This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft File: GTdDRntNpBxilek1EVMwlYa6I5k.mft (raw, json) Hash identifier: ukTLcHaySeG6numb4v+bm5VH5djo24yIBj1tcA3dprM= Subject key identifier: 7B:AE:38:96:A1:1A:3A:68:20:DA:93:DD:37:29:CE:4D:70:93:78:5F Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99 Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399 Certificate serial: 019AF19B0C3D6AF32BCD9083CB7341AE7391 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft Manifest number: 13E2 Signing time: Sat 06 Dec 2025 03:01:01 +0000 Manifest this update: Sat 06 Dec 2025 03:01:01 +0000 Manifest next update: Sun 07 Dec 2025 03:01:01 +0000 Files and hashes: 1: 1TdnBIQpLOCBWH2mt28aivouF4I.roa (hash: OXerkvpTMgtDn41YlP30T5MtsanNBIBwFIzBvbUKvGE=) 2: 4wV3tNw8L-G2g-REyKg7rTv19xc.roa (hash: mlDNB6DLTguCsOh+3JJiKoaNz1XvyyZU+vhtwaeg1hU=) 3: GTdDRntNpBxilek1EVMwlYa6I5k.crl (hash: nFIq2kbg9rzWWvzeeOX4AfjIYG6O3trxOiuiqzuSEcE=) 4: K4x7WnCPM92IfHKWVCrULIlUaVA.roa (hash: KVnqPoeOrxHfk6WulHu6MwITd97JNsKLMzaXFdfZRTU=) 5: L0erWF8zE1RnGBSaNfbAKYl2kd8.roa (hash: /zy+SS2a9gbTjEnXkpsItTqQEn8dlA3GKuajYSpZLoU=) 6: bGl-O1VWsJiqIgDexKk7dKheHQQ.roa (hash: 6KFHpVYSoKMAphsv2/6O6zAXDRyPyfaziYVLYjZHZ0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0c:3d:6a:f3:2b:cd:90:83:cb:73:41:ae:73:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=193743467b4da41c6295e9351153309586ba2399 Validity Not Before: Dec 6 03:01:01 2025 GMT Not After : Dec 7 03:01:01 2025 GMT Subject: CN=7bae3896a11a3a6820da93dd3729ce4d7093785f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5b:b3:b2:c4:a9:32:5a:15:05:93:0e:ea:b5: b8:28:53:fe:59:92:03:bf:c4:3a:88:5b:d3:5f:1d: ed:59:66:ef:2e:e8:97:f4:8b:42:6e:4d:8e:36:c8: 12:57:97:2d:34:57:22:37:9f:78:ca:b1:76:14:fe: 1d:bb:d8:bc:5d:ed:8d:6e:7d:67:22:f0:7d:27:b3: 58:ad:63:f4:38:40:79:03:0f:98:b9:dd:64:3c:aa: e9:5f:97:11:c7:86:89:f2:f0:84:69:e9:df:a9:1f: 5c:19:dc:0c:e6:06:ff:17:5d:07:08:f6:32:81:70: 23:1c:02:20:e3:d5:b3:31:fa:89:9e:26:e3:61:be: 93:8a:ea:71:ca:8a:8d:f2:44:78:88:02:56:4e:d3: 48:61:b8:86:3d:4e:96:45:24:06:12:76:24:70:5c: bb:10:ac:79:4b:26:cd:9e:9b:0b:20:cd:3c:8e:1f: 44:ef:57:8e:bf:71:77:f1:d9:e9:8a:12:ef:4b:a9: e4:2b:96:38:81:2d:0f:f6:2d:da:cb:75:51:e8:b6: d7:49:82:43:d4:6c:e2:82:f6:19:97:d5:65:21:e2: b6:e2:b0:ea:84:4a:45:63:db:34:5c:5d:8d:27:9c: be:c6:b4:bd:de:d4:b1:53:a3:74:12:8f:ff:be:91: e3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AE:38:96:A1:1A:3A:68:20:DA:93:DD:37:29:CE:4D:70:93:78:5F