This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: yydaTGGg6B19ihQkW4pSogNxrLGKnFwQpoNmzluAwc8= Subject key identifier: 32:B1:FD:DE:6B:23:38:8E:C0:2A:97:23:0C:9F:19:59:DE:17:D4:68 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019AF2099B26615048E43F3E4BA971C0BE4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 11C3 Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: 0RQ-WrGaW_a3SUMuIWvBi3re8Us.roa (hash: Vm0Yp0DBpXgsUlIoix2wYlP8daTTxgpllg8xunuDANo=) 2: 2c-138nK4yanjA_nFYFgRI3qkq8.roa (hash: eVkYs1Oz0s5AD5JOgKA2ZQfEyufJILyJFXY8+OH1Q4o=) 3: 3KNmMvvNnWz-gbQdS7pSD6NeSj8.roa (hash: 19Nj6yvWJYRr/APzHhAxi9EkGzAdWa0wPSZ7epiybNI=) 4: AWu3FimnriCBdHwo3g5MMDT1qE4.roa (hash: mO4hJXcIgDGlzI8xRSm/HtygAZ7WHc+oV+0VaCAIGc0=) 5: Giz24KLfpQkd7xs-DD95CPsPmOY.roa (hash: KQH/GuWZf651hnMRpwoGbmUFOnlVdGar78D6Hk0TRqM=) 6: Ls5gcPMX-M4WgeGybLOeWexgrwI.roa (hash: ddCFP8hel+nThr/Av/RaZ8w2aK3ehVlzvIwAydR9dmQ=) 7: N6KXHzVWixEktWPnU9eEkzBiRXA.roa (hash: ZeBA7mXHpgozatB0IZbSJ9v+AumsoGr7uGRE7BfY82k=) 8: WisrqhFtyIb2JbL0GIaBAVHWLTE.roa (hash: Y/GRGegzBf5aloGYHapUwpHTKh2vmOFKcBbghRvqMYw=) 9: dGrI4BE8oPWh3DjqR5EL1omnmFE.roa (hash: fh9dXwWPLeOX+9MGqs4zz/wpDF+snGcI3Q6bKbn3R34=) 10: fgKPPdW8bX1X6qK_GJWLhKliu3w.roa (hash: KwDL7D8DQXv/HgQm93E74+FZwYXZspxr0ZPQdGjc5BA=) 11: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: EqFArC/kIMaAqyO60iDVMKTqvMsiff33gIBK+DnvKwc=) 12: jWe_TvIhj5dH5Ux2vCS3uvPznoc.roa (hash: NDB0B6hhi9OkQwxq6X1dXNT80uauDo2rv8POlRS3xgc=) 13: lVD1-s3z_VEryG-EOJaasXYliY0.roa (hash: h8oMIjXYTJbKfdwIFG8fjlG+UgURPlIi2HuuI8oOKSE=) 14: lwed3ihcQQrFsvv8k908fUPl3CM.roa (hash: Ug53jrAOg0K9fodJftRbAh41xK8TfAJeCOUBqHsGwb8=) 15: o7aaJIA1Lgq0zCdQCsOjEWzmMK0.roa (hash: WUPkYWF0I4A0srltNNQaHCMFjlD7ESqkAZxhm9FU4mI=) 16: q90aS9463wXYf4Sgoia8t4bKeN8.roa (hash: hvm9v4WmHwSkZ/edm7ru3afucj0r+/esuU2s4VhpOe8=) 17: qj6JzLV6yUCof1sB2xKr6dnriHk.roa (hash: OwtdnJIJzWn+DFiZhfavSFxynDXz7xR6fT1mm0Xe21w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9b:26:61:50:48:e4:3f:3e:4b:a9:71:c0:be:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=32b1fdde6b23388ec02a97230c9f1959de17d468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:94:d5:12:19:27:a5:2c:fe:32:48:f7:61:a7: 60:6c:49:bf:04:bf:b1:45:ee:e2:60:87:3f:23:57: 03:2c:4c:ce:af:08:9e:c2:a9:22:72:92:82:be:54: 82:6e:ed:d8:8b:2e:0c:df:8f:bc:bb:47:06:16:77: 8d:86:90:a0:fc:92:4d:05:b2:b9:a7:0f:97:dc:a2: c9:4c:e2:5d:80:e9:52:c9:1c:cf:ae:d2:48:7a:9c: 51:13:09:4d:7d:06:42:24:24:f1:9e:12:aa:a9:f2: 98:a3:a8:9d:4b:cd:a2:73:ee:2f:85:0d:26:43:0b: 