This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft File: GpOEm_8zffi4sL0a4lLuYRnYph8.mft (raw, json) Hash identifier: fpot6htXsBIfgxfx0E+xxkM5jT1VbY2cW47xLo/OTNs= Subject key identifier: DB:56:D3:75:6B:A4:E6:08:C5:0A:54:20:8C:A5:1E:87:88:E6:4C:A9 Authority key identifier: 1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F Certificate issuer: /CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f Certificate serial: 019B2BF916A95343F86F98DCD7B2E056CD52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft Manifest number: 1783 Signing time: Wed 17 Dec 2025 11:01:43 +0000 Manifest this update: Wed 17 Dec 2025 11:01:43 +0000 Manifest next update: Thu 18 Dec 2025 11:01:43 +0000 Files and hashes: 1: GpOEm_8zffi4sL0a4lLuYRnYph8.crl (hash: aOTopPKSVDE5FJY395dh3j9qWzk8Mut/815X3SF1+jM=) 2: Z3Go8saXwZXXMMYbEYiVPWGVRXk.roa (hash: XTY4+F/77lFXbbIzurIN7oqokSXQvQHevFpVhwO/K9Y=) 3: puaohYxhGlR_ojExuJSBgJp58B4.roa (hash: 1Zbm+b0MGHPeRak+rHKtmgsa3JMwl8hkqHTwmCOmzbo=) 4: ycPqiZgxXZYRWpHXq8sdS66pJ9w.roa (hash: vp55FHfuHOdAmakK1OzqAocvmJ8Vg24tSRWH6j9DsJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f9:16:a9:53:43:f8:6f:98:dc:d7:b2:e0:56:cd:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f Validity Not Before: Dec 17 11:01:43 2025 GMT Not After : Dec 18 11:01:43 2025 GMT Subject: CN=db56d3756ba4e608c50a54208ca51e8788e64ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:20:37:a2:e0:4c:7c:3a:ca:dc:b3:e5:ed:28: ac:d7:83:b0:0a:3d:1e:df:f2:10:db:b4:90:ef:8c: b3:15:0b:43:3a:ad:87:f4:c2:34:87:96:cb:0b:f0: 85:ff:42:34:fb:f2:a3:f7:5a:96:35:12:1e:73:37: 4f:e6:3a:29:a9:86:51:72:8b:24:af:00:34:07:b9: 27:80:8a:06:21:cb:6b:e0:38:8b:e1:ba:e6:ea:cc: 46:2b:e7:29:da:ea:7e:5b:40:62:96:ea:f5:0f:53: 2b:0e:a0:8e:55:c7:5f:cb:c9:a9:25:64:6f:3b:88: 5e:98:d4:88:f9:1b:96:92:17:34:da:9d:a0:9b:b5: d4:ae:b6:f0:46:9f:10:7c:ae:41:11:0b:96:7c:92: d4:1f:d0:ee:77:d8:d5:a2:80:d7:3e:d0:0b:13:05: d5:d2:a0:52:a0:35:e6:ee:1b:72:fb:7b:d1:ea:71: 9f:5b:b6:39:ab:f4:a8:16:5a:41:64:83:44:32:12: 57:eb:d7:5b:c3:21:70:b5:0e:a3:92:80:fd:29:29: fe:57:38:b9:25:f8:2a:ff:1b:31:a5:b0:3a:8c:a6: e9:84:9d:55:34:06:35:b3:21:7e:6b:bd:1a:ac:1e: ef:51:35:8b:68:8c:33:7a:2d:b8:01:ff:7c:b8:d9: b1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:56:D3:75:6B:A4:E6:08:C5:0A:54:20:8C:A5:1E:87:88:E6:4C:A9 X509v3 Authority Key Identifier: keyid:1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:71:71:7a:e6:2f:b9:89:f8:58:55:b4:d1:53:f7:66:8a:de: 