This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json) Hash identifier: t9PJbXjwYN08ydQO+jxIjbdVt8dmI+0iP7O5IHVQUfI= Subject key identifier: DA:DC:BC:A4:49:24:CA:88:21:D9:1F:BF:C5:D1:EF:97:2A:89:15:97 Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b Certificate serial: 019AF49BDD5BD75E60BC93045E2A51A95406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft Manifest number: 0209 Signing time: Sat 06 Dec 2025 17:00:46 +0000 Manifest this update: Sat 06 Dec 2025 17:00:46 +0000 Manifest next update: Sun 07 Dec 2025 17:00:46 +0000 Files and hashes: 1: 9PkegdPcOVaHYch8whuUGhkGOzc.roa (hash: nTpt8kDLjSLrMGR0C/m0j9Ftj77WGzhvL7KxFH3u7Z8=) 2: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: qG2UujgvPQoxscDimrMB4zv2y3HNbfEo7RKp4fkKQ38=) 3: mo525hECNfAEonllRKyyBVCuVuY.roa (hash: a5b0LUZ9waSvhihXnwQQ6mCuKjGwIDzPkvhonuJ3oDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:dd:5b:d7:5e:60:bc:93:04:5e:2a:51:a9:54:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b Validity Not Before: Dec 6 17:00:46 2025 GMT Not After : Dec 7 17:00:46 2025 GMT Subject: CN=dadcbca44924ca8821d91fbfc5d1ef972a891597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4f:cf:31:19:6e:21:f8:54:63:7a:03:c2:78: 3f:ab:05:6e:0c:68:67:4b:0f:32:a4:6b:cc:40:32: 6e:7c:2a:44:f8:38:d9:3d:e6:ac:37:de:60:0d:55: 67:7b:12:de:89:98:8d:ef:c1:27:59:14:b1:35:42: 38:2a:84:09:fc:dc:a8:a4:c3:f3:99:3a:41:b0:f5: eb:be:b2:24:ad:4c:1c:e2:ab:55:0d:f0:c3:87:83: 96:d8:4a:3e:72:07:f0:ca:7c:52:3d:f3:2f:a3:ac: b6:17:a9:e8:29:3c:b9:de:6b:37:55:89:c7:09:32: 8c:ed:ec:d9:07:65:b2:54:8a:60:ff:54:04:24:c4: 42:1c:9d:80:ba:b4:a5:b5:f3:69:ea:c9:8f:75:cd: 79:e0:61:b3:26:17:59:41:4a:05:2b:02:ae:8b:7f: 92:7b:7d:3e:96:e6:cb:e9:5c:2c:36:4e:18:23:41: d6:f1:16:c7:85:83:76:67:d2:bf:b1:6a:13:b4:f0: ad:76:15:29:cf:49:57:82:80:76:58:a5:91:ab:be: 72:c8:45:4f:2d:ee:61:f6:0e:9e:77:0c:2d:c1:68: b6:7d:42:f1:40:f2:36:b4:4e:2d:2e:00:65:50:ed: 0b:07:cd:de:c0:39:61:0e:04:ed:34:c2:a5:3c:de: dc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DC:BC:A4:49:24:CA:88:21:D9:1F:BF:C5:D1:EF:97:2A:89:15:97 X509v3 Authority Key Identifier: keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:9d:45:09:a8:9c:97:6e:f4:26:44:23:37:93:fb:8a:80:dc: 90:f8:8a:dd:70:72:87:6d:6c:3c:7a:47:ae:21:d2:c2:69:23: eb:6f:10:40:dc:ff:36:da:c6:57:9d:c7:ae:49:22:69:cd:00: 68:2c:32:ed:b5:74:7c:07:fd:6e:f6:d2:2e:4c:b7:33:fd:a6: fe:0a:5c:74:52:a2:46:07:3b:fa:61:74:13:d2:e5:ca:2b:4b: 94:92:e3:6d:d0:b4:18:8c:02:d2:13:b1:17:c2:a5:a5:48:6a: 92:5d:e1:32:e8:22:37:df:4b:6e:b1:e0:d6:71:6d:83:f5:ca: 38:dd:14:53:85:84:d7:44:e7:54:68:09:75:ec:66:1e:5f:76: af:55:7c:34:11:31:e0:4a:d3:6a:58:45:0f:a1:4c:d7:a7:e7: 2e:1e:ad:e1:db:2e:34:dd:76:07:5f:f2:eb:85:88:c6:0a:30: 6e:5b:0a:5a:12:44:67:4e:e0:17:90:af:29:15:0e:09:72:56: 7d:8b:26:4e:06:7d:73:5d:5d:99:26:3c:73:95:64:39:b6:c8: ad:ba:39:6c:a8:39:a4:cd:0f:0b:ac:92:82:78:31:d3:f6:63: a3:bc:92:36:f4:96:c4:c6:e0:4a:ae:1a:b6:dd:45:5d:b3:57: 74:3d:53:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m91b115gvJMEXipRqVQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NGUxMGE5NTZmYTUyNTE2ZThmZDNiOTMxOGU4NGE1NTM4 M2Q2MmIwHhcNMjUxMjA2MTcwMDQ2WhcNMjUxMjA3MTcwMDQ2WjAzMTEwLwYDVQQD EyhkYWRjYmNhNDQ5MjRjYTg4MjFkOTFmYmZjNWQxZWY5NzJhODkxNTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU/PMRluIfhUY3oDwng/qwVuDGhn Sw8ypGvMQDJufCpE+DjZPeasN95gDVVnexLeiZiN78EnWRSxNUI4KoQJ/NyopMPz mTpBsPXrvrIkrUwc4qtVDfDDh4OW2Eo+cgfwynxSPfMvo6y2F6noKTy53ms3VYnH CTKM7ezZB2WyVIpg/1QEJMRCHJ2AurSltfNp6smPdc154GGzJhdZQUoFKwKui3+S e30+lubL6VwsNk4YI0HW8RbHhYN2Z9K/sWoTtPCtdhUpz0lXgoB2WKWRq75yyEVP Le5h9g6edwwtwWi2fULxQPI2tE4tLgBlUO0LB83ewDlhDgTtNMKlPN7cTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrcvKRJJMqIIdkfv8XR75cqiRWXMB8GA1UdIwQY MBaAFBlOEKlW+lJRbo/TuTGOhKVTg9YrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kMmVmNWYtMmFlOS00ODZhLThiZDct NTFmMDc3ZjMwZDNmLzEvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9kMmVmNWYtMmFlOS00ODZhLThiZDctNTFmMDc3ZjMwZDNm LzEvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJ1FCaic l270JkQjN5P7ioDckPiK3XByh21sPHpHriHSwmkj628QQNz/NtrGV53Hrkkiac0A aCwy7bV0fAf9bvbSLky3M/2m/gpcdFKiRgc7+mF0E9LlyitLlJLjbdC0GIwC0hOx F8KlpUhqkl3hMugiN99LbrHg1nFtg/XKON0UU4WE10TnVGgJdexmHl92r1V8NBEx 4ErTalhFD6FM16fnLh6t4dsuNN12B1/y64WIxgowblsKWhJEZ07gF5CvKRUOCXJW fYsmTgZ9c11dmSY8c5VkObbIrbo5bKg5pM0PC6ySgngx0/Zjo7ySNvSWxMbgSq4a tt1FXbNXdD1TTQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:37:07 2025 by rpki-client