X509v3 Authority Key Identifier: keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:76:d6:bd:44:bb:16:7a:1d:e8:fc:b7:cf:21:0c:c4:39:88: c2:34:0b:f2:d8:1d:d5:15:3d:cd:0f:82:3e:be:18:b3:2c:c5: 60:75:84:9a:20:f7:aa:16:e9:f3:8d:51:97:74:b1:94:78:b6: 04:71:11:35:32:29:84:15:9a:30:e8:13:2b:f9:a2:73:9c:54: fc:9b:8f:4c:ba:b5:9a:61:20:7b:65:e0:02:e2:f2:7b:ae:e6: a8:a6:50:dd:bf:e6:e1:c4:b8:49:0c:66:dc:f9:92:25:11:c3: 43:dd:de:30:f8:9a:7c:e1:40:92:ef:ec:2c:1a:f3:3c:22:39: b8:97:1f:a2:61:91:55:e4:c6:e3:d7:40:2e:c0:e7:e4:20:37: 26:49:41:55:8d:10:9f:79:84:c0:e3:1a:c1:02:31:2d:bc:86: 5f:16:14:4c:15:94:92:b6:5a:4c:78:35:36:87:db:ca:39:8f: 32:fa:2b:5b:1e:3e:08:94:70:33:88:ba:c2:7b:cc:2a:bd:bb: e5:9a:49:17:b1:7c:48:e1:b8:df:d2:c8:d8:24:5f:b1:21:b3: 05:80:3f:ee:04:43:57:72:e1:29:4b:27:c8:2b:79:66:af:16: 1f:dd:64:2d:f4:4f:ee:15:37:85:0e:5f:77:cd:b2:3e:6c:49: f6:77:92:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmww9avMrzZCDy3NBrnORMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Mzc0MzQ2N2I0ZGE0MWM2Mjk1ZTkzNTExNTMzMDk1ODZi YTIzOTkwHhcNMjUxMjA2MDMwMTAxWhcNMjUxMjA3MDMwMTAxWjAzMTEwLwYDVQQD Eyg3YmFlMzg5NmExMWEzYTY4MjBkYTkzZGQzNzI5Y2U0ZDcwOTM3ODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFuzssSpMloVBZMO6rW4KFP+WZID v8Q6iFvTXx3tWWbvLuiX9ItCbk2ONsgSV5ctNFciN594yrF2FP4du9i8Xe2Nbn1n IvB9J7NYrWP0OEB5Aw+Yud1kPKrpX5cRx4aJ8vCEaenfqR9cGdwM5gb/F10HCPYy gXAjHAIg49WzMfqJnibjYb6TiupxyoqN8kR4iAJWTtNIYbiGPU6WRSQGEnYkcFy7 EKx5SybNnpsLIM08jh9E71eOv3F38dnpihLvS6nkK5Y4gS0P9i3ay3VR6LbXSYJD 1GzigvYZl9VlIeK24rDqhEpFY9s0XF2NJ5y+xrS93tSxU6N0Eo//vpHjKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuuOJahGjpoINqT3Tcpzk1wk3hfMB8GA1UdIwQY MBaAFBk3Q0Z7TaQcYpXpNRFTMJWGuiOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNjcwM2EtMTIyYi00MTE2LWIzMTct Y2E1ZmNjYmY3YThjLzEvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zNjcwM2EtMTIyYi00MTE2LWIzMTctY2E1ZmNjYmY3YThj LzEvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA53bWvUS7 Fnod6Py3zyEMxDmIwjQL8tgd1RU9zQ+CPr4YsyzFYHWEmiD3qhbp841Rl3SxlHi2 BHERNTIphBWaMOgTK/mic5xU/JuPTLq1mmEge2XgAuLye67mqKZQ3b/m4cS4SQxm 3PmSJRHDQ93eMPiafOFAku/sLBrzPCI5uJcfomGRVeTG49dALsDn5CA3JklBVY0Q n3mEwOMawQIxLbyGXxYUTBWUkrZaTHg1NofbyjmPMvorWx4+CJRwM4i6wnvMKr27 5ZpJF7F8SOG439LI2CRfsSGzBYA/7gRDV3LhKUsnyCt5Zq8WH91kLfRP7hU3hQ5f d82yPmxJ9neScA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:10 2025 by rpki-client