3d:3b:48:f9:e5:af:2e:ab:95:28:9e:ba:64:27:0d:51:8c:d8: 72:aa:f4:d1:bc:d5:9f:6a:92:79:aa:61:4f:85:e7:f9:c9:53: ad:9b:de:74:9d:88:e3:09:ac:8a:aa:ab:d9:77:d2:bc:12:b4: 32:18:89:d8:57:68:d1:77:12:aa:31:ad:a7:c8:1b:67:0b:26: 56:3f:95:a8:3c:3d:e1:a4:9b:0b:d5:aa:8a:3a:21:e8:61:bf: ea:1d:4d:0e:55:51:e3:54:34:9c:91:c4:21:dc:bc:b8:a8:ae: a6:1d:3e:0f:00:9c:8b:08:c4:84:ca:14:2b:ef:db:ea:66:8a: e5:e9:e6:50:c6:4e:20:fd:d7:71:56:13:9b:ad:83:9d:16:eb: c2:ba:e7:90:11:ae:67:7f:85:93:00:c6:e1:a7:78:5c:01:25: 7e:91:cb:f2:40:9b:a5:07:eb:85:9e:c1:d6:37:ee:4e:0e:38: d8:fe:10:7d:92:cc:0f:6a:0e:10:c0:9a:b2:59:e1:da:85:58: f2:b5:b4:45:d8:29:c7:4b:1c:0d:8d:c6:ed:31:19:c0:f7:95: f7:79:da:35:a5:84:4d:7d:dd:29:b4:4a:3b:cc:27:e1:3e:77: eb:6b:08:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+RapU0P4b5jc17LgVs1SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhOTM4NDliZmYzMzdkZjhiOGIwYmQxYWUyNTJlZTYxMTlk OGE2MWYwHhcNMjUxMjE3MTEwMTQzWhcNMjUxMjE4MTEwMTQzWjAzMTEwLwYDVQQD EyhkYjU2ZDM3NTZiYTRlNjA4YzUwYTU0MjA4Y2E1MWU4Nzg4ZTY0Y2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iA3ouBMfDrK3LPl7Sis14OwCj0e 3/IQ27SQ74yzFQtDOq2H9MI0h5bLC/CF/0I0+/Kj91qWNRIeczdP5jopqYZRcosk rwA0B7kngIoGIctr4DiL4brm6sxGK+cp2up+W0Bilur1D1MrDqCOVcdfy8mpJWRv O4hemNSI+RuWkhc02p2gm7XUrrbwRp8QfK5BEQuWfJLUH9Dud9jVooDXPtALEwXV 0qBSoDXm7hty+3vR6nGfW7Y5q/SoFlpBZINEMhJX69dbwyFwtQ6jkoD9KSn+Vzi5 Jfgq/xsxpbA6jKbphJ1VNAY1syF+a70arB7vUTWLaIwzei24Af98uNmx1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtW03VrpOYIxQpUIIylHoeI5kypMB8GA1UdIwQY MBaAFBqThJv/M334uLC9GuJS7mEZ2KYfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3BPRW1fOHpmZmk0c0wwYTRsTHVZUm5ZcGg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kNDQ5N2EtMTFmMi00OWFjLWFlZjkt NDNlNjdkNWQwYTg1LzEvR3BPRW1fOHpmZmk0c0wwYTRsTHVZUm5ZcGg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9kNDQ5N2EtMTFmMi00OWFjLWFlZjktNDNlNjdkNWQwYTg1 LzEvR3BPRW1fOHpmZmk0c0wwYTRsTHVZUm5ZcGg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3FxeuYv uYn4WFW00VP3ZorePTtI+eWvLquVKJ66ZCcNUYzYcqr00bzVn2qSeaphT4Xn+clT rZvedJ2I4wmsiqqr2XfSvBK0MhiJ2Fdo0XcSqjGtp8gbZwsmVj+VqDw94aSbC9Wq ijoh6GG/6h1NDlVR41Q0nJHEIdy8uKiuph0+DwCciwjEhMoUK+/b6maK5enmUMZO IP3XcVYTm62DnRbrwrrnkBGuZ3+FkwDG4ad4XAElfpHL8kCbpQfrhZ7B1jfuTg44 2P4QfZLMD2oOEMCaslnh2oVY8rW0Rdgpx0scDY3G7TEZwPeV93naNaWETX3dKbRK O8wn4T5362sICg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:21:38 2025 by rpki-client