This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft File: GRk80M-5OVmJNY4DljEs-7HIj_4.mft (raw, json) Hash identifier: ZiNWsVj8goLYhX+pycD4hy9fmAGnwYCZRkxHoYWmkJc= Subject key identifier: 17:72:82:B3:76:6D:40:5C:64:F0:D5:F7:7C:85:49:D2:97:A5:2C:FE Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe Certificate serial: 019AF164460736584CA09FDA0BC887F1519A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft Manifest number: 1894 Signing time: Sat 06 Dec 2025 02:01:11 +0000 Manifest this update: Sat 06 Dec 2025 02:01:11 +0000 Manifest next update: Sun 07 Dec 2025 02:01:11 +0000 Files and hashes: 1: 7pztvUDezwt3ZSHLohSTcy0jFYM.roa (hash: uP/w6/w3g1+AZjMv77F/dMcv4FObFdLOts1JHnWbc4w=) 2: GRk80M-5OVmJNY4DljEs-7HIj_4.crl (hash: 9dUp5umKCOHLYVAb+7ESWGD8mXsIAX3bwYjlEo1/EPE=) 3: O2A95fKA1A2XI5zokqy2M5EQluY.roa (hash: l7DaeRNWKyhpILryPmDUINT37G9okCmuQyW2gonVmu8=) 4: VU-yn-djO9ahpUZ0CaOs0k2jQuQ.roa (hash: 7eQhPopRxk4G5cM0yLS4smy3rEn4YSJy79V+gPd0bhg=) 5: oerIe3XBauoH4wnjH-yQh4V4P1U.roa (hash: auHewUAAn3a0HGRSavJta0QusST9c8r9vsoZnA0C1aY=) 6: zXvHu4thYkv7HQpQba4O_Q_xvzo.roa (hash: fvcDkO1NG5nLbeKphToFrAsoDQzcbxvrX/xP6RBPCOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:46:07:36:58:4c:a0:9f:da:0b:c8:87:f1:51:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe Validity Not Before: Dec 6 02:01:11 2025 GMT Not After : Dec 7 02:01:11 2025 GMT Subject: CN=177282b3766d405c64f0d5f77c8549d297a52cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e4:17:7d:31:09:a0:36:07:93:69:c2:a2:19: f0:30:69:9f:3b:e0:bb:30:9f:56:26:c4:cf:30:62: 32:8f:1a:c4:e3:b1:29:11:87:4d:5a:56:ae:55:cd: 79:35:93:08:0a:f9:4e:6b:a6:58:9f:7e:4b:e8:e6: 0b:7e:85:3a:64:c9:3f:7d:c0:e2:35:fc:f7:17:27: de:de:92:a4:53:7c:c0:ab:39:48:20:23:a8:7e:83: 86:10:d0:02:c0:ec:c1:6a:a9:0a:10:79:82:0d:3f: 2a:b3:d7:1f:36:a8:18:c9:32:95:4a:a9:82:31:dc: cc:87:6f:89:4a:05:bc:c9:94:36:2f:bb:af:28:37: 74:da:0b:71:39:49:b5:a2:4c:9b:2c:0e:08:a0:3e: 83:91:f1:55:27:8b:fd:56:ad:0b:d2:4f:56:9d:22: 4b:13:69:d3:2b:97:ef:4c:3e:a9:35:18:dd:92:ad: 41:d3:b5:4a:aa:7e:de:73:09:1e:c7:0f:a8:47:f0: 1e:2f:ef:d9:f9:ce:a1:f7:53:77:71:cc:ee:17:44: 87:7d:45:54:1c:4c:f8:fb:2c:40:ac:1b:35:dc:d9: 64:44:a4:f5:ad:b1:a7:e0:60:3d:f6:5a:03:2b:6a: 53:27:a2:ba:d4:f7:3e:65:ff:f6:03:9a:65:c2:1a: 4f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:72:82:B3:76:6D:40:5C:64:F0:D5:F7:7C:85:49:D2:97:A5:2C:FE