This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft File: GNgB3p_opmgHWIF4I642ugZcYQ0.mft (raw, json) Hash identifier: 1N4ngHdWgfrnsTqxifWX2mdMdctIa62/QT5m7/zjj/k= Subject key identifier: D7:E0:DA:E7:00:67:58:5C:96:21:B0:A7:BF:BE:96:A5:C7:C8:BD:F3 Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d Certificate serial: 019AF20928A16260139F787EF5D90312E9A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: C4rk1AoVqjrEH7_zmAJ_svnQgQc.roa (hash: 6jKvc5VnDLqI6HwXgEfuuUIvLcH534eewNyGGwZxdKE=) 2: GNgB3p_opmgHWIF4I642ugZcYQ0.crl (hash: QOBt7nCoiYAxdYbwClXHBkoO5QQlaJ5dEDXZVkPIFwQ=) 3: O6hC_E85D-gML2iRrUU2b5ibO0s.roa (hash: F14l9yzbuoxNtXqq8ma/CyqbNDJtpPWFpWAVl55tljo=) 4: RHkq_2B9aSMLyQYFQ9FNfjZTBIs.roa (hash: H0KL1J+ki0U19ojTdr1t7y2YJD+4cxGfJhTHY1ROEwg=) 5: kb5y1-Zbrkx7MXP5JuLQmArjfW8.roa (hash: HnOpO7aMn3/CAKcuytA4hwDqnkBIYl9jaOvFbzTHg2g=) 6: pZmFD-f-bh4pXBFGtCsTwrl3XA0.roa (hash: QUgueN8QgFQMRwHuvSGXOdyJNx8a23P2PHJjPzXyVW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:28:a1:62:60:13:9f:78:7e:f5:d9:03:12:e9:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=d7e0dae70067585c9621b0a7bfbe96a5c7c8bdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c6:57:9c:de:d4:4c:ae:59:c5:1f:75:4e:98: cd:d6:59:11:66:27:8f:c2:1e:d7:52:b2:7e:33:d6: a2:ca:46:60:ca:58:d0:ed:04:7a:c0:09:67:b7:8c: 48:5f:26:d3:19:de:ff:82:44:11:5a:8e:b0:59:fd: f1:ae:fe:bd:b4:c4:5d:88:27:d7:7f:6a:be:af:f3: 19:0d:90:f6:3e:53:a7:d2:32:c7:4a:8b:cb:ce:2d: 81:82:53:09:8d:2b:86:c3:a1:f0:38:4c:f2:fb:fe: b5:66:c7:9e:90:b2:23:60:8d:3f:c2:ae:fa:4e:0e: 41:eb:94:fd:2e:1a:6b:bd:4d:81:76:95:0a:1b:1c: dd:c2:fd:c0:d8:85:3c:a5:ee:b5:cf:15:f8:97:c1: e1:ab:19:50:c2:47:8b:af:eb:40:62:f6:a8:27:9b: 45:9c:f9:da:6c:ad:d6:45:73:16:67:c7:f6:0b:c9: d1:ad:f6:84:78:de:21:ae:21:1d:8e:5a:77:eb:f4: 68:d8:6d:d4:bc:29:8d:5a:00:e2:47:57:ce:bf:76: 2c:ae:de:a3:4f:7d:31:5c:01:e6:fa:18:4f:fe:3d: f1:e6:80:29:7c:fd:da:ff:2e:1e:d0:69:22:d7:be: 7b:df:ad:a9:eb:99:fc:37:86:a7:bc:c4:b0:1d:ee: b2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E0:DA:E7:00:67:58:5C:96:21:B0:A7:BF:BE:96:A5:C7:C8:BD:F3 X509v3 Authority Key Identifier: keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:20:d5:87:a0:cf:b7:e4:10:92:b1:dd:b7:f8:42:c8:1f:7e: ad:0c:8f:06:3c:0d:71:93:65:ed:28:67:99:6f:09:53:67:18: f1:84:bc:f7:9f:a4:20:74:5d:fe:a0:59:6e:29:ae:72:dd:e9: ab:fe:d7:bc:12:c7:04:27:3a:22:3a:23:ed:a4:9c:14:96:1f: 77:ee:9e:96:c2:e8:0d:55:53:2c:f8:73:93:54:8d:bb:4c:81: f4:17:21:0b:37:a6:95:cb:35:27:25:c7:16:26:df:83:87:f9: 77:b4:87:18:41:62:63:e7:55:b0:3d:5d:18:5f:d5:08:f1:3e: 55:0a:4d:ec:71:41:f9:d8:e6:7c:03:c9:a4:8f:b2:f3:5a:4d: 62:e4:51:be:6d:c0:65:42:a0:e3:1c:04:bc:8c:63:39:c4:06: 45:09:cf:22:13:85:4b:20:13:70:3d:3a:be:d7:fd:56:88:72: fe:8f:35:b3:5f:d5:a5:7c:77:ef:d1:da:4f:07:17:b3:56:74: bb:1d:45:f5:fd:ab:a7:fe:7b:4a:91:93:59:9e:79:7a:97:99: d7:07:0f:b8:d0:74:5d:31:58:32:68:e6:c8:ae:99:e4:9a:60: d2:41:ab:5f:7a:ab:bd:fc:0e:47:ce:03:e4:cb:16:49:c5:3e: c2:19:52:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSihYmATn3h+9dkDEumkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZDgwMWRlOWZlOGE2NjgwNzU4ODE3ODIzYWUzNmJhMDY1 YzYxMGQwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD EyhkN2UwZGFlNzAwNjc1ODVjOTYyMWIwYTdiZmJlOTZhNWM3YzhiZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcZXnN7UTK5ZxR91TpjN1lkRZieP wh7XUrJ+M9aiykZgyljQ7QR6wAlnt4xIXybTGd7/gkQRWo6wWf3xrv69tMRdiCfX f2q+r/MZDZD2PlOn0jLHSovLzi2BglMJjSuGw6HwOEzy+/61ZseekLIjYI0/wq76 Tg5B65T9LhprvU2BdpUKGxzdwv3A2IU8pe61zxX4l8HhqxlQwkeLr+tAYvaoJ5tF nPnabK3WRXMWZ8f2C8nRrfaEeN4hriEdjlp36/Ro2G3UvCmNWgDiR1fOv3Ysrt6j T30xXAHm+hhP/j3x5oApfP3a/y4e0Gki1757362p65n8N4anvMSwHe6y4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfg2ucAZ1hcliGwp7++lqXHyL3zMB8GA1UdIwQY MBaAFBjYAd6f6KZoB1iBeCOuNroGXGENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NWMzYzgtNmFiMS00OTUxLThmNTkt NjU1MDNhOTMwNmEwLzEvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NWMzYzgtNmFiMS00OTUxLThmNTktNjU1MDNhOTMwNmEw LzEvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyDVh6DP t+QQkrHdt/hCyB9+rQyPBjwNcZNl7ShnmW8JU2cY8YS895+kIHRd/qBZbimuct3p q/7XvBLHBCc6Ijoj7aScFJYfd+6elsLoDVVTLPhzk1SNu0yB9BchCzemlcs1JyXH Fibfg4f5d7SHGEFiY+dVsD1dGF/VCPE+VQpN7HFB+djmfAPJpI+y81pNYuRRvm3A ZUKg4xwEvIxjOcQGRQnPIhOFSyATcD06vtf9Vohy/o81s1/VpXx379HaTwcXs1Z0 ux1F9f2rp/57SpGTWZ55epeZ1wcPuNB0XTFYMmjmyK6Z5Jpg0kGrX3qrvfwOR84D 5MsWScU+whlSkg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:20 2025 by rpki-client