This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft File: gRAUn9EhMLPNzzWGKw3NuYqUcck.mft (raw, json) Hash identifier: yz7Fi877LDvaS+XeVD82olnhvB7iB1ApD5dbcBa1tEA= Subject key identifier: 8D:C9:3E:03:C7:12:0C:7D:B3:0B:7D:AF:82:5F:78:3A:B7:FD:94:7E Authority key identifier: 81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9 Certificate issuer: /CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9 Certificate serial: 019AF208AB6287F8E4086C078874EF8B5158 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft Manifest number: 11A0 Signing time: Sat 06 Dec 2025 05:00:45 +0000 Manifest this update: Sat 06 Dec 2025 05:00:45 +0000 Manifest next update: Sun 07 Dec 2025 05:00:45 +0000 Files and hashes: 1: 806ngxQFbLg-MFXB9RB492466i0.roa (hash: p/nhUvWIiglPDhL2yjGq+wAsIWcIw+TsOyuSheiCKGg=) 2: gRAUn9EhMLPNzzWGKw3NuYqUcck.crl (hash: EOf/rWlEAmwiqup7R5Bn7aJsExhzq8MYbC2OMI0hIzo=) 3: h7WrxxlFxq_jYFk35jmIYb3f00s.roa (hash: h2rZQ/4NrSDJTIeZUF9nM2gyqifu2Mb4/5cQKdqqscg=) 4: y1PeU9JRt-8zy7fAHdTs76jVsHc.roa (hash: 0p/JFK5m9p7bozQ4pnJznyoRdt6D50XJVcxIdNoOA38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ab:62:87:f8:e4:08:6c:07:88:74:ef:8b:51:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9 Validity Not Before: Dec 6 05:00:45 2025 GMT Not After : Dec 7 05:00:45 2025 GMT Subject: CN=8dc93e03c7120c7db30b7daf825f783ab7fd947e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:44:07:1b:8c:d8:5e:a4:af:91:ab:14:96:bf: 4f:e7:4a:55:da:4f:1c:56:a2:08:d4:22:72:f2:56: c2:4b:91:93:41:71:ea:40:15:0e:ba:cc:96:9b:05: fa:1b:15:35:75:59:c1:ce:71:16:e8:31:60:d9:f3: fd:76:0d:9f:88:cc:21:15:5c:ff:b9:d0:95:c3:ed: 32:7f:b3:3d:a9:ba:e0:66:e2:d9:cd:8b:e4:d1:3c: 31:cf:1d:5d:a6:f6:8a:b2:e0:e5:e6:53:a6:09:d9: 07:7c:c9:98:5e:63:ce:41:bf:21:34:2e:68:ca:d0: 85:e3:63:c4:b6:59:24:e8:7b:33:a8:04:6c:60:7f: a2:3a:db:fd:ab:b2:3c:07:bc:77:43:23:be:a1:5f: 2e:cb:72:52:45:38:4a:9f:79:5b:5d:1c:57:bf:f6: 9e:3b:0a:21:5c:ee:0a:49:30:0d:38:21:7b:9f:bf: a4:dd:95:6e:c6:31:c6:99:39:1e:4a:b9:1b:27:df: 19:f2:cb:26:1a:ab:2d:2d:b0:45:07:ea:ce:49:9d: d2:8d:b2:78:a2:c6:43:f7:a7:9d:8b:02:3c:cd:50: 62:f0:95:0e:68:96:d3:0f:da:e5:0d:4a:5f:b8:07: 50:b3:46:7b:ad:23:05:1c:62:5d:ca:87:26:c5:34: 78:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C9:3E:03:C7:12:0C:7D:B3:0B:7D:AF:82:5F:78:3A:B7:FD:94:7E X509v3 Authority Key Identifier: keyid:81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:26:20:90:8d:56:ae:c0:22:3a:60:10:47:cd:20:ff:bd:90: 