This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json) Hash identifier: 6zqWADRrDywm4Ksd5zFyWHeSgxJaZniYL5rNAyzlpQo= Subject key identifier: A9:81:0C:2A:E5:EA:A8:F7:9B:06:AC:2A:D7:AF:53:5C:BF:7A:A1:EB Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61 Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61 Certificate serial: 019AF19B7E202EC63DAF66ACB371D5A3144E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:30 +0000 Manifest this update: Sat 06 Dec 2025 03:01:30 +0000 Manifest next update: Sun 07 Dec 2025 03:01:30 +0000 Files and hashes: 1: 4sRmTDXLCty2oG7uCbm4SXKIyVE.roa (hash: 4X9pRb1swIu+cVaImRyIHtbj3QJV4dZcCo4Wvcbk9Ug=) 2: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: nF/Ld1erCfYUM/Bi5sQJcIlXs+sKR9A3ChXLrdIF7gU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:7e:20:2e:c6:3d:af:66:ac:b3:71:d5:a3:14:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61 Validity Not Before: Dec 6 03:01:30 2025 GMT Not After : Dec 7 03:01:30 2025 GMT Subject: CN=a9810c2ae5eaa8f79b06ac2ad7af535cbf7aa1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e4:08:19:6b:bd:20:07:a9:f0:a6:95:b5:d2: 20:e9:58:89:95:e3:f4:34:cc:39:77:a2:0e:95:0d: 90:49:d2:03:34:9f:ce:fa:ec:b2:e6:a8:0f:af:b0: 98:4e:85:53:bb:ec:8a:8a:cb:49:3e:cd:0f:ec:38: d3:4c:b9:39:38:69:03:2d:0e:54:8d:44:3e:1e:16: 02:30:66:34:e4:04:19:22:7c:51:97:28:a6:65:4c: 79:1b:d4:27:83:9b:5f:e9:78:f6:35:a0:c7:7d:a3: ab:d4:dd:2f:8f:e9:89:24:a2:f8:b1:c5:0a:c6:f1: d8:6c:b7:04:73:c0:77:a0:3b:7e:af:70:37:a2:6d: 84:57:12:e3:98:8a:3a:f7:39:23:8b:47:94:2a:ff: 48:e6:b3:14:41:b1:28:10:3d:b2:eb:40:f8:4f:93: 44:67:88:ed:39:44:08:b6:49:92:6a:19:39:7c:c4: 49:56:e8:96:08:65:7c:ea:b1:b0:6b:16:a4:30:f7: e6:df:b6:1e:e7:89:07:e1:84:d1:e2:fd:cf:6a:7c: dc:49:0d:d8:d3:31:5b:cf:20:3a:04:47:07:21:c4: 32:0e:7e:5c:0f:76:d1:44:d8:98:ac:a6:ed:44:4f: 31:17:83:4f:02:de:3d:17:1a:78:fc:23:ed:38:0a: a1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:81:0C:2A:E5:EA:A8:F7:9B:06:AC:2A:D7:AF:53:5C:BF:7A:A1:EB X509v3 Authority Key Identifier: keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:fc:cb:cd:af:ce:07:bd:5a:c6:17:a4:9c:17:de:c5:9b:46: fc:52:66:0f:93:8d:c6:1f:c5:11:40:5c:45:bb:10:f3:93:fd: 59:07:3f:21:4a:a4:90:b1:66:32:9f:38:e7:31:2b:4a:9f:c3: 71:48:4d:4f:e6:d2:16:b0:06:51:7c:05:59:f8:5e:a6:66:2f: b0:cf:a2:1b:68:a7:8d:c4:b9:80:cb:fe:ab:23:85:1a:69:b9: 01:f8:ec:d0:b8:a7:54:32:7d:a7:72:3b:e1:75:b8:1d:f3:05: 43:34:48:87:9c:08:7d:be:a7:f1:a2:f4:3c:fc:85:8e:63:cc: 72:b4:e2:f7:86:be:f2:a8:c6:12:3a:12:ef:58:5b:f5:f8:e0: 8a:09:a9:bd:13:30:f6:1f:b3:45:b5:b6:93:0e:56:d8:40:1d: 1b:03:c4:52:88:c9:9b:7a:8c:58:24:8a:af:76:f5:48:df:ad: be:cc:11:e3:bd:9b:f4:84:4f:b7:34:9c:b3:60:85:46:61:1d: 68:b1:83:d5:1e:07:2b:30:00:7d:86:c6:60:0d:3a:b6:9e:51: c3:16:18:fa:cf:34:f0:ce:d9:87:36:2c:6c:9a:47:7f:90:f8: a9:bd:c8:e7:a8:b9:7a:2b:51:9a:a4:de:a7:60:f8:2c:03:ec: 64:3a:79:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm34gLsY9r2ass3HVoxROMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMzFlNzNlNmQzZmM3NDVmMTI3YTdlZDk5MGFhNDEyMTQ5 MDVlNjEwHhcNMjUxMjA2MDMwMTMwWhcNMjUxMjA3MDMwMTMwWjAzMTEwLwYDVQQD EyhhOTgxMGMyYWU1ZWFhOGY3OWIwNmFjMmFkN2FmNTM1Y2JmN2FhMWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+QIGWu9IAep8KaVtdIg6ViJleP0 NMw5d6IOlQ2QSdIDNJ/O+uyy5qgPr7CYToVTu+yKistJPs0P7DjTTLk5OGkDLQ5U jUQ+HhYCMGY05AQZInxRlyimZUx5G9Qng5tf6Xj2NaDHfaOr1N0vj+mJJKL4scUK xvHYbLcEc8B3oDt+r3A3om2EVxLjmIo69zkji0eUKv9I5rMUQbEoED2y60D4T5NE Z4jtOUQItkmSahk5fMRJVuiWCGV86rGwaxakMPfm37Ye54kH4YTR4v3PanzcSQ3Y 0zFbzyA6BEcHIcQyDn5cD3bRRNiYrKbtRE8xF4NPAt49Fxp4/CPtOAqhLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmBDCrl6qj3mwasKtevU1y/eqHrMB8GA1UdIwQY MBaAFBsx5z5tP8dF8Sen7ZkKpBIUkF5hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMWZkZDYtNzMwZS00YWYwLThhNTYt NDYwMjczZjE2ZGRkLzEvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMWZkZDYtNzMwZS00YWYwLThhNTYtNDYwMjczZjE2ZGRk LzEvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv/zLza/O B71axheknBfexZtG/FJmD5ONxh/FEUBcRbsQ85P9WQc/IUqkkLFmMp845zErSp/D cUhNT+bSFrAGUXwFWfhepmYvsM+iG2injcS5gMv+qyOFGmm5Afjs0LinVDJ9p3I7 4XW4HfMFQzRIh5wIfb6n8aL0PPyFjmPMcrTi94a+8qjGEjoS71hb9fjgigmpvRMw 9h+zRbW2kw5W2EAdGwPEUojJm3qMWCSKr3b1SN+tvswR472b9IRPtzScs2CFRmEd aLGD1R4HKzAAfYbGYA06tp5RwxYY+s808M7ZhzYsbJpHf5D4qb3I56i5eitRmqTe p2D4LAPsZDp5sQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:42 2025 by rpki-client