This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft File: GpOEm_8zffi4sL0a4lLuYRnYph8.mft (raw, json) Hash identifier: HBqdaEvgwk6pu4nsfUg+s6A/kxXITbmVpliCy899x3Q= Subject key identifier: A0:59:15:8D:75:D1:D3:B4:F6:0D:66:DF:3E:78:01:B2:6A:EB:C6:F4 Authority key identifier: 1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F Certificate issuer: /CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f Certificate serial: 019AF2094F4954C00BEF9F27EB3DF048D790 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 05:01:27 +0000 Manifest this update: Sat 06 Dec 2025 05:01:27 +0000 Manifest next update: Sun 07 Dec 2025 05:01:27 +0000 Files and hashes: 1: GpOEm_8zffi4sL0a4lLuYRnYph8.crl (hash: QMjBn40H4W3fugcLcLPTRj3W/FOnI2pbkd1CQ8Z/JDE=) 2: Z3Go8saXwZXXMMYbEYiVPWGVRXk.roa (hash: XTY4+F/77lFXbbIzurIN7oqokSXQvQHevFpVhwO/K9Y=) 3: puaohYxhGlR_ojExuJSBgJp58B4.roa (hash: 1Zbm+b0MGHPeRak+rHKtmgsa3JMwl8hkqHTwmCOmzbo=) 4: ycPqiZgxXZYRWpHXq8sdS66pJ9w.roa (hash: vp55FHfuHOdAmakK1OzqAocvmJ8Vg24tSRWH6j9DsJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4f:49:54:c0:0b:ef:9f:27:eb:3d:f0:48:d7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f Validity Not Before: Dec 6 05:01:27 2025 GMT Not After : Dec 7 05:01:27 2025 GMT Subject: CN=a059158d75d1d3b4f60d66df3e7801b26aebc6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:30:21:ca:1b:a8:7d:87:b9:ff:83:94:c8:31: ac:d5:8d:1a:b8:51:c8:b6:17:7c:38:2f:09:3d:b6: 10:22:82:c2:b7:6e:9f:50:51:e7:ec:65:0f:0e:cc: ed:e9:50:25:81:12:dc:99:af:5b:1e:50:ea:c2:72: bf:bf:94:d6:05:ec:7b:90:c3:81:d4:7e:44:c6:9c: 1f:04:01:c1:fc:36:46:84:5d:a8:e0:fd:9d:7b:ad: d8:12:6d:d3:28:a0:a4:ca:f5:02:fd:91:02:50:f8: 67:80:28:bd:c0:1c:85:06:4e:e5:29:b2:e1:25:f5: 40:02:ea:02:c5:71:3e:28:56:54:24:ee:4b:5e:23: e7:1e:39:9a:54:61:57:55:f3:60:fe:b9:0f:8c:88: 99:80:86:81:8f:9f:f7:0d:c0:0f:aa:29:2d:56:1a: 50:0a:28:58:8f:5a:e8:8d:63:12:0f:fa:a1:30:96: 7a:f7:e2:5e:e5:c4:23:a0:cb:62:db:68:fd:11:c9: ba:e3:5f:5c:eb:d8:3d:67:9e:bd:0d:3c:fb:20:79: a9:15:e6:58:6c:92:e5:28:bd:17:d2:8f:e2:ee:8e: d9:01:14:8d:a8:bb:d0:59:a1:39:50:cd:f9:d7:31: ee:2f:65:c9:b3:50:4e:fd:7b:3c:13:b4:20:04:1d: 1b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:59:15:8D:75:D1:D3:B4:F6:0D:66:DF:3E:78:01:B2:6A:EB:C6:F4 X509v3 Authority Key Identifier: keyid:1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:6f:d9:6a:7f:b5:f2:47:c3:94:26:6b:84:56:bf:ea:66:6a: