This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft File: GjYLuKDpc6mKMX37qjesPBTFhwU.mft (raw, json) Hash identifier: AuZnvpWwLar5nN/j27sFa8GglBsuGolO+iHVGOa6sLY= Subject key identifier: 4F:0F:5E:DC:28:DF:CD:89:FC:36:72:FD:CE:5D:DE:DE:D8:AA:19:A8 Authority key identifier: 1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05 Certificate issuer: /CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705 Certificate serial: 019AF50B5334F0ACF64C1758757A0D43A7E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 19:02:31 +0000 Manifest this update: Sat 06 Dec 2025 19:02:31 +0000 Manifest next update: Sun 07 Dec 2025 19:02:31 +0000 Files and hashes: 1: Fo-0BOVrLJk4MeIxtH-OUY39SI4.roa (hash: VMlQPo02+nWPajybct86iEub80W0J6j/yx0Y3d+fqqk=) 2: GjYLuKDpc6mKMX37qjesPBTFhwU.crl (hash: 2R2o68owthBDaCL0dhZIwdlwUlpzYmGC223sSRa68wU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:53:34:f0:ac:f6:4c:17:58:75:7a:0d:43:a7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705 Validity Not Before: Dec 6 19:02:31 2025 GMT Not After : Dec 7 19:02:31 2025 GMT Subject: CN=4f0f5edc28dfcd89fc3672fdce5ddeded8aa19a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7a:6f:79:38:50:9f:14:f8:98:4d:92:13:3a: 70:3e:e5:0f:37:f9:b9:b1:37:64:4c:39:f2:dc:3a: e3:48:fa:b6:ff:18:97:97:b1:4d:61:ed:b1:99:7f: ad:5d:df:6d:ea:ee:14:82:58:52:3f:46:77:16:81: 1d:62:f8:43:10:62:89:1c:ea:f2:1d:83:85:62:02: 8f:49:bf:1c:c6:ef:7f:58:9e:8f:43:75:f5:16:cf: fd:f6:43:22:1c:71:70:b0:1e:08:2e:b8:bc:48:08: f6:6d:b2:08:be:cb:d2:0a:ef:ba:73:79:0a:a9:f3: 12:32:c2:f3:91:3d:92:d4:67:03:4b:ae:5b:6d:47: 9e:bd:e7:d0:ec:b3:66:e1:05:63:a1:25:5f:9d:49: 14:66:c1:92:4f:be:94:92:52:d9:ac:4c:1d:fe:29: 6b:0e:2f:11:20:8d:13:6a:0a:30:0b:11:39:b9:cd: 69:c2:41:2b:d1:b3:24:da:d0:8c:01:75:17:3e:a1: 67:12:74:c5:f5:38:a3:c6:2a:58:4a:e9:6d:a3:35: dc:63:1c:89:92:c5:83:20:a1:40:eb:0a:8c:ca:5f: 46:19:62:eb:84:bc:8b:9d:c7:bc:6f:05:ff:3d:22: 64:f6:c7:8e:40:07:d3:94:37:ec:79:cd:64:bc:f0: 3b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0F:5E:DC:28:DF:CD:89:FC:36:72:FD:CE:5D:DE:DE:D8:AA:19:A8 X509v3 Authority Key Identifier: keyid:1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ea:09:3b:59:04:00:43:f3:0f:da:ef:1a:91:e9:36:87:58: ab:95:0f:5c:b2:31:7b:a0:aa:a9:06:fd:15:e2:61:2e:88:23: 33:3c:bb:cb:a0:9e:16:78:bd:49:04:24:03:73:7c:9a:80:b1: 