6e:e3:96:86:fc:f7:85:e7:bb:9f:77:0e:fa:5f:52:89:f2:87: 48:66:09:5e:3c:4a:5e:7b:9e:26:67:55:5e:58:6c:55:af:73: 73:10:42:5e:22:e2:41:c6:f8:87:b8:62:17:79:5e:5d:e2:9e: d8:3b:8b:0f:ff:ed:73:f2:84:44:55:62:8f:01:c1:d4:fb:7d: f3:31:0c:90:fc:f9:5b:40:ae:b6:8a:99:b9:ad:cd:aa:67:9d: 46:0f:cd:c9:3b:f6:bf:f0:45:2a:a5:e5:ff:d9:b7:99:da:c3: 2f:fd:e9:37:74:89:18:b4:79:c3:0a:fd:17:0a:f2:a0:bc:15: 4a:52:8a:43:38:37:79:6f:5e:b7:5b:fa:ae:ab:3a:34:57:30: ae:af:38:0f:16:42:e8:a5:5e:bd:73:f1:ba:5b:a1:b5:c5:69: 80:7b:46:a4:16:89:9b:6c:df:fb:98:63:40:5b:f9:83:84:a8: 63:96:51:ed:61:48:97:1f:f2:73:d9:0b:a7:6b:35:35:6e:90: 6c:b8:38:c4:be:17:42:43:74:23:e9:4d:54:f1:45:39:aa:b2: 4c:40:bb:ea:be:b4:ed:94:3c:b7:36:d8:48:ca:d5:6b:7d:21: b2:af:3d:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKtih/jkCGwHiHTvi1FYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMTAxNDlmZDEyMTMwYjNjZGNmMzU4NjJiMGRjZGI5OGE5 NDcxYzkwHhcNMjUxMjA2MDUwMDQ1WhcNMjUxMjA3MDUwMDQ1WjAzMTEwLwYDVQQD Eyg4ZGM5M2UwM2M3MTIwYzdkYjMwYjdkYWY4MjVmNzgzYWI3ZmQ5NDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUQHG4zYXqSvkasUlr9P50pV2k8c VqII1CJy8lbCS5GTQXHqQBUOusyWmwX6GxU1dVnBznEW6DFg2fP9dg2fiMwhFVz/ udCVw+0yf7M9qbrgZuLZzYvk0Twxzx1dpvaKsuDl5lOmCdkHfMmYXmPOQb8hNC5o ytCF42PEtlkk6HszqARsYH+iOtv9q7I8B7x3QyO+oV8uy3JSRThKn3lbXRxXv/ae OwohXO4KSTANOCF7n7+k3ZVuxjHGmTkeSrkbJ98Z8ssmGqstLbBFB+rOSZ3SjbJ4 osZD96ediwI8zVBi8JUOaJbTD9rlDUpfuAdQs0Z7rSMFHGJdyocmxTR4BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3JPgPHEgx9swt9r4JfeDq3/ZR+MB8GA1UdIwQY MBaAFIEQFJ/RITCzzc81hisNzbmKlHHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1JBVW45RWhNTFBOenpXR0t3M051WXFVY2NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80OGRiMTAtM2JhOC00ZTgwLWIzZGMt YWIzMWVhY2JmZmNhLzEvZ1JBVW45RWhNTFBOenpXR0t3M051WXFVY2NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80OGRiMTAtM2JhOC00ZTgwLWIzZGMtYWIzMWVhY2JmZmNh LzEvZ1JBVW45RWhNTFBOenpXR0t3M051WXFVY2NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCYgkI1W rsAiOmAQR80g/72QbuOWhvz3hee7n3cO+l9SifKHSGYJXjxKXnueJmdVXlhsVa9z cxBCXiLiQcb4h7hiF3leXeKe2DuLD//tc/KERFVijwHB1Pt98zEMkPz5W0CutoqZ ua3NqmedRg/NyTv2v/BFKqXl/9m3mdrDL/3pN3SJGLR5wwr9FwryoLwVSlKKQzg3 eW9et1v6rqs6NFcwrq84DxZC6KVevXPxuluhtcVpgHtGpBaJm2zf+5hjQFv5g4So Y5ZR7WFIlx/yc9kLp2s1NW6QbLg4xL4XQkN0I+lNVPFFOaqyTEC76r607ZQ8tzbY SMrVa30hsq89yQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:55:31 2025 by rpki-client