This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft File: grZNfxWekC6mpa3XoQDcBfoUqe0.mft (raw, json) Hash identifier: IojrSMCVjcDa83jf18Cp2NnjEa5pHH0/GnZ0VL6D3IY= Subject key identifier: EC:08:11:8B:F0:12:FE:C4:95:33:57:E8:FF:16:17:A7:37:82:97:6C Authority key identifier: 82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED Certificate issuer: /CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed Certificate serial: 019AF31CD1D10191EF9E1004FB7034AB50A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft Manifest number: 0FD5 Signing time: Sat 06 Dec 2025 10:02:23 +0000 Manifest this update: Sat 06 Dec 2025 10:02:23 +0000 Manifest next update: Sun 07 Dec 2025 10:02:23 +0000 Files and hashes: 1: emiYyOO-4ZtoPEzkSnQ09tYgxmo.roa (hash: UDg/XKhAxepRkXvvtQYSYSZ++r+CNfh/uFuRVdS04Vg=) 2: grZNfxWekC6mpa3XoQDcBfoUqe0.crl (hash: wwiJaarluTN+lNBUaK8uvAEgzwENZJEmnnZxOjus6QE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d1:d1:01:91:ef:9e:10:04:fb:70:34:ab:50:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed Validity Not Before: Dec 6 10:02:23 2025 GMT Not After : Dec 7 10:02:23 2025 GMT Subject: CN=ec08118bf012fec4953357e8ff1617a73782976c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e8:7d:59:e8:ec:dd:69:11:a9:e5:5e:b0:85: 15:a9:4d:79:aa:b4:f4:4f:74:6a:72:d4:3e:03:23: f2:12:18:8a:1f:12:73:66:c0:f6:80:4c:0c:47:23: 3f:0d:e8:80:89:ff:2c:42:c3:7f:05:bb:e8:51:51: 8a:37:40:32:0c:86:6d:57:1b:3d:19:82:9c:8c:62: 2f:7f:8c:32:4c:c7:2d:b2:14:6a:fa:d5:21:6d:dd: 28:46:bd:0b:2c:30:e3:fb:a1:4a:e2:cd:cb:e6:d8: 1c:7b:72:0b:ea:2e:22:ed:8c:d1:4c:20:38:34:31: 64:88:17:01:f7:51:40:a7:61:16:9c:d2:d4:28:c5: d8:dd:b2:a7:37:48:60:94:0c:db:63:41:6c:1d:e4: 4e:75:41:e6:27:00:d2:bd:4b:89:14:61:88:ed:9b: 6e:da:c4:ce:ba:87:a8:8f:ef:a9:82:c2:7e:cc:1d: 8c:59:96:67:b2:62:31:d2:39:94:87:83:10:d6:52: fe:0a:f0:a3:89:c9:c1:68:89:73:27:15:e8:c8:36: 58:45:14:d6:47:ba:51:7e:ce:1b:0a:13:97:00:60: 34:5b:69:f1:62:21:03:fc:d6:0a:3b:f6:7a:55:74: 9d:ba:a9:10:6f:0c:92:6d:c1:f6:29:ea:b5:ef:98: 91:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:08:11:8B:F0:12:FE:C4:95:33:57:E8:FF:16:17:A7:37:82:97:6C X509v3 Authority Key Identifier: keyid:82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:fa:95:65:49:cd:48:b4:7c:aa:f4:28:cb:bd:99:e8:ad:01: f5:dc:29:e3:63:71:34:f1:4a:ca:7c:bf:5f:d6:38:36:90:21: 