This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft File: Gk-AAcMMrFRuP5IQO0sScy38v1I.mft (raw, json) Hash identifier: YmOAAs4wmMPNKDAfjot2DsOJ1TpKBDy6FMUYZtSDb8Q= Subject key identifier: 5D:80:E4:0C:85:2D:42:85:2E:4C:AD:5E:08:2A:3A:E5:CD:73:B4:84 Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52 Certificate issuer: /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52 Certificate serial: 019B2BC22A3A7E2A35F4B7983965D18DE5EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 10:01:43 +0000 Manifest this update: Wed 17 Dec 2025 10:01:43 +0000 Manifest next update: Thu 18 Dec 2025 10:01:43 +0000 Files and hashes: 1: 03PqHmjkj4TD2ylDKAOumX_8ZTA.roa (hash: x+gVojJiPW6JgGHksggk6Pxvk6Hei1FVA2Qg8c4io0A=) 2: F9dWkDI-kpGgHo1RGxktanl_gRQ.roa (hash: BuoIxKvYOd7Wk6s+uxgqf+pVlc2a+8mJGV3BltAm2us=) 3: Gk-AAcMMrFRuP5IQO0sScy38v1I.crl (hash: 2AnI+3hFy1XmdbkHymInCBLisMOM0+xxO5oT58trLaU=) 4: eWcWfNZ-EfWW-NGvXQCC85ntpH8.roa (hash: JnQ17QGfxQtAemBJMFLXpPFmY/ueJsW7rAduSoORn4I=) 5: qa59xb1800lClBGKgPJD3m5Rw8s.roa (hash: g552CxuAT1A0kuubtT8ih3j4BuCostjRts289tICv1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:2a:3a:7e:2a:35:f4:b7:98:39:65:d1:8d:e5:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52 Validity Not Before: Dec 17 10:01:43 2025 GMT Not After : Dec 18 10:01:43 2025 GMT Subject: CN=5d80e40c852d42852e4cad5e082a3ae5cd73b484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:50:9c:48:49:a3:f7:38:80:21:68:28:a4:26: 70:ee:46:ae:94:80:b5:49:3f:4a:71:75:a7:eb:bd: 23:42:53:d3:22:f0:39:a4:81:9a:d3:07:d7:0e:67: 3a:78:e9:bf:af:c3:79:f9:e8:b6:d0:2b:fd:ca:e1: 0a:0a:9d:02:16:bc:51:fe:7d:fc:52:d3:86:74:88: fa:97:c4:c2:33:4e:0e:1c:fe:56:57:4f:01:e3:a3: 49:27:e1:ca:d5:3c:74:52:ff:53:63:58:0c:ec:bb: 5e:bc:e5:cc:cf:9a:77:1d:35:6a:1d:3e:7a:44:8b: f8:48:4f:69:cc:db:75:bb:13:29:ea:85:87:37:63: e8:81:5c:35:17:ae:0b:f1:3f:a1:51:55:29:d1:84: 0c:c8:54:9a:a6:91:8f:4c:f3:07:96:e9:e7:52:a6: 7f:f8:9d:f5:bc:f8:3c:b4:9d:e5:08:1d:99:6a:e3: 26:88:e1:ad:4f:60:df:f3:90:04:f6:33:ef:d8:16: f2:7c:13:eb:06:7a:5c:69:f0:d7:a4:73:f0:ef:71: 96:e7:2a:82:b3:32:a2:01:9a:fd:ba:4c:34:a0:19: 9c:69:df:4b:4d:21:fa:05:a3:c8:61:07:42:a9:27: 43:14:2d:1b:e1:cb:75:84:3e:73:3b:b1:aa:45:26: b5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:80:E4:0C:85:2D:42:85:2E:4C:AD:5E:08:2A:3A:E5:CD:73:B4:84 X509v3 Authority Key Identifier: keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:60:8a:23:d9:a1:8e:a1:d2:e0:e5:6a:13:a8:33:5a:0e:3c: 36:b4:da:91:12:2a:68:4a:f0:f8:ac:2f:43:58:6a:62:b3:b7: 12:d4:ba:4c:68:c3:c9:e2:16:7d:86:5f:40:37:80:e8:a0:4a: f5:3f:13:bc:a6:bd:84:e1:b1:5f:96:c9:a5:f0:ec:0b:c4:6d: 3a:d6:0a:ad:8e:74:14:94:55:2e:1e:c4:15:2f:80:13:d1:f4: fc:67:3b:c2:c3:29:44:f1:0f:d4:54:8e:f5:92:88:1e:cf:94: 63:87:3f:49:2c:ac:6c:de:58:2e:d5:94:cc:a7:e9:cf:fc:62: 2e:dd:df:1e:09:df:77:fb:e5:27:0b:16:23:5b:2b:3b:30:1f: 8d:ce:62:1e:d5:f3:79:f8:43:50:fd:27:2d:0e:c5:41:84:d6: 87:0e:87:6d:9e:03:5a:db:9f:92:96:49:eb:41:ba:5a:15:25: 76:4a:ed:90:89:bf:cb:63:70:63:e3:2a:16:3a:c4:04:22:4d: 12:41:df:f6:82:a1:bb:fe:ae:bb:00:a5:5e:7c:13:58:f6:90: ca:20:05:ac:a2:7e:ae:8c:22:9d:22:91:c5:0a:b5:5f:0c:9c: c8:aa:62:39:bb:60:08:e2:ab:42:c8:9c:55:54:85:08:5b:b0: a4:2b:b4:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwio6fio19LeYOWXRjeXvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGY4MDAxYzMwY2FjNTQ2ZTNmOTIxMDNiNGIxMjczMmRm Y2JmNTIwHhcNMjUxMjE3MTAwMTQzWhcNMjUxMjE4MTAwMTQzWjAzMTEwLwYDVQQD Eyg1ZDgwZTQwYzg1MmQ0Mjg1MmU0Y2FkNWUwODJhM2FlNWNkNzNiNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1CcSEmj9ziAIWgopCZw7kaulIC1 ST9KcXWn670jQlPTIvA5pIGa0wfXDmc6eOm/r8N5+ei20Cv9yuEKCp0CFrxR/n38 UtOGdIj6l8TCM04OHP5WV08B46NJJ+HK1Tx0Uv9TY1gM7LtevOXMz5p3HTVqHT56 RIv4SE9pzNt1uxMp6oWHN2PogVw1F64L8T+hUVUp0YQMyFSappGPTPMHlunnUqZ/ +J31vPg8tJ3lCB2ZauMmiOGtT2Df85AE9jPv2BbyfBPrBnpcafDXpHPw73GW5yqC szKiAZr9ukw0oBmcad9LTSH6BaPIYQdCqSdDFC0b4ct1hD5zO7GqRSa1qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2A5AyFLUKFLkytXggqOuXNc7SEMB8GA1UdIwQY MBaAFBpPgAHDDKxUbj+SEDtLEnMt/L9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNmM4NmQtNmM2NS00YTI1LWE4ZmEt MzhkNGYzMjExODk2LzEvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kNmM4NmQtNmM2NS00YTI1LWE4ZmEtMzhkNGYzMjExODk2 LzEvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmCKI9mh jqHS4OVqE6gzWg48NrTakRIqaErw+KwvQ1hqYrO3EtS6TGjDyeIWfYZfQDeA6KBK 9T8TvKa9hOGxX5bJpfDsC8RtOtYKrY50FJRVLh7EFS+AE9H0/Gc7wsMpRPEP1FSO 9ZKIHs+UY4c/SSysbN5YLtWUzKfpz/xiLt3fHgnfd/vlJwsWI1srOzAfjc5iHtXz efhDUP0nLQ7FQYTWhw6HbZ4DWtufkpZJ60G6WhUldkrtkIm/y2NwY+MqFjrEBCJN EkHf9oKhu/6uuwClXnwTWPaQyiAFrKJ+rowinSKRxQq1XwycyKpiObtgCOKrQsic VVSFCFuwpCu0mA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:44:40 2025 by rpki-client