This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json) Hash identifier: fZ1Aw42/csc+vXCnpHMdHF8ZDXe8TyNMcJq3zRkaqcM= Subject key identifier: 09:55:BC:E6:DC:4F:46:D8:D2:98:37:51:6C:8D:F2:63:0B:7C:66:A9 Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5 Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5 Certificate serial: 019AF19A9E05EBB061010CA8429E2E7792B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft Manifest number: 1442 Signing time: Sat 06 Dec 2025 03:00:33 +0000 Manifest this update: Sat 06 Dec 2025 03:00:33 +0000 Manifest next update: Sun 07 Dec 2025 03:00:33 +0000 Files and hashes: 1: 7lJrTTIO2zooVSl7zZp_UO3NA2A.roa (hash: ob9QTWC/tQoW4XviSigFRT+IWVM+wZzBVH2/SY3oV7I=) 2: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: wz56mxs44EeqPt2eAObWVXxJYKD7k51LS44vE0wOxR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:9e:05:eb:b0:61:01:0c:a8:42:9e:2e:77:92:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5 Validity Not Before: Dec 6 03:00:33 2025 GMT Not After : Dec 7 03:00:33 2025 GMT Subject: CN=0955bce6dc4f46d8d29837516c8df2630b7c66a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:bd:97:29:95:fa:53:75:d2:a7:0a:99:0c: af:d6:44:bc:b5:c2:ff:da:30:93:ba:14:3e:32:fc: 0b:47:a6:8f:25:b3:a8:a3:fe:15:f0:c9:8b:45:63: 0c:ee:09:28:7d:25:2f:dc:f9:8e:f7:5e:0d:5f:b3: a7:23:60:ad:df:a8:16:20:af:0c:76:b1:c1:7f:64: f3:0a:57:39:be:95:99:30:18:59:07:20:f8:9d:c9: 82:8c:a8:05:3e:ae:da:8d:95:96:cc:ef:88:29:f0: 35:c8:29:f2:d0:c7:5e:af:40:c1:c8:57:04:4b:38: 34:d8:4a:02:df:f3:73:91:70:38:1a:36:b9:07:38: cb:d6:94:9f:3e:85:fd:d5:73:0f:8d:04:0b:b6:d0: 7c:13:18:ac:b4:9d:36:96:5a:6c:4c:e3:68:ef:9b: d7:20:62:ff:9a:6a:6f:59:09:45:a5:d8:c2:23:fa: e8:73:59:6c:9f:1e:11:16:66:d6:0d:96:e5:6a:81: 0a:d7:85:87:30:59:dd:99:34:92:78:92:1a:9f:d6: 38:72:da:c6:31:8e:9f:fc:02:8a:6b:2d:2d:02:8d: 8c:dd:cd:13:b9:66:74:85:b5:ac:d8:8b:a3:89:1f: 00:70:2d:b0:33:42:2a:29:30:5f:13:86:9e:33:b4: 63:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:55:BC:E6:DC:4F:46:D8:D2:98:37:51:6C:8D:F2:63:0B:7C:66:A9 X509v3 Authority Key Identifier: keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:8d:db:a0:b8:09:62:ff:1b:c5:8f:79:2a:65:70:91:d7:2f: ff:15:d3:be:e4:3f:5e:ca:98:04:68:66:8e:8d:ed:c5:a1:87: e0:2d:c2:83:54:e8:bf:12:d8:da:bb:34:99:94:a4:a1:49:db: 53:c1:1b:37:38:30:26:44:83:93:4a:fe:79:35:75:43:a0:a7: bd:ae:5f:b4:80:cd:f3:49:be:b5:db:c6:c8:7b:f7:eb:e5:c9: 21:f5:f6:77:08:0a:20:67:79:f9:de:9e:45:c1:53:8d:be:ff: 0d:02:96:fe:92:6e:33:c2:cd:3d:1b:75:89:a7:98:7e:f0:f9: e7:02:3b:57:88:fe:26:f7:3e:35:1a:09:96:41:d5:e8:14:40: 8a:ee:1d:43:ac:0b:09:a9:f6:2c:c0:b0:e3:f2:46:a8:25:e7: 43:9d:b9:ca:c6:69:34:7b:60:1d:53:ef:08:f1:32:d1:dd:52: bd:ee:31:d4:83:e7:65:27:7f:77:08:89:cf:96:53:d9:5c:44: 36:8a:c5:d2:2f:71:f7:68:ed:7e:45:14:e2:e4:f4:5b:a2:54: 7d:d6:7d:82:45:26:2c:25:fe:c5:d2:98:d0:a8:20:c4:75:7e: e9:8e:f0:75:ae:03:f5:98:62:83:e1:d8:84:3a:61:96:ec:91: 7d:11:25:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmp4F67BhAQyoQp4ud5KwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZDRjY2NlZmU1NWM1ZTIyM2E5YjMyMDViOTM4YTNkMWM5 ZTg2ZDUwHhcNMjUxMjA2MDMwMDMzWhcNMjUxMjA3MDMwMDMzWjAzMTEwLwYDVQQD EygwOTU1YmNlNmRjNGY0NmQ4ZDI5ODM3NTE2YzhkZjI2MzBiN2M2NmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e+9lymV+lN10qcKmQyv1kS8tcL/ 2jCTuhQ+MvwLR6aPJbOoo/4V8MmLRWMM7gkofSUv3PmO914NX7OnI2Ct36gWIK8M drHBf2TzClc5vpWZMBhZByD4ncmCjKgFPq7ajZWWzO+IKfA1yCny0Mder0DByFcE Szg02EoC3/NzkXA4Gja5BzjL1pSfPoX91XMPjQQLttB8ExistJ02llpsTONo75vX IGL/mmpvWQlFpdjCI/roc1lsnx4RFmbWDZblaoEK14WHMFndmTSSeJIan9Y4ctrG MY6f/AKKay0tAo2M3c0TuWZ0hbWs2IujiR8AcC2wM0IqKTBfE4aeM7Rj4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlVvObcT0bY0pg3UWyN8mMLfGapMB8GA1UdIwQY MBaAFBrUzM7+VcXiI6mzIFuTij0cnobVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kMjM4NzAtNzRjNy00YTg0LTkwZWMt YzMyMDM2NzUwZTM2LzEvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9kMjM4NzAtNzRjNy00YTg0LTkwZWMtYzMyMDM2NzUwZTM2 LzEvR3RUTXp2NVZ4ZUlqcWJNZ1c1T0tQUnllaHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGI3boLgJ Yv8bxY95KmVwkdcv/xXTvuQ/XsqYBGhmjo3txaGH4C3Cg1TovxLY2rs0mZSkoUnb U8EbNzgwJkSDk0r+eTV1Q6Cnva5ftIDN80m+tdvGyHv36+XJIfX2dwgKIGd5+d6e RcFTjb7/DQKW/pJuM8LNPRt1iaeYfvD55wI7V4j+Jvc+NRoJlkHV6BRAiu4dQ6wL Can2LMCw4/JGqCXnQ525ysZpNHtgHVPvCPEy0d1Sve4x1IPnZSd/dwiJz5ZT2VxE NorF0i9x92jtfkUU4uT0W6JUfdZ9gkUmLCX+xdKY0KggxHV+6Y7wda4D9Zhig+HY hDphluyRfREl8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:37 2025 by rpki-client