This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft File: GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json) Hash identifier: 1dKl2zc5IS9SXJbzm1SD+FuM7oKfZVZ1j4UNYMcWvLk= Subject key identifier: 4A:80:31:37:9B:A9:8E:3A:0D:9B:C9:9D:CE:6F:E6:0F:0F:0D:10:09 Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b Certificate serial: 019AF12EAC2ADD6F52CEB82E9FF2C67D4B90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft Manifest number: 08DF Signing time: Sat 06 Dec 2025 01:02:38 +0000 Manifest this update: Sat 06 Dec 2025 01:02:38 +0000 Manifest next update: Sun 07 Dec 2025 01:02:38 +0000 Files and hashes: 1: 57MdEJb-nBShQLLCWdO0TGMwrmU.roa (hash: AI0OebgvFdQLqYYDJFtpVuV594/Dy/OB9klpHE+tsqU=) 2: B7Qapo5g1oDmbBkmOp4VI6hXM-Q.roa (hash: QPX22bu8lrGVz4DhZjKtOs7g7eex/hilxfsr4fUW4YM=) 3: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: JYo6wcPVA8QHAHJ0KUScSl5G6/2fQZnfUW4TA/YZIVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ac:2a:dd:6f:52:ce:b8:2e:9f:f2:c6:7d:4b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b Validity Not Before: Dec 6 01:02:38 2025 GMT Not After : Dec 7 01:02:38 2025 GMT Subject: CN=4a8031379ba98e3a0d9bc99dce6fe60f0f0d1009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9f:b6:a3:99:ed:cf:40:6a:79:62:8e:b6:c3: 60:31:a2:a4:80:1a:a1:d8:26:1c:e4:a5:68:62:fb: cd:cd:30:f2:f3:74:1d:9e:e0:9a:2b:9c:ab:39:1b: 08:f2:08:5f:9b:86:41:1c:ba:96:2a:ba:ec:5c:9c: bf:4f:f3:54:75:0c:dc:8d:4b:bf:6f:4c:1f:84:5f: 32:74:a8:9c:48:44:c3:44:e6:5c:7b:e6:f3:c3:1f: 41:4f:ec:43:23:15:23:fb:cc:b2:b3:c4:0f:8e:66: c4:77:41:34:b9:1c:3e:58:d0:99:9b:fb:e1:5b:b4: 6e:29:4c:01:7c:e7:d8:60:7f:38:75:f4:6a:ca:eb: c7:32:25:7c:f5:e5:12:e3:3d:bf:93:12:2c:03:81: 93:b5:2a:65:7c:bf:da:55:e6:1c:fa:fe:56:62:20: 18:51:a6:a2:e3:ca:84:5b:c9:31:9d:65:87:f6:99: 00:b1:e0:76:0f:ce:2c:fe:2d:44:ec:25:41:44:ee: 83:04:bd:95:b1:79:8e:18:39:a8:56:e5:a0:f5:ef: 8b:a1:6d:d9:23:f8:0c:35:30:99:a5:30:ef:21:15: 99:63:3d:f0:b0:82:f1:07:42:1f:b6:0f:1d:ba:54: 85:76:ff:95:10:35:6e:d2:1f:8c:1e:bb:0f:f3:49: 1e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:80:31:37:9B:A9:8E:3A:0D:9B:C9:9D:CE:6F:E6:0F:0F:0D:10:09 X509v3 Authority Key Identifier: keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:3f:04:f3:c5:0b:5f:ed:78:9c:7b:ee:81:da:23:ae:7e:be: ae:74:c6:7d:33:d0:21:25:9b:d7:6f:16:31:c9:74:ee:fe:84: 9f:dd:59:3d:d1:8f:fd:c2:90:75:14:18:ed:d4:20:b3:34:3e: 0e:c2:ea:1e:b8:01:67:78:a4:ea:3c:e9:0c:06:64:29:20:0f: 73:df:c9:2e:8e:b5:a2:d9:e6:02:ff:83:cc:4f:da:65:2d:fa: 77:b9:eb:97:ff:28:9e:90:7b:11:71:c3:40:2b:cc:1a:16:bb: 5b:a9:e9:9c:05:e3:a1:5c:2e:f5:ec:2e:72:47:33:88:8d:a7: 0c:73:b4:b3:d5:b3:62:92:41:dc:89:f5:e4:e4:9d:01:2c:ea: 35:ef:13:55:d7:d7:a2:7f:46:ce:8f:c6:47:5d:6f:11:d7:cf: 5d:23:41:09:de:86:63:5c:a9:21:59:86:d2:50:24:75:c0:ea: 05:48:09:fd:d5:03:96:35:3c:5b:b7:4d:6f:b5:f4:5f:d3:b7: dd:4f:29:8d:2a:23:df:53:2b:b7:c1:64:02:b1:c7:a6:cf:48: b5:92:f2:34:0f:3f:c3:16:e9:f4:db:5d:5f:10:58:b7:6d:76: e4:35:59:d8:48:60:17:d8:26:4c:ec:68:a2:1a:9d:75:d1:e2: a5:a8:42:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqwq3W9Szrgun/LGfUuQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZWFjMGY2MzI1N2IyMjRlYzE3MTA2ZTFiY2RlZmQzMmMy NDc3OGIwHhcNMjUxMjA2MDEwMjM4WhcNMjUxMjA3MDEwMjM4WjAzMTEwLwYDVQQD Eyg0YTgwMzEzNzliYTk4ZTNhMGQ5YmM5OWRjZTZmZTYwZjBmMGQxMDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp+2o5ntz0BqeWKOtsNgMaKkgBqh 2CYc5KVoYvvNzTDy83QdnuCaK5yrORsI8ghfm4ZBHLqWKrrsXJy/T/NUdQzcjUu/ b0wfhF8ydKicSETDROZce+bzwx9BT+xDIxUj+8yys8QPjmbEd0E0uRw+WNCZm/vh W7RuKUwBfOfYYH84dfRqyuvHMiV89eUS4z2/kxIsA4GTtSplfL/aVeYc+v5WYiAY Uaai48qEW8kxnWWH9pkAseB2D84s/i1E7CVBRO6DBL2VsXmOGDmoVuWg9e+LoW3Z I/gMNTCZpTDvIRWZYz3wsILxB0Iftg8dulSFdv+VEDVu0h+MHrsP80ke3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqAMTebqY46DZvJnc5v5g8PDRAJMB8GA1UdIwQY MBaAFBrqwPYyV7Ik7BcQbhvN79MsJHeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82YzA2ODAtN2M4ZC00ZGVjLWIyYTgt Mjk4YjU1OTY5NzZhLzEvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni82YzA2ODAtN2M4ZC00ZGVjLWIyYTgtMjk4YjU1OTY5NzZh LzEvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkT8E88UL X+14nHvugdojrn6+rnTGfTPQISWb128WMcl07v6En91ZPdGP/cKQdRQY7dQgszQ+ DsLqHrgBZ3ik6jzpDAZkKSAPc9/JLo61otnmAv+DzE/aZS36d7nrl/8onpB7EXHD QCvMGha7W6npnAXjoVwu9ewuckcziI2nDHO0s9WzYpJB3In15OSdASzqNe8TVdfX on9Gzo/GR11vEdfPXSNBCd6GY1ypIVmG0lAkdcDqBUgJ/dUDljU8W7dNb7X0X9O3 3U8pjSoj31Mrt8FkArHHps9ItZLyNA8/wxbp9NtdXxBYt2125DVZ2EhgF9gmTOxo ohqdddHipahCPg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:12 2025 by rpki-client