This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft File: GNtfz9wY74Qh4mUfGybBZaAdU_E.mft (raw, json) Hash identifier: y5/rO1RrPPFUu+Gze6p7ZYB7gZ/TZRj356s6dalpTK8= Subject key identifier: 33:30:53:39:33:D1:F1:64:D6:E2:E7:09:4E:9B:07:F7:21:7E:2E:0A Authority key identifier: 18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1 Certificate issuer: /CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1 Certificate serial: 019AF19B69B3E34AF66198BDC5E7E3E2247F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: GNtfz9wY74Qh4mUfGybBZaAdU_E.crl (hash: W4pYTZD7+63ntD59gbGx3dH8g3HN8S0JSSB8haNUcIs=) 2: H0c0iaohuwDRjCnDKysbTdg-WUw.roa (hash: Zx3G3ayX4XbzK0AXVUgC4/4zmj6zDADWp3kxeG6+h7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:69:b3:e3:4a:f6:61:98:bd:c5:e7:e3:e2:24:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1 Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=3330533933d1f164d6e2e7094e9b07f7217e2e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f0:5f:4c:b2:ec:fc:00:2a:3b:56:0d:4b:16: 8a:0a:ff:34:2d:9e:e3:51:37:b4:c9:b4:3a:aa:ce: 0e:b5:f4:01:dc:91:4a:d9:ef:d6:ba:66:1b:d8:76: 62:b7:ba:ba:9c:8a:c4:18:5a:11:f2:44:11:36:ca: 05:38:34:79:01:ac:8d:5f:ed:6e:8e:48:d4:63:ea: d4:20:0d:7a:2a:8a:5f:9b:52:59:ae:30:27:92:93: f6:d7:3c:d8:ae:7f:e2:60:65:71:5d:e0:50:57:7d: ca:8e:96:3b:0a:e6:53:da:21:2a:6b:bc:fc:99:a6: 6d:21:ed:5b:21:e2:65:4c:cf:24:84:09:c1:07:76: 88:bd:32:be:45:16:8a:67:48:1a:e0:c6:4a:d1:bd: 42:98:55:f6:34:ea:97:7f:97:13:fa:89:d4:a2:63: 5d:f3:89:f5:d8:00:0e:35:70:a7:49:3b:70:bc:77: cf:9b:8e:e3:a4:a0:5d:16:58:13:17:9c:36:c5:c3: 8e:25:19:59:c7:79:6e:17:a0:68:66:43:e6:eb:91: 45:cd:96:18:d0:4c:1a:69:2b:ee:ab:d4:9a:b4:55: f3:83:6f:09:52:55:53:2b:f4:2c:50:5e:d3:95:c0: dd:5e:fe:e6:ed:71:55:c4:92:36:72:2f:cd:91:37: 95:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:30:53:39:33:D1:F1:64:D6:E2:E7:09:4E:9B:07:F7:21:7E:2E:0A X509v3 Authority Key Identifier: keyid:18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:54:cf:4a:d4:2f:77:89:f6:1e:e0:88:63:73:c2:60:2b:d9: 24:69:28:47:eb:68:b3:d8:7d:95:21:29:b6:91:f5:c8:47:9a: 08:4e:05:59:01:34:70:4a:26:76:f2:e3:ff:0d:b8:10:f2:3d: d3:cd:29:df:1a:57:d8:cf:15:0f:92:b0:c3:09:48:a4:22:bd: 16:8c:b8:c9:27:e6:f1:bd:b6:c8:ce:34:f0:b0:bf:26:48:3e: 1f:be:3b:52:30:33:3e:ef:42:88:13:5d:26:da:c8:8c:e5:9d: 4e:38:8a:8b:98:65:6d:b7:d3:ad:46:ff:e5:89:ee:3b:48:c5: 2d:14:60:df:20:99:cb:dc:5f:0a:3d:06:9b:78:15:b6:3d:70: 2b:b3:36:7e:ef:8e:88:bd:05:48:d2:3f:84:55:c8:1f:50:0d: 72:09:b2:3d:c9:68:2c:95:0c:1c:33:47:0b:75:d0:17:fe:bc: 37:7e:4a:15:e1:d6:9a:fc:09:ac:e5:0d:c9:9f:79:7a:a4:09: df:36:28:40:cb:34:73:f8:ee:92:be:83:38:1a:f2:a7:ab:50: 69:2a:1c:82:c0:24:bc:3c:c1:f9:ae:38:f2:71:5a:97:25:1a: d5:42:35:18:d9:12:89:1c:ff:36:50:4c:63:da:fc:4a:fe:34: 1a:d9:8d:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2mz40r2YZi9xefj4iR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZGI1ZmNmZGMxOGVmODQyMWUyNjUxZjFiMjZjMTY1YTAx ZDUzZjEwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD EygzMzMwNTMzOTMzZDFmMTY0ZDZlMmU3MDk0ZTliMDdmNzIxN2UyZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fBfTLLs/AAqO1YNSxaKCv80LZ7j UTe0ybQ6qs4OtfQB3JFK2e/WumYb2HZit7q6nIrEGFoR8kQRNsoFODR5AayNX+1u jkjUY+rUIA16Kopfm1JZrjAnkpP21zzYrn/iYGVxXeBQV33KjpY7CuZT2iEqa7z8 maZtIe1bIeJlTM8khAnBB3aIvTK+RRaKZ0ga4MZK0b1CmFX2NOqXf5cT+onUomNd 84n12AAONXCnSTtwvHfPm47jpKBdFlgTF5w2xcOOJRlZx3luF6BoZkPm65FFzZYY 0EwaaSvuq9SatFXzg28JUlVTK/QsUF7TlcDdXv7m7XFVxJI2ci/NkTeVDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMwUzkz0fFk1uLnCU6bB/chfi4KMB8GA1UdIwQY MBaAFBjbX8/cGO+EIeJlHxsmwWWgHVPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR050Zno5d1k3NFFoNG1VZkd5YkJaYUFkVV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82YzNjZDQtNTg5Ni00MjVlLTk1ZGIt ZmZlZDUwYmFhMGRhLzEvR050Zno5d1k3NFFoNG1VZkd5YkJaYUFkVV9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC82YzNjZDQtNTg5Ni00MjVlLTk1ZGItZmZlZDUwYmFhMGRh LzEvR050Zno5d1k3NFFoNG1VZkd5YkJaYUFkVV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1TPStQv d4n2HuCIY3PCYCvZJGkoR+tos9h9lSEptpH1yEeaCE4FWQE0cEomdvLj/w24EPI9 080p3xpX2M8VD5KwwwlIpCK9Foy4ySfm8b22yM408LC/Jkg+H747UjAzPu9CiBNd JtrIjOWdTjiKi5hlbbfTrUb/5YnuO0jFLRRg3yCZy9xfCj0Gm3gVtj1wK7M2fu+O iL0FSNI/hFXIH1ANcgmyPcloLJUMHDNHC3XQF/68N35KFeHWmvwJrOUNyZ95eqQJ 3zYoQMs0c/jukr6DOBryp6tQaSocgsAkvDzB+a448nFalyUa1UI1GNkSiRz/NlBM Y9r8Sv40GtmN9A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:05 2025 by rpki-client