This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft File: GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json) Hash identifier: Efqbh+h5paEFX/NPDXUzZy3Nibq3CCYW69ZGYz92vP8= Subject key identifier: 4F:63:6D:4A:93:26:FF:01:C6:6D:ED:B1:60:61:29:BC:82:48:4D:1C Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d Certificate serial: 019B390ED4F1FE737312B40C3501013F623B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft Manifest number: 1483 Signing time: Sat 20 Dec 2025 00:00:31 +0000 Manifest this update: Sat 20 Dec 2025 00:00:31 +0000 Manifest next update: Sun 21 Dec 2025 00:00:31 +0000 Files and hashes: 1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: 9KfxCOCmP9nIu2iHbbHFLkgyvUy+E6j0qlfs5Gs3y+M=) 2: dh95O1dB3GK1CEkOtCIFzjLf5oE.roa (hash: iquwJa/eYSZ4o0HvbhTJ3GQJK6OG8r+hAE6Yg/LMclY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:d4:f1:fe:73:73:12:b4:0c:35:01:01:3f:62:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d Validity Not Before: Dec 20 00:00:31 2025 GMT Not After : Dec 21 00:00:31 2025 GMT Subject: CN=4f636d4a9326ff01c66dedb1606129bc82484d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:a7:c5:47:a0:b9:d9:47:2e:e1:9f:39:7b: 74:25:7d:61:fc:aa:0c:5f:c0:5e:83:79:13:f2:62: 8c:0e:d5:6c:cf:04:6d:52:0e:6e:c5:dc:0f:e1:3a: 01:10:0e:35:c6:19:81:10:c5:93:05:9f:45:22:75: 45:27:21:52:14:81:f6:16:11:7e:89:2d:43:61:15: ee:57:47:f8:04:10:43:e5:be:a8:6c:2a:98:da:59: f2:f8:cf:c7:4e:cd:13:ea:da:dd:ba:71:c7:02:e9: 22:f7:d9:15:4e:46:a1:3d:eb:31:a6:52:f1:76:b0: bb:c5:6b:47:fb:d4:06:09:15:1f:79:b2:3a:73:9b: b1:3b:62:43:4c:f1:c3:7e:2a:3d:72:4e:ba:ec:c4: d4:c9:5c:49:2c:a6:06:03:f8:87:ab:46:ce:74:06: 3e:7b:4d:eb:7a:d4:23:e7:3e:85:6b:b3:4a:90:c8: a1:ac:b9:60:b3:4e:6c:09:cf:3f:03:3f:92:8f:0f: c6:b4:8b:fd:f6:27:18:ab:b0:eb:8e:88:78:ad:94: 6f:e1:4b:bb:93:6a:0b:30:56:03:cf:b2:7a:57:dd: 44:15:07:7d:62:b3:ce:0f:d1:d8:64:48:93:af:a0: fc:71:7b:c9:cd:54:05:95:7c:50:ea:c7:7c:f7:1e: 9c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:63:6D:4A:93:26:FF:01:C6:6D:ED:B1:60:61:29:BC:82:48:4D:1C X509v3 Authority Key Identifier: keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:27:d5:a2:bc:a9:c4:ee:09:34:c1:78:0d:ec:1b:c6:5a:5d: e4:bc:47:a0:c8:2c:92:04:70:c4:23:5b:ad:d6:89:65:43:92: e6:c8:31:d5:62:55:d1:79:1f:78:1d:1e:0d:2f:62:38:11:7e: 63:34:1c:92:cd:7b:0c:ab:8b:66:40:d2:61:92:2a:38:72:1f: 50:c7:6f:0b:b1:7b:b3:2c:fc:8a:b7:29:ed:97:22:55:21:b2: e6:7b:7c:90:59:49:6d:a4:71:6e:31:17:61:d6:03:f9:c6:02: 71:0d:72:ec:be:3d:48:5b:30:30:5e:e3:ad:8d:90:59:52:12: 82:40:0a:e4:5e:2b:36:93:ab:bf:0f:b8:b6:27:42:50:e9:81: e0:df:7b:4b:e2:09:f4:e0:1d:a6:76:51:82:74:34:30:cc:23: fe:a7:4a:31:1b:c7:59:38:8b:df:bc:c5:49:7d:d6:af:aa:c0: 24:8b:83:af:ac:39:6e:30:fa:d0:38:f3:46:a9:9c:93:55:37: e4:00:9b:87:0b:1f:50:c7:bd:d1:85:6d:1d:08:60:53:20:7e: 0b:a2:ca:25:3e:42:39:72:01:13:d2:ed:a3:4d:16:e7:3a:2d: 03:39:a1:84:87:4b:b9:41:c1:a4:c1:96:f3:a8:4e:0c:07:01: 19:1a:1c:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DtTx/nNzErQMNQEBP2I7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNjBiOTY2NzA4OTNmYzNkNjM3MWY2YzU3NDZjNWYyNmI2 YTIwM2QwHhcNMjUxMjIwMDAwMDMxWhcNMjUxMjIxMDAwMDMxWjAzMTEwLwYDVQQD Eyg0ZjYzNmQ0YTkzMjZmZjAxYzY2ZGVkYjE2MDYxMjliYzgyNDg0ZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIGnxUegudlHLuGfOXt0JX1h/KoM X8Beg3kT8mKMDtVszwRtUg5uxdwP4ToBEA41xhmBEMWTBZ9FInVFJyFSFIH2FhF+ iS1DYRXuV0f4BBBD5b6obCqY2lny+M/HTs0T6trdunHHAuki99kVTkahPesxplLx drC7xWtH+9QGCRUfebI6c5uxO2JDTPHDfio9ck667MTUyVxJLKYGA/iHq0bOdAY+ e03retQj5z6Fa7NKkMihrLlgs05sCc8/Az+Sjw/GtIv99icYq7Drjoh4rZRv4Uu7 k2oLMFYDz7J6V91EFQd9YrPOD9HYZEiTr6D8cXvJzVQFlXxQ6sd89x6cyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9jbUqTJv8Bxm3tsWBhKbyCSE0cMB8GA1UdIwQY MBaAFBpguWZwiT/D1jcfbFdGxfJraiA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMWMxZWMtYWI2NC00OTc5LWFmYjkt NmE2MTM5NGY2MjY5LzEvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xMWMxZWMtYWI2NC00OTc5LWFmYjktNmE2MTM5NGY2MjY5 LzEvR21DNVpuQ0pQOFBXTng5c1YwYkY4bXRxSUQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASfVoryp xO4JNMF4Dewbxlpd5LxHoMgskgRwxCNbrdaJZUOS5sgx1WJV0XkfeB0eDS9iOBF+ YzQcks17DKuLZkDSYZIqOHIfUMdvC7F7syz8ircp7ZciVSGy5nt8kFlJbaRxbjEX YdYD+cYCcQ1y7L49SFswMF7jrY2QWVISgkAK5F4rNpOrvw+4tidCUOmB4N97S+IJ 9OAdpnZRgnQ0MMwj/qdKMRvHWTiL37zFSX3Wr6rAJIuDr6w5bjD60DjzRqmck1U3 5ACbhwsfUMe90YVtHQhgUyB+C6LKJT5COXIBE9Lto00W5zotAzmhhIdLuUHBpMGW 86hODAcBGRocJw== -----END CERTIFICATE-----Generated at Sat Dec 20 02:39:32 2025 by rpki-client