7d:3c:32:fa:29:1e:27:d4:ff:b5:15:ec:77:6e:ee: 73:31:9b:95:ea:a7:8d:d4:24:73:38:d3:6b:86:bc: 24:34:1f:3d:00:a7:77:c6:06:6a:b5:ec:45:d3:11: 5f:96:a8:17:c9:2a:b7:11:e7:8a:f8:ea:3a:64:70: bd:2b:e1:c1:79:68:17:4e:05:2b:08:28:db:f2:a5: 13:eb:a6:59:14:8b:21:ed:8a:2b:45:16:ce:c9:2f: 27:10:44:8c:2c:9a:03:18:2e:60:0e:c8:1e:24:f2: 8c:17:99:a0:0d:94:9a:96:ef:dd:79:6d:20:a8:10: a0:03:ae:d1:8d:2e:5b:08:30:a3:65:b7:71:17:ab: 41:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B1:FD:DE:6B:23:38:8E:C0:2A:97:23:0C:9F:19:59:DE:17:D4:68 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d0:96:ac:46:21:17:f3:1d:1e:b0:3b:13:b6:7b:b5:7b:65: 97:18:6a:33:0a:ab:57:eb:cd:c3:65:72:79:f6:cf:f1:c8:40: 38:a2:49:46:b4:9b:fb:8c:6a:a6:e9:a2:1a:0a:4f:ba:49:48: ea:84:ac:3e:62:f5:6f:24:fd:1f:a4:b1:0b:12:b0:0d:09:86: ef:11:08:5c:7d:92:aa:77:16:41:79:d9:96:6d:ed:f3:37:55: b0:6b:99:a5:aa:97:01:a4:4a:2a:7e:5c:e0:71:8e:2f:db:a1: 05:15:9d:83:2d:61:71:f5:7c:63:a8:27:2c:44:d1:3e:d1:55: 49:07:e2:91:15:55:c9:9c:c0:f5:12:ac:b3:03:64:ec:d5:da: b4:47:4e:1e:c1:c9:57:2f:56:ad:1c:e6:c7:76:04:80:ce:90: b9:42:84:e9:48:53:b0:a0:af:3b:0c:ef:22:74:9a:81:62:54: 21:1e:31:3d:75:45:90:a0:1d:8b:d9:6e:50:b8:0b:4a:82:8e: 49:70:b7:59:25:d9:82:93:00:42:fd:ce:f2:31:a0:33:ef:29: 6d:c7:f6:79:7b:3b:31:05:32:39:62:99:84:0e:9b:70:73:e0: c5:9f:13:88:cf:7c:63:06:f4:31:5b:ae:be:46:a3:61:55:3f: f2:26:17:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZsmYVBI5D8+S6lxwL5MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD EygzMmIxZmRkZTZiMjMzODhlYzAyYTk3MjMwYzlmMTk1OWRlMTdkNDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJTVEhknpSz+Mkj3YadgbEm/BL+x Re7iYIc/I1cDLEzOrwiewqkicpKCvlSCbu3Yiy4M34+8u0cGFneNhpCg/JJNBbK5 pw+X3KLJTOJdgOlSyRzPrtJIepxREwlNfQZCJCTxnhKqqfKYo6idS82ic+4vhQ0m Qwt9PDL6KR4n1P+1Fex3bu5zMZuV6qeN1CRzONNrhrwkNB89AKd3xgZqtexF0xFf lqgXySq3EeeK+Oo6ZHC9K+HBeWgXTgUrCCjb8qUT66ZZFIsh7YorRRbOyS8nEESM LJoDGC5gDsgeJPKMF5mgDZSalu/deW0gqBCgA67RjS5bCDCjZbdxF6tBhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKx/d5rIziOwCqXIwyfGVneF9RoMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdCWrEYh F/MdHrA7E7Z7tXtllxhqMwqrV+vNw2VyefbP8chAOKJJRrSb+4xqpumiGgpPuklI 6oSsPmL1byT9H6SxCxKwDQmG7xEIXH2SqncWQXnZlm3t8zdVsGuZpaqXAaRKKn5c 4HGOL9uhBRWdgy1hcfV8Y6gnLETRPtFVSQfikRVVyZzA9RKsswNk7NXatEdOHsHJ Vy9WrRzmx3YEgM6QuUKE6UhTsKCvOwzvInSagWJUIR4xPXVFkKAdi9luULgLSoKO SXC3WSXZgpMAQv3O8jGgM+8pbcf2eXs7MQUyOWKZhA6bcHPgxZ8TiM98Ywb0MVuu vkajYVU/8iYXbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:44 2025 by rpki-client