This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft File: GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json) Hash identifier: pf4AqQL0WbesbbxjzZzVjtjWWLPRzU4X8QL7dTUfLrA= Subject key identifier: 72:42:F9:B7:71:A7:F0:03:7C:3B:C3:32:17:2D:D0:A7:91:11:CF:1F Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c Certificate serial: 019AF20986D3FDF6F6295A02FF1D898D0F85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 05:01:41 +0000 Manifest this update: Sat 06 Dec 2025 05:01:41 +0000 Manifest next update: Sun 07 Dec 2025 05:01:41 +0000 Files and hashes: 1: BegdDrTAjfq3QF_xE0SFA-JsmmY.roa (hash: UdhM2lVwgozCDdJmvHRy0hTuIS1j9lD7X7Mun/eqHgw=) 2: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: 73e5Dlj2A+sH3S1NVBWDrkmFG9E1TO3VK3wlKSkU+kM=) 3: Q-JTW2pMbNHJuQzQ3GB1MFwgWco.roa (hash: Lazq6w2zk0BI/gQTS7LpUxVn4e7nb0oKSy4DjZT1z9U=) 4: czVnbZc92doWqy2gBGIdv1iBjnw.roa (hash: FGIHMIe1fM4M87IQciBzvSamGa61S/MPL+xAE/AMTyI=) 5: h31D8UJNE_u1sTKbKP1SFsGVcFY.roa (hash: kwansroYJJGhl0jfhBp7y2GRUoE1YU2JrM6J/UDWiVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:86:d3:fd:f6:f6:29:5a:02:ff:1d:89:8d:0f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c Validity Not Before: Dec 6 05:01:41 2025 GMT Not After : Dec 7 05:01:41 2025 GMT Subject: CN=7242f9b771a7f0037c3bc332172dd0a79111cf1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d7:ea:79:95:72:ec:8f:f6:54:cd:8c:b9:58: 81:8a:46:d6:32:70:fc:7b:3e:47:52:a6:e1:92:a9: bb:c9:28:11:0e:40:15:ba:b6:52:33:a7:cd:37:19: 61:91:4a:fd:a6:2f:2c:36:4e:6f:52:1a:57:e1:3e: 3b:16:ea:b5:63:d2:69:4c:cc:cb:96:85:d1:82:3e: ea:ec:74:20:94:2a:e0:da:a7:8f:54:63:25:2e:23: a9:db:3c:30:30:ad:b7:41:7e:f4:10:80:29:67:d7: 42:5d:f1:bd:1e:d7:16:3a:16:41:85:6c:ae:62:51: d7:ac:4e:e5:09:b3:df:12:84:31:8a:68:9a:30:be: 67:91:ee:46:02:0b:71:3f:9d:0b:79:4a:47:30:5f: b0:ea:ea:75:54:1d:23:95:cc:a9:d3:ca:d8:57:3e: 99:c9:23:b4:ed:fc:98:1a:a7:1a:c8:79:d5:35:0b: 99:c5:15:88:18:f9:49:6f:af:03:39:92:85:7e:82: cf:60:1a:1c:21:9c:77:29:7c:ef:34:48:01:9c:eb: 10:44:0b:a1:cd:6d:f8:99:62:6b:80:ba:0e:a5:07: b5:8b:de:a3:9c:ee:5b:02:72:c0:6a:e4:77:fc:d4: 1e:f5:ba:ab:54:01:f8:09:a9:b3:e4:a0:06:73:bf: 30:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:42:F9:B7:71:A7:F0:03:7C:3B:C3:32:17:2D:D0:A7:91:11:CF:1F X509v3 Authority Key Identifier: keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:fd:5d:29:1e:ab:57:4a:bd:07:73:9c:c1:5e:5f:53:17:28: d2:e3:6f:64:69:47:cb:01:a2:46:d6:54:41:04:eb:3b:e1:2b: ee:68:e1:72:95:ab:2c:70:73:80:0d:e0:d0:df:12:26:42:03: 68:76:31:de:bf:91:20:d9:29:f5:13:37:2f:c8:a8:9b:43:ec: 2d:6c:56:18:dc:29:a5:77:af:a6:ca:0f:45:34:cd:17:d0:10: 9f:06:f9:59:98:b4:81:07:e6:5d:4d:91:0c:a7:4b:ce:fb:09: 69:4c:69:1d:7a:95:0f:bd:b9:c3:1d:dd:06:b8:f4:25:7b:eb: aa:60:d3:09:e9:fa:43:3e:9f:98:39:84:af:4a:16:28:a8:41: b5:1d:65:22:7f:a0:7b:27:c8:5c:80:34:83:42:85:50:42:eb: b2:fc:c7:ff:1b:34:cd:60:ae:9f:14:33:09:76:6b:f7:ef:7d: ed:ae:0c:ee:48:af:56:b1:a5:c6:c3:44:66:ed:50:c3:1f:ad: 7d:b6:4e:98:9c:89:d1:25:0f:0d:f3:d2:2d:8e:b9:0b:6c:5e: a6:d5:6b:bb:3d:bc:c8:7d:d5:22:f7:7c:32:07:5d:62:85:5c: 57:8b:fc:e7:3b:dd:29:6e:63:99:57:cf:b4:72:27:82:70:99: 59:f9:fc:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYbT/fb2KVoC/x2JjQ+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZjFhOWRkMTI2ZjM3MjM3Y2UyMDBmYjg2MTZmZjkzN2Jj YTk2NmMwHhcNMjUxMjA2MDUwMTQxWhcNMjUxMjA3MDUwMTQxWjAzMTEwLwYDVQQD Eyg3MjQyZjliNzcxYTdmMDAzN2MzYmMzMzIxNzJkZDBhNzkxMTFjZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtfqeZVy7I/2VM2MuViBikbWMnD8 ez5HUqbhkqm7ySgRDkAVurZSM6fNNxlhkUr9pi8sNk5vUhpX4T47Fuq1Y9JpTMzL loXRgj7q7HQglCrg2qePVGMlLiOp2zwwMK23QX70EIApZ9dCXfG9HtcWOhZBhWyu YlHXrE7lCbPfEoQximiaML5nke5GAgtxP50LeUpHMF+w6up1VB0jlcyp08rYVz6Z ySO07fyYGqcayHnVNQuZxRWIGPlJb68DOZKFfoLPYBocIZx3KXzvNEgBnOsQRAuh zW34mWJrgLoOpQe1i96jnO5bAnLAauR3/NQe9bqrVAH4Camz5KAGc78wgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJC+bdxp/ADfDvDMhct0KeREc8fMB8GA1UdIwQY MBaAFBnxqd0SbzcjfOIA+4YW/5N7ypZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgt M2ZkMzA5ODhmNjc3LzEvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgtM2ZkMzA5ODhmNjc3 LzEvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHP1dKR6r V0q9B3OcwV5fUxco0uNvZGlHywGiRtZUQQTrO+Er7mjhcpWrLHBzgA3g0N8SJkID aHYx3r+RINkp9RM3L8iom0PsLWxWGNwppXevpsoPRTTNF9AQnwb5WZi0gQfmXU2R DKdLzvsJaUxpHXqVD725wx3dBrj0JXvrqmDTCen6Qz6fmDmEr0oWKKhBtR1lIn+g eyfIXIA0g0KFUELrsvzH/xs0zWCunxQzCXZr9+997a4M7kivVrGlxsNEZu1Qwx+t fbZOmJyJ0SUPDfPSLY65C2xeptVruz28yH3VIvd8MgddYoVcV4v85zvdKW5jmVfP tHIngnCZWfn8kA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:12:21 2025 by rpki-client