This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
File: GGDjbiWx26EXgHXIA8KaBEzs_eE.mft (raw, json)
Hash identifier: 6XXvUqSTwRL4u2xl4nnBFF/B8ZHSO4AOpOmrVq61660=
Subject key identifier: 51:AD:62:DC:CB:98:31:3B:D0:69:A9:4A:E3:5C:48:43:7F:8F:0F:7C
Authority key identifier: 18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
Certificate issuer: /CN=1860e36e25b1dba1178075c803c29a044cecfde1
Certificate serial: 019AF389B14F98E3C9CDBF0AFBCD49091126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
Manifest number: 0A87
Signing time: Sat 06 Dec 2025 12:01:18 +0000
Manifest this update: Sat 06 Dec 2025 12:01:18 +0000
Manifest next update: Sun 07 Dec 2025 12:01:18 +0000
Files and hashes: 1: 1-ZAn3Qtlz0s6H8sKz3KAGMVojlQ.roa (hash: 1vtVvmn1NKghe/1GEiZ2YPPlg6egHJXC9enaE5kl0Rk=)
2: GGDjbiWx26EXgHXIA8KaBEzs_eE.crl (hash: ihRpZPRuLUClM3k/HcKizGwsv/dtpdfrqLZYxNlNWUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:89:b1:4f:98:e3:c9:cd:bf:0a:fb:cd:49:09:11:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1860e36e25b1dba1178075c803c29a044cecfde1
Validity
Not Before: Dec 6 12:01:18 2025 GMT
Not After : Dec 7 12:01:18 2025 GMT
Subject: CN=51ad62dccb98313bd069a94ae35c48437f8f0f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:a6:ae:ba:50:0d:ea:7d:7d:a5:3c:9b:91:
26:8d:ea:b7:bc:84:4f:d1:d8:32:6b:f1:a4:ca:9d:
d5:25:d2:6d:80:87:e3:ec:bf:bf:c8:41:72:9f:90:
35:56:ae:2b:72:51:b8:e9:eb:e5:e9:11:f4:85:8f:
23:1b:35:71:83:2f:36:28:de:9f:ba:20:f0:af:50:
f6:c8:c1:d6:1a:44:e6:2b:17:2c:ec:64:d6:cf:5f:
ec:ee:ef:c4:fd:f9:4e:5c:a6:1d:36:cc:d7:d2:53:
e9:b1:a1:11:6e:c5:ab:b4:64:34:a8:6a:0c:a1:20:
8c:12:8b:b0:2d:f2:ed:25:b6:7c:7e:8e:93:cf:54:
f5:05:d1:99:0b:b8:e7:c6:4d:00:6a:ce:72:b7:40:
72:b0:c7:1d:29:af:ca:f7:02:4f:a1:10:66:1a:fa:
d6:e0:a3:69:e7:2c:48:b6:5c:dd:d3:4f:05:23:a2:
7c:f9:4f:8e:b8:4b:42:e6:6a:5f:83:13:e5:28:96:
c4:a4:b9:23:87:2f:e8:b4:b6:01:ec:02:13:0e:ad:
c8:3c:57:4e:af:06:b8:6b:5d:c9:59:06:c0:1c:dc:
be:65:c9:be:eb:cf:17:da:78:4c:a4:af:a2:0a:a8:
e9:9f:35:f4:5d:51:b7:9a:f7:1d:dd:85:03:1f:cb:
b0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AD:62:DC:CB:98:31:3B:D0:69:A9:4A:E3:5C:48:43:7F:8F:0F:7C
X509v3 Authority Key Identifier:
keyid:18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a2:e4:cd:c8:03:45:13:16:36:96:bf:ae:9d:c2:a5:e4:45:
