This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json) Hash identifier: 3jG9K5BTEWvVc9rgzPqBFAiFEkGuUcCWX1FU21AQGys= Subject key identifier: 4E:EF:14:1F:3C:F3:49:02:5B:A2:44:68:D5:6D:1D:16:30:D0:17:69 Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46 Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346 Certificate serial: 019AF49BEA852BD29AE5AC99ED13FFB51747 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft Manifest number: 0723 Signing time: Sat 06 Dec 2025 17:00:49 +0000 Manifest this update: Sat 06 Dec 2025 17:00:49 +0000 Manifest next update: Sun 07 Dec 2025 17:00:49 +0000 Files and hashes: 1: 8a65sLJcMpTKTXM1KK1QaGfwWng.roa (hash: AQSp0mg8gXMxn9jS/ccqb4ZFNGKHjoQo9RopDCtq2JU=) 2: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: 8t57xUOGE43PQYsqlPhJ5jfEFwG37YQrfQSZTrxjiB0=) 3: UXTqM7OJZrCNMf_WXfbtOToQRAk.roa (hash: mzfOsI6oNfEpkOHOqiggoPrJ5JkezNl8t7J1lOi2apE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:ea:85:2b:d2:9a:e5:ac:99:ed:13:ff:b5:17:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346 Validity Not Before: Dec 6 17:00:49 2025 GMT Not After : Dec 7 17:00:49 2025 GMT Subject: CN=4eef141f3cf349025ba24468d56d1d1630d01769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f6:28:2c:41:26:d9:fd:86:58:d4:b7:a6:1e: f0:b6:91:af:fa:13:0f:06:f8:3c:14:83:bf:99:3a: cc:3f:17:ed:4b:59:04:5f:bc:7a:2b:54:17:6d:f1: fa:b7:30:eb:6d:32:f6:c4:09:58:40:8a:15:74:3b: fe:a6:f4:84:87:e8:d2:48:fa:a0:35:dd:93:d7:8a: d0:a2:f2:92:fd:de:b6:00:a1:d3:47:3a:43:8b:a5: 57:ee:b8:f3:e6:31:ec:b5:d9:d1:7b:fe:ea:e9:f9: d5:ef:6f:89:55:64:c6:fe:da:20:1b:b0:ba:e6:05: 65:f9:c3:0e:59:51:93:a9:f5:3b:bb:26:94:a5:48: 17:00:03:3a:3c:25:6d:16:91:0d:a9:47:2b:81:d7: dc:97:11:32:f0:b4:41:a1:f0:76:94:11:c3:86:9c: ac:fd:06:ea:1a:9f:a5:d3:3c:9c:31:79:88:16:8d: c6:28:96:09:98:16:6a:60:e3:88:ea:6b:2a:2c:db: d6:24:36:b7:e5:3a:c2:37:e9:b7:ba:02:b5:ca:55: cd:e4:5a:07:d8:13:88:35:da:f3:d1:10:d8:c6:f9: 87:b9:55:22:17:09:bb:c2:cf:8e:06:5c:e1:8f:50: 8d:3a:b6:8b:ed:d4:51:6c:03:90:0a:96:dd:78:66: 5e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EF:14:1F:3C:F3:49:02:5B:A2:44:68:D5:6D:1D:16:30:D0:17:69 X509v3 Authority Key Identifier: keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:66:2b:66:a8:0e:25:5d:c6:48:52:53:e4:b6:d0:47:01:8b: 61:90:96:47:39:dd:a4:24:ed:20:09:f9:16:7e:07:12:78:06: 05:aa:be:ed:1a:77:b6:c5:88:96:0a:63:a4:56:c2:12:de:4b: 49:90:dd:47:57:9e:0b:43:18:ac:cb:04:9d:b9:ff:2a:29:5b: d9:4b:c6:e9:c0:7c:4a:93:82:07:7c:5b:e2:91:c7:74:08:25: 84:37:92:e1:b0:65:00:91:46:17:a2:5e:ed:8a:71:3f:07:3d: ba:01:92:05:93:a6:86:d1:54:c6:68:73:84:a8:b5:8a:a7:19: 4c:3e:c2:bf:00:6e:3f:9f:88:07:0f:aa:c7:78:b1:23:13:60: e1:9d:43:45:72:2f:df:93:1a:99:cd:3e:84:d4:57:a4:92:75: c3:e5:58:30:96:ad:86:df:17:8b:80:71:7f:17:e5:6c:71:41: 57:1d:b1:23:76:51:24:55:36:06:4e:a2:9f:f8:8a:72:f7:59: 50:b8:d4:88:82:a0:36:53:77:0f:e9:ea:85:f5:23:e4:3d:60: 35:87:7b:42:b2:8e:c9:bf:79:fb:37:be:62:ca:18:10:ef:d7: 7a:d0:87:3f:84:13:03:dc:94:a0:bd:01:92:30:69:28:23:79: 28:3e:2a:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+qFK9Ka5ayZ7RP/tRdHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MjFjYzkwOGRmYTkxMTEwZDExMTlhNmRlMWVjNDFlM2Vj ZmYzNDYwHhcNMjUxMjA2MTcwMDQ5WhcNMjUxMjA3MTcwMDQ5WjAzMTEwLwYDVQQD Eyg0ZWVmMTQxZjNjZjM0OTAyNWJhMjQ0NjhkNTZkMWQxNjMwZDAxNzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/YoLEEm2f2GWNS3ph7wtpGv+hMP Bvg8FIO/mTrMPxftS1kEX7x6K1QXbfH6tzDrbTL2xAlYQIoVdDv+pvSEh+jSSPqg Nd2T14rQovKS/d62AKHTRzpDi6VX7rjz5jHstdnRe/7q6fnV72+JVWTG/togG7C6 5gVl+cMOWVGTqfU7uyaUpUgXAAM6PCVtFpENqUcrgdfclxEy8LRBofB2lBHDhpys /QbqGp+l0zycMXmIFo3GKJYJmBZqYOOI6msqLNvWJDa35TrCN+m3ugK1ylXN5FoH 2BOINdrz0RDYxvmHuVUiFwm7ws+OBlzhj1CNOraL7dRRbAOQCpbdeGZe/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7vFB8880kCW6JEaNVtHRYw0BdpMB8GA1UdIwQY MBaAFBghzJCN+pERDREZpt4exB4+z/NGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC80NTZjNjItNDc0Ni00MWUwLTgwNDQt OTIwNTk5ZjUyNjM3LzEvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC80NTZjNjItNDc0Ni00MWUwLTgwNDQtOTIwNTk5ZjUyNjM3 LzEvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWYrZqgO JV3GSFJT5LbQRwGLYZCWRzndpCTtIAn5Fn4HEngGBaq+7Rp3tsWIlgpjpFbCEt5L SZDdR1eeC0MYrMsEnbn/Kilb2UvG6cB8SpOCB3xb4pHHdAglhDeS4bBlAJFGF6Je 7YpxPwc9ugGSBZOmhtFUxmhzhKi1iqcZTD7CvwBuP5+IBw+qx3ixIxNg4Z1DRXIv 35Mamc0+hNRXpJJ1w+VYMJatht8Xi4BxfxflbHFBVx2xI3ZRJFU2Bk6in/iKcvdZ ULjUiIKgNlN3D+nqhfUj5D1gNYd7QrKOyb95+ze+YsoYEO/XetCHP4QTA9yUoL0B kjBpKCN5KD4qXA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:11:32 2025 by rpki-client