This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft File: GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json) Hash identifier: mvm3Uv5Dff1fS9v5/RQj/u2aq4prN5k8Kdz5A1t2KL4= Subject key identifier: 08:1A:4C:62:0A:F5:B2:E5:E4:91:40:3F:4F:D5:AB:73:51:42:6C:7B Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62 Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762 Certificate serial: 019B2588BAE50331C7DBB004E47C3E0383F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 05:01:16 +0000 Manifest this update: Tue 16 Dec 2025 05:01:16 +0000 Manifest next update: Wed 17 Dec 2025 05:01:16 +0000 Files and hashes: 1: 8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa (hash: 8RTmSwJoya32i12kM5MRjAc5F89+JLBUKY/2kNp2yVc=) 2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: 4JcYKb9E9EgHYsPpDnLQE3ECqIp0Kdvg+DMLigo3BRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:ba:e5:03:31:c7:db:b0:04:e4:7c:3e:03:83:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762 Validity Not Before: Dec 16 05:01:16 2025 GMT Not After : Dec 17 05:01:16 2025 GMT Subject: CN=081a4c620af5b2e5e491403f4fd5ab7351426c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4b:9b:8e:2c:2c:0c:fd:a9:ec:bd:de:a6:42: 08:9c:76:5f:83:c9:c8:83:13:15:a1:cd:40:94:a3: e7:29:ee:64:53:56:a0:e9:e7:30:da:24:03:d6:00: f6:91:c4:06:51:9f:92:40:c2:a4:9c:73:35:6c:99: ab:aa:42:76:57:04:11:e5:99:ee:bd:c2:bd:50:a3: 51:e1:d2:c8:66:59:2d:cc:ab:e0:21:95:95:df:a4: 52:05:d8:b3:2b:b7:04:36:20:0d:f8:d3:61:c5:0e: 26:5b:63:be:40:77:a0:f4:52:b5:2c:87:57:16:4c: 7e:f2:a6:9b:85:59:fe:28:83:49:29:fb:14:64:0c: fd:42:2a:5c:05:29:be:41:27:9d:86:be:6c:b4:73: b0:0f:ea:4d:5c:9d:ba:1b:4d:a3:be:c5:cc:b8:83: a1:01:f1:9a:f1:28:79:20:03:a3:c8:da:ff:a3:b2: d0:44:df:ac:b5:c6:e1:de:86:27:62:09:1e:7f:54: 06:7b:c7:0e:e4:6e:23:a3:54:ba:27:b2:71:aa:a2: c3:ac:46:7a:bd:a8:0f:47:c4:11:38:b7:bf:fd:c5: 47:a2:57:9f:b0:d6:cd:03:8a:13:b5:2d:c6:de:49: f4:c1:15:5f:8d:0e:a7:a8:dc:4d:ed:43:50:8e:35: 56:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1A:4C:62:0A:F5:B2:E5:E4:91:40:3F:4F:D5:AB:73:51:42:6C:7B X509v3 Authority Key Identifier: keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2d:83:c3:ac:05:4a:b1:49:36:b9:3f:f9:0b:32:8f:44:61: 28:4e:bb:45:55:b8:30:db:21:0d:b6:41:76:8a:cd:75:e6:b3: b4:ca:ff:1f:8b:5a:ea:ac:b5:99:4a:ff:3d:1a:7b:79:53:5a: c7:e3:1e:22:2f:77:df:46:27:17:37:ed:93:c9:34:fd:da:0c: 5a:97:c7:96:f1:0b:51:d2:ae:21:30:f8:31:d8:1f:ee:b5:0b: 7b:16:50:e5:81:45:ee:e6:ca:09:c1:4c:7a:30:d2:ae:83:18: e6:07:70:df:e4:c2:54:ea:bb:d4:16:16:ef:ac:7e:0d:40:b6: 8b:ec:a2:cb:32:35:16:52:b9:40:eb:5d:12:56:bd:ac:b6:6b: 06:f9:1c:9b:68:28:58:f1:c0:20:0d:6e:88:36:f0:c9:8f:0c: fb:9d:bb:34:68:14:38:80:7d:ff:89:43:a9:01:c2:3f:6d:d7: dc:db:11:4c:85:ac:3d:f4:9e:53:77:74:45:c2:bd:c9:0d:9a: 45:7d:a8:93:9b:56:71:3e:4a:fa:2e:ed:70:60:62:62:a5:e9: bc:5e:03:cb:07:8c:23:fe:62:f3:be:b8:0c:a4:a3:3d:ac:13: 03:7b:5a:45:cd:ef:7e:02:0f:89:13:46:47:1f:4c:2e:cf:e9: b3:eb:6a:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliLrlAzHH27AE5Hw+A4P2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NThjYWE2ODMyYWEyYTNlN2NjNmQxNDQ1MTVmOGY0MzFi NjY3NjIwHhcNMjUxMjE2MDUwMTE2WhcNMjUxMjE3MDUwMTE2WjAzMTEwLwYDVQQD EygwODFhNGM2MjBhZjViMmU1ZTQ5MTQwM2Y0ZmQ1YWI3MzUxNDI2YzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UubjiwsDP2p7L3epkIInHZfg8nI gxMVoc1AlKPnKe5kU1ag6ecw2iQD1gD2kcQGUZ+SQMKknHM1bJmrqkJ2VwQR5Znu vcK9UKNR4dLIZlktzKvgIZWV36RSBdizK7cENiAN+NNhxQ4mW2O+QHeg9FK1LIdX Fkx+8qabhVn+KINJKfsUZAz9QipcBSm+QSedhr5stHOwD+pNXJ26G02jvsXMuIOh AfGa8Sh5IAOjyNr/o7LQRN+stcbh3oYnYgkef1QGe8cO5G4jo1S6J7JxqqLDrEZ6 vagPR8QROLe//cVHolefsNbNA4oTtS3G3kn0wRVfjQ6nqNxN7UNQjjVWPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgaTGIK9bLl5JFAP0/Vq3NRQmx7MB8GA1UdIwQY MBaAFBhYyqaDKqKj58xtFEUV+PQxtmdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83OTI2YjgtNmVhNy00NWI0LTk1M2Ut YWFiN2ZjM2Y4YWM1LzEvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83OTI2YjgtNmVhNy00NWI0LTk1M2UtYWFiN2ZjM2Y4YWM1 LzEvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAii2Dw6wF SrFJNrk/+Qsyj0RhKE67RVW4MNshDbZBdorNdeaztMr/H4ta6qy1mUr/PRp7eVNa x+MeIi9330YnFzftk8k0/doMWpfHlvELUdKuITD4Mdgf7rULexZQ5YFF7ubKCcFM ejDSroMY5gdw3+TCVOq71BYW76x+DUC2i+yiyzI1FlK5QOtdEla9rLZrBvkcm2go WPHAIA1uiDbwyY8M+527NGgUOIB9/4lDqQHCP23X3NsRTIWsPfSeU3d0RcK9yQ2a RX2ok5tWcT5K+i7tcGBiYqXpvF4DyweMI/5i8764DKSjPawTA3taRc3vfgIPiRNG Rx9MLs/ps+tq2g== -----END CERTIFICATE-----Generated at Tue Dec 16 11:01:45 2025 by rpki-client