21:9a:d6:a0:e5:6e:6c:0b:8b:35:43:27:7e:a8:dd:2b:54:16: ec:49:f1:ea:e5:98:e0:bb:17:9b:1e:ec:0e:ba:ad:3b:5a:2f: 24:12:ec:35:69:00:c4:08:73:da:f6:cf:f7:39:88:a0:c9:3b: 82:40:0b:26:fb:72:f2:82:70:21:7f:e9:6e:20:61:69:80:f3: 7a:30:3d:c2:54:65:cc:56:53:48:a3:ef:09:08:6d:bc:ae:e4: 8d:5e:d9:07:54:30:c2:30:49:6f:89:c8:85:3b:27:8a:1c:2d: c6:ae:9a:e2:bb:9d:60:bb:ad:b3:22:46:f8:ee:52:d6:36:2b: a9:40:1f:34:66:7d:98:0f:b6:ba:12:12:3a:bd:8b:ff:13:67: 0a:32:fd:74:4e:ed:61:f6:d2:a0:23:18:95:e4:58:57:ed:51: e6:28:6f:66:d2:03:cb:82:50:e2:13:b6:c9:f5:06:9f:0e:98: eb:d4:f8:5c:aa:1f:5e:d9:dc:f2:66:38:5a:20:6d:66:05:b6: 1a:e5:da:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C1M08Kz2TBdYdXoNQ6fnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMzYwYmI4YTBlOTczYTk4YTMxN2RmYmFhMzdhYzNjMTRj NTg3MDUwHhcNMjUxMjA2MTkwMjMxWhcNMjUxMjA3MTkwMjMxWjAzMTEwLwYDVQQD Eyg0ZjBmNWVkYzI4ZGZjZDg5ZmMzNjcyZmRjZTVkZGVkZWQ4YWExOWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznpveThQnxT4mE2SEzpwPuUPN/m5 sTdkTDny3DrjSPq2/xiXl7FNYe2xmX+tXd9t6u4UglhSP0Z3FoEdYvhDEGKJHOry HYOFYgKPSb8cxu9/WJ6PQ3X1Fs/99kMiHHFwsB4ILri8SAj2bbIIvsvSCu+6c3kK qfMSMsLzkT2S1GcDS65bbUeevefQ7LNm4QVjoSVfnUkUZsGST76UklLZrEwd/ilr Di8RII0TagowCxE5uc1pwkEr0bMk2tCMAXUXPqFnEnTF9TijxipYSultozXcYxyJ ksWDIKFA6wqMyl9GGWLrhLyLnce8bwX/PSJk9seOQAfTlDfsec1kvPA7mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8PXtwo382J/DZy/c5d3t7YqhmoMB8GA1UdIwQY MBaAFBo2C7ig6XOpijF9+6o3rDwUxYcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2pZTHVLRHBjNm1LTVgzN3FqZXNQQlRGaHdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC85NmY2ZWUtODRkYi00NWEwLWFiZjAt MzA3ZTViODFiYmNlLzEvR2pZTHVLRHBjNm1LTVgzN3FqZXNQQlRGaHdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC85NmY2ZWUtODRkYi00NWEwLWFiZjAtMzA3ZTViODFiYmNl LzEvR2pZTHVLRHBjNm1LTVgzN3FqZXNQQlRGaHdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOoJO1kE AEPzD9rvGpHpNodYq5UPXLIxe6CqqQb9FeJhLogjMzy7y6CeFni9SQQkA3N8moCx IZrWoOVubAuLNUMnfqjdK1QW7Enx6uWY4LsXmx7sDrqtO1ovJBLsNWkAxAhz2vbP 9zmIoMk7gkALJvty8oJwIX/pbiBhaYDzejA9wlRlzFZTSKPvCQhtvK7kjV7ZB1Qw wjBJb4nIhTsnihwtxq6a4rudYLutsyJG+O5S1jYrqUAfNGZ9mA+2uhISOr2L/xNn CjL9dE7tYfbSoCMYleRYV+1R5ihvZtIDy4JQ4hO2yfUGnw6Y69T4XKofXtnc8mY4 WiBtZgW2GuXaqw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:54:56 2025 by rpki-client