X509v3 Authority Key Identifier: keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:37:72:af:ed:3c:d4:68:24:c1:63:af:8d:f7:56:ef:00:0b: 59:76:21:c1:a6:73:6d:90:f6:1f:82:96:ea:23:03:3a:a8:46: 66:36:b4:9c:ae:bb:82:a2:e8:3e:69:f1:ee:cb:34:f8:66:54: 2d:f2:48:ea:bc:40:91:04:c1:3a:87:a0:7a:38:3f:84:d9:a9: 98:31:7f:3d:0e:eb:1c:59:b8:7f:11:02:a6:b8:b1:b6:ab:8f: 86:43:ba:22:54:d9:26:ca:0c:9b:ef:38:b4:8d:04:cb:77:09: bf:30:aa:25:33:95:9e:af:0f:d2:28:90:15:53:27:0f:a6:3c: 9e:19:90:0c:11:2a:72:40:25:fa:b1:65:f8:e9:c7:f7:c5:73: 57:3b:09:0b:54:16:1a:32:9a:ec:2f:ce:c5:37:5a:04:c7:7f: 2f:5c:64:9a:09:6f:e4:dc:a2:c3:b6:2f:8e:f6:ba:63:0a:a5: 5c:c4:ca:7d:b5:a2:54:2d:df:c7:94:35:62:64:81:12:ec:c2: f0:dd:ac:f6:e4:f8:ad:3f:97:ed:47:ee:9e:de:9f:31:75:7a: 00:f7:fb:21:d8:70:2b:c2:90:6c:a3:37:85:d8:c2:85:21:68: 55:03:22:34:71:7f:a4:6f:0f:2f:d2:3a:c3:ba:5e:41:e9:32: 0d:52:64:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEYHNlhMoJ/aC8iH8VGaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MTkzY2QwY2ZiOTM5NTk4OTM1OGUwMzk2MzEyY2ZiYjFj ODhmZmUwHhcNMjUxMjA2MDIwMTExWhcNMjUxMjA3MDIwMTExWjAzMTEwLwYDVQQD EygxNzcyODJiMzc2NmQ0MDVjNjRmMGQ1Zjc3Yzg1NDlkMjk3YTUyY2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOQXfTEJoDYHk2nCohnwMGmfO+C7 MJ9WJsTPMGIyjxrE47EpEYdNWlauVc15NZMICvlOa6ZYn35L6OYLfoU6ZMk/fcDi Nfz3Fyfe3pKkU3zAqzlIICOofoOGENACwOzBaqkKEHmCDT8qs9cfNqgYyTKVSqmC MdzMh2+JSgW8yZQ2L7uvKDd02gtxOUm1okybLA4IoD6DkfFVJ4v9Vq0L0k9WnSJL E2nTK5fvTD6pNRjdkq1B07VKqn7ecwkexw+oR/AeL+/Z+c6h91N3cczuF0SHfUVU HEz4+yxArBs13NlkRKT1rbGn4GA99loDK2pTJ6K61Pc+Zf/2A5plwhpPfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdygrN2bUBcZPDV93yFSdKXpSz+MB8GA1UdIwQY MBaAFBkZPNDPuTlZiTWOA5YxLPuxyI/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wZDY4ZDQtYWRiMy00ZmY5LWI3OGEt NGVmOWQwN2M0NDA1LzEvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8wZDY4ZDQtYWRiMy00ZmY5LWI3OGEtNGVmOWQwN2M0NDA1 LzEvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjdyr+08 1GgkwWOvjfdW7wALWXYhwaZzbZD2H4KW6iMDOqhGZja0nK67gqLoPmnx7ss0+GZU LfJI6rxAkQTBOoegejg/hNmpmDF/PQ7rHFm4fxECprixtquPhkO6IlTZJsoMm+84 tI0Ey3cJvzCqJTOVnq8P0iiQFVMnD6Y8nhmQDBEqckAl+rFl+OnH98VzVzsJC1QW GjKa7C/OxTdaBMd/L1xkmglv5Nyiw7Yvjva6YwqlXMTKfbWiVC3fx5Q1YmSBEuzC 8N2s9uT4rT+X7Ufunt6fMXV6APf7IdhwK8KQbKM3hdjChSFoVQMiNHF/pG8PL9I6 w7peQekyDVJksQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:40:38 2025 by rpki-client