This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
File: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft (raw, json)
Hash identifier: sEifNEcH4/g6l70qr2ydBiKUnemAm4Hzu851LoBURRw=
Subject key identifier: 92:B2:BD:42:1F:48:AB:2F:B1:4C:E0:EB:43:B6:19:8D:AB:FA:51:C2
Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
Certificate issuer: /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Certificate serial: 019AF50A7F8FA818440F82688D554118B75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
Manifest number: 1764
Signing time: Sat 06 Dec 2025 19:01:37 +0000
Manifest this update: Sat 06 Dec 2025 19:01:37 +0000
Manifest next update: Sun 07 Dec 2025 19:01:37 +0000
Files and hashes: 1: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl (hash: ju4cB6CCdpLtPGgwxmYxB1hjh1OIkJ6DKg4P4KK80RM=)
2: YuDsO55F13UZ0cxSF251Oa2EzOk.roa (hash: E2zFm6YI+MUI5s6ZcM5A4TjlG7YlaadinjimTXzpUsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:0a:7f:8f:a8:18:44:0f:82:68:8d:55:41:18:b7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Validity
Not Before: Dec 6 19:01:37 2025 GMT
Not After : Dec 7 19:01:37 2025 GMT
Subject: CN=92b2bd421f48ab2fb14ce0eb43b6198dabfa51c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dd:07:d0:08:99:ab:45:8c:22:5e:3d:82:2a:
0e:f8:24:d1:4b:66:16:74:64:2d:e4:c0:c7:0b:e0:
b3:d6:27:a8:c6:e8:6a:4f:82:55:81:f2:70:b5:6c:
88:db:f6:4f:97:ac:20:19:76:80:5f:a2:24:e7:68:
78:8c:78:ed:50:c8:36:70:06:97:84:84:9f:08:3c:
bb:78:98:02:04:e9:dd:d9:1b:5d:00:0d:e5:04:3d:
23:ba:2b:27:6f:80:2c:64:5d:3a:ec:8b:68:a6:8e:
c7:92:ba:f9:10:2c:d9:8e:eb:9a:62:87:84:61:d8:
15:81:bb:b4:c2:d5:f3:20:4e:47:5d:b8:06:65:a9:
0f:17:4c:f1:f6:52:1f:99:1d:b4:b3:c7:a8:ff:9d:
ff:cf:be:e1:65:ac:70:a7:67:a6:d0:48:f4:f3:38:
25:72:77:96:80:aa:4d:89:cb:c8:a4:17:d2:8a:e0:
d3:9f:87:60:95:d2:27:37:5b:06:27:aa:87:0a:c3:
c5:df:bc:d4:5b:5f:c0:9d:6c:e1:53:6b:75:c8:fc:
2e:08:b7:c8:d0:34:01:dd:11:80:fd:ab:5a:48:4d:
fb:ea:55:19:67:bc:fb:a4:fd:7b:4c:9a:73:9c:cf:
7f:25:e8:f4:51:8d:3f:fe:a6:8c:23:4f:3c:4a:64:
66:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B2:BD:42:1F:48:AB:2F:B1:4C:E0:EB:43:B6:19:8D:AB:FA:51:C2
X509v3 Authority Key Identifier:
keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9c:30:64:20:19:d5:ed:f4:da:d2:e2:55:2f:43:25:a9:5e:
38:3b:8f:e5:f4:f8:20:3d:b1:37:6c:26:d5:72:24:44:44:fe:
c6:65:01:b7:df:80:c9:42:80:ee:d1:9b:a2:9b:fb:7e:49:f3:
56:d6:22:f3:e7:ef:ca:40:3f:18:a6:ae:10:b0:52:eb:7a:b2:
f4:21:55:cd:a5:09:c9:5f:de:b9:30:cb:21:92:e1:e7:e1:35:
2b:f7:e5:e4:0a:cd:43:3f:0c:49:d3:c9:5e:fd:48:85:da:f4:
f2:8e:2e:9d:b6:de:df:51:44:13:39:20:de:01:4e:39:15:f4:
59:05:28:31:27:72:e8:29:65:98:0b:70:62:14:b6:64:f4:15:
ab:64:13:f7:a4:53:40:6b:89:53:a6:41:1b:66:8a:8f:22:cc:
87:4b:94:79:56:5e:38:cd:8e:29:22:65:9c:8d:7f:10:9b:ae:
7c:1f:01:96:6a:77:8a:a3:22:fa:18:f6:4d:3b:92:0a:9d:33:
de:09:16:73:bb:6b:bb:7b:2b:31:3b:18:35:d5:d3:f9:ed:80:
d2:ed:c8:4b:9e:9d:c1:e8:96:8f:f3:e6:74:77:72:60:26:af:
c5:d3:d8:23:de:ea:40:44:dd:2a:83:2b:1c:0e:11:70:f5:09:
54:df:a1:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1Cn+PqBhED4JojVVBGLdbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OTk0N2E5YTVkODhjYzYyY2M4OTgyNjhmMmJjYWZkNmE3
ZmZjNWIwHhcNMjUxMjA2MTkwMTM3WhcNMjUxMjA3MTkwMTM3WjAzMTEwLwYDVQQD
Eyg5MmIyYmQ0MjFmNDhhYjJmYjE0Y2UwZWI0M2I2MTk4ZGFiZmE1MWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt0H0AiZq0WMIl49gioO+CTRS2YW
dGQt5MDHC+Cz1ieoxuhqT4JVgfJwtWyI2/ZPl6wgGXaAX6Ik52h4jHjtUMg2cAaX
hISfCDy7eJgCBOnd2RtdAA3lBD0juisnb4AsZF067Itopo7Hkrr5ECzZjuuaYoeE
YdgVgbu0wtXzIE5HXbgGZakPF0zx9lIfmR20s8eo/53/z77hZaxwp2em0Ej08zgl
cneWgKpNicvIpBfSiuDTn4dgldInN1sGJ6qHCsPF37zUW1/AnWzhU2t1yPwuCLfI
0DQB3RGA/ataSE376lUZZ7z7pP17TJpznM9/Jej0UY0//qaMI088SmRm0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKyvUIfSKsvsUzg60O2GY2r+lHCMB8GA1UdIwQY
MBaAFBiZR6ml2IzGLMiYJo8ryv1qf/xbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0psSHFhWFlqTVlzeUpnbWp5dktfV3BfX0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83MjlmOTItNWYwMy00MTU4LTkwYWMt
NmQ0MjhmMWMxNWZkLzEvR0psSHFhWFlqTVlzeUpnbWp5dktfV3BfX0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83MjlmOTItNWYwMy00MTU4LTkwYWMtNmQ0MjhmMWMxNWZk
LzEvR0psSHFhWFlqTVlzeUpnbWp5dktfV3BfX0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5wwZCAZ
1e302tLiVS9DJaleODuP5fT4ID2xN2wm1XIkRET+xmUBt9+AyUKA7tGbopv7fknz
VtYi8+fvykA/GKauELBS63qy9CFVzaUJyV/euTDLIZLh5+E1K/fl5ArNQz8MSdPJ
Xv1Ihdr08o4unbbe31FEEzkg3gFOORX0WQUoMSdy6CllmAtwYhS2ZPQVq2QT96RT
QGuJU6ZBG2aKjyLMh0uUeVZeOM2OKSJlnI1/EJuufB8Blmp3iqMi+hj2TTuSCp0z
3gkWc7tru3srMTsYNdXT+e2A0u3IS56dweiWj/PmdHdyYCavxdPYI97qQETdKoMr
HA4RcPUJVN+hHw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:37:29 2025 by rpki-client