This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft File: GhREUllzKqZzbCSCNEZZR_wjdNA.mft (raw, json) Hash identifier: 0VGXobNq7Zm8GfkYyydeTdp/lkbWc5RlWPZOiJbhOwU= Subject key identifier: 20:92:2C:33:2A:18:4E:45:91:7D:EC:4B:53:A1:A4:DA:AE:00:11:25 Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0 Certificate issuer: /CN=1a14445259732aa6736c248234465947fc2374d0 Certificate serial: 019B30E9ACCDD8ACCF0B659E397F5B6D7153 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft Manifest number: 0DFE Signing time: Thu 18 Dec 2025 10:02:58 +0000 Manifest this update: Thu 18 Dec 2025 10:02:58 +0000 Manifest next update: Fri 19 Dec 2025 10:02:58 +0000 Files and hashes: 1: GhREUllzKqZzbCSCNEZZR_wjdNA.crl (hash: YT17SmIX6eXUHmxq/ORsiITyaZhpeJifXAzAq4+BTUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:ac:cd:d8:ac:cf:0b:65:9e:39:7f:5b:6d:71:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a14445259732aa6736c248234465947fc2374d0 Validity Not Before: Dec 18 10:02:58 2025 GMT Not After : Dec 19 10:02:58 2025 GMT Subject: CN=20922c332a184e45917dec4b53a1a4daae001125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:03:88:ad:24:2c:3e:f4:cb:64:e1:37:7a:5d: 58:9b:58:42:a6:73:21:60:b7:be:9b:76:27:f4:89: 19:65:ee:41:f9:9b:91:41:d8:47:e1:e1:2b:de:89: 34:b8:38:48:e9:de:da:1f:84:aa:75:98:eb:9a:1b: 01:81:13:2c:03:f3:0d:f9:6a:48:7d:8f:68:75:91: 06:48:1a:dd:66:93:68:b1:d5:fd:2e:bb:ff:82:18: 48:b6:67:6f:7b:c5:5e:92:e9:3a:1d:81:d8:9e:fb: 3d:06:83:8a:9d:68:a1:58:62:2c:36:30:ec:6f:90: b4:27:af:bf:09:cb:e6:8d:d7:6f:d9:c6:38:b1:cf: 29:43:32:3b:46:9b:93:4f:aa:20:f1:f5:45:4f:a5: 88:22:03:87:07:e5:d2:cc:df:9c:ba:68:95:39:1a: bf:e3:d1:45:91:64:15:5d:6f:fc:b0:e5:72:82:03: b2:df:54:72:a5:e3:26:2d:d7:ae:3e:90:8c:2a:ec: 0e:96:a7:0e:2a:98:87:d8:c6:75:72:8e:8f:fc:e8: ed:af:32:27:53:28:96:80:be:99:d0:16:d9:6f:d7: d7:80:99:b1:2a:a3:6c:3a:62:48:fb:8c:5c:d8:c3: 20:6f:4f:d7:f7:aa:c5:68:b3:dc:84:7b:51:e8:68: 1b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:92:2C:33:2A:18:4E:45:91:7D:EC:4B:53:A1:A4:DA:AE:00:11:25 X509v3 Authority Key Identifier: keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:36:29:7c:d5:3c:55:f4:2d:dc:88:25:9c:49:56:82:02:aa: 4d:26:56:bf:23:b6:5e:8f:94:7d:6b:44:9d:6e:58:2d:b7:4c: f1:c9:b5:72:53:c0:48:a5:df:ef:2f:f7:ec:94:77:89:c7:32: 