This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft File: GgEAlDqHCAKL5A1PpPKcmtnMVos.mft (raw, json) Hash identifier: jRh1RbPNanh8oGIeV4roB3AkO8XXExJ4EoRz4SZZ+Kc= Subject key identifier: F5:15:FC:BE:E9:91:75:FD:71:74:71:B3:8B:76:6A:E9:B2:7B:A7:19 Authority key identifier: 1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B Certificate issuer: /CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b Certificate serial: 019AF49C1A7C04A305388B6F8A5832ED6803 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft Manifest number: 07A6 Signing time: Sat 06 Dec 2025 17:01:02 +0000 Manifest this update: Sat 06 Dec 2025 17:01:02 +0000 Manifest next update: Sun 07 Dec 2025 17:01:02 +0000 Files and hashes: 1: FpuhTfwOdSf21755rrSFTL20Tbk.roa (hash: X6w/yqAHbg5XsmgEDpJrMUNkNSsz78dV/DwakO4C27U=) 2: GgEAlDqHCAKL5A1PpPKcmtnMVos.crl (hash: Co8ZGFZjrZfuD91ZPRVRCBYpTLbaPrtr9pZaPtB3L8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:1a:7c:04:a3:05:38:8b:6f:8a:58:32:ed:68:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b Validity Not Before: Dec 6 17:01:02 2025 GMT Not After : Dec 7 17:01:02 2025 GMT Subject: CN=f515fcbee99175fd717471b38b766ae9b27ba719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:75:ad:6c:e5:49:fc:db:36:41:6f:f8:87:0c: ac:9e:ba:9e:58:3d:23:0e:0a:72:d0:ec:d2:db:31: 95:a1:d3:09:41:ae:c6:e6:3d:6d:65:60:3b:ea:da: 5c:e8:94:4b:f7:8d:85:80:f3:6a:5d:86:3b:50:94: 72:1c:f8:04:92:f8:23:3d:b4:66:0b:87:57:29:a2: 0b:e1:23:50:5f:95:ee:91:0e:2d:a9:44:e7:00:ea: 6c:8b:06:75:5b:a9:d1:d1:f5:29:d6:cc:74:3b:e1: d5:09:b3:26:a7:5b:ae:22:82:31:20:63:9c:c3:82: 29:e0:32:67:5d:25:b5:fe:04:95:a3:21:f7:34:15: d0:94:c5:75:5c:77:55:7c:c9:a7:af:bf:41:d4:03: f9:07:7e:0c:78:63:4a:40:a4:a0:a7:95:c3:ad:ec: d9:ee:f4:b2:be:ce:b9:89:b7:11:97:52:15:d9:b1: f9:19:aa:bd:ac:5b:05:67:ad:9c:dd:4a:e1:43:c9: 36:76:60:8e:0e:d2:cd:aa:78:ad:ec:11:ca:e6:71: ea:45:09:65:02:ac:61:7a:a3:12:3a:15:f0:a7:e6: c8:f3:0a:f0:f7:a0:9d:38:79:c0:b5:eb:af:80:d4: 59:1b:14:f8:45:54:ea:8a:95:dd:b7:dc:81:0b:f3: f0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:15:FC:BE:E9:91:75:FD:71:74:71:B3:8B:76:6A:E9:B2:7B:A7:19 X509v3 Authority Key Identifier: keyid:1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:3c:83:bc:71:ee:4a:60:ef:7b:00:fe:20:3b:85:68:9a:45: 26:d0:5c:86:a7:f0:02:66:b6:f3:64:25:c0:2c:77:ee:31:69: 