This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json) Hash identifier: zV0BAzNikH2Fxx3KooQuVJW/3JHtEuLXD80qrB7IvKs= Subject key identifier: B8:80:1A:3F:A4:1F:E8:47:A0:B9:83:22:93:2B:A0:AB:31:74:73:77 Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46 Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346 Certificate serial: 019B47A6898403A05F8655E953A7BBADEB0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft Manifest number: 074E Signing time: Mon 22 Dec 2025 20:00:55 +0000 Manifest this update: Mon 22 Dec 2025 20:00:55 +0000 Manifest next update: Tue 23 Dec 2025 20:00:55 +0000 Files and hashes: 1: 8a65sLJcMpTKTXM1KK1QaGfwWng.roa (hash: AQSp0mg8gXMxn9jS/ccqb4ZFNGKHjoQo9RopDCtq2JU=) 2: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: 5Yi15XOwVobrV2rvOfxdW5oQCgqvcXxOb4MOMzvnjV8=) 3: UXTqM7OJZrCNMf_WXfbtOToQRAk.roa (hash: mzfOsI6oNfEpkOHOqiggoPrJ5JkezNl8t7J1lOi2apE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:89:84:03:a0:5f:86:55:e9:53:a7:bb:ad:eb:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346 Validity Not Before: Dec 22 20:00:55 2025 GMT Not After : Dec 23 20:00:55 2025 GMT Subject: CN=b8801a3fa41fe847a0b98322932ba0ab31747377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:bf:38:0d:12:33:2d:ad:e9:ad:9f:76:bb: 69:9f:7e:7a:f6:22:f3:b0:2e:70:bf:20:c0:fd:be: dc:3c:42:b7:7c:73:0c:3e:75:76:1e:f3:ff:95:16: fe:24:57:8d:b1:51:53:1e:7b:07:bf:c4:31:24:ef: 1c:d9:8d:a8:12:51:42:90:7c:dc:7b:5e:0d:a8:3d: b6:2b:73:9a:6c:78:14:e4:40:c3:54:77:b8:ba:66: 04:5f:ae:72:d6:89:c2:19:9e:99:74:86:d6:5b:24: d7:24:e7:19:ad:28:d8:c5:07:f9:e0:b8:41:9f:1f: b5:fd:ee:c7:81:98:04:34:2e:dd:9e:01:9a:7e:92: f4:d6:9f:3d:01:a7:64:73:72:bd:a5:ec:47:6d:b7: 6b:86:ca:e2:b8:56:43:85:ef:6c:60:4b:93:b0:46: ff:6a:95:75:1f:8d:d0:40:27:9b:7a:7b:cb:66:93: 90:01:2c:84:77:c2:fa:02:27:d1:03:e2:9f:67:a3: 69:12:70:d6:ec:38:66:38:92:fb:a1:43:c4:66:8b: 67:3e:98:5f:33:59:64:e2:98:2f:cf:a6:37:be:40: b1:69:15:10:4b:eb:80:76:a1:13:71:6b:7d:a6:32: db:34:01:8f:68:97:c1:c3:93:a8:d3:40:91:04:9b: a4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:80:1A:3F:A4:1F:E8:47:A0:B9:83:22:93:2B:A0:AB:31:74:73:77 X509v3 Authority Key Identifier: keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:14:06:f8:a8:ce:5a:08:e0:b8:15:51:df:19:95:07:1e:17: 39:35:06:8e:7b:3c:4a:58:a8:9f:da:6e:c7:b9:0f:92:3d:53: ea:74:5f:6c:c9:6a:13:9e:53:a8:d2:5f:db:0b:40:9c:ab:ff: fa:7a:47:30:ba:fe:b6:f7:44:40:c0:e0:2e:06:eb:e5:23:61: 11:b3:09:2d:a1:cf:4b:8f:0b:71:1b:11:30:d2:08:2f:04:8c: fe:36:d7:58:05:7f:1f:b9:27:dc:14:f4:26:18:0e:c4:08:f9: bb:c2:12:ec:df:f1:33:00:6f:7e:a5:ab:42:33:20:a8:78:45: 85:5a:4c:2f:5d:0c:87:79:28:3e:b1:30:eb:79:be:1d:bc:52: 0c:3d:22:1e:22:ed:9c:c2:01:d9:8b:e5:84:49:1e:dd:50:26: e6:fa:18:e1:33:dc:45:1f:1f:a2:4f:29:b6:c4:ce:ac:70:0a: 40:a8:98:8f:65:d3:03:37:41:1e:53:58:53:10:99:91:88:b4: ed:e5:6a:af:26:3d:c0:e8:db:e7:29:70:a3:b0:25:88:23:e5: 7d:fe:d3:5b:5b:9f:73:48:96:fa:4f:20:3c:40:f5:13:88:6b: ad:3b:df:af:3f:cb:9d:71:66:f0:56:20:8a:5e:8d:f6:93:45: d2:89:b5:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpomEA6BfhlXpU6e7resKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MjFjYzkwOGRmYTkxMTEwZDExMTlhNmRlMWVjNDFlM2Vj ZmYzNDYwHhcNMjUxMjIyMjAwMDU1WhcNMjUxMjIzMjAwMDU1WjAzMTEwLwYDVQQD EyhiODgwMWEzZmE0MWZlODQ3YTBiOTgzMjI5MzJiYTBhYjMxNzQ3Mzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtu/OA0SMy2t6a2fdrtpn3569iLz sC5wvyDA/b7cPEK3fHMMPnV2HvP/lRb+JFeNsVFTHnsHv8QxJO8c2Y2oElFCkHzc e14NqD22K3OabHgU5EDDVHe4umYEX65y1onCGZ6ZdIbWWyTXJOcZrSjYxQf54LhB nx+1/e7HgZgENC7dngGafpL01p89Aadkc3K9pexHbbdrhsriuFZDhe9sYEuTsEb/ apV1H43QQCebenvLZpOQASyEd8L6AifRA+KfZ6NpEnDW7DhmOJL7oUPEZotnPphf M1lk4pgvz6Y3vkCxaRUQS+uAdqETcWt9pjLbNAGPaJfBw5Oo00CRBJukgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiAGj+kH+hHoLmDIpMroKsxdHN3MB8GA1UdIwQY MBaAFBghzJCN+pERDREZpt4exB4+z/NGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC80NTZjNjItNDc0Ni00MWUwLTgwNDQt OTIwNTk5ZjUyNjM3LzEvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC80NTZjNjItNDc0Ni00MWUwLTgwNDQtOTIwNTk5ZjUyNjM3 LzEvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBQG+KjO WgjguBVR3xmVBx4XOTUGjns8Slion9pux7kPkj1T6nRfbMlqE55TqNJf2wtAnKv/ +npHMLr+tvdEQMDgLgbr5SNhEbMJLaHPS48LcRsRMNIILwSM/jbXWAV/H7kn3BT0 JhgOxAj5u8IS7N/xMwBvfqWrQjMgqHhFhVpML10Mh3koPrEw63m+HbxSDD0iHiLt nMIB2YvlhEke3VAm5voY4TPcRR8fok8ptsTOrHAKQKiYj2XTAzdBHlNYUxCZkYi0 7eVqryY9wOjb5ylwo7AliCPlff7TW1ufc0iW+k8gPED1E4hrrTvfrz/LnXFm8FYg il6N9pNF0om1kA== -----END CERTIFICATE-----Generated at Tue Dec 23 01:30:15 2025 by rpki-client