This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft File: GR7jr4IFY0lGR1UaUgbvDEXPlck.mft (raw, json) Hash identifier: SOggiNP1Q9u0BSBu/UgwKv88+4u+uYkHq0yCXCERXKc= Subject key identifier: CC:21:D9:2D:FE:D2:DC:88:62:EC:A5:97:D7:40:12:D9:36:0B:EF:A4 Authority key identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9 Certificate issuer: /CN=191ee3af820563494647551a5206ef0c45cf95c9 Certificate serial: 019AF0BEE979E0D3CA7F97DD483F2BA2DAB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:00:34 +0000 Manifest this update: Fri 05 Dec 2025 23:00:34 +0000 Manifest next update: Sat 06 Dec 2025 23:00:34 +0000 Files and hashes: 1: BEsMLWTZET1iCxcF6Yr9DbU-sOY.roa (hash: lrX59TnlMsRdeVpivsyzgLMhZv4xei7A/LZNbKN1beE=) 2: GR7jr4IFY0lGR1UaUgbvDEXPlck.crl (hash: ANcKCxmAtEM5I6LpVwN7CBQf4Kr+oR+FbBCdNUAzj1o=) 3: Ntv9RDyDnipoS4LeMeLEjPH2YeE.roa (hash: IEPnmuJHaBFNEPjVzbbu0LZ28Z15YinFb5L8V+9myGI=) 4: tSQQLL0kf6kwJJyAahpRS-4QjTQ.roa (hash: ROWhC0CwWY3GF+PkYJD3Eyf1AgXDuZrPy+fBil3clUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:e9:79:e0:d3:ca:7f:97:dd:48:3f:2b:a2:da:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191ee3af820563494647551a5206ef0c45cf95c9 Validity Not Before: Dec 5 23:00:34 2025 GMT Not After : Dec 6 23:00:34 2025 GMT Subject: CN=cc21d92dfed2dc8862eca597d74012d9360befa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:57:20:9c:c4:7b:4d:45:8f:38:48:da:79:e4: 82:3e:48:f5:c2:4e:8f:ef:90:56:ab:4e:65:cd:c3: 0b:2f:52:63:8d:87:1b:83:db:0b:83:00:8e:81:1a: a9:7f:52:a9:25:9f:23:71:52:d3:a5:4d:9d:50:66: 94:f1:fc:16:ef:73:05:b9:b0:88:93:e1:66:df:8e: 86:a9:ec:b7:4d:3d:8f:ef:ee:88:0d:c2:3d:f7:8f: 52:03:1e:6e:0e:b2:63:c7:0f:c4:94:be:d6:38:d0: d6:c1:49:7a:c9:45:be:fb:a1:80:41:77:17:58:cb: bb:93:b4:ca:b5:c8:af:c5:2a:a1:7d:69:ed:ee:e9: a3:7d:ad:d7:59:eb:51:9d:6b:c7:4e:0f:5a:46:61: 42:20:31:08:91:a3:c2:48:89:6c:a4:c6:45:8c:42: 14:41:81:ec:dd:9c:cc:23:28:1c:ef:c8:cc:77:97: 9e:69:fe:bc:ad:b8:59:1a:1e:37:34:3a:35:ab:2b: 54:b8:49:1e:d2:d6:db:78:4a:07:71:95:db:47:51: de:57:f7:db:23:4a:ce:77:88:0c:c0:e2:64:2c:20: 57:ab:7f:b1:d0:45:76:52:f0:2e:86:3f:38:f2:e7: 87:ba:1f:8c:2d:55:a4:7a:6e:cc:14:dd:2e:da:be: 31:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:21:D9:2D:FE:D2:DC:88:62:EC:A5:97:D7:40:12:D9:36:0B:EF:A4 X509v3 Authority Key Identifier: keyid:19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:2e:b0:c8:e8:20:ab:7b:e5:12:f9:ae:67:d0:ab:01:04:81: 