This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft File: GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json) Hash identifier: KQramNXKXGaVXhbyBAmnFgqA3bmqvIlzoRtR4srR9CY= Subject key identifier: E2:C9:BC:A7:7A:2D:FB:BA:0B:92:B6:29:AB:1E:AF:8B:D3:98:2C:BB Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08 Certificate issuer: /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208 Certificate serial: 019AF42E4CF41FD39D0EAC66C3C66931D0CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 15:01:06 +0000 Manifest this update: Sat 06 Dec 2025 15:01:06 +0000 Manifest next update: Sun 07 Dec 2025 15:01:06 +0000 Files and hashes: 1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: mKDOYFKcC1CX//PrYNx31v8L3kqsbpxNuCAIpGEthoE=) 2: hI5edSKk9SDqGgkmF4OcRVaTqCk.roa (hash: l/blfIEQUSaiKWBLl4Zw+Q08icOowG6w3h/+ddEop3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:4c:f4:1f:d3:9d:0e:ac:66:c3:c6:69:31:d0:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208 Validity Not Before: Dec 6 15:01:06 2025 GMT Not After : Dec 7 15:01:06 2025 GMT Subject: CN=e2c9bca77a2dfbba0b92b629ab1eaf8bd3982cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:92:4d:f8:d1:33:28:22:8f:4d:2e:cc:17:ad: 3e:7e:b1:15:5b:3c:ca:de:95:ea:1a:b8:64:4f:dd: 0f:28:c1:37:cc:a5:7e:1e:08:10:26:0c:73:07:57: 26:03:d8:8d:87:f0:66:67:fc:1a:0a:11:d6:5d:dc: 09:1e:95:5b:72:f6:fb:42:53:a7:50:a5:3e:33:ff: e0:6f:cb:18:cd:d8:96:9b:37:34:06:36:cb:8f:02: 71:a6:2c:b8:77:78:bb:4b:7a:7d:ed:55:d1:ad:47: 7c:3a:11:71:f7:cf:f8:fc:86:76:59:2f:95:e9:65: 1a:e0:4b:db:7e:f4:12:d3:1e:a2:13:f0:9c:10:80: 29:be:f6:5b:79:43:27:96:d6:30:d7:cd:92:be:7c: 74:3b:3c:65:40:5e:eb:84:70:e4:63:27:a1:e8:37: e9:f8:27:2e:61:ef:2a:6f:ba:f1:40:63:ce:35:64: bd:72:32:11:63:7e:37:ca:40:11:b4:b4:17:16:6c: 28:1f:b4:ad:a7:ca:5e:20:c1:9b:c3:c7:a4:5c:92: 64:45:bb:2f:04:2f:22:ee:b8:06:9a:69:40:68:49: cc:a9:23:b0:ff:42:ff:32:f8:a8:c8:f0:47:3d:32: c0:6c:ad:0a:c4:7a:7d:7b:db:5e:f3:02:3c:31:b7: 1e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C9:BC:A7:7A:2D:FB:BA:0B:92:B6:29:AB:1E:AF:8B:D3:98:2C:BB X509v3 Authority Key Identifier: keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:20:95:f6:8c:18:a2:83:0d:db:7d:40:fa:32:55:3c:0e:f6: ca:51:6d:d8:39:6a:38:59:14:10:01:31:b2:b6:c9:22:ea:63: 82:0e:80:5f:fb:5b:47:5f:24:24:1f:aa:61:72:d8:6d:5c:c3: 54:fb:69:73:01:b8:36:b3:bc:40:57:e9:c7:2f:5d:55:11:f4: e4:2f:4c:82:3f:62:4d:68:a0:d5:c3:8a:6e:9a:f9:0e:34:ca: 83:96:bc:ac:fd:7b:11:17:c6:8b:ee:65:80:25:18:5f:28:8a: 2d:36:76:ff:8f:76:37:c1:89:ad:6d:a7:b4:7a:4e:d3:88:2a: 57:cb:bc:df:55:ef:b4:71:a9:05:9f:e7:52:75:7d:f6:48:d4: 53:25:bc:83:27:9c:52:58:f4:29:f5:93:3e:78:50:63:a6:e7: dc:78:8e:11:93:82:f4:4f:f1:78:0b:ee:98:3a:2f:c0:b5:f7: 00:0a:9a:4b:34:17:cf:fa:a3:c8:c0:c2:66:ae:ad:0e:e1:ad: 8f:99:55:b3:2c:c5:b3:39:47:88:66:1d:f1:52:77:f5:f0:11: 05:52:d7:ac:8e:76:41:5e:5c:32:dd:26:20:2b:ee:22:d8:41: b4:66:7d:ce:9b:d7:b9:45:4c:f4:08:19:42:02:94:b2:e3:23: eb:c0:05:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lkz0H9OdDqxmw8ZpMdDOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMTFhNjYzNmY4Y2UyY2VmNTgzNmM0NDM1NjVjNWZlM2Fl MmYyMDgwHhcNMjUxMjA2MTUwMTA2WhcNMjUxMjA3MTUwMTA2WjAzMTEwLwYDVQQD EyhlMmM5YmNhNzdhMmRmYmJhMGI5MmI2MjlhYjFlYWY4YmQzOTgyY2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JJN+NEzKCKPTS7MF60+frEVWzzK 3pXqGrhkT90PKME3zKV+HggQJgxzB1cmA9iNh/BmZ/waChHWXdwJHpVbcvb7QlOn UKU+M//gb8sYzdiWmzc0BjbLjwJxpiy4d3i7S3p97VXRrUd8OhFx98/4/IZ2WS+V 6WUa4EvbfvQS0x6iE/CcEIApvvZbeUMnltYw182Svnx0OzxlQF7rhHDkYyeh6Dfp +CcuYe8qb7rxQGPONWS9cjIRY343ykARtLQXFmwoH7Stp8peIMGbw8ekXJJkRbsv BC8i7rgGmmlAaEnMqSOw/0L/MvioyPBHPTLAbK0KxHp9e9te8wI8MbceHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLJvKd6Lfu6C5K2Kaser4vTmCy7MB8GA1UdIwQY MBaAFBoRpmNvjOLO9YNsRDVlxf464vIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hHbVkyLU00czcxZzJ4RU5XWEZfanJpOGdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mOGY5YzgtMGRlYi00MGRlLTg5NDYt MjkxZTRiZDcwMzA5LzEvR2hHbVkyLU00czcxZzJ4RU5XWEZfanJpOGdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9mOGY5YzgtMGRlYi00MGRlLTg5NDYtMjkxZTRiZDcwMzA5 LzEvR2hHbVkyLU00czcxZzJ4RU5XWEZfanJpOGdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSCV9owY ooMN231A+jJVPA72ylFt2DlqOFkUEAExsrbJIupjgg6AX/tbR18kJB+qYXLYbVzD VPtpcwG4NrO8QFfpxy9dVRH05C9Mgj9iTWig1cOKbpr5DjTKg5a8rP17ERfGi+5l gCUYXyiKLTZ2/492N8GJrW2ntHpO04gqV8u831XvtHGpBZ/nUnV99kjUUyW8gyec Ulj0KfWTPnhQY6bn3HiOEZOC9E/xeAvumDovwLX3AAqaSzQXz/qjyMDCZq6tDuGt j5lVsyzFszlHiGYd8VJ39fARBVLXrI52QV5cMt0mICvuIthBtGZ9zpvXuUVM9AgZ QgKUsuMj68AFLw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:17:19 2025 by rpki-client