This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json) Hash identifier: K3RkFzHc6OVrtXuOflnYQnw6CyYFUfGVNFdp2LdXZJ0= Subject key identifier: 76:26:5C:86:E5:03:CD:6B:0D:BE:16:28:A8:F0:F3:D2:79:03:D4:32 Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd Certificate serial: 019B59E3A580CF17C49E62DC98623421DF07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft Manifest number: 0D1C Signing time: Fri 26 Dec 2025 09:00:49 +0000 Manifest this update: Fri 26 Dec 2025 09:00:49 +0000 Manifest next update: Sat 27 Dec 2025 09:00:49 +0000 Files and hashes: 1: 4PVveBGxN8n2WuGPtmITlLn0GtI.roa (hash: cfEtfn0zg7NHGmh50mHK7LzfG79rGcilgz9AnPpzS50=) 2: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: QUtU/5QSGlaJuiYS4t6de1MbhNn4Z9SJCpGvs0uCFZc=) 3: eIp7-TA74OpVMqMjgyn5rozHch0.roa (hash: Vk4popoaDrWGjozep9hzWTbs+ZYNrWhKKEtSBoEkXJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:a5:80:cf:17:c4:9e:62:dc:98:62:34:21:df:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd Validity Not Before: Dec 26 09:00:49 2025 GMT Not After : Dec 27 09:00:49 2025 GMT Subject: CN=76265c86e503cd6b0dbe1628a8f0f3d27903d432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:32:cd:ed:31:e0:9d:3c:61:3b:cc:dd:1f:a1: 39:c5:10:0c:a7:f9:c6:69:fa:f9:83:bd:e5:f1:c9: f4:a5:8a:ee:19:a2:21:f7:7c:0d:d0:70:34:30:24: f1:35:42:d6:56:40:12:1c:bf:ad:4b:7f:ea:8b:bb: b4:54:ec:e9:48:71:75:b5:be:c8:c7:16:cf:47:a0: 67:1b:0c:24:35:54:86:a8:1c:49:8b:5e:06:ad:ca: 35:32:fa:e4:4f:53:63:06:d1:34:4d:aa:78:0e:43: 20:b4:c4:21:d9:01:ec:a7:da:12:60:d3:6c:ea:98: 27:fe:68:ea:a3:75:1c:29:ee:cb:f1:11:b6:bd:a8: 1b:73:ed:e0:b7:49:d5:90:06:8a:35:3c:4a:49:9d: b7:dd:fa:48:a2:8b:fb:ff:73:95:29:d6:b4:90:ff: ab:5d:7e:56:12:56:ff:0b:8a:90:79:fa:78:17:d8: 17:e7:7a:62:a8:cf:11:94:6e:ec:a4:61:43:89:d9: 6c:93:84:aa:72:fe:a3:a8:40:3f:54:fe:46:62:05: 3e:d4:f9:7e:03:f5:73:16:81:21:b3:48:e7:33:9e: 3b:2b:7e:4d:3d:23:0c:61:a7:2a:93:e7:e5:0e:53: 2b:da:bf:4c:e5:96:08:cb:01:d3:09:d3:ed:c7:7e: 03:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:26:5C:86:E5:03:CD:6B:0D:BE:16:28:A8:F0:F3:D2:79:03:D4:32 X509v3 Authority Key Identifier: keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6c:c5:63:5e:6e:07:f5:8f:0c:3f:0f:a1:b6:02:e1:e8:a1: 64:fa:c9:f1:22:24:6c:83:09:a5:7a:85:8d:7e:2b:1e:47:db: a5:55:04:b5:a2:a8:fc:89:68:82:d6:00:e8:45:b6:3b:32:39: 1c:1c:33:17:be:27:04:0a:7c:52:51:fe:b6:18:b4:af:df:12: 54:8f:63:5d:a7:1a:e7:85:23:f9:b8:35:e2:47:e7:22:53:c2: f9:9d:0e:59:65:52:a8:df:b3:c1:e1:85:8a:bf:de:30:b9:e5: aa:80:fc:fb:90:2b:1f:a4:48:5c:75:3e:9b:38:b5:29:1d:50: ef:d9:b0:ab:87:7a:c9:89:cc:a7:46:2f:bd:0a:b6:39:e8:5c: e5:a9:50:60:0c:2b:47:0a:7e:aa:ce:e6:73:00:b6:3f:e5:31: 1f:37:ac:c9:63:7d:2d:f7:ba:42:3d:66:a7:7d:9f:c3:df:b2: a8:d2:8c:5f:48:e7:e5:f1:cf:b2:97:d7:27:cd:ad:3b:7e:6b: 10:49:17:22:8c:6c:28:36:b0:e6:2e:8a:e1:7b:0f:f7:52:69: 28:2c:d4:86:ce:c0:0a:52:ec:00:ab:8e:0e:49:d3:1f:d8:ef: 83:0e:e3:f1:02:81:e0:b7:61:99:15:53:ee:c7:f4:12:c5:6c: 5f:91:31:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ46WAzxfEnmLcmGI0Id8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMWQyMTU0YjkzMjRlZmIzOWNhMzhiYTE5MzFiYTVkZmI1 OWU4ZmQwHhcNMjUxMjI2MDkwMDQ5WhcNMjUxMjI3MDkwMDQ5WjAzMTEwLwYDVQQD Eyg3NjI2NWM4NmU1MDNjZDZiMGRiZTE2MjhhOGYwZjNkMjc5MDNkNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjLN7THgnTxhO8zdH6E5xRAMp/nG afr5g73l8cn0pYruGaIh93wN0HA0MCTxNULWVkASHL+tS3/qi7u0VOzpSHF1tb7I xxbPR6BnGwwkNVSGqBxJi14Grco1MvrkT1NjBtE0Tap4DkMgtMQh2QHsp9oSYNNs 6pgn/mjqo3UcKe7L8RG2vagbc+3gt0nVkAaKNTxKSZ233fpIoov7/3OVKda0kP+r XX5WElb/C4qQefp4F9gX53piqM8RlG7spGFDidlsk4Sqcv6jqEA/VP5GYgU+1Pl+ A/VzFoEhs0jnM547K35NPSMMYacqk+flDlMr2r9M5ZYIywHTCdPtx34DeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYmXIblA81rDb4WKKjw89J5A9QyMB8GA1UdIwQY MBaAFBodIVS5Mk77Oco4uhkxul37Wej9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAt ODkwMWIwNTJiODZiLzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAtODkwMWIwNTJiODZi LzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2zFY15u B/WPDD8PobYC4eihZPrJ8SIkbIMJpXqFjX4rHkfbpVUEtaKo/IlogtYA6EW2OzI5 HBwzF74nBAp8UlH+thi0r98SVI9jXaca54Uj+bg14kfnIlPC+Z0OWWVSqN+zweGF ir/eMLnlqoD8+5ArH6RIXHU+mzi1KR1Q79mwq4d6yYnMp0YvvQq2Oehc5alQYAwr Rwp+qs7mcwC2P+UxHzesyWN9Lfe6Qj1mp32fw9+yqNKMX0jn5fHPspfXJ82tO35r EEkXIoxsKDaw5i6K4XsP91JpKCzUhs7AClLsAKuODknTH9jvgw7j8QKB4LdhmRVT 7sf0EsVsX5ExLw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:04 2025 by rpki-client