82:e5:72:e2:51:e4:6e:e2:41:a4:5f: db:ff:ac:d7:d0:35:db:a6:d4:9b:6b:87:d6:94:b4: 56:ac:0d:7f:f9:fc:55:3d:32:58:58:69:b0:57:0b: b9:85:1d:73:95:4e:e6:a8:3d:3d:49:13:27:e7:cf: 53:e3:82:2f:fe:8d:3d:6c:19:2e:8e:ff:cb:fe:d2: 62:42:e2:8f:96:50:04:2a:92:0a:eb:46:0e:83:b4: e4:96:31:17:ce:7b:25:3d:da:fe:91:26:21:21:54: c3:8e:8a:84:4c:56:a8:9c:ae:88:31:22:81:ee:a5: 94:50:98:00:a8:fd:29:26:ca:0a:70:55:e4:06:09: 27:ce:2d:0e:9a:e4:6c:37:36:46:9b:8f:6e:b6:1c: a1:05:c6:c2:9c:3b:a2:f3:e0:4e:50:a3:a3:f2:71: 41:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:23:8A:11:0A:CC:9D:2B:FB:93:D2:99:0A:89:8C:43:C9:3E:3D:6E X509v3 Authority Key Identifier: keyid:1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:1b:25:95:15:c4:b9:6c:86:53:0f:5a:47:52:02:be:00:0d: dd:bb:c8:2c:91:8e:fd:ed:37:1b:27:94:d9:f2:5e:3e:18:c8: 55:ab:70:49:7d:78:a7:07:cc:36:1d:a9:93:88:e3:d6:c9:81: 29:41:1f:1f:67:0c:3a:00:d4:2d:3b:c5:86:dc:46:03:64:8f: be:b8:5d:15:01:5f:a0:02:32:fe:a4:ef:7e:52:7f:da:86:d6: a3:72:21:5f:5d:65:40:25:76:a4:8a:fe:41:7c:69:f5:9a:e1: 1d:8f:3d:d4:68:50:c0:87:cc:6c:eb:81:6b:cf:38:5d:f2:11: 56:7f:bf:15:c6:82:b9:e5:06:08:e4:65:98:7a:ef:33:71:c6: 7a:a4:c1:85:80:2c:c0:b3:9b:65:bb:0e:ea:4f:5f:fd:fa:ea: 41:94:93:4f:56:91:c3:2b:83:3d:34:c5:06:5b:91:a8:6b:05: 41:48:8f:03:b3:e2:0f:c0:d9:9a:d3:6e:76:f2:1b:ea:1a:03: 42:64:ef:10:bf:78:7f:ae:be:a9:fd:63:cd:cf:ee:05:e8:bf: 86:c5:62:64:64:99:25:2c:7e:80:62:59:01:0f:1c:f6:c1:2d: 5c:9f:4d:1e:b4:72:fd:62:31:91:fe:5a:fd:cf:f9:1c:ab:32: 50:03:bd:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUaptLV3A5DxSqOcHFpelMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNmFkZDNlYTE1OWY2M2ZmNThkNmIzZGZmZDJjYTQxNmFj MDMzYTIwHhcNMjUxMjI2MTEwMDU5WhcNMjUxMjI3MTEwMDU5WjAzMTEwLwYDVQQD EygyOTIzOGExMTBhY2M5ZDJiZmI5M2QyOTkwYTg5OGM0M2M5M2UzZDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BfNYTATQlU2wWeUF7hGGAfxd23m NFQu+ta4e2IxXe/UlhcDIulvPgAtcAdQI/fEJ73AQli47s9TLA35I1780HiFSZRw uczckEPxa5rwyA+8C5+LKZ/7dLs9x+WLguVy4lHkbuJBpF/b/6zX0DXbptSba4fW lLRWrA1/+fxVPTJYWGmwVwu5hR1zlU7mqD09SRMn589T44Iv/o09bBkujv/L/tJi QuKPllAEKpIK60YOg7TkljEXznslPdr+kSYhIVTDjoqETFaonK6IMSKB7qWUUJgA qP0pJsoKcFXkBgknzi0OmuRsNzZGm49uthyhBcbCnDui8+BOUKOj8nFBwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkjihEKzJ0r+5PSmQqJjEPJPj1uMB8GA1UdIwQY MBaAFBpq3T6hWfY/9Y1rPf/SykFqwDOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR21yZFBxRlo5al8xaldzOV85TEtRV3JBTTZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hZGU4ODEtZWY0NS00ZDA5LWI2MzQt M2EwMWM2M2Y4NGY3LzEvR21yZFBxRlo5al8xaldzOV85TEtRV3JBTTZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hZGU4ODEtZWY0NS00ZDA5LWI2MzQtM2EwMWM2M2Y4NGY3 LzEvR21yZFBxRlo5al8xaldzOV85TEtRV3JBTTZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxsllRXE uWyGUw9aR1ICvgAN3bvILJGO/e03GyeU2fJePhjIVatwSX14pwfMNh2pk4jj1smB KUEfH2cMOgDULTvFhtxGA2SPvrhdFQFfoAIy/qTvflJ/2obWo3IhX11lQCV2pIr+ QXxp9ZrhHY891GhQwIfMbOuBa884XfIRVn+/FcaCueUGCORlmHrvM3HGeqTBhYAs wLObZbsO6k9f/frqQZSTT1aRwyuDPTTFBluRqGsFQUiPA7PiD8DZmtNudvIb6hoD QmTvEL94f66+qf1jzc/uBei/hsViZGSZJSx+gGJZAQ8c9sEtXJ9NHrRy/WIxkf5a /c/5HKsyUAO9EQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:56 2025 by rpki-client