This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json) Hash identifier: dsaUXvyKjrPM9C9zGc8eljS4JaCz99VI7WNXYgOI0D0= Subject key identifier: 85:94:E7:20:47:4F:82:A7:EC:CF:3D:6F:FF:02:6E:B7:2A:C5:A3:F3 Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd Certificate serial: 019AF1D1C08700054DC4A7FB0BBCE03757A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft Manifest number: 0A4C Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: s4crY0RPCjBR/otgZkzbTe6A7xgjEcUbm3V9Lbp5mqY=) 2: ngLzTXL9yL8qZxP4JODs6i0oJzI.roa (hash: D6+JXEaHb1tO3mpKT7yT9VZcfkQ3PmJxwgv/yQik0ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c0:87:00:05:4d:c4:a7:fb:0b:bc:e0:37:57:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=8594e720474f82a7eccf3d6fff026eb72ac5a3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8a:68:8c:1e:66:6b:25:5c:81:c9:92:37:41: 7b:c6:39:7d:99:d4:c5:9e:1d:71:89:af:3e:98:c0: 3b:6e:65:03:68:74:a5:be:8d:77:e6:10:e5:ef:69: 86:2f:d3:c6:40:ec:5d:dc:8e:16:88:35:3c:9b:6a: 2e:2c:b0:ed:75:fb:ee:ab:0d:42:33:c1:6b:c9:cd: 53:d8:ec:36:d4:c1:40:95:02:8b:bf:b9:d2:4a:01: 79:0f:67:30:02:ca:c9:75:15:ba:87:3c:10:ee:43: 76:3c:90:9c:86:58:1d:bc:32:e6:bf:fe:52:7b:68: 79:56:07:c9:e4:43:46:43:67:64:41:23:52:9f:e4: a9:d7:67:ec:1a:11:d0:3d:d0:56:65:c0:b7:93:a8: b7:dd:68:e6:27:90:33:c4:fc:ce:c6:d2:b7:d5:8e: 37:6d:d3:2a:05:68:13:67:ea:e7:fc:40:fe:7c:9c: d3:e9:08:06:8f:d5:8c:31:f5:da:af:0e:73:70:fc: 0a:87:35:8a:a6:85:4b:50:8d:95:58:44:01:0a:66: 9d:e9:43:9d:6f:56:0a:5c:54:fb:ec:34:c7:d8:d7: fc:78:3f:a4:fc:b4:c7:3f:2c:e9:bf:bb:a2:ab:7e: b7:e8:5e:a7:87:95:29:94:04:c0:e0:bf:03:d8:e6: 0d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:94:E7:20:47:4F:82:A7:EC:CF:3D:6F:FF:02:6E:B7:2A:C5:A3:F3 X509v3 Authority Key Identifier: keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ea:65:e2:92:93:91:67:61:37:1a:3c:96:f0:b0:60:ac:2d: ad:97:9e:95:8c:23:3a:74:9d:0a:53:f7:ad:3e:26:62:a6:42: 86:54:82:aa:56:54:c5:93:43:9f:b4:7a:e0:a1:85:ff:09:42: 2c:bf:bb:12:65:9f:96:a8:4a:bf:43:cb:22:a4:ad:19:59:08: a1:9b:e4:dd:53:05:fa:14:8a:de:9e:ad:35:47:ac:55:7a:9d: 6b:8c:a5:2a:74:51:13:a8:54:9b:69:e5:27:85:35:bc:a1:98: d6:5f:df:8e:a2:ec:2f:ae:8a:80:ae:41:aa:14:45:83:66:27: d7:17:36:8b:9c:b6:0a:3b:c7:23:57:ea:11:ac:ba:30:98:69: c8:37:2d:96:9d:cc:55:1a:cb:4d:19:93:05:36:86:52:f9:f7: 58:20:49:d9:d2:66:8f:56:69:85:90:2f:60:e3:18:e2:1b:23: 43:04:ef:d0:bb:86:b0:ba:6c:d2:b2:d9:b6:d2:45:3f:7c:b0: 36:4a:e1:c2:ed:55:2a:84:bc:1c:03:86:be:d5:df:59:ae:a1: 05:bd:f2:9a:e8:1c:4d:2f:f2:31:8b:8a:af:7c:96:e2:b1:12: 15:a0:dc:05:c0:bb:55:09:16:a6:a9:fd:55:58:53:14:3f:9c: 3e:aa:e9:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cCHAAVNxKf7C7zgN1eoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NjQ2NjdjMzRhN2RiYjAyZjA1MzBiY2U0ODJkMTFhZDQy NDg3YmQwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD Eyg4NTk0ZTcyMDQ3NGY4MmE3ZWNjZjNkNmZmZjAyNmViNzJhYzVhM2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIpojB5mayVcgcmSN0F7xjl9mdTF nh1xia8+mMA7bmUDaHSlvo135hDl72mGL9PGQOxd3I4WiDU8m2ouLLDtdfvuqw1C M8Fryc1T2Ow21MFAlQKLv7nSSgF5D2cwAsrJdRW6hzwQ7kN2PJCchlgdvDLmv/5S e2h5VgfJ5ENGQ2dkQSNSn+Sp12fsGhHQPdBWZcC3k6i33WjmJ5AzxPzOxtK31Y43 bdMqBWgTZ+rn/ED+fJzT6QgGj9WMMfXarw5zcPwKhzWKpoVLUI2VWEQBCmad6UOd b1YKXFT77DTH2Nf8eD+k/LTHPyzpv7uiq3636F6nh5UplATA4L8D2OYNzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWU5yBHT4Kn7M89b/8CbrcqxaPzMB8GA1UdIwQY MBaAFNRkZnw0p9uwLwUwvOSC0RrUJIe9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUt MjYwZGU2Y2JmNDU2LzEvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iZjQ3OTMtMGM4NC00MjJjLTliOGUtMjYwZGU2Y2JmNDU2 LzEvMUdSbWZEU24yN0F2QlRDODVJTFJHdFFraDcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOpl4pKT kWdhNxo8lvCwYKwtrZeelYwjOnSdClP3rT4mYqZChlSCqlZUxZNDn7R64KGF/wlC LL+7EmWflqhKv0PLIqStGVkIoZvk3VMF+hSK3p6tNUesVXqda4ylKnRRE6hUm2nl J4U1vKGY1l/fjqLsL66KgK5BqhRFg2Yn1xc2i5y2CjvHI1fqEay6MJhpyDctlp3M VRrLTRmTBTaGUvn3WCBJ2dJmj1ZphZAvYOMY4hsjQwTv0LuGsLps0rLZttJFP3yw Nkrhwu1VKoS8HAOGvtXfWa6hBb3ymugcTS/yMYuKr3yW4rESFaDcBcC7VQkWpqn9 VVhTFD+cPqrpEw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:50 2025 by rpki-client