45:20:d9:fa:ef:33:0b:ce:48:a4:3a:75:cb:41:d2:60:78:fb: c8:f2:da:a4:6d:0e:44:68:29:a2:7e:aa:cd:d1:4a:5b:e1:81: 9c:e3:84:f5:93:f6:80:e8:1c:cd:04:cc:47:b5:fb:aa:34:71: b6:9f:6e:f5:74:eb:ce:58:15:11:5c:8a:28:89:4e:6e:53:ac: 7d:39:be:50:5f:ad:a9:31:e4:f0:b8:8c:df:05:ba:1a:85:1c: ed:1a:ff:cf:2d:fe:87:74:44:ea:f9:03:48:ae:40:14:83:58: 13:99:75:44:3b:1c:58:de:b7:66:42:de:d6:23:e7:b7:d3:e1: d6:d5:79:d7:60:63:34:34:10:96:e1:b9:32:eb:3d:52:4d:dd: ee:ec:cb:92:bb:79:97:51:00:38:8f:29:a8:fc:c5:5c:5d:3a: 0b:30:67:70:eb:38:1f:58:38:59:28:92:5c:a0:c3:43:89:81: 1e:ea:87:a1:1c:52:d1:31:18:83:05:9d:29:96:04:07:4e:f4: e2:e3:12:8d:ae:7c:34:95:37:7e:52:cf:5e:d0:ed:27:51:ca: 9a:c7:42:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNHRAZHvnhAE+3A0q1CoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjY0ZDdmMTU5ZTkwMmVhNmE1YWRkN2ExMDBkYzA1ZmEx NGE5ZWQwHhcNMjUxMjA2MTAwMjIzWhcNMjUxMjA3MTAwMjIzWjAzMTEwLwYDVQQD EyhlYzA4MTE4YmYwMTJmZWM0OTUzMzU3ZThmZjE2MTdhNzM3ODI5NzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOh9Wejs3WkRqeVesIUVqU15qrT0 T3RqctQ+AyPyEhiKHxJzZsD2gEwMRyM/DeiAif8sQsN/BbvoUVGKN0AyDIZtVxs9 GYKcjGIvf4wyTMctshRq+tUhbd0oRr0LLDDj+6FK4s3L5tgce3IL6i4i7YzRTCA4 NDFkiBcB91FAp2EWnNLUKMXY3bKnN0hglAzbY0FsHeROdUHmJwDSvUuJFGGI7Ztu 2sTOuoeoj++pgsJ+zB2MWZZnsmIx0jmUh4MQ1lL+CvCjicnBaIlzJxXoyDZYRRTW R7pRfs4bChOXAGA0W2nxYiED/NYKO/Z6VXSduqkQbwySbcH2Keq175iRbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwIEYvwEv7ElTNX6P8WF6c3gpdsMB8GA1UdIwQY MBaAFIK2TX8VnpAupqWt16EA3AX6FKntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JaTmZ4V2VrQzZtcGEzWG9RRGNCZm9VcWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hOTk3YjYtMGJiNy00NzY2LThhY2Mt Mjc1YWMxNDQzMzE4LzEvZ3JaTmZ4V2VrQzZtcGEzWG9RRGNCZm9VcWUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9hOTk3YjYtMGJiNy00NzY2LThhY2MtMjc1YWMxNDQzMzE4 LzEvZ3JaTmZ4V2VrQzZtcGEzWG9RRGNCZm9VcWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPqVZUnN SLR8qvQoy72Z6K0B9dwp42NxNPFKyny/X9Y4NpAhRSDZ+u8zC85IpDp1y0HSYHj7 yPLapG0ORGgpon6qzdFKW+GBnOOE9ZP2gOgczQTMR7X7qjRxtp9u9XTrzlgVEVyK KIlOblOsfTm+UF+tqTHk8LiM3wW6GoUc7Rr/zy3+h3RE6vkDSK5AFINYE5l1RDsc WN63ZkLe1iPnt9Ph1tV512BjNDQQluG5Mus9Uk3d7uzLkrt5l1EAOI8pqPzFXF06 CzBncOs4H1g4WSiSXKDDQ4mBHuqHoRxS0TEYgwWdKZYEB0704uMSja58NJU3flLP XtDtJ1HKmsdCDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:30:10 2025 by rpki-client