This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft File: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft (raw, json) Hash identifier: USpi6IKsfdk1pSVktMb5Wq6WXpO6ZHN5UJQL7DaeD1U= Subject key identifier: 86:26:E2:8C:84:7B:D1:B9:48:6C:92:EE:37:1D:8A:F1:77:40:07:E4 Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54 Certificate issuer: /CN=1ab634dc74f6037ba47311d127420e76f296be54 Certificate serial: 019B33B1E76C5610ECDDD7EF595AD4E7FC27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft Manifest number: 1789 Signing time: Thu 18 Dec 2025 23:00:55 +0000 Manifest this update: Thu 18 Dec 2025 23:00:55 +0000 Manifest next update: Fri 19 Dec 2025 23:00:55 +0000 Files and hashes: 1: 7UAk0cN_93o1IqUzEsLzy3OF8t8.roa (hash: X/DccKCPSXNbl5PAX4IP4Kv17+DSYA35yARpxNApl1o=) 2: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl (hash: XSVpji75O1PpYFcQVgYqPKaJCwVVxTYih9bdcCWlTng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:e7:6c:56:10:ec:dd:d7:ef:59:5a:d4:e7:fc:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54 Validity Not Before: Dec 18 23:00:55 2025 GMT Not After : Dec 19 23:00:55 2025 GMT Subject: CN=8626e28c847bd1b9486c92ee371d8af1774007e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0a:e1:4d:80:6d:0e:e2:4a:08:6c:08:48:21: 9f:9e:85:cb:f3:d8:ab:65:02:a8:48:2f:23:0d:9d: a2:d5:57:22:a9:8e:6c:5f:11:1e:10:25:b6:8d:57: 78:47:0f:d9:5c:9d:85:74:8f:a9:87:5c:82:e9:00: cd:a8:43:5d:2a:2a:a0:80:89:66:f8:db:e0:b0:29: 61:d7:86:fe:00:2e:7c:ac:6c:5a:12:60:5e:29:74: e9:f2:a8:b5:1d:5f:e7:73:61:64:6b:95:09:de:cb: 51:9a:c0:3d:72:89:9a:87:42:b1:d0:26:12:fa:2f: 7c:84:56:23:b8:85:6c:ad:2c:09:5f:cf:ce:b5:7e: 3c:2c:58:35:86:f0:dc:d8:be:83:ef:68:83:1a:23: 5f:51:64:99:4b:88:f1:51:97:d3:93:96:32:e2:ca: 08:32:26:92:3e:67:97:37:90:a1:6f:f9:e2:6a:b5: 6b:aa:5f:60:5f:55:de:2a:1a:be:a8:19:76:91:b4: 5b:5d:15:be:f5:f6:ae:5d:a2:e3:eb:9c:33:f7:4c: e7:6c:52:39:82:80:1e:0f:c2:1b:e5:4c:7a:c2:fd: 32:50:46:0d:e4:3a:60:84:09:09:8e:0c:e2:d7:ea: f2:f2:61:d6:a6:45:f8:72:19:ef:e1:7b:0f:78:43: 3c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:26:E2:8C:84:7B:D1:B9:48:6C:92:EE:37:1D:8A:F1:77:40:07:E4 X509v3 Authority Key Identifier: keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:30:15:49:2e:9e:b4:82:15:a1:51:7a:f6:5e:a1:57:2c:e1: 1d:8f:ab:cd:57:d3:da:33:bc:29:bb:30:bc:53:d6:21:5f:ec: 4f:52:5a:1d:6c:03:d7:62:19:91:f9:f6:8d:13:4c:c1:33:0f: 62:2d:f1:97:b6:10:69:0e:04:d0:5d:fa:96:98:f5:f3:09:08: 34:70:c6:bd:71:84:3c:d0:8b:7a:b9:9f:dc:f0:06:a1:1f:03: 9b:a4:ed:1d:b1:73:9a:fb:2d:ac:04:c1:1e:65:97:82:66:64: 38:7c:de:55:c4:c0:b2:52:2e:df:0b:bc:17:cc:ae:63:75:92: c6:b7:cc:b2:fa:62:2a:52:9b:24:0a:84:d1:86:a7:9c:af:27: ba:ce:bc:67:47:6c:18:f5:53:d1:4a:f7:4a:f4:aa:1e:c9:46: f2:49:ea:54:37:75:50:4d:aa:d3:ce:ba:31:d8:11:33:c3:37: a3:30:aa:1a:a3:9a:e6:b2:9a:5c:ce:5f:06:8c:07:bf:14:8a: 95:c3:52:e3:ac:a2:44:6a:71:62:9d:f3:0c:9a:a1:5d:40:2e: f5:2b:3c:c1:5f:da:0d:08:25:23:8c:6b:05:99:72:3c:8e:75: d7:62:b6:53:c5:82:53:76:6c:87:84:26:3d:ee:88:3b:19:68: 93:57:0a:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsedsVhDs3dfvWVrU5/wnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYjYzNGRjNzRmNjAzN2JhNDczMTFkMTI3NDIwZTc2ZjI5 NmJlNTQwHhcNMjUxMjE4MjMwMDU1WhcNMjUxMjE5MjMwMDU1WjAzMTEwLwYDVQQD Eyg4NjI2ZTI4Yzg0N2JkMWI5NDg2YzkyZWUzNzFkOGFmMTc3NDAwN2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwrhTYBtDuJKCGwISCGfnoXL89ir ZQKoSC8jDZ2i1VciqY5sXxEeECW2jVd4Rw/ZXJ2FdI+ph1yC6QDNqENdKiqggIlm +NvgsClh14b+AC58rGxaEmBeKXTp8qi1HV/nc2Fka5UJ3stRmsA9comah0Kx0CYS +i98hFYjuIVsrSwJX8/OtX48LFg1hvDc2L6D72iDGiNfUWSZS4jxUZfTk5Yy4soI MiaSPmeXN5Chb/niarVrql9gX1XeKhq+qBl2kbRbXRW+9fauXaLj65wz90znbFI5 goAeD8Ib5Ux6wv0yUEYN5DpghAkJjgzi1+ry8mHWpkX4chnv4XsPeEM8iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYm4oyEe9G5SGyS7jcdivF3QAfkMB8GA1UdIwQY MBaAFBq2NNx09gN7pHMR0SdCDnbylr5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83YTI2ZTYtZjdhZS00ZGYwLTllY2It ZDg3OWY3ZTcwOWQ2LzEvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83YTI2ZTYtZjdhZS00ZGYwLTllY2ItZDg3OWY3ZTcwOWQ2 LzEvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDAVSS6e tIIVoVF69l6hVyzhHY+rzVfT2jO8KbswvFPWIV/sT1JaHWwD12IZkfn2jRNMwTMP Yi3xl7YQaQ4E0F36lpj18wkINHDGvXGEPNCLermf3PAGoR8Dm6TtHbFzmvstrATB HmWXgmZkOHzeVcTAslIu3wu8F8yuY3WSxrfMsvpiKlKbJAqE0YannK8nus68Z0ds GPVT0Ur3SvSqHslG8knqVDd1UE2q0866MdgRM8M3ozCqGqOa5rKaXM5fBowHvxSK lcNS46yiRGpxYp3zDJqhXUAu9Ss8wV/aDQglI4xrBZlyPI5112K2U8WCU3Zsh4Qm Pe6IOxlok1cKvg== -----END CERTIFICATE-----Generated at Fri Dec 19 08:04:49 2025 by rpki-client