This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json) Hash identifier: x1IDMKY1gdAeiQXBQb/UZT5u57CT3RTyf1zG4b6JP5M= Subject key identifier: A2:33:F2:5C:E1:9B:3E:3B:70:1C:79:89:00:A8:D1:5B:55:E9:59:95 Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92 Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492 Certificate serial: 019AF209519C6F9C2896400677E3C20BB900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft Manifest number: 1775 Signing time: Sat 06 Dec 2025 05:01:28 +0000 Manifest this update: Sat 06 Dec 2025 05:01:28 +0000 Manifest next update: Sun 07 Dec 2025 05:01:28 +0000 Files and hashes: 1: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: BW6DnrIoyohs5MThfdhEd6YfutDIyklcM8ZO7s2U9CE=) 2: bDbEU-n8q6DljyAoCb2HG5IpwAM.roa (hash: eRAv8rRBi2xmtRMeoh59gG1sQ1a+pnNx2m0jnwKDhWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:51:9c:6f:9c:28:96:40:06:77:e3:c2:0b:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492 Validity Not Before: Dec 6 05:01:28 2025 GMT Not After : Dec 7 05:01:28 2025 GMT Subject: CN=a233f25ce19b3e3b701c798900a8d15b55e95995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:81:19:38:04:54:a9:d9:f5:0f:26:0e:9a:80: f8:b6:6a:86:da:e3:13:de:87:4e:88:75:75:69:a7: 04:b4:5b:07:99:1d:41:90:54:bc:e7:8f:63:36:b7: 71:a0:fe:7e:c4:e1:e5:81:8c:22:ef:b7:17:2f:1c: 73:f0:06:43:24:71:5c:4b:c3:a1:a1:fd:35:e1:56: 74:01:25:06:01:42:81:92:47:83:74:c0:2b:10:e4: d5:75:25:15:67:17:57:b3:14:73:c3:9f:0a:26:e0: 29:43:38:89:5d:f3:3d:76:8e:3f:2f:26:72:fd:c0: 81:1f:93:f8:79:3c:41:b3:4b:fd:88:ee:84:18:96: ce:21:bc:20:64:a0:90:14:42:3c:92:73:2d:de:4b: 2a:f2:68:da:f3:e1:ac:7b:0b:27:35:91:55:d7:f9: 26:a0:ca:90:fe:50:39:3b:ff:2a:15:19:4d:6a:d0: bd:98:34:37:48:59:54:66:1c:8d:d7:27:4c:3a:27: e5:15:6e:f2:6a:21:a2:a7:dc:2c:70:d0:26:7d:70: d9:19:e7:fd:47:00:3d:fd:0e:d1:4b:74:64:9e:aa: 93:c3:d5:64:1b:b3:11:41:41:3f:af:53:59:4f:53: 1d:73:00:84:2f:da:dc:36:e2:56:55:fb:ef:51:7b: bd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:33:F2:5C:E1:9B:3E:3B:70:1C:79:89:00:A8:D1:5B:55:E9:59:95 X509v3 Authority Key Identifier: keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:eb:8e:46:92:c9:5e:25:19:b3:86:2c:4e:55:79:91:34:80: 89:81:c0:06:70:55:36:a8:36:02:3b:21:67:2f:75:9a:7e:9a: 18:7f:a3:59:6a:98:89:53:b5:76:fc:45:9e:2c:df:85:b0:31: 9e:6d:fc:77:51:fe:9f:bb:75:54:69:33:e9:cd:61:64:92:e9: 0a:5f:5e:df:5e:27:6d:01:12:3f:5b:6d:5b:bc:51:aa:c1:ab: 3f:b7:b2:f5:fb:06:55:77:ea:f0:a0:f1:f5:4d:bf:d2:e3:2c: 86:1d:c7:23:2f:cc:c1:15:b0:05:91:69:32:63:12:60:66:c7: c7:d5:b6:85:0e:5d:00:a8:af:a0:ae:a8:62:73:34:0b:5b:99: 51:c1:57:78:78:01:3b:ac:d5:fe:4b:73:6a:d2:f1:b5:fa:25: a0:98:57:3b:4f:7f:07:2d:55:c6:27:54:aa:e4:8d:c6:3a:27: f1:00:5b:35:e8:1d:08:fd:4e:32:e4:21:5c:95:60:e7:6f:ec: 63:bc:32:48:d8:40:6b:a2:2f:40:60:23:61:e4:54:43:b2:ed: f8:62:ed:3a:45:eb:64:ad:1d:5e:4a:d9:bb:1b:32:cd:84:fd: b8:2d:ae:47:03:ab:cd:7a:12:d0:2b:35:69:92:d7:61:87:34: b1:c4:ce:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVGcb5wolkAGd+PCC7kAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZmZmZjI4OWYyZGFkMGZjMDg0NTZiMGJhZDU0ZDdiYTQ0 OWE0OTIwHhcNMjUxMjA2MDUwMTI4WhcNMjUxMjA3MDUwMTI4WjAzMTEwLwYDVQQD EyhhMjMzZjI1Y2UxOWIzZTNiNzAxYzc5ODkwMGE4ZDE1YjU1ZTk1OTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYEZOARUqdn1DyYOmoD4tmqG2uMT 3odOiHV1aacEtFsHmR1BkFS8549jNrdxoP5+xOHlgYwi77cXLxxz8AZDJHFcS8Oh of014VZ0ASUGAUKBkkeDdMArEOTVdSUVZxdXsxRzw58KJuApQziJXfM9do4/LyZy /cCBH5P4eTxBs0v9iO6EGJbOIbwgZKCQFEI8knMt3ksq8mja8+GsewsnNZFV1/km oMqQ/lA5O/8qFRlNatC9mDQ3SFlUZhyN1ydMOiflFW7yaiGip9wscNAmfXDZGef9 RwA9/Q7RS3RknqqTw9VkG7MRQUE/r1NZT1MdcwCEL9rcNuJWVfvvUXu9/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIz8lzhmz47cBx5iQCo0VtV6VmVMB8GA1UdIwQY MBaAFBn//yifLa0PwIRWsLrVTXukSaSSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ZfX0tKOHRyUV9BaEZhd3V0Vk5lNlJKcEpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jMTFjODctZWZiYi00NWU4LTliMDMt ZDUyNTcxOGFhNDRhLzEvR2ZfX0tKOHRyUV9BaEZhd3V0Vk5lNlJKcEpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jMTFjODctZWZiYi00NWU4LTliMDMtZDUyNTcxOGFhNDRh LzEvR2ZfX0tKOHRyUV9BaEZhd3V0Vk5lNlJKcEpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+uORpLJ XiUZs4YsTlV5kTSAiYHABnBVNqg2AjshZy91mn6aGH+jWWqYiVO1dvxFnizfhbAx nm38d1H+n7t1VGkz6c1hZJLpCl9e314nbQESP1ttW7xRqsGrP7ey9fsGVXfq8KDx 9U2/0uMshh3HIy/MwRWwBZFpMmMSYGbHx9W2hQ5dAKivoK6oYnM0C1uZUcFXeHgB O6zV/ktzatLxtfoloJhXO09/By1VxidUquSNxjon8QBbNegdCP1OMuQhXJVg52/s Y7wySNhAa6IvQGAjYeRUQ7Lt+GLtOkXrZK0dXkrZuxsyzYT9uC2uRwOrzXoS0Cs1 aZLXYYc0scTOGA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:14 2025 by rpki-client