This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json) Hash identifier: I3iNIrbXYCeJj+jjdKw60ousrYnpmE6m8tnEElub0Cg= Subject key identifier: 47:8E:FF:0C:82:F8:4D:12:A7:F4:F7:1D:BB:64:E3:0B:E2:97:E0:7F Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67 Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467 Certificate serial: 019AF2ADD673829A273E8E61FC7D4FD24805 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft Manifest number: 109B Signing time: Sat 06 Dec 2025 08:01:10 +0000 Manifest this update: Sat 06 Dec 2025 08:01:10 +0000 Manifest next update: Sun 07 Dec 2025 08:01:10 +0000 Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: 4Hw/XMY3CaexgYsP4TLHbQeIAMgAhI7/rWfmdPZ9Fl4=) 2: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (hash: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=) 3: yCCi69gLNcXK21OeYiQEc0dJYb0.roa (hash: LUDNYecqqadlSSLSMwizFinS+Qyhum1Iomno4/Dzf7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d6:73:82:9a:27:3e:8e:61:fc:7d:4f:d2:48:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467 Validity Not Before: Dec 6 08:01:10 2025 GMT Not After : Dec 7 08:01:10 2025 GMT Subject: CN=478eff0c82f84d12a7f4f71dbb64e30be297e07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:db:02:79:df:2d:91:19:ba:64:27:4d:71: 53:07:41:97:7e:fc:8a:7d:d2:92:e6:5d:e8:fb:bb: 5d:2e:33:6c:be:45:c9:ce:67:bd:55:24:f5:a4:9d: eb:5d:05:5c:0d:2f:3b:f9:3e:25:ad:b9:c3:32:14: df:5b:13:49:40:53:80:47:8c:25:97:d3:6d:ce:50: 2d:df:d2:88:4f:c7:fe:fd:bd:d4:5d:5a:2b:ba:55: ca:ba:cf:a7:4a:dc:24:86:56:11:b7:21:be:91:20: 90:77:31:94:77:36:06:87:b0:79:14:5e:55:ff:ba: a9:4d:6c:66:a6:8e:e2:59:43:0b:51:de:a2:38:c0: d1:b1:79:8f:eb:7d:9c:5c:26:17:82:58:47:3e:3c: 89:6f:bf:6d:64:1a:3a:d5:3f:77:04:a0:1e:1a:18: 4c:21:fb:21:90:34:36:7c:d3:1f:e5:21:76:85:e0: fc:27:ca:d5:6a:5a:8c:97:25:cf:96:90:92:63:57: aa:f9:a3:59:dd:3c:7e:3b:d1:37:1e:c6:b3:6f:20: 0e:49:b9:bb:c3:f4:66:d7:9a:87:c8:6e:6a:3e:e7: b6:23:b0:9d:ce:1a:55:26:bf:15:f1:de:19:e0:5c: 3e:58:51:aa:4b:f3:39:7e:08:61:00:b1:d7:67:83: 8b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8E:FF:0C:82:F8:4D:12:A7:F4:F7:1D:BB:64:E3:0B:E2:97:E0:7F X509v3 Authority Key Identifier: keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:90:15:3d:17:e2:46:93:58:c7:fb:b5:c2:71:bd:67:d1:90: a0:cd:43:f1:9b:0d:4d:8e:ce:e6:51:38:87:5f:4e:9e:cf:70: 22:62:db:b8:22:d6:30:0f:35:20:d4:d6:84:93:76:04:bc:cf: c4:ad:a5:13:8a:5f:88:8b:04:a4:f2:b3:5c:2f:ec:93:7e:a3: ed:0a:b3:77:6b:66:47:6a:cd:e3:03:1f:ab:6b:d8:d4:c0:14: 61:b6:72:c8:d0:bf:d9:1a:9e:05:8b:47:94:a2:dd:be:d3:75: 03:d8:f3:c5:65:76:56:6a:a4:e0:e1:b4:d4:f4:86:97:8f:ba: 29:27:20:11:e9:ae:c5:e3:57:bf:71:c5:96:63:82:f1:6c:bd: a4:26:bf:a0:ed:cc:20:62:4a:19:aa:ea:e6:a5:50:a6:e7:0e: 8f:8b:01:d7:c9:11:f7:c2:ec:53:12:30:51:b6:70:cf:8e:96: c9:f3:06:a9:66:da:9a:c8:92:15:0d:71:3b:89:ac:26:ef:76: da:4e:56:1e:84:7a:9e:38:ab:3f:fa:82:e0:21:54:21:81:ff: b0:ac:60:07:3c:61:62:6d:4a:b0:bb:6e:f8:3f:6f:79:8f:42: 6c:88:4a:9a:d4:c6:07:a5:81:ca:70:55:22:b6:0d:49:64:03: 32:63:64:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdZzgponPo5h/H1P0kgFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMWFlNWU0OWE0NGFiZGRjMjJiMGFkYmRhZWI2NDEzNmYy NWQ0NjcwHhcNMjUxMjA2MDgwMTEwWhcNMjUxMjA3MDgwMTEwWjAzMTEwLwYDVQQD Eyg0NzhlZmYwYzgyZjg0ZDEyYTdmNGY3MWRiYjY0ZTMwYmUyOTdlMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD/bAnnfLZEZumQnTXFTB0GXfvyK fdKS5l3o+7tdLjNsvkXJzme9VST1pJ3rXQVcDS87+T4lrbnDMhTfWxNJQFOAR4wl l9NtzlAt39KIT8f+/b3UXVorulXKus+nStwkhlYRtyG+kSCQdzGUdzYGh7B5FF5V /7qpTWxmpo7iWUMLUd6iOMDRsXmP632cXCYXglhHPjyJb79tZBo61T93BKAeGhhM IfshkDQ2fNMf5SF2heD8J8rValqMlyXPlpCSY1eq+aNZ3Tx+O9E3HsazbyAOSbm7 w/Rm15qHyG5qPue2I7CdzhpVJr8V8d4Z4Fw+WFGqS/M5fghhALHXZ4OLhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeO/wyC+E0Sp/T3Hbtk4wvil+B/MB8GA1UdIwQY MBaAFBoa5eSaRKvdwisK29rrZBNvJdRnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hybDVKcEVxOTNDS3dyYjJ1dGtFMjhsMUdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYt YTExNjlhMjg5YzU0LzEvR2hybDVKcEVxOTNDS3dyYjJ1dGtFMjhsMUdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYtYTExNjlhMjg5YzU0 LzEvR2hybDVKcEVxOTNDS3dyYjJ1dGtFMjhsMUdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpAVPRfi RpNYx/u1wnG9Z9GQoM1D8ZsNTY7O5lE4h19Ons9wImLbuCLWMA81INTWhJN2BLzP xK2lE4pfiIsEpPKzXC/sk36j7Qqzd2tmR2rN4wMfq2vY1MAUYbZyyNC/2RqeBYtH lKLdvtN1A9jzxWV2Vmqk4OG01PSGl4+6KScgEemuxeNXv3HFlmOC8Wy9pCa/oO3M IGJKGarq5qVQpucOj4sB18kR98LsUxIwUbZwz46WyfMGqWbamsiSFQ1xO4msJu92 2k5WHoR6njirP/qC4CFUIYH/sKxgBzxhYm1KsLtu+D9veY9CbIhKmtTGB6WBynBV IrYNSWQDMmNkzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:06 2025 by rpki-client