33:73:45:5f:9a:84:64:03:fa:cb:3d:8b:93:a2:55:94:68:c5: 28:b7:ad:c4:7d:45:74:0f:2a:2a:c6:8e:c2:5f:14:8a:21:7b: b2:94:45:e9:db:c0:dd:cf:1a:96:85:a9:a2:62:80:79:c2:9c: 8f:51:3c:0d:fa:5a:b2:2b:13:09:bb:3b:08:97:9f:85:9d:10: 82:8a:91:36:8f:2a:27:35:d3:00:6d:b8:37:d8:cc:ba:ca:f1: 72:54:d2:33:5a:f9:39:32:58:bb:41:4f:c6:ba:0c:10:99:cd: f9:7c:8e:a1:5b:46:3a:f7:b8:11:eb:28:7c:73:d5:07:9b:75: 08:4d:ef:2a:25:2b:f6:a5:18:e5:5f:89:48:c4:52:84:45:32: 7f:fe:be:37:68:d6:ce:22:83:77:be:4a:18:0e:f3:04:fb:0e: e3:fd:aa:fe:3f:e3:21:40:8c:4b:80:8f:07:b2:41:a9:2c:76: 9c:93:5e:9d:87:13:98:c4:ed:df:55:43:e4:d6:cd:22:8c:c5: bf:17:30:f1:cd:24:3a:1e:91:49:dd:ca:56:c7:4d:5e:f6:c1: 86:56:b3:76:ad:7d:26:4a:1e:65:4f:ec:9d:09:2d:85:3d:61: 97:77:67:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvul54NPKf5fdSD8rotq5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MWVlM2FmODIwNTYzNDk0NjQ3NTUxYTUyMDZlZjBjNDVj Zjk1YzkwHhcNMjUxMjA1MjMwMDM0WhcNMjUxMjA2MjMwMDM0WjAzMTEwLwYDVQQD EyhjYzIxZDkyZGZlZDJkYzg4NjJlY2E1OTdkNzQwMTJkOTM2MGJlZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlcgnMR7TUWPOEjaeeSCPkj1wk6P 75BWq05lzcMLL1JjjYcbg9sLgwCOgRqpf1KpJZ8jcVLTpU2dUGaU8fwW73MFubCI k+Fm346Gqey3TT2P7+6IDcI9949SAx5uDrJjxw/ElL7WONDWwUl6yUW++6GAQXcX WMu7k7TKtcivxSqhfWnt7umjfa3XWetRnWvHTg9aRmFCIDEIkaPCSIlspMZFjEIU QYHs3ZzMIygc78jMd5eeaf68rbhZGh43NDo1qytUuEke0tbbeEoHcZXbR1HeV/fb I0rOd4gMwOJkLCBXq3+x0EV2UvAuhj848ueHuh+MLVWkem7MFN0u2r4xZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwh2S3+0tyIYuyll9dAEtk2C++kMB8GA1UdIwQY MBaAFBke46+CBWNJRkdVGlIG7wxFz5XJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1I3anI0SUZZMGxHUjFVYVVnYnZERVhQbGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hM2RmODEtMjA5Ni00OTNkLWIxMDYt NDZkNmNlYTIwMzQyLzEvR1I3anI0SUZZMGxHUjFVYVVnYnZERVhQbGNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9hM2RmODEtMjA5Ni00OTNkLWIxMDYtNDZkNmNlYTIwMzQy LzEvR1I3anI0SUZZMGxHUjFVYVVnYnZERVhQbGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgC6wyOgg q3vlEvmuZ9CrAQSBM3NFX5qEZAP6yz2Lk6JVlGjFKLetxH1FdA8qKsaOwl8UiiF7 spRF6dvA3c8aloWpomKAecKcj1E8DfpasisTCbs7CJefhZ0QgoqRNo8qJzXTAG24 N9jMusrxclTSM1r5OTJYu0FPxroMEJnN+XyOoVtGOve4EesofHPVB5t1CE3vKiUr 9qUY5V+JSMRShEUyf/6+N2jWziKDd75KGA7zBPsO4/2q/j/jIUCMS4CPB7JBqSx2 nJNenYcTmMTt31VD5NbNIozFvxcw8c0kOh6RSd3KVsdNXvbBhlazdq19JkoeZU/s nQkthT1hl3dniQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:43 2025 by rpki-client