80:15:fd:e0:20:1f:12:a7:6d:3f:d6:d9:b5:1c:90:d1:51:0b: cf:21:0d:49:93:93:21:72:de:8f:82:36:b1:fb:78:42:92:52: 95:dd:11:1f:df:f7:b5:22:a5:88:59:cf:f4:be:fd:66:97:05: 4a:a4:e7:12:ae:44:7c:83:7a:d9:22:97:c5:0b:fb:37:bc:ed: c5:87:02:8c:b8:d3:a0:13:2b:3f:dc:dc:9d:da:08:d7:eb:a7: 1a:92:c0:7b:7a:0e:33:a6:a3:a6:7a:a0:2e:a2:a1:89:1e:13: 32:cc:a8:4b:05:fb:63:1b:8f:77:92:4c:00:88:d7:51:a6:81: fe:b0:bc:8f:ec:5d:de:14:07:6c:08:91:d3:03:ee:60:40:2e: fd:31:b9:fe:0b:0c:09:db:67:97:31:b8:18:af:66:44:b9:72: fe:d6:45:26:79:2e:ae:64:68:66:eb:fa:b6:e7:c7:19:c8:ef: 09:55:66:f1:4b:87:85:22:e3:ac:97:3d:bb:6e:da:fc:0d:b0: 9d:3b:0a:7c:b0:7d:82:fb:27:91:85:7b:a9:a7:73:03:0e:b1: 08:6c:2c:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nBp8BKMFOItvilgy7WgDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMDEwMDk0M2E4NzA4MDI4YmU0MGQ0ZmE0ZjI5YzlhZDlj YzU2OGIwHhcNMjUxMjA2MTcwMTAyWhcNMjUxMjA3MTcwMTAyWjAzMTEwLwYDVQQD EyhmNTE1ZmNiZWU5OTE3NWZkNzE3NDcxYjM4Yjc2NmFlOWIyN2JhNzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXWtbOVJ/Ns2QW/4hwysnrqeWD0j Dgpy0OzS2zGVodMJQa7G5j1tZWA76tpc6JRL942FgPNqXYY7UJRyHPgEkvgjPbRm C4dXKaIL4SNQX5XukQ4tqUTnAOpsiwZ1W6nR0fUp1sx0O+HVCbMmp1uuIoIxIGOc w4Ip4DJnXSW1/gSVoyH3NBXQlMV1XHdVfMmnr79B1AP5B34MeGNKQKSgp5XDrezZ 7vSyvs65ibcRl1IV2bH5Gaq9rFsFZ62c3UrhQ8k2dmCODtLNqnit7BHK5nHqRQll AqxheqMSOhXwp+bI8wrw96CdOHnAteuvgNRZGxT4RVTqipXdt9yBC/PwcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUV/L7pkXX9cXRxs4t2aumye6cZMB8GA1UdIwQY MBaAFBoBAJQ6hwgCi+QNT6TynJrZzFaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2dFQWxEcUhDQUtMNUExUHBQS2NtdG5NVm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8xMjAxYmYtZTZkZS00ODNhLWJjMjMt ZDZiY2U3YzgzMWNlLzEvR2dFQWxEcUhDQUtMNUExUHBQS2NtdG5NVm9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8xMjAxYmYtZTZkZS00ODNhLWJjMjMtZDZiY2U3YzgzMWNl LzEvR2dFQWxEcUhDQUtMNUExUHBQS2NtdG5NVm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjyDvHHu SmDvewD+IDuFaJpFJtBchqfwAma282QlwCx37jFpgBX94CAfEqdtP9bZtRyQ0VEL zyENSZOTIXLej4I2sft4QpJSld0RH9/3tSKliFnP9L79ZpcFSqTnEq5EfIN62SKX xQv7N7ztxYcCjLjToBMrP9zcndoI1+unGpLAe3oOM6ajpnqgLqKhiR4TMsyoSwX7 YxuPd5JMAIjXUaaB/rC8j+xd3hQHbAiR0wPuYEAu/TG5/gsMCdtnlzG4GK9mRLly /tZFJnkurmRoZuv6tufHGcjvCVVm8UuHhSLjrJc9u27a/A2wnTsKfLB9gvsnkYV7 qadzAw6xCGwsSw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:55:32 2025 by rpki-client