This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft File: GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json) Hash identifier: 7SY+vxJ1JWceS+UH5wEiavKo9QMTvX9USPOulip1kNo= Subject key identifier: F4:B8:4C:DD:5A:5F:E0:C1:3B:A7:67:6B:5F:19:93:EB:A1:0D:EA:8C Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62 Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762 Certificate serial: 019AF16474394572CCBBF1405DBC3CEDAF39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:23 +0000 Manifest this update: Sat 06 Dec 2025 02:01:23 +0000 Manifest next update: Sun 07 Dec 2025 02:01:23 +0000 Files and hashes: 1: 8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa (hash: 8RTmSwJoya32i12kM5MRjAc5F89+JLBUKY/2kNp2yVc=) 2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: nY8P0wZUpYRsDWdHLgW5UD7U/MRAVYli1ks8gmBKVgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:74:39:45:72:cc:bb:f1:40:5d:bc:3c:ed:af:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762 Validity Not Before: Dec 6 02:01:23 2025 GMT Not After : Dec 7 02:01:23 2025 GMT Subject: CN=f4b84cdd5a5fe0c13ba7676b5f1993eba10dea8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ec:16:e2:e8:4f:a8:10:9d:67:b2:84:15:09: 5e:b1:1a:15:da:fa:cd:48:63:19:63:c7:a4:8f:ab: fa:07:e0:fb:5e:8e:98:14:8f:c0:ae:6e:50:eb:95: 4c:fd:49:19:90:1c:a0:b6:58:78:5b:45:b6:f1:d2: 88:e8:41:0c:0c:a4:ad:30:46:d9:8f:1b:05:2f:c3: 27:c9:44:6b:b3:b8:36:99:89:91:03:51:75:9d:bc: d6:86:69:01:66:96:c9:ea:6e:14:f6:c9:79:30:bc: cb:81:3d:6a:8b:21:18:ab:be:98:76:2d:50:12:97: 5f:c8:6d:31:03:07:68:a2:e9:ee:49:e3:26:a1:59: da:89:83:a4:92:ce:b7:ee:59:4b:32:91:6d:26:15: 21:8c:dd:f0:64:17:e5:40:5a:bf:8f:de:24:22:b9: 79:27:44:38:bf:bb:c4:7d:c2:15:75:0e:69:04:ea: be:76:dc:50:62:9f:21:6b:67:37:4b:68:b6:bf:a7: 04:2b:49:e9:a0:4f:71:67:5e:54:7e:a1:5f:1d:16: 5b:cc:44:c7:ec:70:83:1f:24:49:b0:d0:ce:81:3b: 12:8e:77:09:74:79:56:06:8e:4b:83:8e:60:b7:32: 2a:41:49:90:8b:24:95:bb:73:7f:2f:dd:ef:30:04: ee:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B8:4C:DD:5A:5F:E0:C1:3B:A7:67:6B:5F:19:93:EB:A1:0D:EA:8C X509v3 Authority Key Identifier: keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:dd:70:bf:1a:8c:62:71:fb:33:9a:e4:d5:51:8d:5c:2b:0c: f7:9d:cb:cb:5f:76:2a:12:11:de:26:5c:23:d9:75:12:2e:dc: b4:85:8b:b0:d9:81:05:26:c4:6b:48:ba:ee:50:65:64:5f:b0: 8b:32:0e:23:c1:7a:9b:de:b4:ad:8a:6e:83:fb:c9:0e:09:69: 1c:84:06:55:cd:25:5d:b4:d7:92:59:f7:83:49:0a:d5:ed:a3: cd:f6:a6:56:89:80:42:2c:cd:d0:45:1c:0c:93:55:95:85:32: 4b:08:f5:f0:88:1f:94:5b:03:ac:d2:8a:1f:b1:55:26:3b:55: 0b:11:ee:7c:4f:d2:ed:9f:46:05:24:44:9a:18:8a:ad:91:a2: 88:5d:49:50:f3:da:70:ad:88:9f:ac:d8:6d:7a:74:7a:af:d0: cd:76:a8:35:83:e1:41:fb:70:2f:ea:cd:c5:7e:0d:d7:8a:f4: bb:ed:aa:1b:84:4c:86:48:65:6f:24:54:34:b0:59:81:2e:77: a6:c4:8c:88:13:64:8e:4f:11:61:fc:bb:dd:b2:d1:53:bd:cd: 31:3d:26:50:08:73:b3:8c:a0:a8:82:95:0c:ea:8e:13:9b:5d: 20:cb:d5:90:23:b0:b2:67:ce:56:06:e1:6e:ab:d4:8b:39:02: f7:5a:6b:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHQ5RXLMu/FAXbw87a85MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NThjYWE2ODMyYWEyYTNlN2NjNmQxNDQ1MTVmOGY0MzFi NjY3NjIwHhcNMjUxMjA2MDIwMTIzWhcNMjUxMjA3MDIwMTIzWjAzMTEwLwYDVQQD EyhmNGI4NGNkZDVhNWZlMGMxM2JhNzY3NmI1ZjE5OTNlYmExMGRlYThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOwW4uhPqBCdZ7KEFQlesRoV2vrN SGMZY8ekj6v6B+D7Xo6YFI/Arm5Q65VM/UkZkBygtlh4W0W28dKI6EEMDKStMEbZ jxsFL8MnyURrs7g2mYmRA1F1nbzWhmkBZpbJ6m4U9sl5MLzLgT1qiyEYq76Ydi1Q EpdfyG0xAwdoounuSeMmoVnaiYOkks637llLMpFtJhUhjN3wZBflQFq/j94kIrl5 J0Q4v7vEfcIVdQ5pBOq+dtxQYp8ha2c3S2i2v6cEK0npoE9xZ15UfqFfHRZbzETH 7HCDHyRJsNDOgTsSjncJdHlWBo5Lg45gtzIqQUmQiySVu3N/L93vMATu9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPS4TN1aX+DBO6dna18Zk+uhDeqMMB8GA1UdIwQY MBaAFBhYyqaDKqKj58xtFEUV+PQxtmdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83OTI2YjgtNmVhNy00NWI0LTk1M2Ut YWFiN2ZjM2Y4YWM1LzEvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83OTI2YjgtNmVhNy00NWI0LTk1M2UtYWFiN2ZjM2Y4YWM1 LzEvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb91wvxqM YnH7M5rk1VGNXCsM953Ly192KhIR3iZcI9l1Ei7ctIWLsNmBBSbEa0i67lBlZF+w izIOI8F6m960rYpug/vJDglpHIQGVc0lXbTXkln3g0kK1e2jzfamVomAQizN0EUc DJNVlYUySwj18IgflFsDrNKKH7FVJjtVCxHufE/S7Z9GBSREmhiKrZGiiF1JUPPa cK2In6zYbXp0eq/QzXaoNYPhQftwL+rNxX4N14r0u+2qG4RMhkhlbyRUNLBZgS53 psSMiBNkjk8RYfy73bLRU73NMT0mUAhzs4ygqIKVDOqOE5tdIMvVkCOwsmfOVgbh bqvUizkC91prYg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:24 2025 by rpki-client