This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json) Hash identifier: yyQ1uLa/9FPZwPnq3C60nJmkbISgtjMeFSCjZOTYAmo= Subject key identifier: B8:B4:7D:98:BC:0A:7F:D7:AB:DE:37:85:A0:B0:00:FF:7F:DF:32:68 Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92 Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692 Certificate serial: 019B0746FE6754F49DED864355D0CD9F10BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft Manifest number: 0951 Signing time: Wed 10 Dec 2025 08:00:51 +0000 Manifest this update: Wed 10 Dec 2025 08:00:51 +0000 Manifest next update: Thu 11 Dec 2025 08:00:51 +0000 Files and hashes: 1: 8np8dFC03aZy-NSvKyaibYkoD2c.roa (hash: yH2zRDSO2w0uHZTYPQwRFl05v2muoqWJ+Z0OUk1oMhY=) 2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: Pr5fjXGM/mzduMuVKlCQDDvJEczla0pfQoMgHeZm7TU=) 3: dl7fBf_Q9iWR2RTbgzduCGEsnu0.roa (hash: eVfjDssVSwbldy+Bqk+kwlieiStmiWJtJAkqUXW89hA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 08:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:46:fe:67:54:f4:9d:ed:86:43:55:d0:cd:9f:10:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692 Validity Not Before: Dec 10 08:00:51 2025 GMT Not After : Dec 11 08:00:51 2025 GMT Subject: CN=b8b47d98bc0a7fd7abde3785a0b000ff7fdf3268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7f:72:ba:02:3e:8b:11:0b:47:21:70:1c:10: b7:43:15:67:d4:7b:11:d0:2e:3d:60:03:7d:b7:46: 58:73:81:45:4c:3a:35:ea:ab:43:ae:00:cb:74:9c: 48:34:f3:c1:46:6e:87:d8:83:82:7a:56:f5:c1:bd: 1a:f6:e4:ce:5f:0e:fa:75:d9:28:d3:fa:45:dd:9b: fa:3b:76:de:5f:14:a2:59:4d:33:e0:15:02:81:36: 00:12:ea:bb:6a:01:fa:bf:e0:f5:dc:84:37:2f:d7: 93:ae:e5:59:4c:82:e5:14:33:9d:e4:c1:6c:ea:1b: 01:ef:dc:4c:35:7e:cd:62:a4:eb:0a:2b:6f:de:77: 0e:07:b7:3b:d7:99:f0:7a:78:76:03:f7:da:27:82: b0:19:20:6b:94:b9:aa:e8:38:3c:1c:1a:b1:d6:00: a7:d9:d8:e2:a0:0d:d4:7b:bf:44:e6:e8:31:19:17: 68:0f:92:2a:a4:9a:ba:2a:41:20:8e:d6:4a:62:5a: 16:97:85:dc:c4:f2:1f:6a:27:93:97:f5:b1:56:9b: 4e:84:1a:5f:bd:0c:a9:30:94:42:4f:59:16:4e:8c: 1b:29:ae:76:1b:fc:e7:fb:ae:23:54:95:09:75:70: f9:23:de:e3:f5:23:2d:ec:0b:e0:7d:af:e9:81:0b: 69:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B4:7D:98:BC:0A:7F:D7:AB:DE:37:85:A0:B0:00:FF:7F:DF:32:68 X509v3 Authority Key Identifier: keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:31:83:ff:f0:bb:ed:4a:5a:83:f3:b9:7d:a9:b4:47:f3:62: 95:a5:5d:97:2d:1f:90:ec:c5:42:a7:8c:98:a2:96:cb:90:2f: 9d:90:cf:1a:85:dc:58:ff:b8:15:73:9f:3a:a2:6d:ad:61:56: 19:9e:b1:be:d4:82:7d:40:07:48:42:d4:80:a1:80:09:8d:2d: b1:99:2f:5b:24:77:3f:1f:72:e7:af:bc:02:7a:70:86:d4:10: cb:07:57:8a:a5:00:6d:31:18:b1:24:8f:78:a7:b7:5c:1a:05: 45:f4:de:69:14:90:4f:e3:48:9c:8f:25:53:90:88:46:9e:1b: 46:66:ac:0b:c9:53:4f:ba:6f:65:5a:c9:f7:9d:8a:56:d1:63: 54:39:da:23:c8:3e:a0:91:99:4b:01:63:ba:8d:4d:58:bb:02: ec:c5:47:62:78:fd:05:1d:61:b4:fc:f3:c5:94:48:02:29:00: 3c:ff:36:99:0b:1b:c2:1c:a3:28:f6:73:6e:19:0f:d1:94:0c: af:cd:e8:31:0d:8d:c7:af:de:90:31:e9:48:17:49:37:24:79: f7:51:de:e3:2c:85:45:61:c8:73:a2:87:2f:d0:a1:9b:a6:dd: e4:3e:93:10:d0:28:d2:10:57:e9:9a:30:7e:43:09:68:42:bc: ab:cc:81:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHRv5nVPSd7YZDVdDNnxC9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMzFkY2E4ODdkOGJlNjA2MDE5ZDBhMTU5M2ExNmZmZDM5 ZmQ2OTIwHhcNMjUxMjEwMDgwMDUxWhcNMjUxMjExMDgwMDUxWjAzMTEwLwYDVQQD EyhiOGI0N2Q5OGJjMGE3ZmQ3YWJkZTM3ODVhMGIwMDBmZjdmZGYzMjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt39yugI+ixELRyFwHBC3QxVn1HsR 0C49YAN9t0ZYc4FFTDo16qtDrgDLdJxINPPBRm6H2IOCelb1wb0a9uTOXw76ddko 0/pF3Zv6O3beXxSiWU0z4BUCgTYAEuq7agH6v+D13IQ3L9eTruVZTILlFDOd5MFs 6hsB79xMNX7NYqTrCitv3ncOB7c715nwenh2A/faJ4KwGSBrlLmq6Dg8HBqx1gCn 2djioA3Ue79E5ugxGRdoD5IqpJq6KkEgjtZKYloWl4XcxPIfaieTl/WxVptOhBpf vQypMJRCT1kWTowbKa52G/zn+64jVJUJdXD5I97j9SMt7Avgfa/pgQtp8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLi0fZi8Cn/Xq943haCwAP9/3zJoMB8GA1UdIwQY MBaAFBox3KiH2L5gYBnQoVk6Fv/Tn9aSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNzgwY2UtNGYyNi00YjY0LWI3ZjEt OTBjOTk5ZDM1ZWQ4LzEvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yNzgwY2UtNGYyNi00YjY0LWI3ZjEtOTBjOTk5ZDM1ZWQ4 LzEvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzGD//C7 7Upag/O5fam0R/NilaVdly0fkOzFQqeMmKKWy5AvnZDPGoXcWP+4FXOfOqJtrWFW GZ6xvtSCfUAHSELUgKGACY0tsZkvWyR3Px9y56+8AnpwhtQQywdXiqUAbTEYsSSP eKe3XBoFRfTeaRSQT+NInI8lU5CIRp4bRmasC8lTT7pvZVrJ952KVtFjVDnaI8g+ oJGZSwFjuo1NWLsC7MVHYnj9BR1htPzzxZRIAikAPP82mQsbwhyjKPZzbhkP0ZQM r83oMQ2Nx6/ekDHpSBdJNyR591He4yyFRWHIc6KHL9Chm6bd5D6TENAo0hBX6Zow fkMJaEK8q8yBxQ== -----END CERTIFICATE-----Generated at Wed Dec 10 13:19:05 2025 by rpki-client