ec:30:44:23:c2:27:62:3e:60:3f:89:86:3e:5b:84:f8:d1:5a:
49:82:aa:28:64:00:57:8d:92:80:56:32:c8:8c:65:33:9b:61:
73:18:86:64:ab:cb:71:b2:f2:79:b1:7a:20:28:d1:b2:22:36:
bf:05:0c:1a:c8:1b:b9:ba:9a:b2:69:d7:c3:88:b0:59:19:17:
74:78:89:49:d4:80:53:e3:ab:75:a0:bf:c6:60:3f:4c:15:49:
06:e3:54:99:c0:7c:23:53:3b:39:a8:e7:28:8c:8c:7e:51:7a:
f5:07:5c:4b:31:f4:ee:0f:ee:b1:7e:34:70:cb:8c:5e:af:03:
10:5d:e3:86:34:2e:c2:28:56:32:9e:94:4f:da:90:62:e7:c9:
66:63:97:f0:99:b5:04:8f:59:f3:7e:d1:d8:51:9d:95:81:ca:
2f:26:6b:76:12:0a:ae:23:43:4e:1f:0a:54:ca:f6:7d:57:90:
56:c1:17:93:60:c0:2e:37:62:f4:dc:96:30:58:14:d5:f8:a5:
12:15:a9:ad:7a:9d:1e:91:e5:17:be:50:a2:4f:8f:be:c9:98:
87:a5:95:ca:02:b8:fa:aa:ef:1f:4d:3b:eb:68:68:94:91:34:
21:0b:e6:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzibFPmOPJzb8K+81JCREmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NjBlMzZlMjViMWRiYTExNzgwNzVjODAzYzI5YTA0NGNl
Y2ZkZTEwHhcNMjUxMjA2MTIwMTE4WhcNMjUxMjA3MTIwMTE4WjAzMTEwLwYDVQQD
Eyg1MWFkNjJkY2NiOTgzMTNiZDA2OWE5NGFlMzVjNDg0MzdmOGYwZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf+mrrpQDep9faU8m5Emjeq3vIRP
0dgya/Gkyp3VJdJtgIfj7L+/yEFyn5A1Vq4rclG46evl6RH0hY8jGzVxgy82KN6f
uiDwr1D2yMHWGkTmKxcs7GTWz1/s7u/E/flOXKYdNszX0lPpsaERbsWrtGQ0qGoM
oSCMEouwLfLtJbZ8fo6Tz1T1BdGZC7jnxk0Aas5yt0BysMcdKa/K9wJPoRBmGvrW
4KNp5yxItlzd008FI6J8+U+OuEtC5mpfgxPlKJbEpLkjhy/otLYB7AITDq3IPFdO
rwa4a13JWQbAHNy+Zcm+688X2nhMpK+iCqjpnzX0XVG3mvcd3YUDH8uwBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGtYtzLmDE70GmpSuNcSEN/jw98MB8GA1UdIwQY
MBaAFBhg424lsduhF4B1yAPCmgRM7P3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wNTY2YmUtZjgzMi00ZTc0LTg5NjYt
ZjI2YWRmZjQwY2MxLzEvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wNTY2YmUtZjgzMi00ZTc0LTg5NjYtZjI2YWRmZjQwY2Mx
LzEvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqLkzcgD
RRMWNpa/rp3CpeRF7DBEI8InYj5gP4mGPluE+NFaSYKqKGQAV42SgFYyyIxlM5th
cxiGZKvLcbLyebF6ICjRsiI2vwUMGsgbubqasmnXw4iwWRkXdHiJSdSAU+OrdaC/
xmA/TBVJBuNUmcB8I1M7OajnKIyMflF69QdcSzH07g/usX40cMuMXq8DEF3jhjQu
wihWMp6UT9qQYufJZmOX8Jm1BI9Z837R2FGdlYHKLyZrdhIKriNDTh8KVMr2fVeQ
VsEXk2DALjdi9NyWMFgU1filEhWprXqdHpHlF75Qok+PvsmYh6WVygK4+qrvH007
62holJE0IQvmrQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:31:43 2025 by rpki-client