This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft File: GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft (raw, json) Hash identifier: I3xncslTbXlDrRMtxYzAYAuMtKGEpiVEDzAoAKlSsjg= Subject key identifier: C0:A6:23:00:42:D6:83:C6:63:53:7B:F6:27:4A:50:D6:4A:E8:A7:B6 Authority key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26 Certificate issuer: /CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626 Certificate serial: 019AF23F8D8B85533B68D98A3EC1D1A87508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 06:00:42 +0000 Manifest this update: Sat 06 Dec 2025 06:00:42 +0000 Manifest next update: Sun 07 Dec 2025 06:00:42 +0000 Files and hashes: 1: GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl (hash: Ha5O426sbVLh1N6oetpIYDYhqklN1/CetUw65dTVitU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8d:8b:85:53:3b:68:d9:8a:3e:c1:d1:a8:75:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626 Validity Not Before: Dec 6 06:00:42 2025 GMT Not After : Dec 7 06:00:42 2025 GMT Subject: CN=c0a6230042d683c663537bf6274a50d64ae8a7b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:35:ce:e9:f6:9b:51:c3:e7:30:83:f6:17:7d: 9e:b3:b1:81:a8:87:55:d6:17:32:64:f8:b7:b5:45: 89:a7:41:d4:9d:10:a3:79:b9:44:26:d0:86:46:4f: 83:81:e0:c4:7b:b3:2b:4a:91:20:02:c2:4e:54:f6: bf:63:26:c9:25:fc:16:11:23:14:25:64:1d:49:39: d1:86:14:14:91:b6:72:c4:ad:2d:fc:29:5b:e2:d0: 06:f8:9d:99:13:94:a1:61:56:7e:5e:93:80:d8:09: 2e:35:05:b0:24:8f:cc:b1:7c:45:59:5d:c8:f8:71: 22:7c:80:ed:e2:5a:80:5c:65:f5:0d:de:9e:79:f4: fd:25:c0:96:c9:31:5e:83:7d:74:dc:96:b1:f3:94: dd:2a:00:06:2b:da:76:b9:f8:32:57:5f:9b:d6:79: 3b:11:5a:34:0d:1e:8c:cc:eb:b5:26:20:26:a2:69: 5b:46:f6:fe:3d:07:a0:ce:28:0f:16:b8:36:85:37: 8f:92:19:5a:a6:f4:16:8d:c6:9f:fe:5a:cd:f5:2f: 87:b7:dc:af:be:78:96:e1:8b:a7:b8:9a:a2:95:db: 28:df:16:56:d9:1b:78:96:5f:e5:1c:1e:36:a1:de: 77:02:31:3f:a7:0c:bf:d5:c5:74:c7:1a:00:69:55: de:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A6:23:00:42:D6:83:C6:63:53:7B:F6:27:4A:50:D6:4A:E8:A7:B6 X509v3 Authority Key Identifier: keyid:1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:76:b5:8d:f4:de:33:f4:66:cb:86:bd:ec:61:ab:bf:06:4d: 63:b3:d2:b8:10:1a:a6:d7:ae:2c:af:90:c9:ba:50:d8:4d:73: 0e:e5:f0:ee:78:52:8a:41:b3:98:ed:f7:d6:91:93:df:76:c4: dd:36:3f:f1:22:3c:08:9c:6d:ac:98:9c:26:17:2d:21:86:af: 70:70:17:21:b7:a9:30:47:bf:fb:e9:76:61:16:d7:76:85:97: ad:3f:8b:6e:43:82:39:f0:c3:fe:4d:02:e2:72:d8:28:c7:36: 35:91:5b:d8:52:97:21:71:4f:e6:e4:5d:4a:d5:52:d1:42:f4: 65:0c:ed:96:a1:ac:8c:1a:f6:8f:94:29:fa:7f:54:2c:0d:fe: 4f:17:4b:91:98:13:6f:eb:48:be:65:7f:f5:76:9a:05:45:f4: 92:ee:8a:9e:f9:f1:05:40:fd:20:45:55:11:55:84:fb:e7:e9: d8:58:7d:3e:d3:80:5a:92:41:68:d0:9a:c4:76:93:40:0f:a5: 8c:24:08:09:97:d0:5b:d0:e0:4c:4f:50:b6:f5:c3:d5:44:1a: 83:b7:a1:72:11:74:93:91:ac:a5:60:41:09:82:d2:43:a8:06: 10:e0:49:b0:ba:85:f9:21:9f:57:cb:66:b9:c4:2f:8e:7d:db: 52:46:e0:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP42LhVM7aNmKPsHRqHUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMDljYmFjNTdmY2M2YzBjYWI3M2EyNGQyMGYwMTZmNjg2 Yjc2MjYwHhcNMjUxMjA2MDYwMDQyWhcNMjUxMjA3MDYwMDQyWjAzMTEwLwYDVQQD EyhjMGE2MjMwMDQyZDY4M2M2NjM1MzdiZjYyNzRhNTBkNjRhZThhN2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTXO6fabUcPnMIP2F32es7GBqIdV 1hcyZPi3tUWJp0HUnRCjeblEJtCGRk+DgeDEe7MrSpEgAsJOVPa/YybJJfwWESMU JWQdSTnRhhQUkbZyxK0t/Clb4tAG+J2ZE5ShYVZ+XpOA2AkuNQWwJI/MsXxFWV3I +HEifIDt4lqAXGX1Dd6eefT9JcCWyTFeg3103Jax85TdKgAGK9p2ufgyV1+b1nk7 EVo0DR6MzOu1JiAmomlbRvb+PQegzigPFrg2hTePkhlapvQWjcaf/lrN9S+Ht9yv vniW4YunuJqildso3xZW2Rt4ll/lHB42od53AjE/pwy/1cV0xxoAaVXeAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCmIwBC1oPGY1N79idKUNZK6Ke2MB8GA1UdIwQY MBaAFBoJy6xX/MbAyrc6JNIPAW9oa3YmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85MDYyYWYtNjc2Zi00NWQ5LTgwZjQt YTU3NmYwYTE0NWJhLzEvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS85MDYyYWYtNjc2Zi00NWQ5LTgwZjQtYTU3NmYwYTE0NWJh LzEvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHa1jfTe M/Rmy4a97GGrvwZNY7PSuBAapteuLK+QybpQ2E1zDuXw7nhSikGzmO331pGT33bE 3TY/8SI8CJxtrJicJhctIYavcHAXIbepMEe/++l2YRbXdoWXrT+LbkOCOfDD/k0C 4nLYKMc2NZFb2FKXIXFP5uRdStVS0UL0ZQztlqGsjBr2j5Qp+n9ULA3+TxdLkZgT b+tIvmV/9XaaBUX0ku6KnvnxBUD9IEVVEVWE++fp2Fh9PtOAWpJBaNCaxHaTQA+l jCQICZfQW9DgTE9QtvXD1UQag7ehchF0k5GspWBBCYLSQ6gGEOBJsLqF+SGfV8tm ucQvjn3bUkbgdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:28:52 2025 by rpki-client