00:4d:e1:58:a1:33:97:a0:90:47:ef:68:26:76:15:c1:3a:d1: 54:f5:4b:64:5c:95:d2:8c:00:5d:36:fb:1a:9b:25:a4:f6:42: 3b:83:32:5d:24:e9:e9:64:64:4c:29:14:13:4e:e0:95:9c:28: df:f8:de:8a:50:0a:38:54:3f:ba:30:96:ac:4f:fa:e3:34:7c: d1:4c:c6:da:90:29:56:18:a4:d4:c5:bf:3a:2e:48:0c:88:02: 07:5e:eb:a5:79:44:b0:05:6d:36:6d:0b:d0:64:28:02:91:d3: ab:0d:ce:1a:d0:a1:01:1b:de:3e:cf:6e:ad:dd:f6:7f:53:6b: 19:65:3a:03:b5:f1:ee:d7:f4:12:d0:6c:82:2c:2b:76:b3:3f: 30:71:f2:2a:6c:71:9f:7e:f1:70:cd:53:50:6f:18:73:57:b0: 80:5d:6e:88:80:f2:79:3b:16:30:64:e1:a4:8d:6d:e9:1a:bb: 76:f5:f0:cb:bf:a0:c3:55:ac:44:42:b7:60:37:43:af:b1:90: d9:23:e1:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6azN2KzPC2WeOX9bbXFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMTQ0NDUyNTk3MzJhYTY3MzZjMjQ4MjM0NDY1OTQ3ZmMy Mzc0ZDAwHhcNMjUxMjE4MTAwMjU4WhcNMjUxMjE5MTAwMjU4WjAzMTEwLwYDVQQD EygyMDkyMmMzMzJhMTg0ZTQ1OTE3ZGVjNGI1M2ExYTRkYWFlMDAxMTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgOIrSQsPvTLZOE3el1Ym1hCpnMh YLe+m3Yn9IkZZe5B+ZuRQdhH4eEr3ok0uDhI6d7aH4SqdZjrmhsBgRMsA/MN+WpI fY9odZEGSBrdZpNosdX9Lrv/ghhItmdve8Vekuk6HYHYnvs9BoOKnWihWGIsNjDs b5C0J6+/Ccvmjddv2cY4sc8pQzI7RpuTT6og8fVFT6WIIgOHB+XSzN+cumiVORq/ 49FFkWQVXW/8sOVyggOy31RypeMmLdeuPpCMKuwOlqcOKpiH2MZ1co6P/OjtrzIn UyiWgL6Z0BbZb9fXgJmxKqNsOmJI+4xc2MMgb0/X96rFaLPchHtR6Ggb8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCSLDMqGE5FkX3sS1OhpNquABElMB8GA1UdIwQY MBaAFBoURFJZcyqmc2wkgjRGWUf8I3TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hSRVVsbHpLcVp6YkNTQ05FWlpSX3dqZE5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kMTA4NDEtN2Q0NC00NmRhLWIyOWMt MzgxZjIzZjE4M2Q3LzEvR2hSRVVsbHpLcVp6YkNTQ05FWlpSX3dqZE5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9kMTA4NDEtN2Q0NC00NmRhLWIyOWMtMzgxZjIzZjE4M2Q3 LzEvR2hSRVVsbHpLcVp6YkNTQ05FWlpSX3dqZE5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTYpfNU8 VfQt3IglnElWggKqTSZWvyO2Xo+UfWtEnW5YLbdM8cm1clPASKXf7y/37JR3iccy AE3hWKEzl6CQR+9oJnYVwTrRVPVLZFyV0owAXTb7GpslpPZCO4MyXSTp6WRkTCkU E07glZwo3/jeilAKOFQ/ujCWrE/64zR80UzG2pApVhik1MW/Oi5IDIgCB17rpXlE sAVtNm0L0GQoApHTqw3OGtChARvePs9urd32f1NrGWU6A7Xx7tf0EtBsgiwrdrM/ MHHyKmxxn37xcM1TUG8Yc1ewgF1uiIDyeTsWMGThpI1t6Rq7dvXwy7+gw1WsREK3 YDdDr7GQ2SPhqA== -----END CERTIFICATE-----Generated at Thu Dec 18 18:30:25 2025 by rpki-client