bc:3d:e4:1a:71:93:72:82:01:30:9c:e3:e5:34:b5:13:c1:16: af:1e:23:0b:ab:a4:66:46:e0:38:b1:91:be:00:18:89:d9:65: 31:e5:1c:4c:8a:cd:38:dd:4b:bc:36:57:c7:77:a6:6d:df:d7: 5f:bb:a1:26:a9:3d:e4:d3:42:d0:4a:3a:fa:d8:98:e3:1f:a0: 96:28:61:35:42:5f:f7:f8:62:2b:a6:cf:17:61:5f:51:69:c9: df:6f:04:ba:1d:17:48:64:ca:fa:da:59:60:94:cc:aa:b7:e6: 38:bb:88:e3:96:5e:6d:80:29:b6:c5:bc:fc:4e:be:4e:ac:28: 2e:07:a8:fe:ca:e4:43:59:22:15:56:6c:7a:55:1f:5b:1d:22: 56:33:11:58:89:e2:1c:ce:6b:36:79:61:1c:b6:ac:b5:71:e5: c0:33:98:7a:9d:51:57:da:7c:40:65:07:01:7f:32:b0:18:fe: c0:11:43:11:79:d7:db:e6:2a:f8:64:7d:2d:da:80:f5:84:f4: 76:da:bd:5b:8d:d0:d6:21:6f:3b:ff:ec:17:69:0f:5b:8a:e6: c9:a9:d8:48:bf:c0:2d:af:65:a8:1b:06:30:98:06:9b:41:3f: 11:74:6c:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCU9JVMAL758n6z3wSNeQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhOTM4NDliZmYzMzdkZjhiOGIwYmQxYWUyNTJlZTYxMTlk OGE2MWYwHhcNMjUxMjA2MDUwMTI3WhcNMjUxMjA3MDUwMTI3WjAzMTEwLwYDVQQD EyhhMDU5MTU4ZDc1ZDFkM2I0ZjYwZDY2ZGYzZTc4MDFiMjZhZWJjNmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjAhyhuofYe5/4OUyDGs1Y0auFHI thd8OC8JPbYQIoLCt26fUFHn7GUPDszt6VAlgRLcma9bHlDqwnK/v5TWBex7kMOB 1H5ExpwfBAHB/DZGhF2o4P2de63YEm3TKKCkyvUC/ZECUPhngCi9wByFBk7lKbLh JfVAAuoCxXE+KFZUJO5LXiPnHjmaVGFXVfNg/rkPjIiZgIaBj5/3DcAPqiktVhpQ CihYj1rojWMSD/qhMJZ69+Je5cQjoMti22j9Ecm6419c69g9Z569DTz7IHmpFeZY bJLlKL0X0o/i7o7ZARSNqLvQWaE5UM351zHuL2XJs1BO/Xs8E7QgBB0bxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBZFY110dO09g1m3z54AbJq68b0MB8GA1UdIwQY MBaAFBqThJv/M334uLC9GuJS7mEZ2KYfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3BPRW1fOHpmZmk0c0wwYTRsTHVZUm5ZcGg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kNDQ5N2EtMTFmMi00OWFjLWFlZjkt NDNlNjdkNWQwYTg1LzEvR3BPRW1fOHpmZmk0c0wwYTRsTHVZUm5ZcGg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9kNDQ5N2EtMTFmMi00OWFjLWFlZjktNDNlNjdkNWQwYTg1 LzEvR3BPRW1fOHpmZmk0c0wwYTRsTHVZUm5ZcGg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApW/Zan+1 8kfDlCZrhFa/6mZqvD3kGnGTcoIBMJzj5TS1E8EWrx4jC6ukZkbgOLGRvgAYidll MeUcTIrNON1LvDZXx3embd/XX7uhJqk95NNC0Eo6+tiY4x+glihhNUJf9/hiK6bP F2FfUWnJ328Euh0XSGTK+tpZYJTMqrfmOLuI45ZebYAptsW8/E6+TqwoLgeo/srk Q1kiFVZselUfWx0iVjMRWIniHM5rNnlhHLastXHlwDOYep1RV9p8QGUHAX8ysBj+ wBFDEXnX2+Yq+GR9LdqA9YT0dtq9W43Q1iFvO//sF2kPW4rmyanYSL/ALa9lqBsG MJgGm0E/EXRszw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:19 2025 by rpki-client